last executing test programs: 1m57.967858037s ago: executing program 1 (id=94): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x8, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) 1m56.851405608s ago: executing program 1 (id=97): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x400) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), 0x0}, 0x20) 1m42.969606486s ago: executing program 1 (id=126): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba5ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0xffff, 0x0, @loopback, 0x4}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x40000024, 0x0, 0x0) 1m42.559966298s ago: executing program 1 (id=129): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r0 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x14a, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000df500b818000000000000000000000000e4de8686f795957305dc6871b138d4367ce19b3a7aea0811", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000580), 0x10) fstatfs(0xffffffffffffffff, &(0x7f00000005c0)=""/188) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x48) 1m38.211821052s ago: executing program 1 (id=137): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x400) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), 0x0}, 0x20) 1m29.535803259s ago: executing program 1 (id=157): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x30, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x309201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000180), 0x8) mkdirat(r2, &(0x7f0000000340)='./file0\x00', 0x88) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x100, 0x7, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0xd}, 0x60) getsockopt$inet_buf(r3, 0x118, 0x4, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r4, 0x0, 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r4, &(0x7f0000000040)='./file1\x00', r4, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) listen(0xffffffffffffffff, 0x80) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{r6, 0x201}], 0x1, 0x10000) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x1) 1m15.075263324s ago: executing program 2 (id=185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fd"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x90, 0x30, 0xffff, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x90}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000020000000000000000000b708000000000000778af8ff00000000b7080000000000007b8af0ff00000000bfa1000000000000070000f800800000bb00000000005dfa0b7ef11f73949493a8eb67480007040000f0ffff517d3d36b9ef3043a0b1ed8f79673872826196d75717ff1fa4ec45e903efd4812f39f02be8cf0c187c4241ae4daae498150096dc9e5902a7cc3d7af5e0692c2e5e01eaa33671cd862081c16524b92ff52ce18ae4d1d2ab82666101d716a447a68d7eaf7a1f9e4f076dc5cf544b", @ANYRES32=r4, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000480)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x9, 0xfffff034}, {0x6, 0xf6}]}, 0x10) sendmmsg(r8, &(0x7f0000000180), 0x4000190, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 1m14.198020863s ago: executing program 32 (id=157): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x30, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x309201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000180), 0x8) mkdirat(r2, &(0x7f0000000340)='./file0\x00', 0x88) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x100, 0x7, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0xd}, 0x60) getsockopt$inet_buf(r3, 0x118, 0x4, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r4, 0x0, 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r4, &(0x7f0000000040)='./file1\x00', r4, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) listen(0xffffffffffffffff, 0x80) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) poll(&(0x7f0000000180)=[{r6, 0x201}], 0x1, 0x10000) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x1) 1m13.957387266s ago: executing program 2 (id=191): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) r6 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000380)}], 0x2) keyctl$chown(0x4, r6, 0xee00, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m10.711845891s ago: executing program 2 (id=194): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000180)=0x2, 0x4) 1m10.014276701s ago: executing program 2 (id=198): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x2d, 0x20040040) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a400), 0x6fe, 0x10163, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0xf, 0x8, 0x7, {0x4e24, 0x4e22, [0x3, 0x31, 0xffffff01, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0xde, 0x7fffffff]}, 0x2, 0x3}}, 0x4c}, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff00", 0x50}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 1m8.797315742s ago: executing program 2 (id=200): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x41}, &(0x7f00000005c0)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x114, &(0x7f0000000040)=0x400, 0x0, 0x4) 1m7.051693897s ago: executing program 2 (id=203): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) unlinkat(0xffffffffffffff9c, 0x0, 0x200) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x19033) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r3}, 0x38) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) 51.063167205s ago: executing program 33 (id=203): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) unlinkat(0xffffffffffffff9c, 0x0, 0x200) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x19033) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r3}, 0x38) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) 32.400653051s ago: executing program 4 (id=258): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x400) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), 0x0}, 0x20) 27.955770185s ago: executing program 4 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000300)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 25.263482295s ago: executing program 4 (id=268): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@noload}]}, 0xea, 0x472, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xb4, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x19, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x9, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd, 0xb}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) get_robust_list(r0, &(0x7f0000000500)=&(0x7f00000004c0)={&(0x7f00000001c0)}, &(0x7f0000000540)=0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 23.755470965s ago: executing program 4 (id=271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fd"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x90, 0x30, 0xffff, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x90}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000020000000000000000000b708000000000000778af8ff00000000b7080000000000007b8af0ff00000000bfa1000000000000070000f800800000bb00000000005dfa0b7ef11f73949493a8eb67480007040000f0ffff517d3d36b9ef3043a0b1ed8f79673872826196d75717ff1fa4ec45e903efd4812f39f02be8cf0c187c4241ae4daae498150096dc9e5902a7cc3d7af5e0692c2e5e01eaa33671cd862081c16524b92ff52ce18ae4d1d2ab82666101d716a447a68d7eaf7a1f9e4f076dc5cf544b", @ANYRES32=r4, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000480)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x9, 0xfffff034}, {0x6, 0xf6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 23.043316097s ago: executing program 4 (id=273): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000040), 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000068533c66bffa70072d80eb419b2911fdc14a55ebcb783aacd3e105afd5513bcf2851c1e193cc1a5f5c1e677c815bae2faa2d9226b5de3117c2f61d967c00375eab32849cfcb8c0a6ae3904d8c076556829b331e29ce1aaf10c7850795b721f2ffb604e38b68251928bbfd6854346229d19eaebecf42b764ef46a9fd0a2f53e182c65931bc55fa09310a8d5895143ee2172e2fe84fa816ad43127062a0b0e937dd1296b687710bc5b214d9b0b5afbb43032b30e6e0ff9686cfd74cbeb6d8125c1472a1270bd3e27c4ffb3000000000000000000", @ANYRES16=r7, @ANYBLOB="05020000000002000000120000001800018014000200626f6e645f736c6176655f310000000008000700100000000800060001000000"], 0x3c}}, 0x4000) connect$tipc(r5, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010029bd7000fedbdf251700000048000680210006"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000002000000000010000000900010073797a30000000000900030073797a300000000060000000060a010400000000000000000100000008000b400000000038000480340001800b0001006e756d67656e0000240002800800034000001e010800014000000000080004400000000008000240000000000900010073797a3000"], 0xd4}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4001) 19.294902731s ago: executing program 4 (id=278): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) openat$kvm(0xffffffffffffff9c, 0x0, 0x2902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) 15.860081604s ago: executing program 5 (id=186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001000038002"], 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 15.215732279s ago: executing program 5 (id=287): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@bridge_delneigh={0x34, 0x1c, 0xcafe28741a3524c9, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r5, 0x80, 0x8e, 0xb}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0041}, 0x810) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 13.40200058s ago: executing program 5 (id=288): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x2d, 0x20040040) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f000000a400), 0x6fe, 0x10163, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0xf, 0x8, 0x7, {0x4e24, 0x4e22, [0x3, 0x31, 0xffffff01, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0xde, 0x7fffffff]}, 0x2, 0x3}}, 0x4c}, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff00", 0x50}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 12.445522436s ago: executing program 5 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x4000, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 9.857772465s ago: executing program 5 (id=297): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x400) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), 0x0}, 0x20) 8.981892572s ago: executing program 3 (id=299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fd"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x90, 0x30, 0xffff, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x90}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000020000000000000000000b708000000000000778af8ff00000000b7080000000000007b8af0ff00000000bfa1000000000000070000f800800000bb00000000005dfa0b7ef11f73949493a8eb67480007040000f0ffff517d3d36b9ef3043a0b1ed8f79673872826196d75717ff1fa4ec45e903efd4812f39f02be8cf0c187c4241ae4daae498150096dc9e5902a7cc3d7af5e0692c2e5e01eaa33671cd862081c16524b92ff52ce18ae4d1d2ab82666101d716a447a68d7eaf7a1f9e4f076dc5cf544b", @ANYRES32=r4, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000480)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x9, 0xfffff034}, {0x6, 0xf6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.168833594s ago: executing program 3 (id=301): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000040), 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000068533c66bffa70072d80eb419b2911fdc14a55ebcb783aacd3e105afd5513bcf2851c1e193cc1a5f5c1e677c815bae2faa2d9226b5de3117c2f61d967c00375eab32849cfcb8c0a6ae3904d8c076556829b331e29ce1aaf10c7850795b721f2ffb604e38b68251928bbfd6854346229d19eaebecf42b764ef46a9fd0a2f53e182c65931bc55fa09310a8d5895143ee2172e2fe84fa816ad43127062a0b0e937dd1296b687710bc5b214d9b0b5afbb43032b30e6e0ff9686cfd74cbeb6d8125c1472a1270bd3e27c4ffb3000000000000000000", @ANYRES16=r7, @ANYBLOB="05020000000002000000120000001800018014000200626f6e645f736c6176655f310000000008000700100000000800060001000000"], 0x3c}}, 0x4000) connect$tipc(r5, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010029bd7000fedbdf251700000048000680210006"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000002000000000010000000900010073797a30000000000900030073797a300000000060000000060a010400000000000000000100000008000b400000000038000480340001800b0001006e756d67656e0000240002800800034000001e010800014000000000080004400000000008000240000000000900010073797a3000"], 0xd4}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4001) 7.693730831s ago: executing program 6 (id=230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000003c0)=""/163}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) creat(&(0x7f0000000540)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x6) 6.661487714s ago: executing program 6 (id=303): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x3, 0x2, 0x4, 0x0, 0x12}) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000002380)={0x80000000, 0x0, 0x3, 0x0, 0x7}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002480)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 5.690910481s ago: executing program 6 (id=305): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000a80)=[@out_dx={0xaa, 0x28, {0xcdae, 0x6, 0x4}}, @wrmsr={0x1e, 0x20, {0xb8d, 0x3}}, @wrmsr={0x1e, 0x20, {0x926, 0x3}}, @wr_crn={0x46, 0x20, {0x4, 0x4000000000008}}, @wr_crn={0x46, 0x20, {0x0, 0x5}}, @in_dx={0x82, 0x20, {0xa594, 0x1}}, @in_dx={0x82, 0x20, {0xce1e, 0x3}}, @wrmsr={0x1e, 0x20, {0x96c, 0xf9a3}}, @wr_drn={0x6e, 0x20, {0x7, 0x80000002}}, @out_dx={0xaa, 0x28, {0x40000000000ead1, 0x5, 0x4}}, @out_dx={0xaa, 0x28, {0xe1a0, 0x2}}, @cpuid={0x14, 0x18, {0x40, 0x800}}, @in_dx={0x82, 0x20, {0x9504}}, @rdmsr={0x32, 0x18, {0x864}}, @wr_drn={0x6e, 0x20, {0x4, 0xf4}}], 0x1e8}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.568066423s ago: executing program 0 (id=307): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 4.491553721s ago: executing program 0 (id=308): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r0 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x14a, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000df500b818000000000000000000000000e4de8686f795957305dc6871b138d4367ce19b3a7aea0811", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000580), 0x10) fstatfs(0xffffffffffffffff, &(0x7f00000005c0)=""/188) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x48) 4.122774518s ago: executing program 34 (id=278): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) openat$kvm(0xffffffffffffff9c, 0x0, 0x2902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) 4.084284171s ago: executing program 6 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000300)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 3.430251477s ago: executing program 5 (id=311): creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$dupfd(r1, 0x0, r1) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = msgget(0x0, 0x40) msgctl$MSG_INFO(r2, 0xc, &(0x7f00000000c0)=""/173) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56b, 0xfffffffffffffffc}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.379888072s ago: executing program 0 (id=312): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r8, r7, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) sendmsg$SOCK_DESTROY(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000002440)=ANY=[], 0xc3ec}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3.039167966s ago: executing program 6 (id=313): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x0, 0xab, 0x8, &(0x7f0000000180)={0x2a, "247f23e017bb486c5c4b7165a6d6af0b920bf04121f0339400"}}) 1.781918032s ago: executing program 0 (id=314): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000304fcff", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f0000000740)="fe"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.389456141s ago: executing program 3 (id=315): prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/223) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2098, 0x5, 0x1000, 0xfffffffd}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200e00000010c000280050001000000000008000740000000013c001080080002400000000708000140000046e2080003"], 0xc8}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.027846117s ago: executing program 0 (id=316): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080065584803", 0x1a, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/pm_async', 0x101581, 0x100) write$tcp_mem(r5, &(0x7f0000000540)={0xffffffff7fffffff, 0x20, 0x9, 0x20, 0x4}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000bbffff0000000000020000a00006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000003c000000fc0000000000000000000000000000000000000000000000fcb3000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000002000000000000700000000000000fdffffffffffffff1000040000000000e80a000000000000000000000a000100700000000000000014000e000a010102"], 0x104}}, 0x4000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x9, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1a, r5, 0x8, &(0x7f0000000280)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x7, 0x400, 0x7}, 0x10, r6, r0, 0x0, &(0x7f00000006c0)=[r3, r3], &(0x7f0000000700), 0x10, 0xab}, 0x94) 430.372087ms ago: executing program 3 (id=317): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x800000, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') close(0x3) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 132.003207ms ago: executing program 0 (id=318): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) r4 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000380)}], 0x2) keyctl$chown(0x4, r4, 0xee00, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 114.655519ms ago: executing program 3 (id=319): sendto$inet6(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000004, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff81, 0x3, 0x1, {0xffffffffffffffff, 0x8, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) kexec_load(0x1, 0x0, 0x0, 0x2) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000300)=0x4, &(0x7f0000000340)=0x2) socket$inet6(0xa, 0x1, 0xe6d7) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000003c0)=0x20, 0x4) 0s ago: executing program 3 (id=320): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x400) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), 0x0}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.149' (ED25519) to the list of known hosts. [ 56.730076][ T4170] cgroup: Unknown subsys name 'net' [ 56.861475][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.254179][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.832201][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 59.885633][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 59.926096][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 59.958499][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 60.009117][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 60.072530][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.079866][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.088466][ T4192] device bridge_slave_0 entered promiscuous mode [ 60.122094][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.129286][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.137245][ T4181] device bridge_slave_0 entered promiscuous mode [ 60.145244][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.152318][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.160407][ T4181] device bridge_slave_1 entered promiscuous mode [ 60.168435][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.175692][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.183548][ T4192] device bridge_slave_1 entered promiscuous mode [ 60.208217][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.215441][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.223239][ T4184] device bridge_slave_0 entered promiscuous mode [ 60.248802][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.255993][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.263768][ T4183] device bridge_slave_0 entered promiscuous mode [ 60.271485][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.278965][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.286992][ T4184] device bridge_slave_1 entered promiscuous mode [ 60.312880][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.320224][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.328639][ T4183] device bridge_slave_1 entered promiscuous mode [ 60.344460][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.356355][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.389101][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.400062][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.418144][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.425359][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.433376][ T4182] device bridge_slave_0 entered promiscuous mode [ 60.450121][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.461442][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.485631][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.492706][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.501139][ T4182] device bridge_slave_1 entered promiscuous mode [ 60.509333][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.520778][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.575829][ T4181] team0: Port device team_slave_0 added [ 60.584223][ T4192] team0: Port device team_slave_0 added [ 60.607572][ T4184] team0: Port device team_slave_0 added [ 60.615824][ T4183] team0: Port device team_slave_0 added [ 60.623106][ T4181] team0: Port device team_slave_1 added [ 60.630205][ T4192] team0: Port device team_slave_1 added [ 60.637984][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.649265][ T4184] team0: Port device team_slave_1 added [ 60.657435][ T4183] team0: Port device team_slave_1 added [ 60.691557][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.725383][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.732355][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.758552][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.801364][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.808649][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.835084][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.847501][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.854462][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.880499][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.891939][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.899202][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.925263][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.937071][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.944024][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.970268][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.983765][ T4182] team0: Port device team_slave_0 added [ 60.990433][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.997421][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.023427][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.035397][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.042354][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.068304][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.086356][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.093330][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.119252][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.131755][ T4182] team0: Port device team_slave_1 added [ 61.182026][ T4183] device hsr_slave_0 entered promiscuous mode [ 61.189178][ T4183] device hsr_slave_1 entered promiscuous mode [ 61.250364][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.257421][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.283488][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.297765][ T4181] device hsr_slave_0 entered promiscuous mode [ 61.305169][ T4181] device hsr_slave_1 entered promiscuous mode [ 61.311827][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.319775][ T4181] Cannot create hsr debugfs directory [ 61.339072][ T4184] device hsr_slave_0 entered promiscuous mode [ 61.345949][ T4184] device hsr_slave_1 entered promiscuous mode [ 61.352361][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.360432][ T4184] Cannot create hsr debugfs directory [ 61.366543][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.373537][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.400555][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.418795][ T4192] device hsr_slave_0 entered promiscuous mode [ 61.426534][ T4192] device hsr_slave_1 entered promiscuous mode [ 61.433137][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.441082][ T4192] Cannot create hsr debugfs directory [ 61.505920][ T4190] Bluetooth: hci1: command 0x0409 tx timeout [ 61.512695][ T4190] Bluetooth: hci2: command 0x0409 tx timeout [ 61.519697][ T4190] Bluetooth: hci4: command 0x0409 tx timeout [ 61.526156][ T4190] Bluetooth: hci3: command 0x0409 tx timeout [ 61.532263][ T4190] Bluetooth: hci0: command 0x0409 tx timeout [ 61.566139][ T4182] device hsr_slave_0 entered promiscuous mode [ 61.573417][ T4182] device hsr_slave_1 entered promiscuous mode [ 61.580343][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.588161][ T4182] Cannot create hsr debugfs directory [ 61.819906][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.839528][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.848915][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.859231][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.906541][ T4181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.921108][ T4181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.933556][ T4181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.951351][ T4181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.994717][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.020263][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.040599][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.074185][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.084446][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.093853][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.103725][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.118851][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.142074][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.188160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.197882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.208353][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.217851][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.244665][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.251816][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.263301][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.302311][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.315478][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.324572][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.331841][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.369078][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.383463][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.411182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.421476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.431588][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.438713][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.446955][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.455103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.466594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.477796][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.496515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.536487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.546715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.555780][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.562830][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.571088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.579929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.588469][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.595541][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.603546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.613507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.622953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.631827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.640513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.653939][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.665844][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.674564][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.684437][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.701173][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.723481][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.739630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.749214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.758864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.766999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.774731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.784129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.793136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.803457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.812166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.822306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.831446][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.838568][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.847407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.856770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.884531][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.893910][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.910205][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.920059][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.929048][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.937886][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.946967][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.955702][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.964108][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.971207][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.979083][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.988098][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.996216][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.007387][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.018702][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.053471][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.062889][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.080620][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.094063][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.103032][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.111818][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.118926][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.126918][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.136884][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.145800][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.152843][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.160756][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.175552][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.183549][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.193796][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.202703][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.213216][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.237618][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.261301][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.276053][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.290124][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.301154][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.310488][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.319805][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.332522][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.349200][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.362922][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.383382][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.394240][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.413757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.422678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.432331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.441018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.450168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.458872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.467660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.477874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.488915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.496970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.520759][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.556232][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.570662][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.585619][ T4239] Bluetooth: hci0: command 0x041b tx timeout [ 63.586150][ T4261] Bluetooth: hci1: command 0x041b tx timeout [ 63.592170][ T4239] Bluetooth: hci3: command 0x041b tx timeout [ 63.605821][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.613333][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.625242][ T4239] Bluetooth: hci4: command 0x041b tx timeout [ 63.631404][ T4239] Bluetooth: hci2: command 0x041b tx timeout [ 63.659326][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.683492][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.693689][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.700887][ T4268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.708831][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.718470][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.727655][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.734729][ T4268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.744434][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.775387][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.784045][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.807178][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.816435][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.836300][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.845708][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.860925][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.885859][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.893338][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.901131][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.911652][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.920522][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.929407][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.964414][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.972085][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.979948][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.993757][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.003238][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.011869][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.020836][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.029748][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.042641][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.060661][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.082653][ T4181] device veth0_vlan entered promiscuous mode [ 64.105612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.113093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.135638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.146517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.164299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.173155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.189048][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.210517][ T4181] device veth1_vlan entered promiscuous mode [ 64.226462][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.234622][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.256390][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.280809][ T4183] device veth0_vlan entered promiscuous mode [ 64.302278][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.326641][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.334595][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.343605][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.352960][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.380371][ T4181] device veth0_macvtap entered promiscuous mode [ 64.388852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.405155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.413844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.430511][ T4183] device veth1_vlan entered promiscuous mode [ 64.453945][ T4181] device veth1_macvtap entered promiscuous mode [ 64.463757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.472927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.483152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.490817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.503896][ T4184] device veth0_vlan entered promiscuous mode [ 64.522704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.531241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.539832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.552163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.560930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.579620][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.599546][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.606910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.616680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.626017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.634602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.645344][ T4184] device veth1_vlan entered promiscuous mode [ 64.656129][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.670204][ T4181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.679411][ T4181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.688351][ T4181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.697500][ T4181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.724354][ T4183] device veth0_macvtap entered promiscuous mode [ 64.733505][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.743438][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.752244][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.761042][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.770469][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.780716][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.789936][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.811118][ T4183] device veth1_macvtap entered promiscuous mode [ 64.821506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.831624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.840835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.849996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.858080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.869838][ T4192] device veth0_vlan entered promiscuous mode [ 64.907716][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.916850][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.927221][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.936000][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.950910][ T4192] device veth1_vlan entered promiscuous mode [ 64.968668][ T4182] device veth0_vlan entered promiscuous mode [ 64.987549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.996731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.005291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.013086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.028402][ T4184] device veth0_macvtap entered promiscuous mode [ 65.038975][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.049832][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.061576][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.072840][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.083945][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.095824][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.127995][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.141007][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.150997][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.160086][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.169423][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.180477][ T4182] device veth1_vlan entered promiscuous mode [ 65.198292][ T4184] device veth1_macvtap entered promiscuous mode [ 65.215938][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.224658][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.234535][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.243445][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.270563][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.279956][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.288258][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.297410][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.306616][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.340587][ T4192] device veth0_macvtap entered promiscuous mode [ 65.356576][ T4182] device veth0_macvtap entered promiscuous mode [ 65.367212][ T4182] device veth1_macvtap entered promiscuous mode [ 65.378016][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.387239][ T4192] device veth1_macvtap entered promiscuous mode [ 65.394129][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.399847][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.412691][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.423563][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.434786][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.447134][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.454519][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.463119][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.471516][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.479726][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.489167][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.498950][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.508464][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.517182][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.526991][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.547947][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.559375][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.569661][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.580372][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.592227][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.619852][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.631708][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.647174][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.656522][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.666197][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.675186][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.675717][ T4241] Bluetooth: hci2: command 0x040f tx timeout [ 65.695225][ T4241] Bluetooth: hci4: command 0x040f tx timeout [ 65.699047][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.701987][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.720701][ T4241] Bluetooth: hci1: command 0x040f tx timeout [ 65.721173][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.727223][ T4241] Bluetooth: hci3: command 0x040f tx timeout [ 65.740429][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.750603][ T4241] Bluetooth: hci0: command 0x040f tx timeout [ 65.750723][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.767546][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.777624][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.788697][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.799708][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.812157][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.823125][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.833642][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.844332][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.854420][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.865996][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.876907][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.904742][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.913493][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.923043][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.932426][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.941113][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.967213][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.978775][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.992868][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.003952][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.013873][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.024413][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.034594][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.045313][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.057296][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.067797][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.078695][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.089852][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.100812][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.111080][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.121564][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.131415][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.141982][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.155567][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.176836][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.186261][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.197474][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.214844][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.226562][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.241196][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.250222][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.258984][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.272441][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.281705][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.290596][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.301423][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.328089][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.341801][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.378897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.429329][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.451796][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.519588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.580508][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.582369][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.607558][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.615350][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.653027][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.668024][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.696672][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.704638][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.767299][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.776640][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.790832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.817661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.882509][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.891521][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.910866][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.929650][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.975903][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.025778][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.202634][ T4312] loop0: detected capacity change from 0 to 256 [ 67.757514][ T4260] Bluetooth: hci1: command 0x0419 tx timeout [ 67.773988][ T4260] Bluetooth: hci4: command 0x0419 tx timeout [ 67.801748][ T4260] Bluetooth: hci2: command 0x0419 tx timeout [ 67.860293][ T4260] Bluetooth: hci0: command 0x0419 tx timeout [ 67.928245][ T4294] Bluetooth: hci3: command 0x0419 tx timeout [ 69.534887][ C0] sched: RT throttling activated [ 71.109715][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.117001][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.283428][ C1] ODEBUG: Out of memory. ODEBUG disabled [ 74.537913][ T4406] loop3: detected capacity change from 0 to 256 [ 74.612042][ T4406] exfat: Deprecated parameter 'namecase' [ 74.705073][ T4406] exfat: Deprecated parameter 'utf8' [ 74.769648][ T4406] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d) [ 78.108932][ T4438] loop0: detected capacity change from 0 to 512 [ 79.414235][ T4438] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 80.209380][ T4450] loop4: detected capacity change from 0 to 256 [ 80.238035][ T4438] EXT4-fs (loop0): invalid journal inode [ 80.578143][ T4438] EXT4-fs (loop0): can't get journal size [ 80.587866][ T4450] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.669640][ T4450] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 80.715513][ T4450] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 81.003194][ T4438] EXT4-fs (loop0): 1 truncate cleaned up [ 81.034121][ T4450] process 'syz.4.51' launched './file1' with NULL argv: empty string added [ 81.045931][ T4463] loop3: detected capacity change from 0 to 256 [ 81.361064][ T1108] cfg80211: failed to load regulatory.db [ 81.532480][ T4463] exfat: Deprecated parameter 'namecase' [ 82.468449][ T4438] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: none. [ 82.485641][ T4463] exfat: Deprecated parameter 'utf8' [ 82.611707][ T4463] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d) [ 83.378571][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 83.394904][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 83.403942][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 83.413025][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 83.422117][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 83.431236][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 83.440325][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.449396][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.458486][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.467534][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 89.124669][ T4516] loop0: detected capacity change from 0 to 256 [ 89.335724][ T4516] exfat: Deprecated parameter 'namecase' [ 89.344363][ T4516] exfat: Deprecated parameter 'utf8' [ 89.443106][ T4516] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d) [ 92.251356][ T4546] device pim6reg1 entered promiscuous mode [ 99.171553][ T4636] Zero length message leads to an empty skb [ 100.780987][ T4642] loop2: detected capacity change from 0 to 256 [ 101.076575][ T4642] exfat: Deprecated parameter 'namecase' [ 101.266763][ T4642] exfat: Deprecated parameter 'utf8' [ 101.336956][ T4642] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d) [ 101.378456][ T4650] binder: 4649:4650 ioctl c0306201 0 returned -14 [ 102.117660][ T4658] loop0: detected capacity change from 0 to 256 [ 103.400297][ T4658] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.618424][ T4658] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 103.921371][ T4658] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 117.585052][ T1111] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 119.909024][ T21] Bluetooth: hci2: command 0x0445 tx timeout [ 120.760860][ T1111] usb 4-1: device descriptor read/all, error -71 [ 121.653711][ T4797] loop3: detected capacity change from 0 to 7 [ 121.703625][ T4173] Dev loop3: unable to read RDB block 7 [ 121.719651][ T4173] loop3: unable to read partition table [ 121.751205][ T4173] loop3: partition table beyond EOD, truncated [ 121.919923][ T4797] Dev loop3: unable to read RDB block 7 [ 121.929973][ T4797] loop3: unable to read partition table [ 121.952827][ T4797] loop3: partition table beyond EOD, truncated [ 121.993942][ T4797] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 123.711712][ T4813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.153'. [ 128.190749][ T4829] overlayfs: missing 'workdir' [ 130.971602][ T4870] netlink: 'syz.0.169': attribute type 10 has an invalid length. [ 132.863240][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.248215][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.289414][ T4870] team0: Port device dummy0 added [ 133.455595][ T4876] netlink: 'syz.0.169': attribute type 10 has an invalid length. [ 134.289938][ T4870] syz.0.169 (4870) used greatest stack depth: 21152 bytes left [ 134.321838][ T4895] loop2: detected capacity change from 0 to 512 [ 134.364753][ T4896] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 134.425993][ T4895] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 134.445046][ T4187] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 134.455342][ T4876] team0: Port device dummy0 removed [ 134.471267][ T4876] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 134.481990][ T4895] EXT4-fs (loop2): invalid journal inode [ 134.538020][ T4895] EXT4-fs (loop2): can't get journal size [ 134.658582][ T4895] EXT4-fs (loop2): 1 truncate cleaned up [ 134.684947][ T4187] usb 5-1: Using ep0 maxpacket: 32 [ 134.762636][ T4895] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: none. [ 134.805186][ T4187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 135.096233][ T4187] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 137.407927][ T4187] usb 5-1: string descriptor 0 read error: -71 [ 137.416727][ T4187] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 137.428901][ T4187] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 137.605846][ T4187] usb 5-1: config 0 descriptor?? [ 137.635834][ T4187] usb 5-1: can't set config #0, error -71 [ 137.681032][ T4187] usb 5-1: USB disconnect, device number 2 [ 147.347674][ T4986] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 148.340975][ T4187] Bluetooth: hci5: command 0x0409 tx timeout [ 150.538753][ T4507] Bluetooth: hci5: command 0x041b tx timeout [ 152.689343][ T4261] Bluetooth: hci5: command 0x040f tx timeout [ 154.593565][ T5024] syz.0.211 (5024) used greatest stack depth: 18560 bytes left [ 154.636365][ T5028] loop3: detected capacity change from 0 to 256 [ 154.661889][ T5028] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.741263][ T4967] chnl_net:caif_netlink_parms(): no params data found [ 154.744964][ T5028] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 154.786909][ T5028] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 154.865046][ T4187] Bluetooth: hci5: command 0x0419 tx timeout [ 155.775724][ T4967] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.804123][ T4967] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.895275][ T4967] device bridge_slave_0 entered promiscuous mode [ 155.955345][ T4967] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.996478][ T4967] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.026439][ T4967] device bridge_slave_1 entered promiscuous mode [ 159.024751][ T4967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.055900][ T4967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.085362][ T4967] team0: Port device team_slave_0 added [ 159.093185][ T4967] team0: Port device team_slave_1 added [ 159.801444][ T4967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.848146][ T4967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.991978][ T4967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.071222][ T4967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.094965][ T4967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.158931][ T4967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.412621][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.465447][ T4967] device hsr_slave_0 entered promiscuous mode [ 160.487228][ T4967] device hsr_slave_1 entered promiscuous mode [ 160.499563][ T4967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.585619][ T4967] Cannot create hsr debugfs directory [ 161.826954][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.823712][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.973760][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.438007][ T4967] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 165.510965][ T4967] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 166.230825][ T4967] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 166.471667][ T4967] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.486532][ T4261] Bluetooth: hci1: command 0x0409 tx timeout [ 171.536234][ T1111] Bluetooth: hci1: command 0x041b tx timeout [ 173.856055][ T1111] Bluetooth: hci1: command 0x040f tx timeout [ 175.914992][ T4260] Bluetooth: hci1: command 0x0419 tx timeout [ 177.023119][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 177.309020][ T4967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.364393][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.381668][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.418924][ T4967] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.456794][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.056690][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.440888][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.448055][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.500642][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.518659][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.560106][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.684280][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.691436][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.787392][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.803344][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.737253][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.763428][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.541756][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.549859][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.558967][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.581495][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.609333][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.957491][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.984800][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.491718][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.535589][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.591514][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.636768][ T5112] device bridge_slave_0 entered promiscuous mode [ 183.663968][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.704172][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.905858][ T5112] device bridge_slave_1 entered promiscuous mode [ 185.728262][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.785102][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.825416][ T4239] Bluetooth: hci0: command 0x0406 tx timeout [ 185.831574][ T4239] Bluetooth: hci3: command 0x0406 tx timeout [ 185.983418][ T4239] Bluetooth: hci4: command 0x0406 tx timeout [ 186.085353][ T4239] Bluetooth: hci2: command 0x0406 tx timeout [ 186.212667][ T5112] team0: Port device team_slave_0 added [ 186.270778][ T5112] team0: Port device team_slave_1 added [ 186.426801][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.433801][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.561323][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.743485][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.774151][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.813252][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.869157][ T144] device hsr_slave_0 left promiscuous mode [ 186.890571][ T144] device hsr_slave_1 left promiscuous mode [ 186.960699][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.985423][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.017996][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.107331][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.122414][ T144] device bridge_slave_1 left promiscuous mode [ 187.136147][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.181183][ T144] device bridge_slave_0 left promiscuous mode [ 187.192499][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.249714][ T144] device veth1_macvtap left promiscuous mode [ 187.271845][ T144] device veth0_macvtap left promiscuous mode [ 187.278477][ T144] device veth1_vlan left promiscuous mode [ 187.284604][ T144] device veth0_vlan left promiscuous mode [ 188.233159][ T144] team0 (unregistering): Port device team_slave_1 removed [ 188.293550][ T144] team0 (unregistering): Port device team_slave_0 removed [ 188.363634][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.444114][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.797122][ T144] bond0 (unregistering): Released all slaves [ 189.240325][ T4967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.282318][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.347597][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.158009][ T5308] loop4: detected capacity change from 0 to 512 [ 190.225291][ T5308] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 190.240325][ T5308] EXT4-fs (loop4): invalid journal inode [ 190.252139][ T5112] device hsr_slave_0 entered promiscuous mode [ 190.254953][ T5308] EXT4-fs (loop4): can't get journal size [ 190.290522][ T5112] device hsr_slave_1 entered promiscuous mode [ 190.301741][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.311558][ T5112] Cannot create hsr debugfs directory [ 190.311659][ T5308] EXT4-fs (loop4): 1 truncate cleaned up [ 190.364422][ T5308] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: none. [ 191.260596][ T5112] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 191.297252][ T5112] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 191.336221][ T5112] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 191.372954][ T5112] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 191.620380][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 191.656355][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.982807][ T4967] device veth0_vlan entered promiscuous mode [ 191.999756][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.025617][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.053642][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.166968][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.630221][ T4967] device veth1_vlan entered promiscuous mode [ 192.864562][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 193.019368][ T4967] device veth0_macvtap entered promiscuous mode [ 193.052457][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.084600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.116948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.161827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.233656][ T4967] device veth1_macvtap entered promiscuous mode [ 193.326220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.827158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.997948][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.009267][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.081076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.236718][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.368277][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.379685][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.389857][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.400544][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.410712][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.443333][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.555720][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.595800][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.659299][ T4967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.712674][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.752920][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.781252][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.815180][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.844925][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.887160][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.917522][ T4967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.940270][ T4967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.976348][ T4967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.025702][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.039606][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.235822][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.242978][ T4342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.273562][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.284512][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.293142][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.300234][ T4342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.308205][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.317227][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.326239][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.339154][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.378615][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.420738][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.616771][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.657610][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.708207][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.756209][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.809713][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.861398][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.904480][ T5112] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.931363][ T5112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.097309][ T4967] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.155085][ T4967] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.193834][ T4967] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.251589][ T4967] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.035139][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.066824][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.113155][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.133147][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.248379][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.439860][ T4454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.500797][ T4454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.512127][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.657948][ T4519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.703168][ T4519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.740465][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.735466][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.759500][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.806859][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.948007][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.043441][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 203.052481][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.508396][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.605948][ T5112] device veth0_vlan entered promiscuous mode [ 203.645652][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 203.661174][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 203.710045][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 203.849643][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 203.903436][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.947770][ T5112] device veth1_vlan entered promiscuous mode [ 203.996194][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.005543][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.033668][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.077406][ T5112] device veth0_macvtap entered promiscuous mode [ 204.098045][ T5112] device veth1_macvtap entered promiscuous mode [ 204.133724][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.163982][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.201253][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.231279][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.256961][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.288472][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.329048][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.500672][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.511272][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.522004][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.533645][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.549562][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 204.569420][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 204.586958][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.607531][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.634648][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.680773][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.721242][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.753938][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.783993][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.830341][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.867804][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.898663][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.929085][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.971371][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.014952][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.064414][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.077535][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.104778][ T5112] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.207276][ T5112] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.270279][ T5112] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.338616][ T5112] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.432208][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.754689][ T5497] hugetlbfs: syz.0.300 (5497): Using mlock ulimits for SHM_HUGETLB is deprecated [ 206.786309][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.065599][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 207.116380][ T4519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.124497][ T4519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.161918][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.539707][ T144] device hsr_slave_0 left promiscuous mode [ 210.577137][ T144] device hsr_slave_1 left promiscuous mode [ 210.735508][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.786499][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.828849][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.869162][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.957441][ T144] device bridge_slave_1 left promiscuous mode [ 210.992251][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.138685][ T144] device bridge_slave_0 left promiscuous mode [ 211.361315][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.377893][ T144] device veth1_macvtap left promiscuous mode [ 211.384111][ T144] device veth0_macvtap left promiscuous mode [ 211.504154][ T144] device veth1_vlan left promiscuous mode [ 211.511605][ T144] device veth0_vlan left promiscuous mode [ 213.635131][ T4507] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 213.793483][ T5571] netlink: 40 bytes leftover after parsing attributes in process `syz.3.315'. [ 213.832020][ T5571] netlink: 32 bytes leftover after parsing attributes in process `syz.3.315'. [ 213.851860][ T144] team0 (unregistering): Port device team_slave_1 removed [ 213.868145][ T144] team0 (unregistering): Port device team_slave_0 removed [ 213.886797][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.910018][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.095831][ T4507] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.124885][ T4507] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.145195][ T4507] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 214.154270][ T4507] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.208962][ T4507] usb 7-1: config 0 descriptor?? [ 214.352228][ T144] bond0 (unregistering): Released all slaves [ 214.734579][ T4507] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 214.765360][ T4507] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 214.905425][ T4507] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 215.547606][ T5563] ================================================================== [ 215.555990][ T5563] BUG: KASAN: stack-out-of-bounds in cp2112_xfer+0x87c/0xe00 [ 215.563400][ T5563] Read of size 42 at addr ffffc9000338fd41 by task syz.6.313/5563 [ 215.571224][ T5563] [ 215.573546][ T5563] CPU: 1 PID: 5563 Comm: syz.6.313 Not tainted syzkaller #0 [ 215.580860][ T5563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.590926][ T5563] Call Trace: [ 215.594238][ T5563] [ 215.597181][ T5563] dump_stack_lvl+0x168/0x230 [ 215.601891][ T5563] ? show_regs_print_info+0x20/0x20 [ 215.607111][ T5563] ? _printk+0xcc/0x110 [ 215.611299][ T5563] ? load_image+0x3b0/0x3b0 [ 215.615801][ T5563] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 215.621175][ T5563] print_address_description+0x60/0x2d0 [ 215.626719][ T5563] ? cp2112_xfer+0x87c/0xe00 [ 215.631320][ T5563] kasan_report+0xdf/0x130 [ 215.635742][ T5563] ? cp2112_xfer+0x87c/0xe00 [ 215.640325][ T5563] ? cp2112_xfer+0x87c/0xe00 [ 215.644917][ T5563] kasan_check_range+0x27b/0x290 [ 215.649867][ T5563] memcpy+0x25/0x60 [ 215.653683][ T5563] cp2112_xfer+0x87c/0xe00 [ 215.658124][ T5563] ? cp2112_i2c_xfer+0xf20/0xf20 [ 215.663068][ T5563] ? lock_chain_count+0x20/0x20 [ 215.667926][ T5563] __i2c_smbus_xfer+0x733/0x1d50 [ 215.672875][ T5563] ? cp2112_i2c_xfer+0xf20/0xf20 [ 215.677855][ T5563] ? i2c_smbus_write_i2c_block_data+0x1a0/0x1a0 [ 215.684094][ T5563] ? rt_mutex_lock_nested+0x15a/0x1c0 [ 215.689467][ T5563] ? i2c_smbus_xfer+0x11d/0x3a0 [ 215.694314][ T5563] ? rwsem_down_read_slowpath+0x990/0x990 [ 215.700086][ T5563] ? __might_fault+0xb7/0x110 [ 215.704769][ T5563] i2c_smbus_xfer+0x263/0x3a0 [ 215.709447][ T5563] ? i2c_smbus_read_byte+0x1b0/0x1b0 [ 215.714727][ T5563] ? __might_fault+0xb3/0x110 [ 215.719413][ T5563] i2cdev_ioctl_smbus+0x3e3/0x650 [ 215.724439][ T5563] ? i2cdev_ioctl_rdwr+0x6c0/0x6c0 [ 215.729554][ T5563] ? __might_fault+0xb3/0x110 [ 215.734226][ T5563] ? _copy_from_user+0x111/0x170 [ 215.739171][ T5563] i2cdev_ioctl+0x545/0x750 [ 215.743692][ T5563] ? i2cdev_write+0x120/0x120 [ 215.748389][ T5563] ? bpf_lsm_file_ioctl+0x5/0x10 [ 215.753331][ T5563] ? security_file_ioctl+0x7c/0xa0 [ 215.758448][ T5563] ? i2cdev_write+0x120/0x120 [ 215.763128][ T5563] __se_sys_ioctl+0xfa/0x170 [ 215.767724][ T5563] do_syscall_64+0x4c/0xa0 [ 215.772134][ T5563] ? clear_bhb_loop+0x30/0x80 [ 215.776802][ T5563] ? clear_bhb_loop+0x30/0x80 [ 215.781476][ T5563] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 215.787392][ T5563] RIP: 0033:0x7ff7678c66c9 [ 215.791839][ T5563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.811446][ T5563] RSP: 002b:00007ff765b2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.819866][ T5563] RAX: ffffffffffffffda RBX: 00007ff767b1cfa0 RCX: 00007ff7678c66c9 [ 215.827860][ T5563] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 215.835832][ T5563] RBP: 00007ff767948f91 R08: 0000000000000000 R09: 0000000000000000 [ 215.843802][ T5563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.851777][ T5563] R13: 00007ff767b1d038 R14: 00007ff767b1cfa0 R15: 00007ffd30726098 [ 215.859766][ T5563] [ 215.862787][ T5563] [ 215.865108][ T5563] [ 215.867438][ T5563] addr ffffc9000338fd41 is located in stack of task syz.6.313/5563 at offset 33 in frame: [ 215.877321][ T5563] i2cdev_ioctl_smbus+0x0/0x650 [ 215.882179][ T5563] [ 215.884498][ T5563] this frame has 1 object: [ 215.888909][ T5563] [32, 66) 'temp' [ 215.888920][ T5563] [ 215.894949][ T5563] Memory state around the buggy address: [ 215.900585][ T5563] ffffc9000338fc00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3 [ 215.908641][ T5563] ffffc9000338fc80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 215.916713][ T5563] >ffffc9000338fd00: 00 00 00 00 f1 f1 f1 f1 00 00 00 00 02 f3 f3 f3 [ 215.924799][ T5563] ^ [ 215.931993][ T5563] ffffc9000338fd80: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 215.940053][ T5563] ffffc9000338fe00: f1 f1 f1 f1 04 f2 00 00 f2 f2 00 00 f3 f3 f3 f3 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 215.948123][ T5563] ================================================================== [ 215.956178][ T5563] Disabling lock debugging due to kernel taint [ 215.990473][ T5563] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 215.997707][ T5563] CPU: 0 PID: 5563 Comm: syz.6.313 Tainted: G B syzkaller #0 [ 216.006390][ T5563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 216.016649][ T5563] Call Trace: [ 216.019929][ T5563] [ 216.022858][ T5563] dump_stack_lvl+0x168/0x230 [ 216.027560][ T5563] ? show_regs_print_info+0x20/0x20 [ 216.029313][ T4917] Bluetooth: hci2: command 0x0409 tx timeout [ 216.032777][ T5563] ? load_image+0x3b0/0x3b0 [ 216.043290][ T5563] panic+0x2c9/0x7f0 [ 216.047202][ T5563] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 216.053383][ T5563] ? bpf_jit_dump+0xd0/0xd0 [ 216.057930][ T5563] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 216.063829][ T5563] ? _raw_spin_unlock+0x40/0x40 [ 216.068666][ T5563] ? cp2112_xfer+0x87c/0xe00 [ 216.073246][ T5563] check_panic_on_warn+0x80/0xa0 [ 216.078185][ T5563] ? cp2112_xfer+0x87c/0xe00 [ 216.082795][ T5563] end_report+0x6d/0xf0 [ 216.086971][ T5563] kasan_report+0x102/0x130 [ 216.091496][ T5563] ? cp2112_xfer+0x87c/0xe00 [ 216.096100][ T5563] ? cp2112_xfer+0x87c/0xe00 [ 216.100688][ T5563] kasan_check_range+0x27b/0x290 [ 216.105621][ T5563] memcpy+0x25/0x60 [ 216.109452][ T5563] cp2112_xfer+0x87c/0xe00 [ 216.113888][ T5563] ? cp2112_i2c_xfer+0xf20/0xf20 [ 216.118835][ T5563] ? lock_chain_count+0x20/0x20 [ 216.123678][ T5563] __i2c_smbus_xfer+0x733/0x1d50 [ 216.128608][ T5563] ? cp2112_i2c_xfer+0xf20/0xf20 [ 216.133544][ T5563] ? i2c_smbus_write_i2c_block_data+0x1a0/0x1a0 [ 216.139776][ T5563] ? rt_mutex_lock_nested+0x15a/0x1c0 [ 216.145151][ T5563] ? i2c_smbus_xfer+0x11d/0x3a0 [ 216.149989][ T5563] ? rwsem_down_read_slowpath+0x990/0x990 [ 216.155697][ T5563] ? __might_fault+0xb7/0x110 [ 216.160363][ T5563] i2c_smbus_xfer+0x263/0x3a0 [ 216.165029][ T5563] ? i2c_smbus_read_byte+0x1b0/0x1b0 [ 216.170308][ T5563] ? __might_fault+0xb3/0x110 [ 216.174973][ T5563] i2cdev_ioctl_smbus+0x3e3/0x650 [ 216.179995][ T5563] ? i2cdev_ioctl_rdwr+0x6c0/0x6c0 [ 216.185095][ T5563] ? __might_fault+0xb3/0x110 [ 216.189761][ T5563] ? _copy_from_user+0x111/0x170 [ 216.194681][ T5563] i2cdev_ioctl+0x545/0x750 [ 216.199187][ T5563] ? i2cdev_write+0x120/0x120 [ 216.203860][ T5563] ? bpf_lsm_file_ioctl+0x5/0x10 [ 216.208785][ T5563] ? security_file_ioctl+0x7c/0xa0 [ 216.213890][ T5563] ? i2cdev_write+0x120/0x120 [ 216.218561][ T5563] __se_sys_ioctl+0xfa/0x170 [ 216.223138][ T5563] do_syscall_64+0x4c/0xa0 [ 216.227550][ T5563] ? clear_bhb_loop+0x30/0x80 [ 216.232242][ T5563] ? clear_bhb_loop+0x30/0x80 [ 216.236926][ T5563] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 216.242835][ T5563] RIP: 0033:0x7ff7678c66c9 [ 216.247264][ T5563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.266903][ T5563] RSP: 002b:00007ff765b2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.275332][ T5563] RAX: ffffffffffffffda RBX: 00007ff767b1cfa0 RCX: 00007ff7678c66c9 [ 216.283317][ T5563] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 216.291299][ T5563] RBP: 00007ff767948f91 R08: 0000000000000000 R09: 0000000000000000 [ 216.299453][ T5563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.307434][ T5563] R13: 00007ff767b1d038 R14: 00007ff767b1cfa0 R15: 00007ffd30726098 [ 216.315431][ T5563] [ 216.318761][ T5563] Kernel Offset: disabled [ 216.323098][ T5563] Rebooting in 86400 seconds..