last executing test programs: 18.13346907s ago: executing program 3 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000004, 0x1, 0x4}) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004800) 16.725891294s ago: executing program 3 (id=51): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="050000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000600), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000440)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x3) timer_gettime(r2, &(0x7f0000000080)) accept(r3, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2804cdc, 0x0) 15.154105121s ago: executing program 0 (id=56): openat$binfmt_register(0xffffff9c, &(0x7f0000000200), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) 13.399719384s ago: executing program 0 (id=68): openat$binfmt_register(0xffffff9c, &(0x7f0000000200), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) 13.211689789s ago: executing program 0 (id=60): openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) 13.19444093s ago: executing program 2 (id=61): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0x44}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11.113096799s ago: executing program 0 (id=65): ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) 10.067813694s ago: executing program 0 (id=67): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x178) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x14c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xb, 0x6, 0x80, 0x17, 0x20, 0x0, 0x1}}]}}]}, 0x14c}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbff, {0x60, 0x0, 0x0, r8, {0x0, 0xf}, {0xfff2, 0xa}, {0x7}}}, 0x24}}, 0x4000) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 10.023309058s ago: executing program 2 (id=70): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) 7.853882074s ago: executing program 3 (id=73): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280), 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0xb, 0x1, 0x2, "f819ebf45608e255b61c5deb3eb574d486d27e0600000000040000000006f100"}) close(r1) socket$igmp(0x2, 0x3, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 7.847892734s ago: executing program 2 (id=74): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x4c03, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000180)=0x10, 0x4) add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001dc0)}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x44}}, 0x4c098) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r5, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004814}, 0x4004000) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.54294413s ago: executing program 2 (id=76): openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) 5.706197137s ago: executing program 3 (id=77): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x6}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x80, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r6, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e62}, 0x6e) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x5, 0x8, 0x6, 0x2, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x3}, @jmp={0x5, 0x0, 0x8, 0xb, 0x4, 0x50, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xe2, &(0x7f00000004c0)=""/226, 0x41000, 0x21, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x6, 0x100, 0x3}, 0x10, 0x28817, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000640)=[{0x0, 0x4, 0x9, 0x9}, {0x4, 0x1, 0x2, 0x6}, {0x2, 0x3, 0x9, 0x2}, {0x1, 0x1, 0x0, 0xb}, {0x0, 0x3, 0x9, 0xc}, {0x0, 0x2, 0x1, 0x4}, {0x4, 0x3, 0x5, 0x1}], 0x10, 0x8}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001000010829bd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="28800000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08006e1300000000"], 0x34}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x7000000) r9 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=ANY=[@ANYBLOB="4800000010003b000000000000060000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000280012800b00010065727370616e0000180002800400120006000f00ef210000060011004e230000"], 0x48}}, 0x40080c0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57"], 0x0) 5.705820108s ago: executing program 4 (id=78): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000300)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) poll(&(0x7f0000000480)=[{0xffffffffffffffff, 0xc160}, {r3, 0x400}, {r3, 0x1}, {r2, 0x94}, {0xffffffffffffffff, 0x8518}, {0xffffffffffffffff, 0x200}, {r3, 0x280}], 0x7, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f00000006c0)=@v2={0x2000000, [{0x4e, 0x6}, {0x5, 0x2}]}, 0x14, 0x0) 5.700270398s ago: executing program 0 (id=88): io_uring_setup(0x4a86, &(0x7f0000000240)={0x0, 0x417a, 0x40, 0x8001002, 0x3d5}) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x43, 0x32344d59, 0x0, 0xfffffffd, 0x0, 0x9, 0xfeedcafe, 0x3, 0x8, 0x0, 0x1}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="050027bd700000a668bc25ef288195c062ae8600000006000000080003", @ANYRES32=r9, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r10 = socket(0x1e, 0x4, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r11, 0x0, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 5.643712392s ago: executing program 2 (id=81): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0x44}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.785474002s ago: executing program 4 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000004, 0x1, 0x4}) close_range(r3, 0xffffffffffffffff, 0x0) 3.787537813s ago: executing program 4 (id=84): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) 3.522045955s ago: executing program 2 (id=85): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="050000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000600), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000440)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x3) timer_gettime(r2, &(0x7f0000000080)) accept(r3, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2804cdc, 0x0) 3.452169951s ago: executing program 1 (id=86): openat$binfmt_register(0xffffff9c, &(0x7f0000000200), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) 3.415871423s ago: executing program 4 (id=87): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000024c0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb72, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x655, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 3.237845038s ago: executing program 1 (id=89): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x178) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x14c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "4b8a01998488b181c42219d74a4de0ef355932d0f7702c75c7831af340a7fc0dc103e88c0283c529396ce06f7f8edfc0d8326618701dbcc4e7efc0925a21b836565a5502b98afc32e0dc49fee6952413992f49786739ffc728e76d55969bae87c2308f3fa91b9278193d5eb965250e4ab219739390a1ba774dddb0ce04998d2fe6ae43dc6950b0a6a39ef961a17ad68d1c424efacf8b51e09570bf20ee66024c67e5a7691b6af007c7511158c82ded7c9017513961f2ba014b4500489be579e6f043e8e0c249a723d3415c64cf03b590522cdc26f7497b136a5f673f683cd8fba38ba4b0f50b080f5dd73ba1f61559de88faf99c0e2b45c6b58ff1cd51ca8167"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xb, 0x6, 0x80, 0x17, 0x20, 0x0, 0x1}}]}}]}, 0x14c}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbff, {0x60, 0x0, 0x0, r8, {0x0, 0xf}, {0xfff2, 0xa}, {0x7}}}, 0x24}}, 0x4000) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 2.445587672s ago: executing program 4 (id=90): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 2.077859192s ago: executing program 4 (id=91): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280), 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0xb, 0x1, 0x2, "f819ebf45608e255b61c5deb3eb574d486d27e0600000000040000000006f100"}) close(r1) socket$igmp(0x2, 0x3, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 2.076649772s ago: executing program 1 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x178) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x14c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xb, 0x6, 0x80, 0x17, 0x20, 0x0, 0x1}}]}}]}, 0x14c}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2a, 0x25dfdbff, {0x60, 0x0, 0x0, r8, {0x0, 0xf}, {0xfff2, 0xa}, {0x7}}}, 0x24}}, 0x4000) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 1.214898962s ago: executing program 3 (id=92): openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r1, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) 1.161741776s ago: executing program 1 (id=93): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x4c03, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000180)=0x10, 0x4) add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) 161.576007ms ago: executing program 3 (id=94): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000300)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) poll(&(0x7f0000000480)=[{0xffffffffffffffff, 0xc160}, {r3, 0x400}, {r3, 0x1}, {r2, 0x94}, {0xffffffffffffffff, 0x8518}, {0xffffffffffffffff, 0x200}, {r3, 0x280}], 0x7, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f00000006c0)=@v2={0x2000000, [{0x4e, 0x6}, {0x5, 0x2}]}, 0x14, 0x0) 144.853669ms ago: executing program 1 (id=95): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) 0s ago: executing program 1 (id=96): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000004, 0x1, 0x4}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 45.953546][ T4173] cgroup: Unknown subsys name 'net' [ 46.058970][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 47.275813][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 49.151194][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 49.166494][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 49.227967][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 49.250912][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 49.320194][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 49.359446][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.366710][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.375155][ T4191] device bridge_slave_0 entered promiscuous mode [ 49.400402][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.407771][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.416081][ T4184] device bridge_slave_0 entered promiscuous mode [ 49.423914][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.431021][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.439643][ T4191] device bridge_slave_1 entered promiscuous mode [ 49.458636][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.465782][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.473666][ T4184] device bridge_slave_1 entered promiscuous mode [ 49.520108][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.531964][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.547195][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.554635][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.563310][ T4185] device bridge_slave_0 entered promiscuous mode [ 49.586838][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.594402][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.602362][ T4186] device bridge_slave_0 entered promiscuous mode [ 49.610154][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.617756][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.625428][ T4185] device bridge_slave_1 entered promiscuous mode [ 49.639944][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.657317][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.664667][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.673347][ T4186] device bridge_slave_1 entered promiscuous mode [ 49.707138][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.718690][ T4191] team0: Port device team_slave_0 added [ 49.726851][ T4191] team0: Port device team_slave_1 added [ 49.739935][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.749293][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.757469][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.765421][ T4183] device bridge_slave_0 entered promiscuous mode [ 49.788147][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.799354][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.809311][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.816556][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.825295][ T4183] device bridge_slave_1 entered promiscuous mode [ 49.847605][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.857409][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.864811][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.890816][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.916444][ T4184] team0: Port device team_slave_0 added [ 49.929589][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.937087][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.963598][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.995875][ T4184] team0: Port device team_slave_1 added [ 50.012902][ T4185] team0: Port device team_slave_0 added [ 50.020453][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.039314][ T4186] team0: Port device team_slave_0 added [ 50.047627][ T4186] team0: Port device team_slave_1 added [ 50.054680][ T4185] team0: Port device team_slave_1 added [ 50.066950][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.084642][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.091764][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.118118][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.162950][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.169911][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.196062][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.214355][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.221419][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.248022][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.259775][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.269414][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.296305][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.330378][ T4191] device hsr_slave_0 entered promiscuous mode [ 50.337513][ T4191] device hsr_slave_1 entered promiscuous mode [ 50.345455][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.352657][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.378712][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.390125][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.397468][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.428477][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.441940][ T4183] team0: Port device team_slave_0 added [ 50.483471][ T4183] team0: Port device team_slave_1 added [ 50.505097][ T4185] device hsr_slave_0 entered promiscuous mode [ 50.513040][ T4185] device hsr_slave_1 entered promiscuous mode [ 50.519738][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.528145][ T4185] Cannot create hsr debugfs directory [ 50.574192][ T4186] device hsr_slave_0 entered promiscuous mode [ 50.580862][ T4186] device hsr_slave_1 entered promiscuous mode [ 50.587636][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.595558][ T4186] Cannot create hsr debugfs directory [ 50.601742][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.608696][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.635000][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.656662][ T4184] device hsr_slave_0 entered promiscuous mode [ 50.663836][ T4184] device hsr_slave_1 entered promiscuous mode [ 50.670403][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.678314][ T4184] Cannot create hsr debugfs directory [ 50.703259][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.710235][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.737129][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.867988][ T4183] device hsr_slave_0 entered promiscuous mode [ 50.875156][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 50.881848][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 50.882584][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 50.893138][ T4183] device hsr_slave_1 entered promiscuous mode [ 50.894107][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 50.906182][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 50.906331][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.920225][ T4183] Cannot create hsr debugfs directory [ 51.065325][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.097315][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.106346][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.120723][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.137850][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.147068][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.159396][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.173243][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.226798][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.248771][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.262502][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.281086][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.318536][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.345468][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.362329][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.380151][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.404339][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.440767][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.463395][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.476885][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.485840][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.521150][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.530516][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.539855][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.547097][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.556594][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.564583][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.573534][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.586356][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.594348][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.606775][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.619061][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.629376][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.658532][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.668273][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.678448][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.685669][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.695253][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.704088][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.713331][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.720421][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.728677][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.738741][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.748968][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.756795][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.764967][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.773678][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.800762][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.810547][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.819825][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.832136][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.842556][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.850990][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.859850][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.868723][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.877872][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.886884][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.895720][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.909470][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.918851][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.928725][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.938269][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.959588][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.970954][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.987796][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.003461][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.018989][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.028127][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.038503][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.047826][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.056780][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.070084][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.088048][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.118083][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.127499][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.148853][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.170517][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.209140][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.216796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.232474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.241005][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.248172][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.256255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.281557][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.292869][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.302068][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.309135][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.318423][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.327092][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.335125][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.343997][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.352138][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.359559][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.368749][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.378666][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.390067][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.404820][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.415193][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.441053][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.450635][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.459793][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.467040][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.476912][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.488912][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.497972][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.505121][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.513387][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.522494][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.531099][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.538617][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.546869][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.556726][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.565370][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.575233][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.586742][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.595783][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.603872][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.612633][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.621988][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.630381][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.637593][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.652991][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.678740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.686927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.695738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.706129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.715522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.724666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.733310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.742787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.759880][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.772085][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.784913][ T4186] device veth0_vlan entered promiscuous mode [ 52.802616][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.811097][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.820721][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.829904][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.838552][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.847343][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.856354][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.865165][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.874610][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.884211][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.892351][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.900188][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.930907][ T4186] device veth1_vlan entered promiscuous mode [ 52.953174][ T4257] Bluetooth: hci2: command 0x041b tx timeout [ 52.962740][ T4242] Bluetooth: hci0: command 0x041b tx timeout [ 52.966851][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.968788][ T4242] Bluetooth: hci3: command 0x041b tx timeout [ 52.980272][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.991565][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.000153][ T4242] Bluetooth: hci1: command 0x041b tx timeout [ 53.000478][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.011509][ T4242] Bluetooth: hci4: command 0x041b tx timeout [ 53.015900][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.029311][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.041543][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.050303][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.058982][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.067717][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.076386][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.084850][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.093327][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.108268][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.119935][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.146193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.154925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.165513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.174439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.183264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.192562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.200772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.209391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.218411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.227978][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.236086][ T4191] device veth0_vlan entered promiscuous mode [ 53.263462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.270927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.307582][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.318535][ T4191] device veth1_vlan entered promiscuous mode [ 53.335583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.352826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.368717][ T4186] device veth0_macvtap entered promiscuous mode [ 53.378822][ T4186] device veth1_macvtap entered promiscuous mode [ 53.426018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.442940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.466994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.477652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.523630][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.535925][ T4191] device veth0_macvtap entered promiscuous mode [ 53.544484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.553749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.564248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.572818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.580312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.589596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.598915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.607192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.615448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.632720][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.643899][ T4191] device veth1_macvtap entered promiscuous mode [ 53.657039][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.665924][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.680335][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.692944][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.707733][ T4184] device veth0_vlan entered promiscuous mode [ 53.724866][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.735958][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.747743][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.757295][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.766289][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.775119][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.791104][ T4184] device veth1_vlan entered promiscuous mode [ 53.805087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.816919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.825515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.839122][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.853184][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.864714][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.878226][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.889248][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.901942][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.914514][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.924331][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.933132][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.942124][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.969683][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.978627][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.988313][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.998689][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.016283][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.052932][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.064107][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.078284][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.132633][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.140631][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.164584][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.174523][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.186374][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.195753][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.204366][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.216545][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.224540][ T1284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.228529][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.237088][ T1284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.252355][ T4185] device veth0_vlan entered promiscuous mode [ 54.259890][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.270715][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.299988][ T4184] device veth0_macvtap entered promiscuous mode [ 54.314557][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.323470][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.343039][ T4184] device veth1_macvtap entered promiscuous mode [ 54.374758][ T4185] device veth1_vlan entered promiscuous mode [ 54.382957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.394375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.407486][ T4183] device veth0_vlan entered promiscuous mode [ 54.432973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.441904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.457198][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.468846][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.480545][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.491794][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.503755][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.520182][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.530904][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.542599][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.553912][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.566557][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.577857][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.587586][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.596826][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.606083][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.625478][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.653046][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.667590][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.712977][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.730674][ T4183] device veth1_vlan entered promiscuous mode [ 54.762519][ T4185] device veth0_macvtap entered promiscuous mode [ 54.778801][ T4185] device veth1_macvtap entered promiscuous mode [ 54.791793][ T1284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.825832][ T1284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.845614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.854320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.864011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.872869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.890577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.953519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.005724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.032070][ T4257] Bluetooth: hci1: command 0x040f tx timeout [ 55.039065][ T4257] Bluetooth: hci3: command 0x040f tx timeout [ 55.075045][ T4257] Bluetooth: hci0: command 0x040f tx timeout [ 55.110544][ T4257] Bluetooth: hci2: command 0x040f tx timeout [ 55.458271][ T4242] Bluetooth: hci4: command 0x040f tx timeout [ 55.485281][ T750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.488890][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.496397][ T750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.504675][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.531555][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.547385][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.558022][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.579164][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.602869][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.646839][ T4183] device veth0_macvtap entered promiscuous mode [ 55.677060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.698495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.707445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.721924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.730808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.745629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.779197][ T4183] device veth1_macvtap entered promiscuous mode [ 55.856226][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.886449][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.897034][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.913865][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.927379][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.940484][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.969277][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.009046][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.019526][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.028725][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.038327][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.057300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.073133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.082092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.121764][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.129755][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.309312][ T750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.368124][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.383817][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 56.427209][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.506099][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.583312][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.674567][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.764293][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.791675][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 56.801395][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 56.810723][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 56.819844][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 56.829664][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 56.838984][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 56.848111][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 56.857382][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 56.866690][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 56.928040][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.966193][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.977554][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.990405][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.001679][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.012361][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.023551][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.034998][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.049020][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.059064][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.069550][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.082464][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.101556][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.111906][ T4257] Bluetooth: hci0: command 0x0419 tx timeout [ 57.116511][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.131400][ T4257] Bluetooth: hci3: command 0x0419 tx timeout [ 57.140726][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.149137][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.153086][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.156863][ T4257] Bluetooth: hci1: command 0x0419 tx timeout [ 57.171897][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.183728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.192527][ T4229] Bluetooth: hci2: command 0x0419 tx timeout [ 57.253976][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.279332][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.289295][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.298417][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.332163][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.350796][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.386828][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.438579][ T1284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.458967][ T1284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.473650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.522194][ T4229] Bluetooth: hci4: command 0x0419 tx timeout [ 57.544242][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.578585][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.617283][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.659522][ T1236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.678278][ T1236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.747894][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.506170][ T4333] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.777860][ T4355] process 'syz.2.14' launched './file0' with NULL argv: empty string added [ 60.134485][ T4363] netlink: 2868 bytes leftover after parsing attributes in process `syz.0.18'. [ 63.132824][ T4379] netlink: 165 bytes leftover after parsing attributes in process `syz.2.23'. [ 65.235222][ T4264] Bluetooth: hci2: command 0x0405 tx timeout [ 67.240406][ T4417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.33'. [ 67.351397][ T4431] Bluetooth: hci2: command 0x0405 tx timeout [ 67.526146][ T4229] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.821519][ T4229] usb 1-1: Using ep0 maxpacket: 16 [ 67.941814][ T4229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.974127][ T4229] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFC, skipping [ 68.349412][ T4229] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.561613][ T4229] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 68.595306][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.609457][ T4435] netlink: 165 bytes leftover after parsing attributes in process `syz.3.37'. [ 68.628908][ T4229] usb 1-1: Product: syz [ 68.642676][ T4229] usb 1-1: Manufacturer: syz [ 68.647373][ T4229] usb 1-1: SerialNumber: syz [ 68.683162][ T4229] usb 1-1: config 0 descriptor?? [ 68.995852][ T4229] usb 1-1: can't set config #0, error -71 [ 69.008335][ T4229] usb 1-1: USB disconnect, device number 2 [ 71.358271][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.365146][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.473694][ T1348] cfg80211: failed to load regulatory.db [ 76.634069][ T4502] sched: RT throttling activated [ 76.853185][ T4503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.54'. [ 77.151476][ T4228] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.501335][ T4228] usb 2-1: Using ep0 maxpacket: 16 [ 78.326429][ T4228] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.356360][ T4228] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFC, skipping [ 78.380204][ T4228] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.571508][ T4228] usb 2-1: string descriptor 0 read error: -71 [ 78.707473][ T4228] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 79.152851][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.331528][ T4228] usb 2-1: config 0 descriptor?? [ 79.524712][ T4228] usb 2-1: can't set config #0, error -71 [ 79.545047][ T4228] usb 2-1: USB disconnect, device number 2 [ 82.791714][ T4562] futex_wake_op: syz.2.74 tries to shift op by -1; fix this program [ 83.097075][ T4570] Zero length message leads to an empty skb [ 85.234320][ T4596] netlink: 40 bytes leftover after parsing attributes in process `syz.3.77'. [ 85.531664][ T4229] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.964448][ T4229] usb 4-1: Using ep0 maxpacket: 16 [ 86.781591][ T4229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.902380][ T4229] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFC, skipping [ 86.927707][ T4229] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.105768][ T4229] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 87.263774][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.365975][ T4229] usb 4-1: Product: syz [ 87.374699][ T4229] usb 4-1: Manufacturer: syz [ 87.380160][ T4229] usb 4-1: SerialNumber: syz [ 87.404838][ T4229] usb 4-1: config 0 descriptor?? [ 89.368124][ T4229] usb 4-1: USB disconnect, device number 2 [ 89.548020][ T4636] futex_wake_op: syz.1.93 tries to shift op by -1; fix this program [ 91.097952][ C0] ------------[ cut here ]------------ [ 91.103800][ C0] WARNING: CPU: 0 PID: 4652 at net/mac80211/tx.c:4851 __ieee80211_beacon_get+0x172c/0x1f80 [ 91.113998][ C0] Modules linked in: [ 91.117911][ C0] CPU: 0 PID: 4652 Comm: syz.1.96 Not tainted 5.15.189-syzkaller #0 [ 91.126256][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.136339][ C0] RIP: 0010:__ieee80211_beacon_get+0x172c/0x1f80 [ 91.142923][ C0] Code: f8 0f 0b e9 f1 fa ff ff e8 d1 61 3b f8 0f 0b 4c 8b 74 24 08 e9 36 fe ff ff e8 c0 61 3b f8 0f 0b e9 3c ef ff ff e8 b4 61 3b f8 <0f> 0b e9 b8 f2 ff ff e8 f8 ca 6b 00 44 89 e1 80 e1 07 80 c1 03 38 [ 91.162861][ C0] RSP: 0018:ffffc900000078c0 EFLAGS: 00010246 [ 91.169429][ C0] RAX: ffffffff893c626c RBX: ffff88805e828c80 RCX: ffff88802bb1d940 [ 91.177805][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.185992][ C0] RBP: ffffc90000007ae8 R08: ffff88802bb1d940 R09: 0000000000000003 [ 91.193980][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88802adca600 [ 91.202286][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f28 [ 91.210647][ C0] FS: 00007f4b17de86c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 91.220275][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.226889][ C0] CR2: 000000110c244aaa CR3: 0000000022374000 CR4: 00000000003506f0 [ 91.235766][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.244167][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.252330][ C0] Call Trace: [ 91.255786][ C0] [ 91.258654][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 91.264652][ C0] ? verify_lock_unused+0x140/0x140 [ 91.270214][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 91.275991][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 91.281507][ C0] __iterate_interfaces+0x243/0x500 [ 91.286900][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 91.293270][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 91.299796][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 91.306959][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 91.312556][ C0] __hrtimer_run_queues+0x53d/0xc40 [ 91.317780][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 91.323899][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 91.330157][ C0] ? hw_scan_work+0xeb0/0xeb0 [ 91.334894][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 91.340046][ C0] hrtimer_run_softirq+0x176/0x240 [ 91.345207][ C0] handle_softirqs+0x328/0x820 [ 91.349998][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 91.354984][ C0] ? do_softirq+0x200/0x200 [ 91.359566][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 91.365075][ C0] __irq_exit_rcu+0x12f/0x220 [ 91.370024][ C0] ? irq_exit_rcu+0x20/0x20 [ 91.374572][ C0] irq_exit_rcu+0x5/0x20 [ 91.378949][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 91.384622][ C0] [ 91.387562][ C0] [ 91.390505][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 91.396518][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 91.403026][ C0] Code: 74 05 e8 2e 47 cc f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f6 d4 9f f7 65 8b 05 97 d4 50 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 91.422722][ C0] RSP: 0018:ffffc9000337f5c0 EFLAGS: 00000206 [ 91.428771][ C0] RAX: 96037d3be9ec7600 RBX: 0000000000000a06 RCX: 96037d3be9ec7600 [ 91.436853][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b15c0 RDI: 0000000000000001 [ 91.444820][ C0] RBP: ffffc9000337f650 R08: dffffc0000000000 R09: fffffbfff1ff6e2f [ 91.452785][ C0] R10: fffffbfff1ff6e2f R11: 1ffffffff1ff6e2e R12: dffffc0000000000 [ 91.460847][ C0] R13: 0000000000000000 R14: ffff88802b05e6c0 R15: 1ffff9200066feb8 [ 91.468912][ C0] ? _raw_spin_unlock+0x40/0x40 [ 91.473837][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 91.478877][ C0] __wake_up_sync_key+0x11b/0x180 [ 91.483926][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 91.489991][ C0] ? sock_load_diag_module+0x130/0x130 [ 91.495459][ C0] __unix_dgram_recvmsg+0x497/0xd50 [ 91.500646][ C0] ? unix_unhash+0x10/0x10 [ 91.505072][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 91.511334][ C0] ? mark_lock+0x94/0x320 [ 91.515662][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 91.520781][ C0] ? unix_dgram_sendmsg+0x1890/0x1890 [ 91.526147][ C0] ____sys_recvmsg+0x291/0x580 [ 91.530898][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 91.535946][ C0] ? import_iovec+0x6f/0xa0 [ 91.540457][ C0] ___sys_recvmsg+0x1af/0x4f0 [ 91.545185][ C0] ? __sys_recvmsg+0x250/0x250 [ 91.549984][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 91.555131][ C0] ? __might_fault+0xb3/0x110 [ 91.559808][ C0] do_recvmmsg+0x344/0x7a0 [ 91.564315][ C0] ? __sys_recvmmsg+0x280/0x280 [ 91.569153][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 91.574184][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 91.579310][ C0] ? do_recvmmsg+0x7a0/0x7a0 [ 91.583895][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 91.589313][ C0] do_syscall_64+0x4c/0xa0 [ 91.593883][ C0] ? clear_bhb_loop+0x30/0x80 [ 91.598590][ C0] ? clear_bhb_loop+0x30/0x80 [ 91.603377][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.609436][ C0] RIP: 0033:0x7f4b19ba1be9 [ 91.613868][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.633491][ C0] RSP: 002b:00007f4b17de8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 91.641910][ C0] RAX: ffffffffffffffda RBX: 00007f4b19dc9090 RCX: 00007f4b19ba1be9 [ 91.649952][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 91.657959][ C0] RBP: 00007f4b19c24e19 R08: 0000000000000000 R09: 0000000000000000 [ 91.666638][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 91.674632][ C0] R13: 00007f4b19dc9128 R14: 00007f4b19dc9090 R15: 00007ffd37649068 [ 91.682743][ C0] [ 91.685755][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 91.693377][ C0] CPU: 0 PID: 4652 Comm: syz.1.96 Not tainted 5.15.189-syzkaller #0 [ 91.701338][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 91.711372][ C0] Call Trace: [ 91.714632][ C0] [ 91.717456][ C0] dump_stack_lvl+0x168/0x230 [ 91.722115][ C0] ? show_regs_print_info+0x20/0x20 [ 91.727292][ C0] ? load_image+0x3b0/0x3b0 [ 91.731791][ C0] panic+0x2c9/0x7f0 [ 91.735774][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 91.740260][ C0] ? __ieee80211_beacon_get+0x172c/0x1f80 [ 91.746215][ C0] __warn+0x248/0x2b0 [ 91.750235][ C0] ? __ieee80211_beacon_get+0x172c/0x1f80 [ 91.756032][ C0] report_bug+0x1b7/0x2e0 [ 91.760440][ C0] handle_bug+0x3a/0x70 [ 91.764838][ C0] exc_invalid_op+0x16/0x40 [ 91.769358][ C0] asm_exc_invalid_op+0x16/0x20 [ 91.774194][ C0] RIP: 0010:__ieee80211_beacon_get+0x172c/0x1f80 [ 91.780520][ C0] Code: f8 0f 0b e9 f1 fa ff ff e8 d1 61 3b f8 0f 0b 4c 8b 74 24 08 e9 36 fe ff ff e8 c0 61 3b f8 0f 0b e9 3c ef ff ff e8 b4 61 3b f8 <0f> 0b e9 b8 f2 ff ff e8 f8 ca 6b 00 44 89 e1 80 e1 07 80 c1 03 38 [ 91.800647][ C0] RSP: 0018:ffffc900000078c0 EFLAGS: 00010246 [ 91.806969][ C0] RAX: ffffffff893c626c RBX: ffff88805e828c80 RCX: ffff88802bb1d940 [ 91.814965][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.822936][ C0] RBP: ffffc90000007ae8 R08: ffff88802bb1d940 R09: 0000000000000003 [ 91.830908][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88802adca600 [ 91.838873][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f28 [ 91.846969][ C0] ? __ieee80211_beacon_get+0x172c/0x1f80 [ 91.852715][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 91.858799][ C0] ? verify_lock_unused+0x140/0x140 [ 91.864016][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 91.869587][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 91.875152][ C0] __iterate_interfaces+0x243/0x500 [ 91.880457][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 91.886689][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 91.892933][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 91.899939][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 91.905217][ C0] __hrtimer_run_queues+0x53d/0xc40 [ 91.910592][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 91.916547][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 91.922522][ C0] ? hw_scan_work+0xeb0/0xeb0 [ 91.927339][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 91.932666][ C0] hrtimer_run_softirq+0x176/0x240 [ 91.937780][ C0] handle_softirqs+0x328/0x820 [ 91.942541][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 91.947417][ C0] ? do_softirq+0x200/0x200 [ 91.951913][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 91.957108][ C0] __irq_exit_rcu+0x12f/0x220 [ 91.961793][ C0] ? irq_exit_rcu+0x20/0x20 [ 91.966283][ C0] irq_exit_rcu+0x5/0x20 [ 91.970503][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 91.976131][ C0] [ 91.979044][ C0] [ 91.981998][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 91.987953][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 91.994529][ C0] Code: 74 05 e8 2e 47 cc f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f6 d4 9f f7 65 8b 05 97 d4 50 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 92.014234][ C0] RSP: 0018:ffffc9000337f5c0 EFLAGS: 00000206 [ 92.020313][ C0] RAX: 96037d3be9ec7600 RBX: 0000000000000a06 RCX: 96037d3be9ec7600 [ 92.028304][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b15c0 RDI: 0000000000000001 [ 92.036304][ C0] RBP: ffffc9000337f650 R08: dffffc0000000000 R09: fffffbfff1ff6e2f [ 92.044385][ C0] R10: fffffbfff1ff6e2f R11: 1ffffffff1ff6e2e R12: dffffc0000000000 [ 92.052447][ C0] R13: 0000000000000000 R14: ffff88802b05e6c0 R15: 1ffff9200066feb8 [ 92.060587][ C0] ? _raw_spin_unlock+0x40/0x40 [ 92.065431][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 92.070453][ C0] __wake_up_sync_key+0x11b/0x180 [ 92.075474][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 92.081442][ C0] ? sock_load_diag_module+0x130/0x130 [ 92.086896][ C0] __unix_dgram_recvmsg+0x497/0xd50 [ 92.092285][ C0] ? unix_unhash+0x10/0x10 [ 92.096905][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 92.103060][ C0] ? mark_lock+0x94/0x320 [ 92.107384][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 92.112386][ C0] ? unix_dgram_sendmsg+0x1890/0x1890 [ 92.117906][ C0] ____sys_recvmsg+0x291/0x580 [ 92.122652][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 92.127780][ C0] ? import_iovec+0x6f/0xa0 [ 92.132374][ C0] ___sys_recvmsg+0x1af/0x4f0 [ 92.137040][ C0] ? __sys_recvmsg+0x250/0x250 [ 92.141791][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 92.146955][ C0] ? __might_fault+0xb3/0x110 [ 92.151631][ C0] do_recvmmsg+0x344/0x7a0 [ 92.156051][ C0] ? __sys_recvmmsg+0x280/0x280 [ 92.160899][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 92.166016][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 92.171119][ C0] ? do_recvmmsg+0x7a0/0x7a0 [ 92.175719][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 92.180922][ C0] do_syscall_64+0x4c/0xa0 [ 92.185418][ C0] ? clear_bhb_loop+0x30/0x80 [ 92.190264][ C0] ? clear_bhb_loop+0x30/0x80 [ 92.195081][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.200977][ C0] RIP: 0033:0x7f4b19ba1be9 [ 92.205387][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.225187][ C0] RSP: 002b:00007f4b17de8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 92.233607][ C0] RAX: ffffffffffffffda RBX: 00007f4b19dc9090 RCX: 00007f4b19ba1be9 [ 92.241736][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 92.250120][ C0] RBP: 00007f4b19c24e19 R08: 0000000000000000 R09: 0000000000000000 [ 92.258090][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 92.266352][ C0] R13: 00007f4b19dc9128 R14: 00007f4b19dc9090 R15: 00007ffd37649068 [ 92.274473][ C0] [ 92.277752][ C0] Kernel Offset: disabled [ 92.282165][ C0] Rebooting in 86400 seconds..