last executing test programs: 23.841177919s ago: executing program 4 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) ptrace$getsig(0x4202, 0xffffffffffffffff, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002bc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000002c00)={0xfffffffe, 0x0, 'client0\x00', 0x0, "3c2126a2542a49cd", "863bb7b7249888e8bb8543a4e2200bac014cbf45d34d4f18554150f26a89a89e"}) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 23.466434817s ago: executing program 0 (id=10): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x2, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r7, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020}, 0x2020) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000040)={0x5}) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 19.196418552s ago: executing program 4 (id=15): syz_open_dev$sg(&(0x7f0000000180), 0x80000000, 0x103001) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x20, 0x2, 0x7, 0x4}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_SRC_VNI={0x8, 0xb, 0x7fff}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000500)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r5, &(0x7f0000000280)=ANY=[@ANYRES64], 0x58) socket$nl_route(0x10, 0x3, 0x0) 18.546761499s ago: executing program 0 (id=16): syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB="010000000000000000000100000068000880640000803c0009801c0000800600010002000000080002007f00000105000300030000001c0000800600010002000000080002000a010102050003000200000024000100000000000000000000000000000000000000000000000000000000000000000008000500010000001400020077673100000000000000000000000000e7ff43789ebee9cf6ffb85dae7710a6c4c929b7ccfc33ed8efecf9bb27272fcf9f6ae8ee255a7d6503fd323eb69b250d10f4ed1fe3a6a8"], 0x98}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="03032abd7000fbdbdf250a00000008000300", @ANYRES32=r3, @ANYBLOB="5bb4e7db21f6910f9fd004f3a2a04799fe7d9698608f7d14586804e749c6844874e3ba109f81941b4b96894aed5718195db4e09672b2138ec344a49f6bacb8f6c836a2d09e25aa0f83517164f1437351d0ed6e694d22bc464a51c9c5edb7b68960f32c635d3e78c5cab68de792e0e093b17fbd317b93effa224c5db19447c3342929a6796f48b37a0aa1e0e9575af4af4bba9c6ef50efd733594d0331ead57942ccac42725db694f8a93a9a5a4fe5a263e8f42437e46bdb980979d0c454deb3f0340ce8a21a399781b25e7b5193ce4f1886c7179d18d300f0ac7d9023062753a3daa06bbf800a2dee146b58d7ac279"], 0x1c}}, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000540)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x714, 0x0, 0xfffffffffffffd25) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r0, 0x0, r5}, 0x10) socket(0x11, 0x800000003, 0x0) socket$nl_route(0x10, 0x3, 0x0) listen(r5, 0xc0) 17.561719941s ago: executing program 4 (id=17): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, 0x140b, 0x1, 0x74bd23, 0x25dfdbfd}, 0x1}, 0x1, 0x0, 0x0, 0x20000014}, 0x4400c) 17.042605799s ago: executing program 0 (id=18): socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0xfffffff2, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000480)=[@in6={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x8360}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, @in6={0xa, 0x4e23, 0x7a, @local, 0x2}, @in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e21, @loopback}], 0x94) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x180, 0x0, 0x200, 0x0, 0x0, 0x250, 0x2e8, 0x2e8, 0x250, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x180, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0xffff, 0xf5f}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @empty, [], [], 'ip6_vti0\x00', 'veth0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x54, 0x0, 'syz0\x00', 0x0}) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r6, 0x0, 0x84) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8}) 16.907440581s ago: executing program 1 (id=19): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa95a}}, 0x10, 0x6}, 0x90) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000480)={r0}) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x2b8, 0x0, 0xf8, 0x6000000, 0x200, 0x3a8, 0x3a8, 0x200, 0x3a8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'virt_wifi0\x00', 'syzkaller1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0xd2030000}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1}}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 16.831436064s ago: executing program 2 (id=20): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x8, 0x44c0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) setreuid(0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 16.830955296s ago: executing program 4 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x40046109, 0x0) ioctl$CEC_DQEVENT(r4, 0xc0506107, &(0x7f00000002c0)={0x0, 0x0, 0x0, @raw}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8900, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 11.944348604s ago: executing program 1 (id=23): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r0, 0x4, 0xc00) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x10001, 0xb91) 11.050951214s ago: executing program 2 (id=24): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="70000000100001002dbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000a0002001400030064756d6d79300000000000000000"], 0x70}}, 0x40) 10.88427429s ago: executing program 3 (id=25): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0}) 10.18133784s ago: executing program 2 (id=26): mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3f, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 10.107080513s ago: executing program 3 (id=27): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x2008080, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) 9.721230779s ago: executing program 1 (id=28): syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB="010000000000000000000100000068000880640000803c0009801c0000800600010002000000080002007f00000105000300030000001c0000800600010002000000080002000a010102050003000200000024000100000000000000000000000000000000000000000000000000000000000000000008000500010000001400020077673100000000000000000000000000e7ff43789ebee9cf6ffb85dae7710a6c4c929b7ccfc33ed8efecf9bb27272fcf9f6ae8ee255a7d6503fd323eb69b250d10f4ed1fe3a6a8"], 0x98}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="03032abd7000fbdbdf250a00000008000300", @ANYRES32=r3, @ANYBLOB="5bb4e7db21f6910f9fd004f3a2a04799fe7d9698608f7d14586804e749c6844874e3ba109f81941b4b96894aed5718195db4e09672b2138ec344a49f6bacb8f6c836a2d09e25aa0f83517164f1437351d0ed6e694d22bc464a51c9c5edb7b68960f32c635d3e78c5cab68de792e0e093b17fbd317b93effa224c5db19447c3342929a6796f48b37a0aa1e0e9575af4af4bba9c6ef50efd733594d0331ead57942ccac42725db694f8a93a9a5a4fe5a263e8f42437e46bdb980979d0c454deb3f0340ce8a21a399781b25e7b5193ce4f1886c7179d18d300f0ac7d9023062753a3daa06bbf800a2dee146b58d7ac279"], 0x1c}}, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000540)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x714, 0x0, 0xfffffffffffffd25) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r0, 0x0, r5}, 0x10) socket(0x11, 0x800000003, 0x0) socket$nl_route(0x10, 0x3, 0x0) listen(r5, 0xc0) 9.412366884s ago: executing program 2 (id=29): r0 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000f40)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYRES64=r0, @ANYBLOB="7591c0f0f05637045927b483094a005210569e232d1e71ffd00949", @ANYRES32, @ANYRES64=0x0, @ANYRES16=r0, @ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x8, 0xaf, &(0x7f0000000140)=""/175, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x6048844) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x2, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@ssrr={0x89, 0xb, 0xc6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xe02}}}}}}, 0x0) mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 8.24276547s ago: executing program 1 (id=30): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x1f91, 0x0, 0x0, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) 7.421922356s ago: executing program 2 (id=31): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x30, 0x800}) 6.6596591s ago: executing program 2 (id=32): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x3}, 0x0, 0x4, 0x88, {}, 0x0, 0xffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000040)) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = openat$full(0xffffff9c, &(0x7f0000000300), 0x90000, 0x0) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000340)=0xb) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4041080) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) 6.231205992s ago: executing program 1 (id=33): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) creat(&(0x7f0000000340)='./file0\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x8, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 5.390943462s ago: executing program 3 (id=34): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r0, 0x0) 5.054742003s ago: executing program 1 (id=35): r0 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$fuse(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x181900, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xe) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047454, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f00000022c0)={0x0, 0x2b, &(0x7f0000000400)={&(0x7f0000002340)=ANY=[@ANYRESDEC], 0x18}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x8) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) close_range(0xffffffffffffffff, r0, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffeffffff, 0x12) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) 4.30247402s ago: executing program 3 (id=36): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="70000000100001002dbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000a0002001400030064756d6d7930000000000000000000000a000100aaaaaaaaaaaa00"], 0x70}}, 0x40) 3.326424299s ago: executing program 3 (id=37): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.822044527s ago: executing program 4 (id=38): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.579636216s ago: executing program 0 (id=39): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x4, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) 2.199729124s ago: executing program 3 (id=40): r0 = socket(0x400000000010, 0x3, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='#!.\x00', 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) set_tid_address(&(0x7f0000000200)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$evdev(&(0x7f00000003c0), 0x742, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x642000, 0x0) syz_open_dev$media(0x0, 0x8, 0x10b482) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000140)={0x0, 0xd0, 0x4, &(0x7f0000000080)={0x11, "42cae8b3df20afbcf8dd178c50e5d84526580489979a473f112453b228922bd31c"}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xce, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}, 0x1, 0x0, 0x0, 0x8800}, 0x2004c005) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/cpu_byteorder', 0x42, 0x80) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_pts(r8, 0x141601) read$FUSE(r8, 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x900, 0x12) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r9, 0xc008551c, &(0x7f0000000280)=ANY=[@ANYRES64=r10]) 1.777677472s ago: executing program 0 (id=41): r0 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000f40)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYRES64=r0, @ANYBLOB="7591c0f0f05637045927b483094a005210569e232d1e71ffd00949", @ANYRES32, @ANYRES64=0x0, @ANYRES16=r0, @ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x8, 0xaf, &(0x7f0000000140)=""/175, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x6048844) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x2, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@ssrr={0x89, 0xb, 0xc6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xe02}}}}}}, 0x0) mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 1.64251925s ago: executing program 4 (id=42): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) shutdown(r1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x54) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=43): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd60000400000005000000080009000200000008000c00a80a000008000b0000000000060001000779"], 0x3c}}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. [ 185.787365][ T5777] cgroup: Unknown subsys name 'net' [ 185.909157][ T5777] cgroup: Unknown subsys name 'cpuset' [ 185.925545][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 230.131000][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.137886][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 237.798385][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 242.998328][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 243.006899][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.021672][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.032890][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.042525][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.052372][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.062908][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.071453][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.085353][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.099413][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.108871][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.111932][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.123891][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.136890][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.151629][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.166593][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.175090][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.175662][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.193006][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.193437][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 243.202167][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.220794][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.230159][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.244892][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.272317][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.393275][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 245.289705][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 245.311359][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 245.333062][ T5810] Bluetooth: hci4: command tx timeout [ 245.338750][ T5810] Bluetooth: hci1: command tx timeout [ 245.344665][ T5803] Bluetooth: hci2: command tx timeout [ 245.350302][ T5803] Bluetooth: hci0: command tx timeout [ 245.356111][ T5810] Bluetooth: hci3: command tx timeout [ 245.494607][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.505808][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.513856][ T5793] bridge_slave_0: entered allmulticast mode [ 245.524103][ T5793] bridge_slave_0: entered promiscuous mode [ 245.605531][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 245.672739][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.680378][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.688376][ T5793] bridge_slave_1: entered allmulticast mode [ 245.699887][ T5793] bridge_slave_1: entered promiscuous mode [ 246.045356][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 246.085012][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.147361][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.533343][ T5793] team0: Port device team_slave_0 added [ 246.663111][ T5793] team0: Port device team_slave_1 added [ 246.673568][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.683526][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.691411][ T5802] bridge_slave_0: entered allmulticast mode [ 246.700903][ T5802] bridge_slave_0: entered promiscuous mode [ 246.756327][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.764098][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.772023][ T5794] bridge_slave_0: entered allmulticast mode [ 246.782886][ T5794] bridge_slave_0: entered promiscuous mode [ 246.994280][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.005633][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.014008][ T5802] bridge_slave_1: entered allmulticast mode [ 247.023862][ T5802] bridge_slave_1: entered promiscuous mode [ 247.043360][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.050566][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.077763][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.091976][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.099579][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.110050][ T5797] bridge_slave_0: entered allmulticast mode [ 247.118967][ T5797] bridge_slave_0: entered promiscuous mode [ 247.129836][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.137918][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.145823][ T5794] bridge_slave_1: entered allmulticast mode [ 247.155696][ T5794] bridge_slave_1: entered promiscuous mode [ 247.246156][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.253581][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.279978][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.310659][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.320480][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.328529][ T5797] bridge_slave_1: entered allmulticast mode [ 247.338163][ T5797] bridge_slave_1: entered promiscuous mode [ 247.401161][ T5805] Bluetooth: hci0: command tx timeout [ 247.406956][ T5803] Bluetooth: hci3: command tx timeout [ 247.413065][ T5810] Bluetooth: hci1: command tx timeout [ 247.418710][ T5810] Bluetooth: hci2: command tx timeout [ 247.424544][ T5798] Bluetooth: hci4: command tx timeout [ 247.454340][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.479173][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.684727][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.706827][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.752735][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.760463][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.768449][ T5808] bridge_slave_0: entered allmulticast mode [ 247.778238][ T5808] bridge_slave_0: entered promiscuous mode [ 247.832757][ T5802] team0: Port device team_slave_0 added [ 247.851279][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.930199][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.938184][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.946169][ T5808] bridge_slave_1: entered allmulticast mode [ 247.957203][ T5808] bridge_slave_1: entered promiscuous mode [ 247.974294][ T5802] team0: Port device team_slave_1 added [ 248.027060][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.130367][ T5793] hsr_slave_0: entered promiscuous mode [ 248.140329][ T5793] hsr_slave_1: entered promiscuous mode [ 248.267393][ T5794] team0: Port device team_slave_0 added [ 248.285255][ T5794] team0: Port device team_slave_1 added [ 248.341785][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.359308][ T5797] team0: Port device team_slave_0 added [ 248.450539][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.462457][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.469643][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.496212][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.510838][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.518258][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.544613][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.565472][ T5797] team0: Port device team_slave_1 added [ 248.670690][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.679645][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.707273][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.721876][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.729067][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.755578][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.987527][ T5808] team0: Port device team_slave_0 added [ 249.084026][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.091487][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.117881][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.139763][ T5808] team0: Port device team_slave_1 added [ 249.149960][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.158890][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.185682][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.391385][ T5802] hsr_slave_0: entered promiscuous mode [ 249.400399][ T5802] hsr_slave_1: entered promiscuous mode [ 249.408955][ T5802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.416778][ T5802] Cannot create hsr debugfs directory [ 249.471470][ T5810] Bluetooth: hci2: command tx timeout [ 249.477158][ T5810] Bluetooth: hci3: command tx timeout [ 249.483134][ T5798] Bluetooth: hci4: command tx timeout [ 249.483926][ T5803] Bluetooth: hci0: command tx timeout [ 249.488670][ T5798] Bluetooth: hci1: command tx timeout [ 249.618010][ T5794] hsr_slave_0: entered promiscuous mode [ 249.628206][ T5794] hsr_slave_1: entered promiscuous mode [ 249.637168][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.645094][ T5794] Cannot create hsr debugfs directory [ 249.653906][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.661180][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.687696][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.804727][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.813500][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.840868][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.919009][ T5797] hsr_slave_0: entered promiscuous mode [ 249.928383][ T5797] hsr_slave_1: entered promiscuous mode [ 249.937751][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.945664][ T5797] Cannot create hsr debugfs directory [ 250.560093][ T5808] hsr_slave_0: entered promiscuous mode [ 250.570309][ T5808] hsr_slave_1: entered promiscuous mode [ 250.579216][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.587106][ T5808] Cannot create hsr debugfs directory [ 250.881705][ T5793] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 251.034576][ T5793] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 251.083570][ T5793] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 251.268305][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 251.560529][ T5798] Bluetooth: hci1: command tx timeout [ 251.566489][ T5798] Bluetooth: hci3: command tx timeout [ 251.579320][ T5798] Bluetooth: hci0: command tx timeout [ 251.585137][ T5798] Bluetooth: hci4: command tx timeout [ 251.590788][ T5798] Bluetooth: hci2: command tx timeout [ 251.763766][ T5802] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 251.812929][ T5802] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 251.897857][ T5802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 251.921002][ T5802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 252.116370][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 252.145401][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 252.244905][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 252.271873][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 252.352942][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 252.419083][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 252.517778][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 252.587785][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 252.740240][ T5808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 252.816860][ T5808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 252.927616][ T5808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 252.990164][ T5808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 253.201890][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.513951][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.569033][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.699756][ T3730] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.707461][ T3730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.757806][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.856169][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.887638][ T3730] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.895314][ T3730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.062056][ T3730] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.069650][ T3730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.105430][ T3730] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.113129][ T3730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.227455][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.329631][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.385000][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.417434][ T3730] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.425141][ T3730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.486822][ T3730] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.494517][ T3730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.765906][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.863233][ T758] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.870825][ T758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.971008][ T758] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.978704][ T758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.032921][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.135207][ T5802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.146230][ T5802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.357102][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.546223][ T758] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.554072][ T758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.570202][ T758] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.577913][ T758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.488416][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.923783][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.127115][ T5793] veth0_vlan: entered promiscuous mode [ 257.164416][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.318239][ T5793] veth1_vlan: entered promiscuous mode [ 257.340632][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.675720][ T5797] veth0_vlan: entered promiscuous mode [ 257.794470][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.853928][ T5797] veth1_vlan: entered promiscuous mode [ 257.887586][ T5793] veth0_macvtap: entered promiscuous mode [ 257.919003][ T5802] veth0_vlan: entered promiscuous mode [ 257.960714][ T5793] veth1_macvtap: entered promiscuous mode [ 258.060489][ T5802] veth1_vlan: entered promiscuous mode [ 258.222645][ T5794] veth0_vlan: entered promiscuous mode [ 258.265598][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.359703][ T5794] veth1_vlan: entered promiscuous mode [ 258.380707][ T5797] veth0_macvtap: entered promiscuous mode [ 258.424084][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.499313][ T5797] veth1_macvtap: entered promiscuous mode [ 258.532544][ T5793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.541901][ T5793] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.550940][ T5793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.560154][ T5793] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.662404][ T5802] veth0_macvtap: entered promiscuous mode [ 258.772323][ T5802] veth1_macvtap: entered promiscuous mode [ 258.806484][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.817466][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.832963][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.885512][ T5794] veth0_macvtap: entered promiscuous mode [ 258.961973][ T5794] veth1_macvtap: entered promiscuous mode [ 258.997943][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.009658][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.028689][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.079314][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.090289][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.100846][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.111657][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.126908][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.189879][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.201368][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.211704][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.222550][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.238782][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.264708][ T5797] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.274006][ T5797] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.283326][ T5797] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.292519][ T5797] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.319329][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.330357][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.342726][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.356025][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.367331][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.378261][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.394565][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.432702][ T5802] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.442087][ T5802] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.451286][ T5802] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.460351][ T5802] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.585538][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.597587][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.607890][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.618817][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.629088][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.641386][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.656986][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.838434][ T5794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.847816][ T5794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.858197][ T5794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.867448][ T5794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.716925][ T5808] veth0_vlan: entered promiscuous mode [ 260.858152][ T5808] veth1_vlan: entered promiscuous mode [ 261.286687][ T5808] veth0_macvtap: entered promiscuous mode [ 261.396624][ T5808] veth1_macvtap: entered promiscuous mode [ 261.597499][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.608481][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.618889][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.629951][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.642959][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.653909][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.664074][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.674924][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.690103][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.805249][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.816898][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.827129][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.837948][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.848217][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.859121][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.869267][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.881858][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.897443][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.156690][ T5808] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.165963][ T5808] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.175219][ T5808] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.184436][ T5808] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.199416][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.208433][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.441654][ T3870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.449771][ T3870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.861938][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.871802][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.046225][ T3870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.055329][ T3870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.195549][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.203773][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.247897][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.256323][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.388708][ T5793] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 266.810484][ T4012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.819666][ T4012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.196382][ T3932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.210910][ T3932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.349155][ T3642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.357481][ T3642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.511828][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.520161][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.601519][ T5850] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 271.871370][ T5850] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 271.880331][ T5850] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 271.891508][ T5850] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 271.900779][ T5850] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 271.920664][ T5850] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 272.036327][ T5850] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 272.046096][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 272.054776][ T5850] usb 4-1: Product: syz [ 272.059229][ T5850] usb 4-1: Manufacturer: syz [ 272.182654][ T5850] cdc_wdm 4-1:1.0: skipping garbage [ 272.188150][ T5850] cdc_wdm 4-1:1.0: skipping garbage [ 272.239298][ T5850] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 272.245612][ T5850] cdc_wdm 4-1:1.0: Unknown control protocol [ 272.521574][ T5810] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 272.530208][ T5810] Bluetooth: hci3: Injecting HCI hardware error event [ 272.538059][ T5810] Bluetooth: hci3: hardware error 0x00 [ 273.009975][ T5850] usb 4-1: USB disconnect, device number 2 [ 274.492640][ T6016] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 274.499630][ T6016] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 274.507334][ T6019] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14) [ 274.514252][ T6019] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 274.522545][ T6019] vhci_hcd vhci_hcd.0: Device attached [ 274.522749][ T6016] vhci_hcd vhci_hcd.0: Device attached [ 274.619875][ T6022] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 274.681992][ T5810] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 274.751956][ T1859] vhci_hcd: vhci_device speed not set [ 274.767587][ T6019] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(18) [ 274.774558][ T6019] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 274.793977][ T6019] vhci_hcd vhci_hcd.0: Device attached [ 274.832639][ T1859] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 274.905985][ T6016] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(13) [ 274.912921][ T6016] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 274.933369][ T6016] vhci_hcd vhci_hcd.0: Device attached [ 275.053348][ T6016] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(21) [ 275.060304][ T6016] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 275.068869][ T6016] vhci_hcd vhci_hcd.0: Device attached [ 275.123653][ T6019] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 275.177861][ T6016] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 275.220799][ T6016] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 275.380387][ T6016] vhci_hcd vhci_hcd.0: port 0 already used [ 275.779507][ T6029] vhci_hcd: connection closed [ 275.837570][ T6020] vhci_hcd: connection closed [ 275.913306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 275.932371][ T3642] vhci_hcd: stop threads [ 275.936902][ T3642] vhci_hcd: release socket [ 275.942016][ T3642] vhci_hcd: disconnect device [ 275.950865][ T6017] vhci_hcd: connection reset by peer [ 275.958186][ T6025] vhci_hcd: connection closed [ 275.959169][ T6023] vhci_hcd: connection closed [ 276.058687][ T3642] vhci_hcd: stop threads [ 276.068282][ T3642] vhci_hcd: release socket [ 276.073266][ T3642] vhci_hcd: disconnect device [ 276.172600][ T3642] vhci_hcd: stop threads [ 276.177230][ T3642] vhci_hcd: release socket [ 276.182214][ T3642] vhci_hcd: disconnect device [ 276.198358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 276.287743][ T3642] vhci_hcd: stop threads [ 276.292424][ T3642] vhci_hcd: release socket [ 276.297149][ T3642] vhci_hcd: disconnect device [ 276.351228][ T3642] vhci_hcd: stop threads [ 276.355863][ T3642] vhci_hcd: release socket [ 276.360681][ T3642] vhci_hcd: disconnect device [ 279.951815][ T1859] vhci_hcd: vhci_device speed not set [ 281.381839][ T5850] usb usb36-port1: attempt power cycle [ 282.003607][ T5850] usb usb36-port1: unable to enumerate USB device [ 282.577889][ T5850] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 282.808490][ T5850] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 282.817683][ T5850] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 282.828400][ T5850] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 282.838384][ T5850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 282.849803][ T5850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 283.036192][ T5850] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 283.045774][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 283.054708][ T5850] usb 2-1: Product: syz [ 283.059140][ T5850] usb 2-1: Manufacturer: syz [ 283.173237][ T5850] cdc_wdm 2-1:1.0: skipping garbage [ 283.191690][ T5850] cdc_wdm 2-1:1.0: skipping garbage [ 283.229772][ T6062] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24'. [ 283.250704][ T5850] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 283.257077][ T5850] cdc_wdm 2-1:1.0: Unknown control protocol [ 283.412385][ T5850] usb 2-1: USB disconnect, device number 2 [ 285.550960][ T6075] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 287.564677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 287.715321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 290.051111][ T6094] netlink: 48 bytes leftover after parsing attributes in process `syz.3.36'. [ 290.250814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 290.262699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 290.273460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 291.022038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 291.272849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 291.486121][ T6102] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 291.571876][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.585267][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 293.202463][ T6115] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 293.219290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 293.271301][ T1859] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 293.843067][ T1859] usb 4-1: Using ep0 maxpacket: 32 [ 293.948074][ T1859] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 293.958754][ T1859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.085516][ T1859] usb 4-1: config 0 descriptor?? [ 294.411639][ T1859] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 294.476873][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 294.504114][ T1859] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 294.598801][ T6108] ===================================================== [ 294.606369][ T6108] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 294.614239][ T6108] _copy_to_user+0xcc/0x120 [ 294.619456][ T6108] i2cdev_ioctl_smbus+0x586/0x660 [ 294.624955][ T6108] compat_i2cdev_ioctl+0x48f/0xb40 [ 294.630406][ T6108] __ia32_compat_sys_ioctl+0x7f6/0x1260 [ 294.636516][ T6108] ia32_sys_call+0x2d07/0x42c0 [ 294.641795][ T6108] __do_fast_syscall_32+0xb0/0x110 [ 294.647255][ T6108] do_fast_syscall_32+0x38/0x80 [ 294.652793][ T6108] do_SYSENTER_32+0x1f/0x30 [ 294.657540][ T6108] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 294.664875][ T6108] [ 294.667343][ T6108] Uninit was stored to memory at: [ 294.672926][ T6108] __i2c_smbus_xfer+0x254d/0x2f60 [ 294.678249][ T6108] i2c_smbus_xfer+0x31d/0x4d0 [ 294.683500][ T6108] i2cdev_ioctl_smbus+0x4a1/0x660 [ 294.688791][ T6108] compat_i2cdev_ioctl+0x48f/0xb40 [ 294.694483][ T6108] __ia32_compat_sys_ioctl+0x7f6/0x1260 [ 294.700257][ T6108] ia32_sys_call+0x2d07/0x42c0 [ 294.705448][ T6108] __do_fast_syscall_32+0xb0/0x110 [ 294.710894][ T6108] do_fast_syscall_32+0x38/0x80 [ 294.717568][ T6108] do_SYSENTER_32+0x1f/0x30 [ 294.722589][ T6108] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 294.729113][ T6108] [ 294.731894][ T6108] Local variable msgbuf1.i created at: [ 294.737463][ T6108] __i2c_smbus_xfer+0x86a/0x2f60 [ 294.742723][ T6108] i2c_smbus_xfer+0x31d/0x4d0 [ 294.747663][ T6108] [ 294.750232][ T6108] Bytes 0-1 of 2 are uninitialized [ 294.757073][ T6108] Memory access of size 2 starts at ffff8880553a3c86 [ 294.765207][ T6108] Data copied to user address 0000000080000080 [ 294.771699][ T6108] [ 294.774160][ T6108] CPU: 1 UID: 0 PID: 6108 Comm: syz.3.40 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 294.786394][ T6108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.796838][ T6108] ===================================================== [ 294.804041][ T6108] Disabling lock debugging due to kernel taint [ 294.810348][ T6108] Kernel panic - not syncing: kmsan.panic set ... [ 294.816876][ T6108] CPU: 1 UID: 0 PID: 6108 Comm: syz.3.40 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 294.830498][ T6108] Tainted: [B]=BAD_PAGE [ 294.834743][ T6108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.845070][ T6108] Call Trace: [ 294.848458][ T6108] [ 294.851509][ T6108] __dump_stack+0x26/0x30 [ 294.856083][ T6108] dump_stack_lvl+0x53/0x270 [ 294.860893][ T6108] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 294.866895][ T6108] dump_stack+0x1e/0x25 [ 294.871202][ T6108] panic+0x4bd/0xd50 [ 294.875270][ T6108] kmsan_report+0x29d/0x2a0 [ 294.879919][ T6108] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 294.886436][ T6108] ? kmsan_internal_check_memory+0x496/0x570 [ 294.893031][ T6108] ? kmsan_copy_to_user+0xca/0xe0 [ 294.898220][ T6108] ? _copy_to_user+0xcc/0x120 [ 294.903066][ T6108] ? i2cdev_ioctl_smbus+0x586/0x660 [ 294.908421][ T6108] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 294.913865][ T6108] ? __ia32_compat_sys_ioctl+0x7f6/0x1260 [ 294.919739][ T6108] ? ia32_sys_call+0x2d07/0x42c0 [ 294.924795][ T6108] ? __do_fast_syscall_32+0xb0/0x110 [ 294.930229][ T6108] ? do_fast_syscall_32+0x38/0x80 [ 294.935399][ T6108] ? do_SYSENTER_32+0x1f/0x30 [ 294.940227][ T6108] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 294.946903][ T6108] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 294.952405][ T6108] ? __i2c_transfer+0x11ca/0x30e0 [ 294.957696][ T6108] ? kmsan_get_metadata+0x105/0x1b0 [ 294.963160][ T6108] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 294.969694][ T6108] ? kmsan_get_metadata+0x105/0x1b0 [ 294.975161][ T6108] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 294.981161][ T6108] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 294.986554][ T6108] ? kmsan_get_metadata+0x105/0x1b0 [ 294.991927][ T6108] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 294.997917][ T6108] kmsan_internal_check_memory+0x496/0x570 [ 295.003943][ T6108] kmsan_copy_to_user+0xca/0xe0 [ 295.008969][ T6108] ? should_fail_usercopy+0x2e/0x40 [ 295.014371][ T6108] _copy_to_user+0xcc/0x120 [ 295.019059][ T6108] i2cdev_ioctl_smbus+0x586/0x660 [ 295.024255][ T6108] compat_i2cdev_ioctl+0x48f/0xb40 [ 295.029533][ T6108] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 295.035512][ T6108] __ia32_compat_sys_ioctl+0x7f6/0x1260 [ 295.041223][ T6108] ? kmsan_get_metadata+0x105/0x1b0 [ 295.046580][ T6108] ? kmsan_get_metadata+0x105/0x1b0 [ 295.051939][ T6108] ia32_sys_call+0x2d07/0x42c0 [ 295.056867][ T6108] __do_fast_syscall_32+0xb0/0x110 [ 295.062258][ T6108] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 295.068230][ T6108] do_fast_syscall_32+0x38/0x80 [ 295.073244][ T6108] do_SYSENTER_32+0x1f/0x30 [ 295.077917][ T6108] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.084443][ T6108] RIP: 0023:0xf7fd2539 [ 295.088720][ T6108] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 295.108500][ T6108] RSP: 002b:00000000f50d555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 295.117158][ T6108] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000000720 [ 295.125262][ T6108] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.133349][ T6108] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.141431][ T6108] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 295.149522][ T6108] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.157664][ T6108] [ 295.161126][ T6108] Kernel Offset: disabled [ 295.165543][ T6108] Rebooting in 86400 seconds..