last executing test programs: 11.489552914s ago: executing program 2 (id=365): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r1}, 0x50) 11.365497601s ago: executing program 2 (id=367): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x1, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) io_uring_enter(0xffffffffffffffff, 0x15f1, 0xff98, 0x23, 0x0, 0x0) mount(&(0x7f0000000640)=@sr0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='ocfs2_dlmfs\x00', 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x4b, '\x00', r0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) 11.212769484s ago: executing program 3 (id=369): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, 0xffffffffffffffff, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000000)="dbac4c47eb4fa815a661764923e68bda", 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001500190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 10.313237903s ago: executing program 2 (id=373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_open_dev$video(0x0, 0xc000, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x274100) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x600000) ioctl$SIOCAX25CTLCON(r5, 0x89e8, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x5, 0x5, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x3, 0x4) r7 = socket(0x10, 0x3, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r8, 0x0, 0xcf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x40}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, {0x4}}]}]}, 0x64}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x7, 0x1000000, 0x0}) 9.379660839s ago: executing program 3 (id=375): socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r5, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000000)="dbac4c47eb4fa815a661764923e68bda", 0x10) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="58708e06000300000000000000dbdf2502106088a018e31cc414d98b2f7831799a8f668ea45d1c079d9fdd3126a956ed2ccb06d323898c357ca0bb7bc475e2db17a6fc7f985431f728074dddcc461f26987d53766dedc17af6d7a92be1355dabdc731f92ed6d456d0602f0dad5882fe02753baa492f9a2a69b9f50e2d0f4e6ce9f0ee294c8", @ANYRES32=0x0, @ANYBLOB="0800010064010102080009000300000008000900020000000800080000040000080009001d09000008000100e000000108000100000000000800010000000000"], 0x58}}, 0x0) 8.125845s ago: executing program 2 (id=376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r6, r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) 7.188766439s ago: executing program 3 (id=378): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000ad080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="00faff0f0001eeff7f6faf9a1e4d", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.623034855s ago: executing program 2 (id=381): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0xfffffffffffffde5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0), 0x4) 5.70091958s ago: executing program 3 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x4, &(0x7f0000000100)=@framed={{}, [@generic={0x4, 0x5, 0x0, 0x200, 0x8}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) 5.009325929s ago: executing program 2 (id=386): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000012000100000000000000000010030200fffe4e2200000000ffffffff000000000000000000000000fcffffff0000000000000000", @ANYRES16=r2, @ANYRESOCT=r2], 0x4c}, 0x1, 0x0, 0x0, 0x404c810}, 0x4010) 3.002036259s ago: executing program 4 (id=388): socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r5, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000000)="dbac4c47eb4fa815a661764923e68bda", 0x10) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="58708e06000300000000000000dbdf2502106088a018e31cc414d98b2f7831799a8f668ea45d1c079d9fdd3126a956ed2ccb06d323898c357ca0bb7bc475e2db17a6fc7f985431f728074dddcc461f26987d53766dedc17af6d7a92be1355dabdc731f92ed6d456d0602f0dad5882fe02753baa492f9a2a69b9f50e2d0f4e6ce9f0ee294c8", @ANYRES32=0x0, @ANYBLOB="0800010064010102080009000300000008000900020000000800080000040000080009001d09000008000100e000000108000100000000000800010000000000"], 0x58}}, 0x0) 2.713463425s ago: executing program 3 (id=390): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) r1 = io_uring_setup(0x5065, &(0x7f0000000140)={0x0, 0x7c5e, 0x8, 0x3, 0x1}) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x2000000, 0x0) 2.712871304s ago: executing program 1 (id=392): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) 2.660354595s ago: executing program 0 (id=393): r0 = fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syslog(0x2, &(0x7f0000000640), 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='xfs\x00', 0x808c, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f00000000c0), 0xf) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.62533254s ago: executing program 3 (id=394): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x14c, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@offload={0xc, 0x1c, {0x0, 0x1}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}]}, 0x14c}}, 0x0) 2.492737153s ago: executing program 1 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) socket$netlink(0x10, 0x3, 0x14) connect$inet(r0, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000080)={0x0, 0x1, 0x3, '\x00', &(0x7f0000000040)}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x9, 0x2a211361, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000780)=[0xffffffffffffffff, 0x1], &(0x7f00000007c0)=[{0x0, 0x5, 0x3, 0x3}, {0x0, 0x4, 0xd, 0x6}, {0x3, 0x1, 0xf, 0x4}, {0x4, 0x2, 0x3, 0x1}, {0x1, 0x4, 0xc, 0x4}, {0x1, 0x3, 0xc, 0x4}]}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair(0x3, 0x2, 0x7, &(0x7f00000001c0)) 1.712450696s ago: executing program 0 (id=396): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0xfffffffffffffde5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000001c0), 0x4) 1.710645239s ago: executing program 4 (id=397): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000000f6ff000000000000000000850000009b0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8eaffffb702000008000000b703000000000300850000009b00000095"], &(0x7f0000000bc0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.48165005s ago: executing program 4 (id=398): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@float={0x4, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x0, 0x61, 0x30]}}, 0x0, 0x29, 0x0, 0x1, 0xe88}, 0x28) socket$can_bcm(0x1d, 0x2, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}}, 0x10) 1.284753992s ago: executing program 1 (id=399): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x4e20, @rand_addr=0x64010102}}}, 0x88) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e20, @local}, 0x114, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x3, 0x2}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x208}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0x54}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) 1.239539947s ago: executing program 4 (id=400): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/power/sync_on_suspend', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x6a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}]}, 0x5c}}, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc0}}, &(0x7f0000000000)='GPL\x00'}, 0x90) 412.75743ms ago: executing program 0 (id=401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) 330.711225ms ago: executing program 1 (id=402): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [], {0x14}}, 0x28}}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0xb, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20) 233.26617ms ago: executing program 1 (id=403): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x14) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 232.840695ms ago: executing program 0 (id=404): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="c89045b2a6c0b186f6eb1f00000008003617"], 0x1c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 202.182883ms ago: executing program 4 (id=405): syz_emit_ethernet(0x46, &(0x7f0000000780)={@local, @random="50a245d5c9e0", @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x1, 0x2, 0x0, @empty, @broadcast, {[@rr={0x7, 0xb, 0xa4, [@rand_addr=0x64010100, @loopback]}, @timestamp={0x44, 0x8, 0x46, 0x0, 0x9, [0x1]}, @cipso={0x86, 0x8, 0xffffffffffffffff, [{0x1, 0x2}]}]}}, @address_request={0x14}}}}}, 0x0) 150.24941ms ago: executing program 1 (id=406): r0 = fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syslog(0x2, &(0x7f0000000640), 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='xfs\x00', 0x808c, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f00000000c0), 0xf) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 142.459787ms ago: executing program 0 (id=407): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x5, 0x2, 0x5, 0x2}, {0x2, 0x8, 0x1}, {0x2, 0x4, 0x1000a, 0x1}], 0x10, 0x800}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c030002040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 132.211558ms ago: executing program 4 (id=408): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket(0x2c, 0x4, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = openat$audio1(0xffffff9c, &(0x7f0000000180), 0x408200, 0x0) read$dsp(r2, &(0x7f0000000580)=""/161, 0xa1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8032, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x30) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000ffed000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280)=0x38, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000"/15], 0xf8}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) lseek(r6, 0xfffffffc, 0x1) 0s ago: executing program 0 (id=409): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001dc0), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00', @ANYRES16=r1, @ANYBLOB="01012cbd7000fcdbdf250300000008000b00", @ANYRES32=0x0, @ANYBLOB="050002000a0000001400070000000000000000000000000000000008060001004e"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x48020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts. [ 38.301301][ T6508] cgroup: Unknown subsys name 'net' [ 38.423270][ T6508] cgroup: Unknown subsys name 'cpuset' [ 38.427290][ T6508] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 38.606864][ T6508] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 41.030088][ T6523] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 41.030876][ T6523] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 41.031229][ T6523] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 41.031993][ T6523] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 41.032395][ T6523] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.033450][ T6523] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 41.034846][ T6523] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.036760][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.047897][ T6523] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.058804][ T6523] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.099226][ T6523] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 41.101989][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 41.102602][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 41.107270][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 41.107809][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 41.108376][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 41.109522][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 41.110779][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 41.112466][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 41.114276][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 41.140113][ T6532] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 41.141146][ T6532] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 41.141598][ T6532] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 41.142230][ T6532] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 41.142692][ T6532] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 41.466670][ T6533] chnl_net:caif_netlink_parms(): no params data found [ 41.497567][ T6518] chnl_net:caif_netlink_parms(): no params data found [ 41.560556][ T6519] chnl_net:caif_netlink_parms(): no params data found [ 41.568341][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 41.641257][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 41.644743][ T6518] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.646922][ T6518] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.649757][ T6518] bridge_slave_0: entered allmulticast mode [ 41.652437][ T6518] bridge_slave_0: entered promiscuous mode [ 41.673988][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.676148][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.678332][ T6533] bridge_slave_0: entered allmulticast mode [ 41.681496][ T6533] bridge_slave_0: entered promiscuous mode [ 41.693952][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.696111][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.698244][ T6518] bridge_slave_1: entered allmulticast mode [ 41.700930][ T6518] bridge_slave_1: entered promiscuous mode [ 41.722854][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.725003][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.725175][ T6533] bridge_slave_1: entered allmulticast mode [ 41.726050][ T6533] bridge_slave_1: entered promiscuous mode [ 41.779975][ T6518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.781753][ T6518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.820508][ T6533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.831954][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.832059][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.832196][ T6526] bridge_slave_0: entered allmulticast mode [ 41.833064][ T6526] bridge_slave_0: entered promiscuous mode [ 41.834567][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.834628][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.834750][ T6526] bridge_slave_1: entered allmulticast mode [ 41.835573][ T6526] bridge_slave_1: entered promiscuous mode [ 41.836033][ T6519] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.836080][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.836205][ T6519] bridge_slave_0: entered allmulticast mode [ 41.837013][ T6519] bridge_slave_0: entered promiscuous mode [ 41.838312][ T6519] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.838357][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.838459][ T6519] bridge_slave_1: entered allmulticast mode [ 41.839836][ T6519] bridge_slave_1: entered promiscuous mode [ 41.842695][ T6533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.885973][ T6518] team0: Port device team_slave_0 added [ 41.912645][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.914947][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.930293][ T6533] team0: Port device team_slave_0 added [ 41.931755][ T6518] team0: Port device team_slave_1 added [ 41.945764][ T6519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.953323][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.953443][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.953599][ T6527] bridge_slave_0: entered allmulticast mode [ 41.954421][ T6527] bridge_slave_0: entered promiscuous mode [ 41.968887][ T6533] team0: Port device team_slave_1 added [ 41.979733][ T6519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.989519][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.989627][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.989741][ T6527] bridge_slave_1: entered allmulticast mode [ 41.990574][ T6527] bridge_slave_1: entered promiscuous mode [ 41.992649][ T6526] team0: Port device team_slave_0 added [ 42.007660][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.007716][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.007777][ T6518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.010395][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.010422][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.010458][ T6518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.042789][ T6519] team0: Port device team_slave_0 added [ 42.053752][ T6526] team0: Port device team_slave_1 added [ 42.065911][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.065971][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.066035][ T6533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.092472][ T6519] team0: Port device team_slave_1 added [ 42.105510][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.105948][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.105972][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.106013][ T6533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.111336][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.111366][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.111404][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.112485][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.112510][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.112552][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.136624][ T6518] hsr_slave_0: entered promiscuous mode [ 42.137278][ T6518] hsr_slave_1: entered promiscuous mode [ 42.152219][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.175460][ T6526] hsr_slave_0: entered promiscuous mode [ 42.176062][ T6526] hsr_slave_1: entered promiscuous mode [ 42.176413][ T6526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.176488][ T6526] Cannot create hsr debugfs directory [ 42.198243][ T6527] team0: Port device team_slave_0 added [ 42.220074][ T6519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.220137][ T6519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.220197][ T6519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.221349][ T6519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.221389][ T6519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.221430][ T6519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.240037][ T6527] team0: Port device team_slave_1 added [ 42.258777][ T6533] hsr_slave_0: entered promiscuous mode [ 42.260852][ T6533] hsr_slave_1: entered promiscuous mode [ 42.261207][ T6533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.261264][ T6533] Cannot create hsr debugfs directory [ 42.297440][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.297499][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.297555][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.323074][ T6519] hsr_slave_0: entered promiscuous mode [ 42.323642][ T6519] hsr_slave_1: entered promiscuous mode [ 42.324023][ T6519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.324053][ T6519] Cannot create hsr debugfs directory [ 42.324459][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.324483][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.324528][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.396511][ T6527] hsr_slave_0: entered promiscuous mode [ 42.397143][ T6527] hsr_slave_1: entered promiscuous mode [ 42.397492][ T6527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.397522][ T6527] Cannot create hsr debugfs directory [ 42.700968][ T6518] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.712910][ T6518] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.721183][ T6518] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.728727][ T6518] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.747664][ T6533] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 42.758503][ T6533] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 42.765377][ T6533] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 42.791844][ T6533] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 42.815939][ T6519] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 42.824688][ T6519] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 42.837156][ T6519] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 42.841591][ T6519] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 42.896477][ T6526] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 42.901626][ T6526] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 42.907737][ T6526] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 42.913901][ T6526] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 42.939301][ T6518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.969038][ T6518] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.008266][ T2151] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.008392][ T2151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.010818][ T2151] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.010869][ T2151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.030753][ T6527] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 43.034737][ T6527] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 43.042205][ T6527] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 43.058544][ T6533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.066008][ T6519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.068062][ T6527] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 43.080774][ T6533] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.095690][ T2034] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.095781][ T2034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.111490][ T6532] Bluetooth: hci0: command tx timeout [ 43.111710][ T6532] Bluetooth: hci1: command tx timeout [ 43.118781][ T2034] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.118858][ T2034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.151969][ T6519] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.164181][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.171667][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.176123][ T2034] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.176229][ T2034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.190473][ T52] Bluetooth: hci4: command tx timeout [ 43.190655][ T52] Bluetooth: hci3: command tx timeout [ 43.205780][ T6532] Bluetooth: hci2: command tx timeout [ 43.226929][ T2034] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.227019][ T2034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.228311][ T2034] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.228359][ T2034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.252460][ T6527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.256221][ T2034] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.256309][ T2034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.316178][ T6527] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.335629][ T173] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.335718][ T173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.337473][ T173] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.337526][ T173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.346728][ T6526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.414188][ T6527] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.414271][ T6527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.452693][ T6518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.480296][ T6533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.545088][ T6533] veth0_vlan: entered promiscuous mode [ 43.548407][ T6533] veth1_vlan: entered promiscuous mode [ 43.590221][ T6533] veth0_macvtap: entered promiscuous mode [ 43.593913][ T6533] veth1_macvtap: entered promiscuous mode [ 43.601821][ T6518] veth0_vlan: entered promiscuous mode [ 43.604919][ T6518] veth1_vlan: entered promiscuous mode [ 43.634054][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.637432][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.654891][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.659032][ T6533] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.659705][ T6533] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.659760][ T6533] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.659797][ T6533] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.669131][ T6527] veth0_vlan: entered promiscuous mode [ 43.684496][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.707812][ T6518] veth0_macvtap: entered promiscuous mode [ 43.713323][ T6527] veth1_vlan: entered promiscuous mode [ 43.716080][ T6519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.718302][ T6518] veth1_macvtap: entered promiscuous mode [ 43.768642][ T6527] veth0_macvtap: entered promiscuous mode [ 43.778476][ T6527] veth1_macvtap: entered promiscuous mode [ 43.834008][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.861352][ T173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.861449][ T173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.865772][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.870649][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.870785][ T6526] veth0_vlan: entered promiscuous mode [ 43.892671][ T6518] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.892747][ T6518] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.892779][ T6518] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.892809][ T6518] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.895094][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.896601][ T6527] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.896641][ T6527] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.896671][ T6527] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.896702][ T6527] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.903737][ T6526] veth1_vlan: entered promiscuous mode [ 43.945531][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.945611][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.947532][ T6526] veth0_macvtap: entered promiscuous mode [ 43.976454][ T6526] veth1_macvtap: entered promiscuous mode [ 43.982371][ T6519] veth0_vlan: entered promiscuous mode [ 44.013147][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.027960][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.032004][ T6519] veth1_vlan: entered promiscuous mode [ 44.036026][ T6526] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.038503][ T6526] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.041637][ T6526] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.044180][ T6526] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.056862][ T6533] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 44.096572][ T6629] loop2: detected capacity change from 0 to 7 [ 44.104719][ T6629] Dev loop2: unable to read RDB block 7 [ 44.104861][ T6629] loop2: unable to read partition table [ 44.104991][ T6629] loop2: partition table beyond EOD, truncated [ 44.105055][ T6629] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 44.148575][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.148638][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.195605][ T6519] veth0_macvtap: entered promiscuous mode [ 44.197872][ T6519] veth1_macvtap: entered promiscuous mode [ 44.228390][ T4537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.231690][ T4537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.239416][ T6635] Bluetooth: MGMT ver 1.23 [ 44.262197][ T6519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.274973][ T6519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.276673][ T6519] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.276731][ T6519] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.276783][ T6519] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.276820][ T6519] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.314713][ T173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.317972][ T173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.378102][ T2034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.378174][ T2034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.446782][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.449648][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.488805][ T4537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.488864][ T4537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.531899][ T2034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.534527][ T2034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.577121][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.580826][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.229460][ T6532] Bluetooth: hci1: command tx timeout [ 45.229909][ T6532] Bluetooth: hci0: command tx timeout [ 45.269230][ T52] Bluetooth: hci2: command tx timeout [ 45.269298][ T52] Bluetooth: hci3: command tx timeout [ 45.269339][ T52] Bluetooth: hci4: command tx timeout [ 46.008561][ T6649] lo speed is unknown, defaulting to 1000 [ 46.008697][ T6649] lo speed is unknown, defaulting to 1000 [ 46.009920][ T6649] lo speed is unknown, defaulting to 1000 [ 46.011663][ T6649] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 46.014416][ T6649] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 46.032671][ T6649] lo speed is unknown, defaulting to 1000 [ 46.033485][ T6649] lo speed is unknown, defaulting to 1000 [ 46.034452][ T6649] lo speed is unknown, defaulting to 1000 [ 46.035133][ T6649] lo speed is unknown, defaulting to 1000 [ 46.036099][ T6649] lo speed is unknown, defaulting to 1000 [ 46.291985][ T6654] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 47.091653][ T6665] binder: 6664:6665 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 47.091747][ T6665] binder: 6665 RLIMIT_NICE not set [ 47.349614][ T52] Bluetooth: hci1: command tx timeout [ 47.349822][ T52] Bluetooth: hci4: command tx timeout [ 47.350566][ T52] Bluetooth: hci3: command tx timeout [ 47.350926][ T52] Bluetooth: hci2: command tx timeout [ 47.353789][ T6532] Bluetooth: hci0: command tx timeout [ 48.724260][ T6700] Zero length message leads to an empty skb [ 48.871427][ T6705] binder: 6704:6705 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 48.871516][ T6705] binder: 6705 RLIMIT_NICE not set [ 49.554720][ T6532] Bluetooth: hci2: command tx timeout [ 49.554812][ T6532] Bluetooth: hci3: command tx timeout [ 49.554871][ T6532] Bluetooth: hci4: command tx timeout [ 49.554912][ T6532] Bluetooth: hci1: command tx timeout [ 49.562327][ T6087] Bluetooth: hci0: command tx timeout [ 49.703120][ T6719] netlink: 'syz.4.31': attribute type 27 has an invalid length. [ 49.822122][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.822668][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.672687][ T6746] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 51.957956][ T6753] binder: 6752:6753 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 51.958029][ T6753] binder: 6753 RLIMIT_NICE not set [ 52.014172][ T6719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.021718][ T6719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.378794][ T24] libceph: connect (1)[c::]:6789 error -101 [ 52.383181][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 52.639955][ T24] libceph: connect (1)[c::]:6789 error -101 [ 52.642073][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 52.666332][ T6756] ceph: No mds server is up or the cluster is laggy [ 52.913732][ T6772] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.917711][ T6719] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.918230][ T6772] loop2: detected capacity change from 0 to 7 [ 52.919034][ T6719] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.923118][ T6772] Dev loop2: unable to read RDB block 7 [ 52.923180][ T6772] loop2: unable to read partition table [ 52.923289][ T6772] loop2: partition table beyond EOD, truncated [ 52.923320][ T6772] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 52.925415][ T6719] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.925451][ T6719] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.237031][ T6721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.238393][ T6721] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.514476][ T6721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.723550][ T6792] binder: 6791:6792 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 54.723622][ T6792] binder: 6792 RLIMIT_NICE not set [ 54.774928][ T6798] binder: 6791:6798 tried to acquire reference to desc 0, got 1 instead [ 54.887372][ T6804] binder: 6803:6804 tried to acquire reference to desc 0, got 1 instead [ 54.893202][ T6632] binder: undelivered TRANSACTION_COMPLETE [ 54.904260][ T6632] binder: undelivered transaction 18, process died. [ 56.017928][ T6821] xt_hashlimit: max too large, truncated to 1048576 [ 59.303370][ T6857] process 'syz.4.72' launched './file1' with NULL argv: empty string added [ 60.761963][ T6871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.78'. [ 60.762240][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.78'. [ 61.457330][ T6874] warning: `syz.2.80' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 61.720016][ T6879] xt_hashlimit: max too large, truncated to 1048576 [ 62.594788][ T6886] netlink: 'syz.0.84': attribute type 11 has an invalid length. [ 64.250738][ T6907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'. [ 64.250805][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'. [ 64.708109][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 65.269790][ T2409] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.271718][ T2409] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.510606][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 67.356140][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 67.356223][ T6926] veth0_macvtap: entered allmulticast mode [ 67.432001][ T6087] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 67.434716][ T6087] Bluetooth: hci4: Injecting HCI hardware error event [ 67.438516][ T52] Bluetooth: hci4: hardware error 0x00 [ 67.833315][ T6964] netlink: 96 bytes leftover after parsing attributes in process `syz.2.110'. [ 69.196261][ T6980] capability: warning: `syz.2.117' uses deprecated v2 capabilities in a way that may be insecure [ 69.829194][ T6532] Bluetooth: hci3: command 0x0405 tx timeout [ 69.919291][ T52] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 69.963916][ T6994] syz.3.121 uses obsolete (PF_INET,SOCK_PACKET) [ 69.991398][ T26] cfg80211: failed to load regulatory.db [ 71.847176][ T52] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 71.848005][ T52] Bluetooth: hci2: Injecting HCI hardware error event [ 72.058225][ T52] Bluetooth: hci2: hardware error 0x00 [ 75.229931][ T7078] hsr0: entered promiscuous mode [ 75.536803][ T52] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 75.610637][ T7070] hsr0: left promiscuous mode [ 76.032274][ T7101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.035423][ T7101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.849034][ T7101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.849470][ T7101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.304684][ T7147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.526311][ T7147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.263666][ T7160] netlink: 60 bytes leftover after parsing attributes in process `syz.0.179'. [ 80.123913][ T52] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 80.124099][ T52] Bluetooth: hci1: Injecting HCI hardware error event [ 80.124760][ T6532] Bluetooth: hci1: hardware error 0x00 [ 81.891768][ T52] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 81.891897][ T52] Bluetooth: hci0: Injecting HCI hardware error event [ 81.892704][ T52] Bluetooth: hci0: hardware error 0x00 [ 82.107291][ T7196] netlink: 60 bytes leftover after parsing attributes in process `syz.4.190'. [ 83.359274][ T6532] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 83.859901][ T6532] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 83.903613][ T7233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.204'. [ 84.919875][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 87.109776][ T7273] netlink: 52 bytes leftover after parsing attributes in process `syz.3.216'. [ 87.124340][ T7274] loop2: detected capacity change from 0 to 7 [ 87.322068][ T7274] Dev loop2: unable to read RDB block 7 [ 87.322146][ T7274] loop2: unable to read partition table [ 87.322253][ T7274] loop2: partition table beyond EOD, truncated [ 87.322298][ T7274] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 89.634344][ T7304] netlink: 52 bytes leftover after parsing attributes in process `syz.0.228'. [ 91.026499][ T7320] loop2: detected capacity change from 0 to 7 [ 91.030576][ T7320] Dev loop2: unable to read RDB block 7 [ 91.030642][ T7320] loop2: unable to read partition table [ 91.030766][ T7320] loop2: partition table beyond EOD, truncated [ 91.030809][ T7320] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 91.475273][ T7337] loop9: detected capacity change from 0 to 8 [ 92.035936][ T7337] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 92.036001][ T7337] loop9: partition table partially beyond EOD, truncated [ 92.036581][ T7337] loop9: p1 size 81768186 extends beyond EOD, truncated [ 92.137979][ T7343] netlink: 52 bytes leftover after parsing attributes in process `syz.0.242'. [ 92.879141][ T6633] udevd[6633]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 95.074851][ T7379] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.500979][ T7391] netlink: 52 bytes leftover after parsing attributes in process `syz.0.256'. [ 96.887282][ T7407] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.264'. [ 97.694301][ T7417] netlink: 52 bytes leftover after parsing attributes in process `syz.1.267'. [ 99.934873][ T7453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.174054][ T7474] netlink: 52 bytes leftover after parsing attributes in process `syz.3.281'. [ 106.278206][ T7522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.285950][ T7522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.924987][ T7527] 9pnet_fd: Insufficient options for proto=fd [ 106.927026][ T7527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.927332][ T7527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.473344][ T7539] input: syz1 as /devices/virtual/input/input2 [ 109.145526][ T7547] loop2: detected capacity change from 0 to 7 [ 109.146822][ T7547] Dev loop2: unable to read RDB block 7 [ 109.147534][ T7547] loop2: unable to read partition table [ 109.147826][ T7547] loop2: partition table beyond EOD, truncated [ 109.148893][ T7547] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 115.428178][ T7623] syz.1.327: attempt to access beyond end of device [ 115.428178][ T7623] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 115.428327][ T7623] vxfs: unable to read disk superblock at 1 [ 115.428477][ T7623] syz.1.327: attempt to access beyond end of device [ 115.428477][ T7623] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 115.428528][ T7623] vxfs: unable to read disk superblock at 8 [ 115.428562][ T7623] vxfs: can't find superblock. [ 123.174090][ T7744] binder: 7736:7744 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 123.174237][ T7744] binder: 7736:7744 ioctl c0306201 20000040 returned -22 [ 126.209483][ T7764] xt_hashlimit: max too large, truncated to 1048576 [ 126.495761][ T2409] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.497669][ T2409] ieee802154 phy1 wpan1: encryption failed: -22 [ 129.332636][ T7786] ip6erspan0: entered allmulticast mode [ 130.651599][ T7805] netlink: 'syz.1.392': attribute type 12 has an invalid length. [ 130.709465][ T7805] netlink: 'syz.1.392': attribute type 29 has an invalid length. [ 130.709540][ T7805] netlink: 148 bytes leftover after parsing attributes in process `syz.1.392'. [ 130.709585][ T7805] netlink: 59 bytes leftover after parsing attributes in process `syz.1.392'. [ 132.426509][ T7831] ip6erspan0: entered allmulticast mode [ 133.218353][ T7847] netlink: 'syz.0.407': attribute type 3 has an invalid length. [ 133.218427][ T7847] netlink: 'syz.0.407': attribute type 1 has an invalid length. [ 133.218470][ T7847] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.407'. [ 133.827016][ C1] ------------[ cut here ]------------ [ 133.827123][ C1] WARNING: CPU: 1 PID: 7845 at net/mac80211/tx.c:5024 __ieee80211_beacon_get+0xf64/0x12c0 [ 133.831773][ C1] Modules linked in: [ 133.832913][ C1] CPU: 1 UID: 0 PID: 7845 Comm: syz.1.406 Not tainted 6.16.0-rc2-syzkaller-g9aa9b43d689e #0 PREEMPT [ 133.835998][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.838846][ C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 133.841045][ C1] pc : __ieee80211_beacon_get+0xf64/0x12c0 [ 133.842752][ C1] lr : __ieee80211_beacon_get+0xf64/0x12c0 [ 133.844345][ C1] sp : ffff800080017a40 [ 133.845538][ C1] x29: ffff800080017a80 x28: ffffffffffffe3b0 x27: 0000000000000001 [ 133.847953][ C1] x26: 0000000000000041 x25: ffff0000f46cd400 x24: 0000000000000000 [ 133.850284][ C1] x23: ffff0000f4c40e40 x22: ffff800080017b00 x21: ffff0000f4cca500 [ 133.852580][ C1] x20: dfff800000000000 x19: ffff0000f4cca9d0 x18: 1fffe000337e1476 [ 133.854855][ C1] x17: 00000000ffff0000 x16: ffff80008051eb44 x15: ffff700010002f61 [ 133.857168][ C1] x14: 0000000000000000 x13: 0000000000000007 x12: 0000000000ff0100 [ 133.859410][ C1] x11: ffff0000f42bbd00 x10: 0000000000ff0100 x9 : 0000000000000000 [ 133.861684][ C1] x8 : ffff0000f42bbd00 x7 : 0000000000000000 x6 : 0000000000000000 [ 133.863978][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008a7facd0 [ 133.866267][ C1] x2 : 000000000000000a x1 : 0000000000000000 x0 : 0000000000000000 [ 133.868527][ C1] Call trace: [ 133.869453][ C1] __ieee80211_beacon_get+0xf64/0x12c0 (P) [ 133.871111][ C1] ieee80211_beacon_get_tim+0xb8/0x244 [ 133.872684][ C1] mac80211_hwsim_beacon_tx+0x314/0x6e0 [ 133.874408][ C1] __iterate_interfaces+0x250/0x504 [ 133.875914][ C1] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 133.878099][ C1] mac80211_hwsim_beacon+0xc8/0x1b8 [ 133.879622][ C1] __hrtimer_run_queues+0x41c/0xb78 [ 133.881166][ C1] hrtimer_run_softirq+0x160/0x400 [ 133.882766][ C1] handle_softirqs+0x328/0xc88 [ 133.884228][ C1] __do_softirq+0x14/0x20 [ 133.885524][ C1] ____do_softirq+0x14/0x20 [ 133.886805][ C1] call_on_irq_stack+0x24/0x30 [ 133.888128][ C1] do_softirq_own_stack+0x20/0x2c [ 133.889617][ C1] __irq_exit_rcu+0x1b0/0x478 [ 133.890954][ C1] irq_exit_rcu+0x14/0x84 [ 133.892199][ C1] el1_interrupt+0x38/0x54 [ 133.893509][ C1] el1h_64_irq_handler+0x18/0x24 [ 133.894922][ C1] el1h_64_irq+0x6c/0x70 [ 133.896159][ C1] _raw_spin_unlock_irqrestore+0x44/0x98 (P) [ 133.897855][ C1] debug_object_free+0x290/0x3e4 [ 133.899253][ C1] hrtimer_nanosleep+0x214/0x2a4 [ 133.900713][ C1] common_nsleep+0xa0/0xb8 [ 133.901968][ C1] __arm64_sys_clock_nanosleep+0x328/0x364 [ 133.903649][ C1] invoke_syscall+0x98/0x2b8 [ 133.904982][ C1] el0_svc_common+0x130/0x23c [ 133.906316][ C1] do_el0_svc+0x48/0x58 [ 133.907497][ C1] el0_svc+0x58/0x17c [ 133.908636][ C1] el0t_64_sync_handler+0x78/0x108 [ 133.910115][ C1] el0t_64_sync+0x198/0x19c [ 133.911507][ C1] irq event stamp: 26013 [ 133.912687][ C1] hardirqs last enabled at (26012): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 133.915717][ C1] hardirqs last disabled at (26013): [] el1_dbg+0x24/0x80 [ 133.918105][ C1] softirqs last enabled at (25936): [] local_bh_enable+0x10/0x34 [ 133.920813][ C1] softirqs last disabled at (25987): [] __do_softirq+0x14/0x20 [ 133.923419][ C1] ---[ end trace 0000000000000000 ]--- [ 134.159113][ T7855] 9pnet_virtio: no channels available for device syz