last executing test programs: 2m37.703789768s ago: executing program 0 (id=151): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x202}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) mknod$loop(0x0, 0x6000, 0x0) creat(0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) write(r5, &(0x7f00000004c0)="dc4a9e9286e4949e611ad4dad0cc88614a4e03e404066d8971179b01685998e86b15e8e9904c89d5a534855e6a8ccf8249464a9110bb037590c7e53a7b7c85f26b73eb89bfc8f0104bac88d16016319cf3302dcec945bcc173d2ee158dd977e47ff850", 0x63) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[], 0x4c}}, 0x0) write$binfmt_misc(r4, &(0x7f0000001280), 0x6) 2m28.954327847s ago: executing program 0 (id=165): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) write(r1, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x1, 0x3, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000600)=""/56, 0x38}], 0x1, 0x3c, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 2m26.936413339s ago: executing program 0 (id=168): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x202}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) mknod$loop(0x0, 0x6000, 0x0) creat(0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) write(r5, &(0x7f00000004c0)="dc4a9e9286e4949e611ad4dad0cc88614a4e03e404066d8971179b01685998e86b15e8e9904c89d5a534855e6a8ccf8249464a9110bb037590c7e53a7b7c85f26b73eb89bfc8f0104bac88d16016319cf3302dcec945bcc173d2ee158dd977e47ff850", 0x63) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[], 0x4c}}, 0x0) write$binfmt_misc(r4, &(0x7f0000001280), 0x6) 2m26.061178013s ago: executing program 0 (id=172): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x202}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) write(0xffffffffffffffff, &(0x7f00000004c0)="dc4a9e9286e4949e611ad4dad0cc88614a4e03e404066d8971179b01685998e86b15e8e9904c89d5a534855e6a8ccf8249464a9110bb037590c7e53a7b7c85f26b73eb89bfc8f0104bac88d16016319cf3302dcec945bcc173d2ee158dd977e47ff850", 0x63) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[], 0x4c}}, 0x0) write$binfmt_misc(r3, &(0x7f0000001280), 0x6) 2m24.536589147s ago: executing program 0 (id=174): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) mknod$loop(0x0, 0x6000, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) write(r3, &(0x7f00000004c0)="dc4a9e9286e4949e611ad4dad0cc88614a4e03e404066d8971179b01685998e86b15e8e9904c89d5a534855e6a8ccf8249464a9110bb037590c7e53a7b7c85f26b73eb89bfc8f0104bac88d16016319cf3302dcec945bcc173d2ee158dd977e47ff850", 0x63) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[], 0x4c}}, 0x0) write$binfmt_misc(r2, &(0x7f0000001280), 0x6) 2m20.972082853s ago: executing program 0 (id=180): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) poll(&(0x7f00000000c0)=[{r5, 0x4000}], 0x1, 0x7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xf6, 0x3a36}, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r1, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}}, 0x0) 2m5.40264496s ago: executing program 32 (id=180): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) poll(&(0x7f00000000c0)=[{r5, 0x4000}], 0x1, 0x7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xf6, 0x3a36}, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r1, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}}, 0x0) 22.672896881s ago: executing program 2 (id=334): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x4843, &(0x7f0000000400)={0x0, 0x607b, 0x2000, 0x0, 0x284}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x1) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) close_range(r3, 0xffffffffffffffff, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000007fc0)={0x2020}, 0x2020) 16.528121568s ago: executing program 1 (id=342): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x1000000000004, 0xfffffffffffffffd}, 0x8}, 0x1) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e00000000000000010000000000000000400000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000003800000040000000100"/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000500)='hrtimer_start\x00', r3}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 15.888204638s ago: executing program 2 (id=343): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70}, 0xc00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x202}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) mknod$loop(0x0, 0x6000, 0x0) creat(0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) write(r4, &(0x7f00000004c0)="dc4a9e9286e4949e611ad4dad0cc88614a4e03e404066d8971179b01685998e86b15e8e9904c89d5a534855e6a8ccf8249464a9110bb037590c7e53a7b7c85f26b73eb89bfc8f0104bac88d16016319cf3302dcec945bcc173d2ee158dd977e47ff850", 0x63) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[], 0x4c}}, 0x0) write$binfmt_misc(r3, &(0x7f0000001280), 0x6) 14.711107207s ago: executing program 2 (id=344): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, 0x0, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) poll(&(0x7f00000000c0)=[{r5, 0x4000}], 0x1, 0x7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xf6, 0x3a36}, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r2, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}}, 0x0) 14.409890122s ago: executing program 3 (id=346): migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r4, 0x0, 0x0, 0xa) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000280)=0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) r6 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2df0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) bind$ax25(r3, 0x0, 0x0) r9 = memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) futimesat(r9, 0x0, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) 14.265906224s ago: executing program 4 (id=347): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x1000000000004, 0xfffffffffffffffd}, 0x8}, 0x1) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e00000000000000010000000000000000400000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000003800000040000000100"/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000500)='hrtimer_start\x00', r3}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 13.383592258s ago: executing program 1 (id=348): syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000380)={{0x77359400}, {0x0, 0x989680}}, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x2f7e, &(0x7f0000000180)=""/171) 12.232238566s ago: executing program 4 (id=349): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x1000000000004, 0xfffffffffffffffd}, 0x8}, 0x1) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e00000000000000010000000000000000400000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000003800000040000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000500)='hrtimer_start\x00', r4}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 12.228475506s ago: executing program 3 (id=350): migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r4, 0x0, 0x0, 0xa) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000280)=0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) r6 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2df0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) bind$ax25(r3, 0x0, 0x0) memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) 12.157287267s ago: executing program 1 (id=351): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, 0x0) socket(0x2, 0x80805, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004200ff9d7275c600fedbdf250500000008000200050000f3"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) 10.408387425s ago: executing program 4 (id=352): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x4843, &(0x7f0000000400)={0x0, 0x607b, 0x2000, 0x0, 0x284}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x1) gettid() timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) 9.321226973s ago: executing program 3 (id=353): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x202}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) mknod$loop(0x0, 0x6000, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) write(r4, &(0x7f00000004c0)="dc4a9e9286e4949e611ad4dad0cc88614a4e03e404066d8971179b01685998e86b15e8e9904c89d5a534855e6a8ccf8249464a9110bb037590c7e53a7b7c85f26b73eb89bfc8f0104bac88d16016319cf3302dcec945bcc173d2ee158dd977e47ff850", 0x63) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[], 0x4c}}, 0x0) write$binfmt_misc(r3, &(0x7f0000001280), 0x6) 9.304475043s ago: executing program 1 (id=354): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x70}, 0xc00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x202}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) mknod$loop(0x0, 0x6000, 0x0) creat(0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) write(r4, &(0x7f00000004c0)="dc4a9e9286e4949e611ad4dad0cc88614a4e03e404066d8971179b01685998e86b15e8e9904c89d5a534855e6a8ccf8249464a9110bb037590c7e53a7b7c85f26b73eb89bfc8f0104bac88d16016319cf3302dcec945bcc173d2ee158dd977e47ff850", 0x63) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[], 0x4c}}, 0x0) write$binfmt_misc(r3, &(0x7f0000001280), 0x6) 9.200446915s ago: executing program 4 (id=355): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) write(r2, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x1, 0x3, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000600)=""/56, 0x38}], 0x1, 0x3c, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 8.634811414s ago: executing program 1 (id=356): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) mount$9p_fd(0x0, 0x0, 0x0, 0x800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) write(r2, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00') preadv(r5, 0x0, 0x0, 0x3c, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 7.186020637s ago: executing program 3 (id=357): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x4843, &(0x7f0000000400)={0x0, 0x607b, 0x2000, 0x0, 0x284}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r4 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) close_range(r3, 0xffffffffffffffff, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000007fc0)={0x2020}, 0x2020) 4.227063543s ago: executing program 2 (id=358): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x1000000000004, 0xfffffffffffffffd}, 0x8}, 0x1) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 3.78834737s ago: executing program 3 (id=359): migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) 2.833215525s ago: executing program 1 (id=360): migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r4, 0x0, 0x0, 0xa) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000280)=0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) r6 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2df0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) bind$ax25(r3, 0x0, 0x0) r9 = memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) futimesat(r9, 0x0, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) 2.824663225s ago: executing program 2 (id=361): migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.724363097s ago: executing program 4 (id=362): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x202}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) mknod$loop(0x0, 0x6000, 0x0) creat(0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) write(r6, &(0x7f00000004c0)="dc4a9e9286e4949e611ad4dad0cc88614a4e03e404066d8971179b01685998e86b15e8e9904c89d5a534855e6a8ccf8249464a9110bb037590c7e53a7b7c85f26b73eb89bfc8f0104bac88d16016319cf3302dcec945bcc173d2ee158dd977e47ff8", 0x62) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[], 0x4c}}, 0x0) write$binfmt_misc(r5, &(0x7f0000001280), 0x6) 1.823862291s ago: executing program 3 (id=363): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, 0x0) socket(0x2, 0x80805, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004200ff9d7275c600fedbdf250500000008000200050000f3"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) 777.120118ms ago: executing program 4 (id=364): ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0xfffefffe, 0x2, 0x2, 0x4800020}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = timerfd_create(0x7, 0x0) timerfd_gettime(r2, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) unshare(0x2c060000) modify_ldt$write(0x1, 0x0, 0x0) pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 0s ago: executing program 2 (id=365): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x70}, 0xc00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x202}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) mknod$loop(0x0, 0x6000, 0x0) creat(0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) write(r4, &(0x7f00000004c0)="dc4a9e9286e4949e611ad4dad0cc88614a4e03e404066d8971179b01685998e86b15e8e9904c89d5a534855e6a8ccf8249464a9110bb037590c7e53a7b7c85f26b73eb89bfc8f0104bac88d16016319cf3302dcec945bcc173d2ee158dd977e47ff850", 0x63) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[], 0x4c}}, 0x0) write$binfmt_misc(r3, &(0x7f0000001280), 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. [ 74.232124][ T4254] cgroup: Unknown subsys name 'net' [ 74.366844][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.868396][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.885301][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.893751][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.894277][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.901841][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.911771][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.916754][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.923231][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.932044][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.938486][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.951497][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.953020][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.959146][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.966539][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.974559][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.981560][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.997196][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.997301][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.004848][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.012410][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.020220][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.025882][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.032815][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.046948][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.055837][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.080700][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.104698][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.115134][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.150826][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.158574][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.166547][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.513831][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 78.641404][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 78.698449][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 78.725297][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.732887][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.742191][ T4264] device bridge_slave_0 entered promiscuous mode [ 78.776117][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.783388][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.791881][ T4264] device bridge_slave_1 entered promiscuous mode [ 78.809490][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 78.879770][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.907165][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.915083][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.923394][ T4267] device bridge_slave_0 entered promiscuous mode [ 78.940985][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.950595][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 78.969686][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.977128][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.985411][ T4267] device bridge_slave_1 entered promiscuous mode [ 79.009091][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.016316][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.024726][ T4268] device bridge_slave_0 entered promiscuous mode [ 79.062991][ T4264] team0: Port device team_slave_0 added [ 79.069082][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.076860][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.085045][ T4268] device bridge_slave_1 entered promiscuous mode [ 79.103990][ T4264] team0: Port device team_slave_1 added [ 79.139389][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.152243][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.203202][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.210739][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.218667][ T4265] device bridge_slave_0 entered promiscuous mode [ 79.233867][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.250884][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.257873][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.283902][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.296273][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.303775][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.311841][ T4265] device bridge_slave_1 entered promiscuous mode [ 79.329040][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.341141][ T4267] team0: Port device team_slave_0 added [ 79.347486][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.354579][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.380625][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.421849][ T4267] team0: Port device team_slave_1 added [ 79.440925][ T4268] team0: Port device team_slave_0 added [ 79.456387][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.463667][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.472246][ T4280] device bridge_slave_0 entered promiscuous mode [ 79.498687][ T4268] team0: Port device team_slave_1 added [ 79.516374][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.525939][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.533708][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.541805][ T4280] device bridge_slave_1 entered promiscuous mode [ 79.558179][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.565411][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.591668][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.612130][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.638738][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.646018][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.672547][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.711017][ T4264] device hsr_slave_0 entered promiscuous mode [ 79.721523][ T4264] device hsr_slave_1 entered promiscuous mode [ 79.734030][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.741184][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.768133][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.792441][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.817486][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.824575][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.851032][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.864868][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.876841][ T4265] team0: Port device team_slave_0 added [ 79.923370][ T4265] team0: Port device team_slave_1 added [ 79.970300][ T4267] device hsr_slave_0 entered promiscuous mode [ 79.977126][ T4267] device hsr_slave_1 entered promiscuous mode [ 79.983901][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.992297][ T4267] Cannot create hsr debugfs directory [ 80.005465][ T4268] device hsr_slave_0 entered promiscuous mode [ 80.013164][ T4268] device hsr_slave_1 entered promiscuous mode [ 80.019833][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.027816][ T4268] Cannot create hsr debugfs directory [ 80.036201][ T4280] team0: Port device team_slave_0 added [ 80.052566][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.059564][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.085743][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.102963][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.111551][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.137532][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.150362][ T4280] team0: Port device team_slave_1 added [ 80.170901][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 80.170918][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 80.171164][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 80.177203][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 80.224610][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.231758][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.258080][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 80.265168][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.307611][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.314750][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.341171][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.407483][ T4265] device hsr_slave_0 entered promiscuous mode [ 80.415231][ T4265] device hsr_slave_1 entered promiscuous mode [ 80.422206][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.429788][ T4265] Cannot create hsr debugfs directory [ 80.500799][ T4280] device hsr_slave_0 entered promiscuous mode [ 80.508888][ T4280] device hsr_slave_1 entered promiscuous mode [ 80.516349][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.524194][ T4280] Cannot create hsr debugfs directory [ 80.702856][ T4264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.718043][ T4264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.745388][ T4264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.773183][ T4264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.844956][ T4268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.863938][ T4268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.874597][ T4268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.886077][ T4268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.954633][ T4267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.985635][ T4267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.000075][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.013785][ T4267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.028470][ T4267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.063933][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.075349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.085681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.121488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.131702][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.141637][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.148981][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.158123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.169290][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.179010][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.186207][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.195778][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.224510][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.238677][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.271642][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.286679][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.295402][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.306202][ T4265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.317209][ T4265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.338362][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.348361][ T4265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.390665][ T4265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.399434][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.409768][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.419153][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.428256][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.437601][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.452062][ T4280] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.467728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.476633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.485877][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.493032][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.503244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.514560][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.523753][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.532729][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.539828][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.549936][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.558741][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.568227][ T4280] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.578699][ T4280] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.610590][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.624118][ T4280] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.645316][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.654074][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.663355][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.720224][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.728995][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.748328][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.758442][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.767635][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.802154][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.810940][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.819583][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.829101][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.838056][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.862185][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.876673][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.906076][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.935368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.954551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.979295][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.016587][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.032462][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.055850][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.079415][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.099891][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.109794][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.117005][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.155005][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.167578][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.187056][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.199619][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.206843][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.223753][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.235197][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.247653][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.254962][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.263559][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 82.269633][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 82.280952][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 82.280970][ T4285] Bluetooth: hci2: command 0x041b tx timeout [ 82.301592][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.314036][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.323658][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.330890][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.338742][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 82.348796][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.362767][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.420585][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.429369][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.444086][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.455505][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.464573][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.474371][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.483218][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.493324][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.502437][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.511485][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.519869][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.528721][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.537420][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.547457][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.555972][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.567950][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.575839][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.586850][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.613730][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.626091][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.635362][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.645140][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.653288][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.665834][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.675428][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.687381][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.699467][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.714294][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.728821][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.741646][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.756677][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.779197][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.799182][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.809313][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.836771][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.847163][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.856996][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.864200][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.949678][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.969280][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.981462][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.994502][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.004338][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.013663][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.020857][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.029650][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.040628][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.065878][ T4268] device veth0_vlan entered promiscuous mode [ 83.080370][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.088767][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.127984][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.151158][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.173546][ T4264] device veth0_vlan entered promiscuous mode [ 83.194203][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.203423][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.212618][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.222632][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.231546][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.241589][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.254662][ T4268] device veth1_vlan entered promiscuous mode [ 83.304722][ T4264] device veth1_vlan entered promiscuous mode [ 83.321909][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.332107][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.341597][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.357904][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.367478][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.384583][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.431387][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.439641][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.448013][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.458610][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.466494][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.474980][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.484104][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.502977][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.516253][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.529007][ T4268] device veth0_macvtap entered promiscuous mode [ 83.549413][ T4264] device veth0_macvtap entered promiscuous mode [ 83.558615][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.567549][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.575252][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.583125][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.592374][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.601177][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.609815][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.624056][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.635439][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.653068][ T4268] device veth1_macvtap entered promiscuous mode [ 83.665718][ T4264] device veth1_macvtap entered promiscuous mode [ 83.679786][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.692528][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.701651][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.709903][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.718998][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.772891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.788582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.816604][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.829903][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.846395][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.858185][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.867208][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.876622][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.885661][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.895293][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.903547][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.926874][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.941196][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.953239][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.984124][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.997090][ T4267] device veth0_vlan entered promiscuous mode [ 84.005212][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.017095][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.027335][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.037032][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.048586][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.060468][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.072478][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.096400][ T4265] device veth0_vlan entered promiscuous mode [ 84.111546][ T4268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.127421][ T4268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.136596][ T4268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.146169][ T4268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.157651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.174810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.186731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.195633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.209822][ T4264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.218878][ T4264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.228381][ T4264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.238477][ T4264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.260521][ T4267] device veth1_vlan entered promiscuous mode [ 84.278873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.287873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.296557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.311556][ T4265] device veth1_vlan entered promiscuous mode [ 84.331165][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 84.331187][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 84.337289][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 84.343376][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 84.346966][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.411022][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 84.421756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.434305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.443114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.452686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.460629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.486808][ T4267] device veth0_macvtap entered promiscuous mode [ 84.536598][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.546245][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.606258][ T4265] device veth0_macvtap entered promiscuous mode [ 84.617008][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.626727][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.635499][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.645666][ T4267] device veth1_macvtap entered promiscuous mode [ 84.663077][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.684876][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.693274][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.712453][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.726188][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.742087][ T4265] device veth1_macvtap entered promiscuous mode [ 84.776396][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.821028][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.831937][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.832297][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.839926][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.848243][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.867441][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.879652][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.895445][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.931020][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.939060][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.948119][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.957751][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.972436][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.994483][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.011877][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.026518][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.038650][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.056600][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.069396][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.086396][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.099158][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.117159][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.129245][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.148452][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.167248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.177342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.188096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.197764][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.209422][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.221798][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.232321][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.242965][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.253147][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.263875][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.275957][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.308302][ T4267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.319985][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.328177][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.338762][ T4267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.359854][ T4267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.369277][ T4267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.403233][ T4265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.414048][ T4265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.423071][ T4265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.433820][ T4265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.447966][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.461840][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.472256][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.626873][ T4388] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 85.781437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.798834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.887382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.003754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.120233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.128691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.251001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 86.411113][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 86.411118][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 86.411158][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 86.418006][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 86.490617][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 86.496142][ T4280] device veth0_vlan entered promiscuous mode [ 86.541730][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.565247][ T4393] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.574295][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.598506][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.617550][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.700502][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.708624][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.754211][ T4280] device veth1_vlan entered promiscuous mode [ 86.824402][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.844279][ T4398] usb usb1: check_ctrlrecip: process 4398 (syz.2.6) requesting ep 01 but needs 81 [ 86.858016][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.869678][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.913298][ T35] cfg80211: failed to load regulatory.db [ 87.788735][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.817731][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.843765][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.873800][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.881342][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.913013][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.920595][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.036371][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.057171][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.110230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.118746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.128730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 88.137224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 88.278239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 88.751715][ T4280] device veth0_macvtap entered promiscuous mode [ 88.890349][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.905384][ T4407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.020946][ T4407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.089094][ T4280] device veth1_macvtap entered promiscuous mode [ 89.166117][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.224963][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.227704][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.244173][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.261580][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.263248][ T4412] usb usb1: check_ctrlrecip: process 4412 (syz.0.8) requesting ep 01 but needs 81 [ 89.288173][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.324516][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.350486][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.344940][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.388391][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.409536][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.710693][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.728628][ T4422] usb usb1: check_ctrlrecip: process 4422 (syz.2.9) requesting ep 01 but needs 81 [ 90.770908][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.988459][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.017270][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.030104][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.040870][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.053460][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.065069][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.108810][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.140857][ T4429] usb usb1: check_ctrlrecip: process 4429 (syz.0.10) requesting ep 01 but needs 81 [ 91.165401][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.204282][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.265800][ T4280] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.398361][ T4280] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.475465][ T4280] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.567718][ T4280] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.354349][ T4443] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 94.925514][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.052782][ T4438] usb usb1: check_ctrlrecip: process 4438 (syz.3.4) requesting ep 01 but needs 81 [ 95.102706][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.791334][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.877839][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.903906][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.948676][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.818397][ T4459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.825886][ T4459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.917675][ T4459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.925173][ T4459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.291832][ T4467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.300165][ T4467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.902452][ T4467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.910694][ T4467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.763209][ T4478] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 100.491643][ T4469] usb usb1: check_ctrlrecip: process 4469 (syz.3.18) requesting ep 01 but needs 81 [ 101.622425][ T4493] usb usb1: check_ctrlrecip: process 4493 (syz.4.5) requesting ep 01 but needs 81 [ 102.214498][ T4499] usb usb1: check_ctrlrecip: process 4499 (syz.3.23) requesting ep 01 but needs 81 [ 102.682487][ T4496] usb usb1: check_ctrlrecip: process 4496 (syz.0.22) requesting ep 01 but needs 81 [ 108.174891][ T4527] usb usb1: check_ctrlrecip: process 4527 (syz.0.28) requesting ep 01 but needs 81 [ 110.063940][ T4531] usb usb1: check_ctrlrecip: process 4531 (syz.2.29) requesting ep 01 but needs 81 [ 110.073783][ T4531] usb usb1: usbfs: process 4531 (syz.2.29) did not claim interface 0 before use [ 111.522120][ T4560] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 111.805133][ T4558] usb usb1: check_ctrlrecip: process 4558 (syz.0.33) requesting ep 01 but needs 81 [ 111.815224][ T4558] usb usb1: usbfs: process 4558 (syz.0.33) did not claim interface 0 before use [ 111.912027][ T4541] usb usb1: check_ctrlrecip: process 4541 (syz.4.31) requesting ep 01 but needs 81 [ 112.172716][ T4562] usb usb1: check_ctrlrecip: process 4562 (syz.1.35) requesting ep 01 but needs 81 [ 113.329488][ T4575] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 116.625603][ T4580] usb usb1: check_ctrlrecip: process 4580 (syz.1.40) requesting ep 01 but needs 81 [ 116.635054][ T4580] usb usb1: usbfs: process 4580 (syz.1.40) did not claim interface 0 before use [ 116.654680][ T4586] usb usb1: check_ctrlrecip: process 4586 (syz.2.41) requesting ep 01 but needs 81 [ 116.702696][ T4586] usb usb1: usbfs: process 4586 (syz.2.41) did not claim interface 0 before use [ 118.556519][ T4611] usb usb1: check_ctrlrecip: process 4611 (syz.1.44) requesting ep 01 but needs 81 [ 118.571468][ T4611] usb usb1: usbfs: process 4611 (syz.1.44) did not claim interface 0 before use [ 119.195224][ T4622] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 119.867205][ T4624] usb usb1: check_ctrlrecip: process 4624 (syz.4.46) requesting ep 01 but needs 81 [ 119.876918][ T4624] usb usb1: usbfs: process 4624 (syz.4.46) did not claim interface 0 before use [ 122.235336][ T4641] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 125.055674][ T4285] Bluetooth: hci4: link tx timeout [ 125.061408][ T4285] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.401718][ T4662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.409192][ T4662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.439183][ T4662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.446802][ T4662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.420003][ C0] sched: RT throttling activated [ 127.423227][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 127.800475][ T4670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.807967][ T4670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.817233][ T4670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.824872][ T4670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.826829][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 131.825708][ T4699] usb usb1: check_ctrlrecip: process 4699 (syz.1.65) requesting ep 01 but needs 81 [ 132.974230][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.982006][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.907555][ T4285] Bluetooth: hci4: link tx timeout [ 134.912788][ T4285] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.271443][ T4285] Bluetooth: hci4: link tx timeout [ 135.276617][ T4285] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.015658][ T4719] usb usb1: check_ctrlrecip: process 4719 (syz.0.69) requesting ep 01 but needs 81 [ 143.692154][ T4773] usb usb1: check_ctrlrecip: process 4773 (syz.1.82) requesting ep 01 but needs 81 [ 149.575909][ T4285] Bluetooth: hci4: link tx timeout [ 149.581736][ T4285] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 149.589851][ T4285] Bluetooth: hci4: link tx timeout [ 149.595534][ T4285] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.700233][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 152.440434][ T4827] usb usb1: check_ctrlrecip: process 4827 (syz.3.94) requesting ep 01 but needs 81 [ 174.833451][ T4985] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 181.634846][ T5045] usb usb1: check_ctrlrecip: process 5045 (syz.1.142) requesting ep 01 but needs 81 [ 187.690618][ T5083] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 188.689885][ T5077] usb usb1: check_ctrlrecip: process 5077 (syz.3.154) requesting ep 01 but needs 81 [ 189.079624][ T5088] usb usb1: check_ctrlrecip: process 5088 (syz.2.147) requesting ep 01 but needs 81 [ 194.414793][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.421264][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.914648][ T5138] usb usb1: check_ctrlrecip: process 5138 (syz.4.167) requesting ep 01 but needs 81 [ 198.663965][ T5154] Zero length message leads to an empty skb [ 201.700166][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 201.706410][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 201.712535][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 201.719304][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 203.000889][ T5190] usb usb1: check_ctrlrecip: process 5190 (syz.3.181) requesting ep 01 but needs 81 [ 212.345198][ T5235] usb usb1: check_ctrlrecip: process 5235 (syz.2.192) requesting ep 01 but needs 81 [ 216.850808][ T5253] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 218.192456][ T5259] usb usb1: check_ctrlrecip: process 5259 (syz.4.189) requesting ep 01 but needs 81 [ 223.246661][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 223.260716][ T4281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 223.270836][ T4281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 223.280643][ T5286] usb usb1: check_ctrlrecip: process 5286 (syz.2.205) requesting ep 01 but needs 81 [ 223.310380][ T4281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 223.325417][ T4281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 223.352003][ T4281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 224.809164][ T5300] usb usb1: check_ctrlrecip: process 5300 (syz.2.210) requesting ep 01 but needs 81 [ 225.567175][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 225.744095][ T5287] chnl_net:caif_netlink_parms(): no params data found [ 225.751679][ T5310] ax25_connect(): syz.4.212 uses autobind, please contact jreuter@yaina.de [ 226.706615][ T5326] usb usb1: check_ctrlrecip: process 5326 (syz.2.213) requesting ep 01 but needs 81 [ 226.778010][ T5324] usb usb1: check_ctrlrecip: process 5324 (syz.4.214) requesting ep 01 but needs 81 [ 227.610169][ T4281] Bluetooth: hci5: command 0x041b tx timeout [ 228.564659][ T5287] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.605074][ T5287] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.706621][ T5287] device bridge_slave_0 entered promiscuous mode [ 228.722102][ T5287] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.729511][ T5287] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.738530][ T5287] device bridge_slave_1 entered promiscuous mode [ 228.879710][ T5337] usb usb1: check_ctrlrecip: process 5337 (syz.3.216) requesting ep 01 but needs 81 [ 229.807776][ T4285] Bluetooth: hci5: command 0x040f tx timeout [ 230.661078][ T5287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.786813][ T5287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.765255][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.898143][ T4285] Bluetooth: hci5: command 0x0419 tx timeout [ 232.387533][ T5287] team0: Port device team_slave_0 added [ 232.477400][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.728933][ T5287] team0: Port device team_slave_1 added [ 234.432596][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.918249][ T5287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.930242][ T5287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.957229][ T5287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.015693][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.042911][ T5287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.052260][ T5287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.109114][ T5287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.616542][ T5287] device hsr_slave_0 entered promiscuous mode [ 240.649078][ T5287] device hsr_slave_1 entered promiscuous mode [ 241.010401][ T5287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.123383][ T5287] Cannot create hsr debugfs directory [ 241.867683][ T5408] ax25_connect(): syz.2.231 uses autobind, please contact jreuter@yaina.de [ 244.836868][ T5287] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 245.608357][ T5454] ax25_connect(): syz.3.237 uses autobind, please contact jreuter@yaina.de [ 246.171557][ T5460] ax25_connect(): syz.2.238 uses autobind, please contact jreuter@yaina.de [ 246.621667][ T5287] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 246.645829][ T5287] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 246.716021][ T5287] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 249.643340][ T5482] ax25_connect(): syz.3.240 uses autobind, please contact jreuter@yaina.de [ 253.508561][ T5511] usb usb1: check_ctrlrecip: process 5511 (syz.3.245) requesting ep 01 but needs 81 [ 253.519972][ T5511] usb usb1: usbfs: process 5511 (syz.3.245) did not claim interface 0 before use [ 254.191337][ T5287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.523791][ T5526] ax25_connect(): syz.2.248 uses autobind, please contact jreuter@yaina.de [ 255.203684][ T51] device hsr_slave_0 left promiscuous mode [ 255.233084][ T51] device hsr_slave_1 left promiscuous mode [ 255.251419][ T51] device bridge_slave_1 left promiscuous mode [ 255.259137][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.296455][ T51] device bridge_slave_0 left promiscuous mode [ 255.319411][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.852487][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.860704][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.230651][ T51] device veth1_macvtap left promiscuous mode [ 256.237562][ T51] device veth0_macvtap left promiscuous mode [ 256.244256][ T51] device veth1_vlan left promiscuous mode [ 256.251336][ T51] device veth0_vlan left promiscuous mode [ 256.754487][ T5528] ax25_connect(): syz.3.250 uses autobind, please contact jreuter@yaina.de [ 257.156370][ T51] team0 (unregistering): Port device team_slave_1 removed [ 257.193119][ T51] team0 (unregistering): Port device team_slave_0 removed [ 257.240360][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.302572][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.419046][ T5545] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 258.396587][ T51] bond0 (unregistering): Released all slaves [ 258.909375][ T5287] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.977051][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.023450][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.031815][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.040801][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.049586][ T4537] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.056815][ T4537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.066238][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.076758][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.085500][ T4537] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.092910][ T4537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.103231][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.112304][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.164162][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.479580][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.902139][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.472504][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 260.954941][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 261.037624][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.287315][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 261.316199][ T5573] ax25_connect(): syz.2.257 uses autobind, please contact jreuter@yaina.de [ 261.628642][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.704846][ T5287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.781394][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 261.792621][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 261.889107][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.741302][ T5594] ax25_connect(): syz.1.260 uses autobind, please contact jreuter@yaina.de [ 265.223711][ T5606] ax25_connect(): syz.3.263 uses autobind, please contact jreuter@yaina.de [ 267.135842][ T5635] ax25_connect(): syz.3.267 uses autobind, please contact jreuter@yaina.de [ 269.347172][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.544382][ T5654] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 269.786678][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.093417][ T5287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.185666][ T5651] ax25_connect(): syz.4.272 uses autobind, please contact jreuter@yaina.de [ 274.371844][ T4285] Bluetooth: hci5: link tx timeout [ 274.377388][ T4285] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 275.898516][ T5681] ax25_connect(): syz.3.278 uses autobind, please contact jreuter@yaina.de [ 276.114975][ T5697] autofs4:pid:5697:autofs_fill_super: called with bogus options [ 276.198470][ T5698] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 276.420131][ T4285] Bluetooth: hci5: command 0x0406 tx timeout [ 277.221191][ T5707] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 280.450794][ T5712] usb usb1: check_ctrlrecip: process 5712 (syz.2.283) requesting ep 01 but needs 81 [ 282.588794][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.599475][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.608080][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.619154][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.627279][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.636636][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 284.072480][ T5287] syz-executor (5287) used greatest stack depth: 20672 bytes left [ 285.228443][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 285.844217][ T5757] usb usb1: check_ctrlrecip: process 5757 (syz.3.292) requesting ep 01 but needs 81 [ 287.196306][ T5780] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 287.290257][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 289.370621][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 289.816593][ T5740] chnl_net:caif_netlink_parms(): no params data found [ 290.131255][ T5796] usb usb1: check_ctrlrecip: process 5796 (syz.3.297) requesting ep 01 but needs 81 [ 290.251965][ T5791] usb usb1: check_ctrlrecip: process 5791 (syz.1.298) requesting ep 01 but needs 81 [ 290.261528][ T5791] usb usb1: usbfs: process 5791 (syz.1.298) did not claim interface 0 before use [ 291.450102][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 292.917903][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.925286][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.934003][ T5740] device bridge_slave_0 entered promiscuous mode [ 292.943068][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.950505][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.959613][ T5740] device bridge_slave_1 entered promiscuous mode [ 294.062149][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.625038][ T5829] autofs4:pid:5829:autofs_fill_super: called with bogus options [ 295.701775][ T5830] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 296.030615][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.905788][ T5740] team0: Port device team_slave_0 added [ 297.994820][ T5849] autofs4:pid:5849:autofs_fill_super: called with bogus options [ 298.077690][ T5850] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 301.376719][ T5740] team0: Port device team_slave_1 added [ 301.542294][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.581099][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.670770][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.912116][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.919295][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.930556][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.207092][ T5877] usb usb1: check_ctrlrecip: process 5877 (syz.4.311) requesting ep 01 but needs 81 [ 304.317309][ T5893] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 304.606916][ T5740] device hsr_slave_0 entered promiscuous mode [ 304.623803][ T5740] device hsr_slave_1 entered promiscuous mode [ 304.812761][ T4353] device hsr_slave_0 left promiscuous mode [ 304.864582][ T4353] device hsr_slave_1 left promiscuous mode [ 304.872073][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.890892][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.909402][ T4353] device bridge_slave_1 left promiscuous mode [ 304.927529][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.955150][ T4353] device bridge_slave_0 left promiscuous mode [ 306.053436][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.864343][ T4353] team0 (unregistering): Port device team_slave_1 removed [ 306.900314][ T4353] team0 (unregistering): Port device team_slave_0 removed [ 306.937250][ T4353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.984479][ T4353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.335792][ T4353] bond0 (unregistering): Released all slaves [ 310.084704][ T5925] usb usb1: check_ctrlrecip: process 5925 (syz.1.320) requesting ep 01 but needs 81 [ 311.687367][ T5943] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 312.164351][ T5948] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 317.292327][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.298721][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.662526][ T5740] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 319.394349][ T5740] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 319.459229][ T5740] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 319.494316][ T5740] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 321.207305][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.225855][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.234799][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.248025][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.327658][ T5740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 321.338442][ T5740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.462111][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.542462][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.581799][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.589017][ T4408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.622543][ T5999] ax25_connect(): syz.3.333 uses autobind, please contact jreuter@yaina.de [ 321.661924][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.710654][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.760915][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.768205][ T4408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.843208][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.978886][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 322.156118][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 322.336519][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 322.503560][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 322.683749][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 322.761881][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 322.770686][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 322.779549][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 322.788917][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.797968][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 322.806309][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 322.815268][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 324.833592][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 324.850358][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 325.458622][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.857507][ T4281] Bluetooth: hci0: link tx timeout [ 328.863312][ T4281] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 329.073397][ T6074] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 329.532602][ T6083] ax25_connect(): syz.3.346 uses autobind, please contact jreuter@yaina.de [ 330.353079][ T6089] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 330.890325][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 331.261321][ T6091] usb usb1: check_ctrlrecip: process 6091 (syz.1.348) requesting ep 01 but needs 81 [ 331.531945][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 331.548569][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 331.690447][ T6105] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 332.841019][ T6108] ax25_connect(): syz.3.350 uses autobind, please contact jreuter@yaina.de [ 334.243680][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 334.281375][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.301091][ T5740] device veth0_vlan entered promiscuous mode [ 334.330052][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 334.404253][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.123662][ T5740] device veth1_vlan entered promiscuous mode [ 336.280605][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.309648][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.342765][ T5740] device veth0_macvtap entered promiscuous mode [ 336.372977][ T5740] device veth1_macvtap entered promiscuous mode [ 336.758864][ T4281] Bluetooth: hci0: link tx timeout [ 336.764919][ T4281] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 337.370378][ T4281] Bluetooth: hci0: link tx timeout [ 337.375579][ T4281] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 339.784360][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 339.831052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 339.984127][ T6149] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 342.005452][ T6159] ax25_connect(): syz.1.360 uses autobind, please contact jreuter@yaina.de [ 342.176881][ T4285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.188701][ T4285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.199304][ T4276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.209862][ T4285] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.220077][ T4276] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 342.228201][ T4276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.967980][ T6170] ================================================================== [ 343.976106][ T6170] BUG: KASAN: use-after-free in rose_transmit_link+0x5b6/0x730 [ 343.983770][ T6170] Read of size 1 at addr ffff88805535f432 by task syz.3.363/6170 [ 343.991493][ T6170] [ 343.993844][ T6170] CPU: 0 PID: 6170 Comm: syz.3.363 Not tainted 6.1.146-syzkaller #0 [ 344.001835][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 344.011913][ T6170] Call Trace: [ 344.015204][ T6170] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 344.018424][ T6170] dump_stack_lvl+0x168/0x22e [ 344.023148][ T6170] ? read_lock_is_recursive+0x10/0x10 [ 344.028583][ T6170] ? show_regs_print_info+0x12/0x12 [ 344.033822][ T6170] ? load_image+0x3b0/0x3b0 [ 344.038374][ T6170] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 344.043772][ T6170] ? __virt_addr_valid+0x188/0x540 [ 344.048899][ T6170] ? __virt_addr_valid+0x465/0x540 [ 344.054034][ T6170] ? rose_transmit_link+0x5b6/0x730 [ 344.059261][ T6170] print_report+0xa8/0x200 [ 344.063695][ T6170] kasan_report+0x10b/0x140 [ 344.068238][ T6170] ? rose_transmit_link+0x5b6/0x730 [ 344.073506][ T6170] rose_transmit_link+0x5b6/0x730 [ 344.078552][ T6170] ? skb_put+0x117/0x210 [ 344.082811][ T6170] rose_write_internal+0x1096/0x1eb0 [ 344.088120][ T6170] ? debug_object_assert_init+0x1ed/0x2f0 [ 344.093880][ T6170] ? rose_validate_nr+0x120/0x120 [ 344.098928][ T6170] ? skb_queue_purge+0x64/0x1b0 [ 344.103799][ T6170] rose_release+0x22a/0x4f0 [ 344.108320][ T6170] sock_close+0xd5/0x240 [ 344.112572][ T6170] ? sock_mmap+0x90/0x90 [ 344.116822][ T6170] __fput+0x22c/0x920 [ 344.120822][ T6170] task_work_run+0x1ca/0x250 [ 344.125422][ T6170] ? task_work_cancel+0x230/0x230 [ 344.130473][ T6170] get_signal+0x11a6/0x1350 [ 344.135016][ T6170] arch_do_signal_or_restart+0xb0/0x1230 [ 344.140660][ T6170] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 344.146040][ T6170] ? wake_bit_function+0x200/0x200 [ 344.151163][ T6170] ? get_sigframe_size+0x10/0x10 [ 344.156134][ T6170] ? __sys_connect+0x239/0x410 [ 344.160918][ T6170] ? exit_to_user_mode_loop+0x3b/0x110 [ 344.166388][ T6170] exit_to_user_mode_loop+0x70/0x110 [ 344.171701][ T6170] exit_to_user_mode_prepare+0xb1/0x140 [ 344.177263][ T6170] syscall_exit_to_user_mode+0x16/0x40 [ 344.182740][ T6170] do_syscall_64+0x58/0xa0 [ 344.187161][ T6170] ? clear_bhb_loop+0x60/0xb0 [ 344.191847][ T6170] ? clear_bhb_loop+0x60/0xb0 [ 344.196521][ T6170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.202449][ T6170] RIP: 0033:0x7fdebc38e9a9 [ 344.206885][ T6170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.226611][ T6170] RSP: 002b:00007fdebc1bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 344.235089][ T6170] RAX: fffffffffffffe00 RBX: 00007fdebc5b6160 RCX: 00007fdebc38e9a9 [ 344.243103][ T6170] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000d [ 344.251107][ T6170] RBP: 00007fdebc410d69 R08: 0000000000000000 R09: 0000000000000000 [ 344.259115][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.267121][ T6170] R13: 0000000000000000 R14: 00007fdebc5b6160 R15: 00007ffc3f5a9ef8 [ 344.275234][ T6170] [ 344.278277][ T6170] [ 344.280633][ T6170] Allocated by task 4703: [ 344.284979][ T6170] kasan_set_track+0x4b/0x70 [ 344.289607][ T6170] __kasan_kmalloc+0x8e/0xa0 [ 344.294238][ T6170] rose_add_node+0x227/0xdb0 [ 344.298869][ T6170] rose_rt_ioctl+0xa4c/0xe90 [ 344.303495][ T6170] rose_ioctl+0x27a/0x790 [ 344.307860][ T6170] sock_do_ioctl+0xd3/0x2f0 [ 344.312402][ T6170] sock_ioctl+0x4ed/0x6e0 [ 344.316781][ T6170] __se_sys_ioctl+0xfa/0x170 [ 344.321412][ T6170] do_syscall_64+0x4c/0xa0 [ 344.325867][ T6170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.331801][ T6170] [ 344.334132][ T6170] Freed by task 6169: [ 344.338288][ T6170] kasan_set_track+0x4b/0x70 [ 344.342887][ T6170] kasan_save_free_info+0x2d/0x50 [ 344.347924][ T6170] ____kasan_slab_free+0x126/0x1e0 [ 344.353040][ T6170] slab_free_freelist_hook+0x131/0x1a0 [ 344.358526][ T6170] __kmem_cache_free+0xb6/0x1f0 [ 344.363396][ T6170] rose_rt_device_down+0x4e2/0x530 [ 344.368521][ T6170] rose_device_event+0x600/0x690 [ 344.373504][ T6170] raw_notifier_call_chain+0xcb/0x160 [ 344.378880][ T6170] __dev_notify_flags+0x178/0x2d0 [ 344.383908][ T6170] dev_change_flags+0xe3/0x1a0 [ 344.388670][ T6170] dev_ifsioc+0x159/0xe90 [ 344.393005][ T6170] dev_ioctl+0x578/0xea0 [ 344.397257][ T6170] sock_do_ioctl+0x222/0x2f0 [ 344.401857][ T6170] sock_ioctl+0x4ed/0x6e0 [ 344.406195][ T6170] __se_sys_ioctl+0xfa/0x170 [ 344.410806][ T6170] do_syscall_64+0x4c/0xa0 [ 344.415222][ T6170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.421130][ T6170] [ 344.423454][ T6170] The buggy address belongs to the object at ffff88805535f400 [ 344.423454][ T6170] which belongs to the cache kmalloc-512 of size 512 [ 344.437519][ T6170] The buggy address is located 50 bytes inside of [ 344.437519][ T6170] 512-byte region [ffff88805535f400, ffff88805535f600) [ 344.450708][ T6170] [ 344.453032][ T6170] The buggy address belongs to the physical page: [ 344.459451][ T6170] page:ffffea000154d700 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805535f000 pfn:0x5535c [ 344.470911][ T6170] head:ffffea000154d700 order:2 compound_mapcount:0 compound_pincount:0 [ 344.479246][ T6170] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 344.487255][ T6170] raw: 00fff00000010200 ffffea000160aa08 ffffea00009ab908 ffff888017441c80 [ 344.495848][ T6170] raw: ffff88805535f000 0000000000100006 00000001ffffffff 0000000000000000 [ 344.504426][ T6170] page dumped because: kasan: bad access detected [ 344.510846][ T6170] page_owner tracks the page as allocated [ 344.516558][ T6170] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4264, tgid 4264 (syz-executor), ts 84480608110, free_ts 84475863149 [ 344.537330][ T6170] post_alloc_hook+0x173/0x1a0 [ 344.542107][ T6170] get_page_from_freelist+0x1a26/0x1ac0 [ 344.547663][ T6170] __alloc_pages+0x1df/0x4e0 [ 344.552261][ T6170] alloc_slab_page+0x5d/0x160 [ 344.556944][ T6170] new_slab+0x87/0x2c0 [ 344.561018][ T6170] ___slab_alloc+0xbc6/0x1220 [ 344.565701][ T6170] __kmem_cache_alloc_node+0x1a0/0x260 [ 344.571180][ T6170] __kmalloc_node_track_caller+0x9e/0x230 [ 344.576918][ T6170] __alloc_skb+0x22a/0x7e0 [ 344.581340][ T6170] wg_packet_send_keepalive+0x61/0x2b0 [ 344.586830][ T6170] wg_open+0x2d2/0x420 [ 344.590916][ T6170] __dev_open+0x2b8/0x420 [ 344.595256][ T6170] __dev_change_flags+0x20a/0x6a0 [ 344.600295][ T6170] dev_change_flags+0x82/0x1a0 [ 344.605063][ T6170] do_setlink+0xc31/0x3c40 [ 344.609484][ T6170] rtnl_newlink+0x17d6/0x1ff0 [ 344.614175][ T6170] page last free stack trace: [ 344.618849][ T6170] free_unref_page_prepare+0x8b4/0x9a0 [ 344.624326][ T6170] free_unref_page+0x2e/0x3f0 [ 344.629017][ T6170] __stack_depot_save+0x435/0x460 [ 344.634082][ T6170] kasan_set_track+0x60/0x70 [ 344.638684][ T6170] __kasan_slab_alloc+0x6b/0x80 [ 344.643540][ T6170] slab_post_alloc_hook+0x4b/0x480 [ 344.648656][ T6170] kmem_cache_alloc+0x123/0x2f0 [ 344.653510][ T6170] dst_alloc+0x101/0x160 [ 344.657763][ T6170] ip6_pol_route+0x94d/0x1260 [ 344.662444][ T6170] fib6_rule_lookup+0x1d3/0x570 [ 344.667309][ T6170] ip6_route_input+0x6bf/0xa40 [ 344.672174][ T6170] ip6_sublist_rcv+0x6b3/0x11c0 [ 344.677031][ T6170] ipv6_list_rcv+0x3e2/0x430 [ 344.681651][ T6170] __netif_receive_skb_list_core+0x574/0x740 [ 344.687655][ T6170] netif_receive_skb_list_internal+0x90f/0xc50 [ 344.693821][ T6170] napi_complete_done+0x37d/0x830 [ 344.698855][ T6170] [ 344.701180][ T6170] Memory state around the buggy address: [ 344.706807][ T6170] ffff88805535f300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 344.714868][ T6170] ffff88805535f380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 344.722937][ T6170] >ffff88805535f400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 344.730997][ T6170] ^ [ 344.736653][ T6170] ffff88805535f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 344.744712][ T6170] ffff88805535f500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 344.752769][ T6170] ================================================================== [ 344.762290][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 344.790249][ T6170] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 344.797573][ T6170] CPU: 1 PID: 6170 Comm: syz.3.363 Not tainted 6.1.146-syzkaller #0 [ 344.805557][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 344.815619][ T6170] Call Trace: [ 344.818897][ T6170] [ 344.821830][ T6170] dump_stack_lvl+0x168/0x22e [ 344.826510][ T6170] ? memcpy+0x3c/0x60 [ 344.830498][ T6170] ? show_regs_print_info+0x12/0x12 [ 344.835706][ T6170] ? load_image+0x3b0/0x3b0 [ 344.840255][ T6170] panic+0x2c9/0x710 [ 344.844213][ T6170] ? bpf_jit_dump+0xd0/0xd0 [ 344.848751][ T6170] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 344.854687][ T6170] ? _raw_spin_unlock+0x40/0x40 [ 344.859603][ T6170] check_panic_on_warn+0x80/0xa0 [ 344.864576][ T6170] ? rose_transmit_link+0x5b6/0x730 [ 344.869809][ T6170] end_report+0x66/0x110 [ 344.874132][ T6170] kasan_report+0x118/0x140 [ 344.878698][ T6170] ? rose_transmit_link+0x5b6/0x730 [ 344.883945][ T6170] rose_transmit_link+0x5b6/0x730 [ 344.889006][ T6170] ? skb_put+0x117/0x210 [ 344.893284][ T6170] rose_write_internal+0x1096/0x1eb0 [ 344.898611][ T6170] ? debug_object_assert_init+0x1ed/0x2f0 [ 344.904418][ T6170] ? rose_validate_nr+0x120/0x120 [ 344.909526][ T6170] ? skb_queue_purge+0x64/0x1b0 [ 344.914397][ T6170] rose_release+0x22a/0x4f0 [ 344.918916][ T6170] sock_close+0xd5/0x240 [ 344.923175][ T6170] ? sock_mmap+0x90/0x90 [ 344.927432][ T6170] __fput+0x22c/0x920 [ 344.931432][ T6170] task_work_run+0x1ca/0x250 [ 344.936029][ T6170] ? task_work_cancel+0x230/0x230 [ 344.941102][ T6170] get_signal+0x11a6/0x1350 [ 344.945622][ T6170] arch_do_signal_or_restart+0xb0/0x1230 [ 344.951289][ T6170] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 344.956850][ T6170] ? wake_bit_function+0x200/0x200 [ 344.961975][ T6170] ? get_sigframe_size+0x10/0x10 [ 344.966921][ T6170] ? __sys_connect+0x239/0x410 [ 344.971724][ T6170] ? exit_to_user_mode_loop+0x3b/0x110 [ 344.977208][ T6170] exit_to_user_mode_loop+0x70/0x110 [ 344.982541][ T6170] exit_to_user_mode_prepare+0xb1/0x140 [ 344.988116][ T6170] syscall_exit_to_user_mode+0x16/0x40 [ 344.993592][ T6170] do_syscall_64+0x58/0xa0 [ 344.998031][ T6170] ? clear_bhb_loop+0x60/0xb0 [ 345.002724][ T6170] ? clear_bhb_loop+0x60/0xb0 [ 345.007406][ T6170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.013313][ T6170] RIP: 0033:0x7fdebc38e9a9 [ 345.017734][ T6170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.037439][ T6170] RSP: 002b:00007fdebc1bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 345.045869][ T6170] RAX: fffffffffffffe00 RBX: 00007fdebc5b6160 RCX: 00007fdebc38e9a9 [ 345.053857][ T6170] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000d [ 345.061835][ T6170] RBP: 00007fdebc410d69 R08: 0000000000000000 R09: 0000000000000000 [ 345.069835][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.077817][ T6170] R13: 0000000000000000 R14: 00007fdebc5b6160 R15: 00007ffc3f5a9ef8 [ 345.085803][ T6170] [ 345.089252][ T6170] Kernel Offset: disabled [ 345.093651][ T6170] Rebooting in 86400 seconds..