last executing test programs: 21.529671998s ago: executing program 0 (id=32): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0x2}}, 0x20) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x2000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', 0x0, &(0x7f00000003c0)='\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = io_uring_setup(0xfc6, &(0x7f0000000180)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000b00)="86cf8445f4ba1d9f20174688f169e58c", 0x10) listen(0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 17.529717232s ago: executing program 0 (id=43): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x2) mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x0, 0x23013, r0, 0x83000000) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptp0(0xffffffffffffff9c, 0x0, 0x481, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r3, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {}, 0xf, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x80000001}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r2, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d07, &(0x7f0000000180)={0xfffffffd, 0xb}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x2, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) 17.399325424s ago: executing program 0 (id=45): r0 = io_uring_setup(0x4822, &(0x7f0000000180)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14.747807056s ago: executing program 0 (id=49): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x8004, &(0x7f00000009c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@jqfmt_vfsv0}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x40002, &(0x7f0000000a40)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2c726573697a653db078303030303030303030303030303030332c6e6f696e746567726974792c696f636861727365743d61736369692c75737271756f74612c66756e633d4d4d41505f434845434b2c7043723d30303030303030303030303030303030303030342c666f776e65723e", @ANYRES32=r0, @ANYBLOB="b2590383118bd05877d8c95c8daf47780924eeafa654f2e8ce38295a6445d6ab19f5b01d732dde2629912684ac7a747c069450f7565f14c3cc81f6bc3855f7db37a0e30e1fd7203288923efb4893073d49af3f99a1596e99a466795e4f94575a86dadacd7f45573d1c3590dd98d1fe"], 0x1, 0x61ce, &(0x7f00000157c0)="$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") getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x90261000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x12}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 13.493772566s ago: executing program 1 (id=52): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) membarrier(0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0xee00) 11.870472132s ago: executing program 1 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYRES32=0x0], 0x48) openat$vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x150, 0x11, 0x148, 0x150, 0x10, 0x250, 0x2a8, 0x2a8, 0x250, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @remote, 0xffffff00, 0xffffff00, 'nicvf0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x84, 0x3, 0x18}, 0x10, 0xe8, 0x150, 0x1c, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @rand_addr=0x10, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x1}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0xa, "602c4e1da4b651d69f61fd40e9985933ad459f3d59ccf16f0d0ef758ba42"}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x348) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 11.087937064s ago: executing program 0 (id=56): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000081}, 0x40048094) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000380)="5800000014000300000000000000679abeff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff5a60525808f91cb2cd3d8586dd77daf2f7a5512cd5f0c6456c6fa101e8c10d18a759023acdc938c9eab14910348ac0e2b7cde8f59f2c59690d89c9e7b0f911aaef7612061fbef38104ba0e16", 0xa4}], 0x1) prlimit64(0x0, 0x8, &(0x7f00000002c0)={0x2, 0x800000088}, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000), 0x6b) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0xb3d68000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}], 0x1, 0x40012042, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 9.534075219s ago: executing program 1 (id=60): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r3 = io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) socket$l2tp6(0xa, 0x2, 0x73) close_range(r3, 0xffffffffffffffff, 0x0) 8.954271198s ago: executing program 4 (id=61): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x3f9a, 0x0, 0x10001}, 0x0, 0x0) close(r0) 8.429978716s ago: executing program 1 (id=65): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) membarrier(0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0xee00) 8.058808322s ago: executing program 4 (id=66): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x400}) mkdir(0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x6) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 6.768903193s ago: executing program 1 (id=67): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r6, r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x11, &(0x7f00000001c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x2, &(0x7f0000000040)=@raw=[@map_fd], 0x0, 0x8, 0x8c, &(0x7f00000002c0)=""/140, 0x41100, 0x1d, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000440)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000540)=[r5, r6, 0xffffffffffffffff, r7, r8], &(0x7f0000000580)=[{0x0, 0x2, 0x0, 0x8}, {0x5, 0x1, 0xe, 0xa}], 0x10, 0x5}, 0x94) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffc}, &(0x7f00000007c0), &(0x7f0000000800)) 6.729619143s ago: executing program 4 (id=68): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYRES64=0x0], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, &(0x7f0000000bc0)={0x0, 0x0, 0x9}) 6.728553573s ago: executing program 0 (id=69): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x90261000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x12}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 6.29417353s ago: executing program 3 (id=70): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r4, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004200ff9d7275c600fedbdf250500000008000200050000f3"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) 5.845120367s ago: executing program 4 (id=71): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) close(0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x7c, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xa002a008}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.259790526s ago: executing program 3 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYRES32=0x0], 0x48) openat$vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x150, 0x11, 0x148, 0x150, 0x10, 0x250, 0x2a8, 0x2a8, 0x250, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @remote, 0xffffff00, 0xffffff00, 'nicvf0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x84, 0x3, 0x18}, 0x10, 0xe8, 0x150, 0x1c, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @rand_addr=0x10, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x1}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0xa, "602c4e1da4b651d69f61fd40e9985933ad459f3d59ccf16f0d0ef758ba42"}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x348) 5.122903419s ago: executing program 4 (id=73): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0x2}}, 0x20) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x2000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', 0x0, &(0x7f00000003c0)='\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = io_uring_setup(0xfc6, &(0x7f0000000180)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000b00)="86cf8445f4ba1d9f20174688f169e58c", 0x10) listen(0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.235242543s ago: executing program 3 (id=74): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x320, 0x3d8, 0x3d8, 0x320, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@ecn={{0x28}, {0x10, 0x2, 0x7, 0x3}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 3.886455468s ago: executing program 3 (id=75): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r3 = io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) socket$l2tp6(0xa, 0x2, 0x73) close_range(r3, 0xffffffffffffffff, 0x0) 3.374849056s ago: executing program 2 (id=77): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x2) mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x0, 0x23013, r0, 0x83000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptp0(0xffffffffffffff9c, 0x0, 0x481, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r3, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {}, 0xf, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x80000001}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r2, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d07, &(0x7f0000000180)={0xfffffffd, 0xb}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x2, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) 3.293909578s ago: executing program 2 (id=78): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 2.650830918s ago: executing program 3 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000000)={&(0x7f00000000c0), 0xc, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfd}]}, 0x1c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$sg(0x0, 0x0, 0x5) openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x18c) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') write$USERIO_CMD_REGISTER(r3, 0x0, 0x0) 2.355894353s ago: executing program 1 (id=80): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000081}, 0x40048094) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000380)="5800000014000300000000000000679abeff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff5a60525808f91cb2cd3d8586dd77daf2f7a5512cd5f0c6456c6fa101e8c10d18a759023acdc938c9eab14910348ac0e2b7cde8f59f2c59690d89c9e7b0f911aaef7612061fbef38104ba0e16", 0xa4}], 0x1) prlimit64(0x0, 0x8, &(0x7f00000002c0)={0x2, 0x800000088}, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000), 0x6b) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0xb3d68000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}], 0x1, 0x40012042, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 2.302405373s ago: executing program 2 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getpeername$ax25(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000100)=""/50) landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x1}, 0x18, 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 1.110731963s ago: executing program 3 (id=82): syz_open_dev$hiddev(&(0x7f0000000540), 0x2, 0x900) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) sendto$l2tp(r0, &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r3, 0x15b4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x180}, 0x50) 1.064213833s ago: executing program 2 (id=83): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) close(0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x7c, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xa002a008}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.062637493s ago: executing program 4 (id=84): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004200ff9d7275c600fedbdf250500000008000200050000f3"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) 1.039618504s ago: executing program 2 (id=85): connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) r0 = socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x300}) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x2, 0x80) ioctl$SNDCTL_TMR_SOURCE(r3, 0xc0045406) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x0, 0x1, 0x2000, &(0x7f00007ba000/0x2000)=nil}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_open_dev$sndctrl(&(0x7f0000000000), 0xb, 0x181) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) brk(0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7", 0x4a}, {&(0x7f0000000400)="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", 0x192}], 0x2) 0s ago: executing program 2 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYRES32=0x0], 0x48) openat$vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x150, 0x11, 0x148, 0x150, 0x10, 0x250, 0x2a8, 0x2a8, 0x250, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @remote, 0xffffff00, 0xffffff00, 'nicvf0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x84, 0x3, 0x18}, 0x10, 0xe8, 0x150, 0x1c, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @rand_addr=0x10, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x1}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0xa, "602c4e1da4b651d69f61fd40e9985933ad459f3d59ccf16f0d0ef758ba42"}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x348) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.16' (ED25519) to the list of known hosts. [ 48.696220][ T4172] cgroup: Unknown subsys name 'net' [ 48.836024][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.044070][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.985270][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 52.060479][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 52.107128][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 52.122737][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 52.154837][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.162174][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.170254][ T4194] device bridge_slave_0 entered promiscuous mode [ 52.184331][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 52.214497][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.221662][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.229360][ T4184] device bridge_slave_0 entered promiscuous mode [ 52.236699][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.243824][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.252053][ T4194] device bridge_slave_1 entered promiscuous mode [ 52.278888][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.285998][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.293844][ T4184] device bridge_slave_1 entered promiscuous mode [ 52.347970][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.376557][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.387078][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.406286][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.414252][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.422159][ T4183] device bridge_slave_0 entered promiscuous mode [ 52.439374][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.461911][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.468980][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.477398][ T4183] device bridge_slave_1 entered promiscuous mode [ 52.484511][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.491713][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.499709][ T4189] device bridge_slave_0 entered promiscuous mode [ 52.517760][ T4194] team0: Port device team_slave_0 added [ 52.535486][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.543107][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.551243][ T4189] device bridge_slave_1 entered promiscuous mode [ 52.566472][ T4194] team0: Port device team_slave_1 added [ 52.581249][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.588320][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.597150][ T4193] device bridge_slave_0 entered promiscuous mode [ 52.621121][ T4184] team0: Port device team_slave_0 added [ 52.640419][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.647864][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.655751][ T4193] device bridge_slave_1 entered promiscuous mode [ 52.664757][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.675225][ T4184] team0: Port device team_slave_1 added [ 52.682872][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.692819][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.700194][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.726446][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.739769][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.746776][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.772757][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.790398][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.808830][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.856262][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.872903][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.879856][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.905976][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.918122][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.925414][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.951859][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.965276][ T4189] team0: Port device team_slave_0 added [ 52.973013][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.990545][ T4183] team0: Port device team_slave_0 added [ 53.019912][ T4189] team0: Port device team_slave_1 added [ 53.029197][ T4194] device hsr_slave_0 entered promiscuous mode [ 53.036168][ T4194] device hsr_slave_1 entered promiscuous mode [ 53.052067][ T4183] team0: Port device team_slave_1 added [ 53.059774][ T4193] team0: Port device team_slave_0 added [ 53.094160][ T4193] team0: Port device team_slave_1 added [ 53.122171][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.129135][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.155290][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.168834][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.175888][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.201980][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.222068][ T4184] device hsr_slave_0 entered promiscuous mode [ 53.228779][ T4184] device hsr_slave_1 entered promiscuous mode [ 53.235605][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.243798][ T4184] Cannot create hsr debugfs directory [ 53.252722][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.259675][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.285625][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.297511][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.304848][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.331013][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.368228][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.375647][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.401861][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.413823][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.420783][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.446986][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.550404][ T4183] device hsr_slave_0 entered promiscuous mode [ 53.557240][ T4183] device hsr_slave_1 entered promiscuous mode [ 53.564020][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.571634][ T4183] Cannot create hsr debugfs directory [ 53.579729][ T4189] device hsr_slave_0 entered promiscuous mode [ 53.586527][ T4189] device hsr_slave_1 entered promiscuous mode [ 53.593086][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.600625][ T4189] Cannot create hsr debugfs directory [ 53.609235][ T4193] device hsr_slave_0 entered promiscuous mode [ 53.616034][ T4193] device hsr_slave_1 entered promiscuous mode [ 53.622883][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.630435][ T4193] Cannot create hsr debugfs directory [ 53.682008][ T2410] Bluetooth: hci2: command 0x0409 tx timeout [ 53.688497][ T2410] Bluetooth: hci1: command 0x0409 tx timeout [ 53.699377][ T2410] Bluetooth: hci0: command 0x0409 tx timeout [ 53.765640][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 53.771810][ T2410] Bluetooth: hci4: command 0x0409 tx timeout [ 53.884067][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.896138][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.906856][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.916876][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.962064][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.971588][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.988664][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.007872][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.060974][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.070039][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.090632][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.100010][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.158734][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.196603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.206102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.217154][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.224241][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.235898][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.264556][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.271614][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.280334][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.298819][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.308800][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.318378][ T1585] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.325607][ T1585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.334122][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.345015][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.353427][ T1585] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.360449][ T1585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.368164][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.379619][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.408507][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.416528][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.426412][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.444198][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.449722][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.483147][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.494754][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.505502][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.515403][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.522466][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.530333][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.542296][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.550570][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.557776][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.565490][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.575882][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.584506][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.593112][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.601797][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.610096][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.618503][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.630347][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.638879][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.647382][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.663419][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.675011][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.688526][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.713092][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.720138][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.730228][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.741777][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.752013][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.761667][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.775947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.785336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.794715][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.814428][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.829461][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.862482][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.870672][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.881646][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.895376][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.904362][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.914486][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.922867][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.944882][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.968787][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.978102][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.986242][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.995865][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.006411][ T1585] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.013534][ T1585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.026321][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.035088][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.043605][ T1585] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.050645][ T1585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.081980][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.090196][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.105477][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.117696][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.130756][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.141967][ T1585] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.152014][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.165661][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.181630][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.190167][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.206559][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.217459][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.236535][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.245342][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.255022][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.263841][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.275221][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.292972][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.300423][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.313908][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.328545][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.339806][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.356503][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.379523][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.396554][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.410446][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.425380][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.432489][ T4259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.442009][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.450535][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.460749][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.467840][ T4259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.475589][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.485914][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.497690][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.515514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.557273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.571547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.584958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.593692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.605398][ T4194] device veth0_vlan entered promiscuous mode [ 55.623150][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.630791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.646302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.655935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.666332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.676371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.689481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.701280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.709645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.719046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.727530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.745018][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.760528][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.768199][ T4251] Bluetooth: hci1: command 0x041b tx timeout [ 55.781273][ T1111] Bluetooth: hci0: command 0x041b tx timeout [ 55.781327][ T4251] Bluetooth: hci2: command 0x041b tx timeout [ 55.795429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.804489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.813159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.822696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.834023][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.841103][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.848938][ T4246] Bluetooth: hci3: command 0x041b tx timeout [ 55.855402][ T4246] Bluetooth: hci4: command 0x041b tx timeout [ 55.856323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.870393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.879511][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.886608][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.894271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.904369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.912931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.920314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.928038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.940593][ T4194] device veth1_vlan entered promiscuous mode [ 55.987288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.996939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.009399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.020020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.029157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.038286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.048151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.056778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.065763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.074674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.086870][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.114485][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.132795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.147581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.157465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.167396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.182997][ T4184] device veth0_vlan entered promiscuous mode [ 56.209093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.224353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.236925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.248732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.257005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.266002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.283268][ T4194] device veth0_macvtap entered promiscuous mode [ 56.292797][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.303092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.311894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.320741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.332912][ T4194] device veth1_macvtap entered promiscuous mode [ 56.359934][ T4184] device veth1_vlan entered promiscuous mode [ 56.383840][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.393626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.402859][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.412860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.421984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.430095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.438704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.446854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.473270][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.483380][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.491336][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.500809][ T4183] device veth0_vlan entered promiscuous mode [ 56.515731][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.529486][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.541468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.550040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.560601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.570158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.578872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.587612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.596403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.604445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.613577][ T4183] device veth1_vlan entered promiscuous mode [ 56.623054][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.632815][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.642610][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.652251][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.661033][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.670863][ T4189] device veth0_vlan entered promiscuous mode [ 56.686129][ T4184] device veth0_macvtap entered promiscuous mode [ 56.713977][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.723007][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.732305][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.740691][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.749479][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.767826][ T4189] device veth1_vlan entered promiscuous mode [ 56.795368][ T4184] device veth1_macvtap entered promiscuous mode [ 56.834833][ T4183] device veth0_macvtap entered promiscuous mode [ 56.851147][ T4183] device veth1_macvtap entered promiscuous mode [ 56.858199][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.867506][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.875795][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.885381][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.893987][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.904780][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.912919][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.928564][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.940932][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.953795][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.975008][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.984141][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.994654][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.003807][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.014464][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.023526][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.042216][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.053415][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.065257][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.076560][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.086141][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.095211][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.104526][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.117202][ T4189] device veth0_macvtap entered promiscuous mode [ 57.137087][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.145816][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.154925][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.166975][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.177568][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.188615][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.199338][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.212671][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.223438][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.234201][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.245542][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.256131][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.267628][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.293545][ T311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.298345][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.302309][ T311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.312148][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.326705][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.335006][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.345383][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.354163][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.364518][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.373005][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.380778][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.390892][ T4193] device veth0_vlan entered promiscuous mode [ 57.423116][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.432600][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.442118][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.450816][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.463411][ T4189] device veth1_macvtap entered promiscuous mode [ 57.479012][ T311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.486407][ T4193] device veth1_vlan entered promiscuous mode [ 57.491233][ T311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.541493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.549650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.558007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.584457][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.599684][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.611132][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.621935][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.632404][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.643194][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.659343][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.690107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.709230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.742216][ T311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.743913][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.750185][ T311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.778629][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.795964][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.808709][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.813571][ T4293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 57.822693][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.839737][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.849878][ T4239] Bluetooth: hci2: command 0x040f tx timeout [ 57.852450][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 57.857767][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.867716][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 57.873670][ T311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.880689][ T4193] device veth0_macvtap entered promiscuous mode [ 57.897738][ T311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.911144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.923511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.931909][ T4270] Bluetooth: hci3: command 0x040f tx timeout [ 57.938061][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 57.945126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.954057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.962182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.970590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.979389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.992382][ T4193] device veth1_macvtap entered promiscuous mode [ 58.005761][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.022832][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.035144][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.046162][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.070132][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.086422][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.096550][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.107819][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.117881][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.130293][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.140228][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.150701][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.164625][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.186585][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.191071][ T4239] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 58.198937][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.210524][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.226889][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.231325][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.239721][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.251873][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.259722][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.275934][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.286024][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.296789][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.306733][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.317273][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.334882][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.345973][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.355053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.363439][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.369460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.379750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.403668][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.419184][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.428464][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.438743][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.449278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.451013][ T4239] usb 3-1: Using ep0 maxpacket: 16 [ 58.581687][ T4239] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 58.591734][ T4239] usb 3-1: config 0 has no interface number 0 [ 58.597846][ T4239] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 58.609276][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.624878][ T4239] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 58.747479][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.757563][ T311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.808179][ T311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.821734][ T4239] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 58.834286][ T4239] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 58.849077][ T4239] usb 3-1: Product: syz [ 58.853711][ T4239] usb 3-1: SerialNumber: syz [ 58.858411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.878725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.909787][ T4239] usb 3-1: config 0 descriptor?? [ 58.935364][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.946257][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.976299][ T4239] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 58.992821][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.011956][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 59.012532][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.209682][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.214538][ T4293] udc-core: couldn't find an available UDC or it's busy [ 59.218011][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.248283][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 59.249794][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 59.257945][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 59.270913][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 59.275865][ T4293] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 59.311292][ T1111] usb 2-1: Using ep0 maxpacket: 16 [ 59.430988][ T1111] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.522838][ T1111] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.532368][ T4239] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input5 [ 59.550686][ T1111] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 59.572919][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.622705][ T1111] usb 2-1: config 0 descriptor?? [ 59.681144][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 59.997984][ T4309] Bluetooth: hci1: command 0x0419 tx timeout [ 60.007155][ T4309] Bluetooth: hci0: command 0x0419 tx timeout [ 60.011917][ T4197] Bluetooth: hci4: command 0x0419 tx timeout [ 60.019385][ T4197] Bluetooth: hci3: command 0x0419 tx timeout [ 60.034260][ T4309] Bluetooth: hci2: command 0x0419 tx timeout [ 60.098120][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.120661][ T4316] ubi31: attaching mtd0 [ 60.132862][ T4316] ubi31: scanning is finished [ 60.137653][ T4316] ubi31: empty MTD device detected [ 60.178558][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 60.190863][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 60.201467][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 60.210878][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 60.220870][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 60.611644][ T4316] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 60.619271][ T4316] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 60.626688][ T4316] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 60.633767][ T4316] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 60.641710][ T4316] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 60.648642][ T4316] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 60.656749][ T4316] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3096301815 [ 60.666848][ T4316] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 60.709528][ T4317] ubi31: background thread "ubi_bgt31d" started, PID 4317 [ 61.002707][ T4293] device macvlan0 entered promiscuous mode [ 61.017803][ T4295] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.054742][ T4293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3'. [ 61.851005][ T1111] usb 2-1: string descriptor 0 read error: -71 [ 61.859472][ T1111] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 61.881518][ T1111] usb 2-1: USB disconnect, device number 2 [ 62.022567][ T4293] device veth3 entered promiscuous mode [ 62.038433][ T4330] netlink: 'syz.0.10': attribute type 1 has an invalid length. [ 62.780992][ T13] Bluetooth: hci3: command 0x0405 tx timeout [ 64.290972][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 64.310894][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 64.330954][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 64.350940][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 64.370888][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 64.381704][ T2410] usb 3-1: USB disconnect, device number 2 [ 64.390903][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 64.397883][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 64.565393][ T2410] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 64.583342][ T4346] loop3: detected capacity change from 0 to 1024 [ 65.846168][ T4346] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,dax=inode,nolazytime,abort,dax=inode,lazytime,jqfmt=vfsv0,bsddf,noauto_da_alloc,,errors=continue. Quota mode: none. [ 67.563962][ T4384] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 67.609866][ T4384] loop1: detected capacity change from 0 to 512 [ 68.648864][ T4384] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.660050][ T4384] ext4 filesystem being mounted at /5/control supports timestamps until 2038-01-19 (0x7fffffff) [ 68.860888][ T4395] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 71.242083][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.260954][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.181039][ T4429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34'. [ 73.197659][ T4415] syz.1.31 sent an empty control message without MSG_MORE. [ 73.426670][ T4438] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 74.301260][ T4449] process 'syz.2.40' launched '@' with NULL argv: empty string added [ 75.969153][ T4470] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.815507][ T7] cfg80211: failed to load regulatory.db [ 77.015591][ T4482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 78.238728][ T4488] loop0: detected capacity change from 0 to 1024 [ 78.382229][ T4488] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,dax=inode,nolazytime,abort,dax=inode,lazytime,jqfmt=vfsv0,bsddf,noauto_da_alloc,,errors=continue. Quota mode: none. [ 81.534963][ T4518] netlink: 72 bytes leftover after parsing attributes in process `syz.0.56'. [ 81.758248][ T4526] x_tables: ip_tables: osf match: only valid for protocol 6 [ 81.767620][ T4526] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 85.498825][ T1108] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.961209][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 86.111892][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.148797][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.163003][ T1108] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 86.264323][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 86.278511][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.469162][ T1108] usb 3-1: config 0 descriptor?? [ 87.120713][ T1108] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 87.513123][ T4587] x_tables: ip_tables: osf match: only valid for protocol 6 [ 88.378455][ T4597] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 88.885842][ T4239] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 89.957416][ T1108] usb 3-1: USB disconnect, device number 3 [ 90.154734][ T4614] Zero length message leads to an empty skb [ 91.261416][ T4619] netlink: 72 bytes leftover after parsing attributes in process `syz.1.80'. [ 92.567514][ T4634] ================================================================== [ 92.575776][ T4634] BUG: KASAN: use-after-free in rose_transmit_link+0x5b0/0x730 [ 92.583312][ T4634] Read of size 1 at addr ffff888061d16032 by task syz.4.84/4634 [ 92.590914][ T4634] [ 92.593219][ T4634] CPU: 0 PID: 4634 Comm: syz.4.84 Not tainted 5.15.189-syzkaller #0 [ 92.601167][ T4634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.611205][ T4634] Call Trace: [ 92.614470][ T4634] [ 92.617379][ T4634] dump_stack_lvl+0x168/0x230 [ 92.622039][ T4634] ? show_regs_print_info+0x20/0x20 [ 92.627220][ T4634] ? _printk+0xcc/0x110 [ 92.631354][ T4634] ? rose_transmit_link+0x5b0/0x730 [ 92.636536][ T4634] ? load_image+0x3b0/0x3b0 [ 92.641017][ T4634] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 92.646385][ T4634] print_address_description+0x60/0x2d0 [ 92.651907][ T4634] ? rose_transmit_link+0x5b0/0x730 [ 92.657084][ T4634] kasan_report+0xdf/0x130 [ 92.661492][ T4634] ? rose_transmit_link+0x5b0/0x730 [ 92.666777][ T4634] ? __phys_addr+0xb6/0x170 [ 92.671275][ T4634] rose_transmit_link+0x5b0/0x730 [ 92.676277][ T4634] ? skb_put+0x117/0x210 [ 92.680496][ T4634] rose_write_internal+0x673/0x1e80 [ 92.685668][ T4634] ? debug_object_assert_init+0x1e8/0x2e0 [ 92.691367][ T4634] ? rose_validate_nr+0x120/0x120 [ 92.696367][ T4634] ? del_timer+0x11a/0x1b0 [ 92.700763][ T4634] rose_release+0x22a/0x4e0 [ 92.705242][ T4634] sock_close+0xd5/0x240 [ 92.709465][ T4634] ? sock_mmap+0x90/0x90 [ 92.713687][ T4634] __fput+0x234/0x930 [ 92.717693][ T4634] task_work_run+0x125/0x1a0 [ 92.722295][ T4634] do_exit+0x61e/0x20a0 [ 92.726508][ T4634] ? put_task_struct+0x80/0x80 [ 92.731281][ T4634] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 92.737272][ T4634] ? lock_chain_count+0x20/0x20 [ 92.742135][ T4634] ? _raw_spin_lock_irq+0xab/0xe0 [ 92.747172][ T4634] do_group_exit+0x12e/0x300 [ 92.751769][ T4634] ? lockdep_hardirqs_on+0x94/0x140 [ 92.756976][ T4634] get_signal+0x6ca/0x12c0 [ 92.761414][ T4634] arch_do_signal_or_restart+0xc1/0x1300 [ 92.767062][ T4634] ? sock_do_ioctl+0x275/0x2f0 [ 92.771831][ T4634] ? sock_show_fdinfo+0xb0/0xb0 [ 92.776791][ T4634] ? get_sigframe_size+0x10/0x10 [ 92.781763][ T4634] ? exit_to_user_mode_loop+0x3b/0x130 [ 92.787234][ T4634] exit_to_user_mode_loop+0x9e/0x130 [ 92.792534][ T4634] exit_to_user_mode_prepare+0xb1/0x140 [ 92.798106][ T4634] syscall_exit_to_user_mode+0x16/0x40 [ 92.803747][ T4634] do_syscall_64+0x58/0xa0 [ 92.808262][ T4634] ? clear_bhb_loop+0x30/0x80 [ 92.813043][ T4634] ? clear_bhb_loop+0x30/0x80 [ 92.817728][ T4634] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.823638][ T4634] RIP: 0033:0x7f8c2ef769a9 [ 92.828069][ T4634] Code: Unable to access opcode bytes at RIP 0x7f8c2ef7697f. [ 92.835435][ T4634] RSP: 002b:00007f8c2cdbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.843857][ T4634] RAX: 0000000000000000 RBX: 00007f8c2f19e080 RCX: 00007f8c2ef769a9 [ 92.851860][ T4634] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000008 [ 92.859840][ T4634] RBP: 00007f8c2eff8d69 R08: 0000000000000000 R09: 0000000000000000 [ 92.867819][ T4634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.875799][ T4634] R13: 0000000000000000 R14: 00007f8c2f19e080 R15: 00007ffd2d567d28 [ 92.883817][ T4634] [ 92.886840][ T4634] [ 92.889156][ T4634] Allocated by task 4575: [ 92.893468][ T4634] __kasan_kmalloc+0xb5/0xf0 [ 92.898056][ T4634] rose_add_node+0x227/0xdb0 [ 92.902666][ T4634] rose_rt_ioctl+0x9db/0xe20 [ 92.907269][ T4634] rose_ioctl+0x27a/0x790 [ 92.911606][ T4634] sock_do_ioctl+0xd3/0x2f0 [ 92.916120][ T4634] sock_ioctl+0x4ed/0x6e0 [ 92.920458][ T4634] __se_sys_ioctl+0xfa/0x170 [ 92.925059][ T4634] do_syscall_64+0x4c/0xa0 [ 92.929494][ T4634] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.935400][ T4634] [ 92.937718][ T4634] Freed by task 4634: [ 92.941689][ T4634] kasan_set_track+0x4b/0x70 [ 92.946283][ T4634] kasan_set_free_info+0x1f/0x40 [ 92.951221][ T4634] ____kasan_slab_free+0xd5/0x110 [ 92.956248][ T4634] slab_free_freelist_hook+0xea/0x170 [ 92.961762][ T4634] kfree+0xef/0x2a0 [ 92.965586][ T4634] rose_rt_device_down+0x4e2/0x530 [ 92.970840][ T4634] rose_device_event+0x5ec/0x680 [ 92.975792][ T4634] raw_notifier_call_chain+0xcb/0x160 [ 92.981602][ T4634] __dev_notify_flags+0x178/0x2d0 [ 92.986626][ T4634] dev_change_flags+0xe3/0x1a0 [ 92.991388][ T4634] dev_ifsioc+0x147/0xe70 [ 92.995724][ T4634] dev_ioctl+0x55f/0xe50 [ 92.999970][ T4634] sock_do_ioctl+0x222/0x2f0 [ 93.004563][ T4634] sock_ioctl+0x4ed/0x6e0 [ 93.008890][ T4634] __se_sys_ioctl+0xfa/0x170 [ 93.013792][ T4634] do_syscall_64+0x4c/0xa0 [ 93.018215][ T4634] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.024117][ T4634] [ 93.026439][ T4634] The buggy address belongs to the object at ffff888061d16000 [ 93.026439][ T4634] which belongs to the cache kmalloc-512 of size 512 [ 93.040490][ T4634] The buggy address is located 50 bytes inside of [ 93.040490][ T4634] 512-byte region [ffff888061d16000, ffff888061d16200) [ 93.053686][ T4634] The buggy address belongs to the page: [ 93.059315][ T4634] page:ffffea0001874500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61d14 [ 93.069465][ T4634] head:ffffea0001874500 order:2 compound_mapcount:0 compound_pincount:0 [ 93.077792][ T4634] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 93.085777][ T4634] raw: 00fff00000010200 0000000000000000 0000000c00000001 ffff888016841c80 [ 93.094458][ T4634] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 93.103032][ T4634] page dumped because: kasan: bad access detected [ 93.109453][ T4634] page_owner tracks the page as allocated [ 93.115160][ T4634] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4189, ts 53670501762, free_ts 11385528119 [ 93.134265][ T4634] get_page_from_freelist+0x1b77/0x1c60 [ 93.139820][ T4634] __alloc_pages+0x1e1/0x470 [ 93.144410][ T4634] new_slab+0xc0/0x4b0 [ 93.148485][ T4634] ___slab_alloc+0x81e/0xdf0 [ 93.153070][ T4634] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 93.158870][ T4634] __alloc_skb+0x22c/0x750 [ 93.163283][ T4634] netlink_sendmsg+0x645/0xbc0 [ 93.168048][ T4634] __sys_sendto+0x423/0x580 [ 93.172630][ T4634] __x64_sys_sendto+0xda/0xf0 [ 93.177305][ T4634] do_syscall_64+0x4c/0xa0 [ 93.181722][ T4634] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.187614][ T4634] page last free stack trace: [ 93.192274][ T4634] free_unref_page_prepare+0x637/0x6c0 [ 93.197726][ T4634] free_unref_page+0x94/0x280 [ 93.202399][ T4634] free_contig_range+0x96/0xf0 [ 93.207171][ T4634] destroy_args+0xef/0x8b0 [ 93.211583][ T4634] debug_vm_pgtable+0x318/0x370 [ 93.216434][ T4634] do_one_initcall+0x1ee/0x680 [ 93.221191][ T4634] do_initcall_level+0x137/0x1f0 [ 93.226127][ T4634] do_initcalls+0x4b/0x90 [ 93.230455][ T4634] kernel_init_freeable+0x3ce/0x560 [ 93.235655][ T4634] kernel_init+0x19/0x1b0 [ 93.239997][ T4634] ret_from_fork+0x1f/0x30 [ 93.244421][ T4634] [ 93.246739][ T4634] Memory state around the buggy address: [ 93.252361][ T4634] ffff888061d15f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.260429][ T4634] ffff888061d15f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.268489][ T4634] >ffff888061d16000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.276546][ T4634] ^ [ 93.282182][ T4634] ffff888061d16080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.290242][ T4634] ffff888061d16100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.298300][ T4634] ================================================================== [ 93.306358][ T4634] Disabling lock debugging due to kernel taint [ 93.370222][ T4646] x_tables: ip_tables: osf match: only valid for protocol 6 [ 93.639019][ T4634] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 93.646240][ T4634] CPU: 1 PID: 4634 Comm: syz.4.84 Tainted: G B 5.15.189-syzkaller #0 [ 93.655590][ T4634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.665622][ T4634] Call Trace: [ 93.668886][ T4634] [ 93.671792][ T4634] dump_stack_lvl+0x168/0x230 [ 93.676445][ T4634] ? show_regs_print_info+0x20/0x20 [ 93.681616][ T4634] ? load_image+0x3b0/0x3b0 [ 93.686120][ T4634] panic+0x2c9/0x7f0 [ 93.689993][ T4634] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 93.696126][ T4634] ? bpf_jit_dump+0xd0/0xd0 [ 93.700608][ T4634] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 93.706480][ T4634] ? _raw_spin_unlock+0x40/0x40 [ 93.711305][ T4634] ? rose_transmit_link+0x5b0/0x730 [ 93.716476][ T4634] check_panic_on_warn+0x80/0xa0 [ 93.721390][ T4634] ? rose_transmit_link+0x5b0/0x730 [ 93.726561][ T4634] end_report+0x6d/0xf0 [ 93.730689][ T4634] kasan_report+0x102/0x130 [ 93.735172][ T4634] ? rose_transmit_link+0x5b0/0x730 [ 93.740394][ T4634] ? __phys_addr+0xb6/0x170 [ 93.744901][ T4634] rose_transmit_link+0x5b0/0x730 [ 93.749930][ T4634] ? skb_put+0x117/0x210 [ 93.754190][ T4634] rose_write_internal+0x673/0x1e80 [ 93.759406][ T4634] ? debug_object_assert_init+0x1e8/0x2e0 [ 93.765119][ T4634] ? rose_validate_nr+0x120/0x120 [ 93.770136][ T4634] ? del_timer+0x11a/0x1b0 [ 93.774541][ T4634] rose_release+0x22a/0x4e0 [ 93.779039][ T4634] sock_close+0xd5/0x240 [ 93.783264][ T4634] ? sock_mmap+0x90/0x90 [ 93.787515][ T4634] __fput+0x234/0x930 [ 93.791482][ T4634] task_work_run+0x125/0x1a0 [ 93.796067][ T4634] do_exit+0x61e/0x20a0 [ 93.800207][ T4634] ? put_task_struct+0x80/0x80 [ 93.804948][ T4634] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 93.810912][ T4634] ? lock_chain_count+0x20/0x20 [ 93.815755][ T4634] ? _raw_spin_lock_irq+0xab/0xe0 [ 93.820760][ T4634] do_group_exit+0x12e/0x300 [ 93.825329][ T4634] ? lockdep_hardirqs_on+0x94/0x140 [ 93.830505][ T4634] get_signal+0x6ca/0x12c0 [ 93.834904][ T4634] arch_do_signal_or_restart+0xc1/0x1300 [ 93.840520][ T4634] ? sock_do_ioctl+0x275/0x2f0 [ 93.845261][ T4634] ? sock_show_fdinfo+0xb0/0xb0 [ 93.850092][ T4634] ? get_sigframe_size+0x10/0x10 [ 93.855026][ T4634] ? exit_to_user_mode_loop+0x3b/0x130 [ 93.860468][ T4634] exit_to_user_mode_loop+0x9e/0x130 [ 93.865739][ T4634] exit_to_user_mode_prepare+0xb1/0x140 [ 93.871269][ T4634] syscall_exit_to_user_mode+0x16/0x40 [ 93.876727][ T4634] do_syscall_64+0x58/0xa0 [ 93.881142][ T4634] ? clear_bhb_loop+0x30/0x80 [ 93.885803][ T4634] ? clear_bhb_loop+0x30/0x80 [ 93.890455][ T4634] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.896330][ T4634] RIP: 0033:0x7f8c2ef769a9 [ 93.900724][ T4634] Code: Unable to access opcode bytes at RIP 0x7f8c2ef7697f. [ 93.908062][ T4634] RSP: 002b:00007f8c2cdbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.916457][ T4634] RAX: 0000000000000000 RBX: 00007f8c2f19e080 RCX: 00007f8c2ef769a9 [ 93.924415][ T4634] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000008 [ 93.932373][ T4634] RBP: 00007f8c2eff8d69 R08: 0000000000000000 R09: 0000000000000000 [ 93.940332][ T4634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.948284][ T4634] R13: 0000000000000000 R14: 00007f8c2f19e080 R15: 00007ffd2d567d28 [ 93.956245][ T4634] [ 93.959582][ T4634] Kernel Offset: disabled [ 93.963903][ T4634] Rebooting in 86400 seconds..