last executing test programs: 16.573063416s ago: executing program 4 (id=398): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000001380)=@udp}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@ldst={0x4, 0x0, 0x6, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) 13.940258391s ago: executing program 3 (id=402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r6, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000340)=""/98) connect$ax25(r6, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000300)={r8, 0xa, "a5e49c655b78596116de"}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB="000000d122821e8ca4f7ad9061ae97fdff900100", @ANYRES32=r9, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000800000018110000", @ANYRES32=r10, @ANYBLOB="0000000000001bb0e2354accae11b51e1ed2c846390000b702b703000000efff008500000083000000bf0900000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12.82222613s ago: executing program 1 (id=404): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x180, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e9a470bf5429ac9037056d354720000"], &(0x7f0000000240)=""/255, 0x46, 0xff, 0xa, 0x0, 0x0, @void, @value}, 0x28) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xffff}}, 0x14}}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 11.569359421s ago: executing program 1 (id=407): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x15) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) 10.541878169s ago: executing program 1 (id=410): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 10.49943378s ago: executing program 2 (id=411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x800) 10.464459141s ago: executing program 3 (id=412): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) 9.585534086s ago: executing program 2 (id=415): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getpid() mmap(&(0x7f00003d6000/0x4000)=nil, 0x4000, 0xb635773f05ebbeed, 0x100010, r0, 0x963ac000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r4, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 9.489151817s ago: executing program 3 (id=416): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x80000000, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x3, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x0, 0x3, 0x8b}, &(0x7f0000000400)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) close_range(r4, r5, 0x0) r8 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r8, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/151, 0x97}], 0x1}}], 0x2, 0x0, 0x0) 8.217163009s ago: executing program 3 (id=418): socket$kcm(0x10, 0x2, 0x10) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e1f, 0xffffffff, @empty}, {0xa, 0x4e20, 0x8, @mcast2}, 0xffffffffffffffff, 0x10000000}}, 0x48) setfsgid(0xee00) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x664d, 0x1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 7.090512228s ago: executing program 3 (id=420): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 6.107489225s ago: executing program 1 (id=422): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000440)={0x1, 0x0, {0x0, 0x0, 0x4001, 0x6}}) 6.073257576s ago: executing program 4 (id=423): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='io\x00') preadv(r2, &(0x7f00000001c0), 0x0, 0x401, 0x9) 5.200516441s ago: executing program 4 (id=425): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) mount$afs(&(0x7f0000000300), &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'vcan0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00'}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.19935646s ago: executing program 1 (id=426): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000002100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = userfaultfd(0x1) read(r1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=""/244, &(0x7f0000000040)=0xf4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2ddc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') 4.696452729s ago: executing program 4 (id=428): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x80000000, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x3, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x0, 0x3, 0x8b}, &(0x7f0000000400)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) close_range(r4, r5, 0x0) r8 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r8, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/151, 0x97}], 0x1}}], 0x2, 0x0, 0x0) 3.511030259s ago: executing program 0 (id=429): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x180, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e9a470bf5429ac9037056d354720000"], &(0x7f0000000240)=""/255, 0x46, 0xff, 0xa, 0x0, 0x0, @void, @value}, 0x28) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xffff}}, 0x14}}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.49021894s ago: executing program 4 (id=430): socket$kcm(0x10, 0x2, 0x10) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e1f, 0xffffffff, @empty}, {0xa, 0x4e20, 0x8, @mcast2}, 0xffffffffffffffff, 0x10000000}}, 0x48) setfsgid(0xee00) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x664d, 0x1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 2.560278006s ago: executing program 0 (id=431): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x80801) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_audit(0x10, 0x3, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000940)={@random="6ea88d319b8c", @broadcast, @void, {@x25={0x805, {0x0, 0x1, 0x1f}}}}, 0x0) 2.386136399s ago: executing program 0 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.364664929s ago: executing program 4 (id=433): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000001380)=@udp}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@ldst={0x4, 0x0, 0x6, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) 1.950391636s ago: executing program 0 (id=434): socket$packet(0x11, 0x2, 0x300) socket(0x200000000000011, 0x2, 0x3) r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000080)={0x11, 0x802, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000802"], 0x0) 1.72532044s ago: executing program 0 (id=435): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x15) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) 1.690312181s ago: executing program 2 (id=436): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='io\x00') preadv(r2, &(0x7f00000001c0), 0x0, 0x401, 0x9) 1.535957163s ago: executing program 2 (id=437): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000440)={0x1, 0x0, {0x0, 0x0, 0x4001, 0x6}}) 1.263872928s ago: executing program 3 (id=438): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) mount$afs(&(0x7f0000000300), &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'vcan0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00'}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 515.907891ms ago: executing program 0 (id=439): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc4c85513, &(0x7f0000000000)={0x2, 0x5, 0x1, 0x0, 'syz1\x00'}) 515.674331ms ago: executing program 2 (id=440): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xe099, 0x0, 0x1, 0xb5}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x8000000) 184.522897ms ago: executing program 2 (id=441): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x180, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e9a470bf5429ac9037056d354720000"], &(0x7f0000000240)=""/255, 0x46, 0xff, 0xa, 0x0, 0x0, @void, @value}, 0x28) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xffff}}, 0x14}}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 0s ago: executing program 1 (id=442): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts. [ 38.734035][ T4013] cgroup: Unknown subsys name 'net' [ 39.002023][ T4013] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 39.332668][ T4013] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 41.271832][ T4030] chnl_net:caif_netlink_parms(): no params data found [ 41.301743][ T4024] chnl_net:caif_netlink_parms(): no params data found [ 41.386020][ T4030] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.388284][ T4030] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.390912][ T4030] device bridge_slave_0 entered promiscuous mode [ 41.417436][ T4030] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.419468][ T4030] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.422256][ T4030] device bridge_slave_1 entered promiscuous mode [ 41.441920][ T4024] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.443894][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.446908][ T4024] device bridge_slave_0 entered promiscuous mode [ 41.449740][ T4032] chnl_net:caif_netlink_parms(): no params data found [ 41.453540][ T4024] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.455493][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.458113][ T4024] device bridge_slave_1 entered promiscuous mode [ 41.488139][ T4030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.495508][ T4030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.531989][ T4024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.537595][ T4024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.543037][ T4031] chnl_net:caif_netlink_parms(): no params data found [ 41.555097][ T4030] team0: Port device team_slave_0 added [ 41.574151][ T4030] team0: Port device team_slave_1 added [ 41.575903][ T4023] chnl_net:caif_netlink_parms(): no params data found [ 41.619579][ T4024] team0: Port device team_slave_0 added [ 41.629484][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.631332][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.638562][ T4030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.645848][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.648499][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.655333][ T4030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.659960][ T4024] team0: Port device team_slave_1 added [ 41.668514][ T4032] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.670569][ T4032] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.673242][ T4032] device bridge_slave_0 entered promiscuous mode [ 41.694863][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.696864][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.703791][ T4024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.710347][ T4032] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.712245][ T4032] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.715104][ T4032] device bridge_slave_1 entered promiscuous mode [ 41.729215][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.731049][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.738337][ T4024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.774850][ T4031] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.782888][ T4031] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.785548][ T4031] device bridge_slave_0 entered promiscuous mode [ 41.790631][ T4032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.804617][ T4031] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.806689][ T4031] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.809275][ T4031] device bridge_slave_1 entered promiscuous mode [ 41.818862][ T4032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.868658][ T4030] device hsr_slave_0 entered promiscuous mode [ 41.906510][ T4030] device hsr_slave_1 entered promiscuous mode [ 41.970379][ T4023] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.972348][ T4023] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.974969][ T4023] device bridge_slave_0 entered promiscuous mode [ 41.996546][ T4031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.004360][ T4023] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.006879][ T4023] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.009365][ T4023] device bridge_slave_1 entered promiscuous mode [ 42.021888][ T4031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.032572][ T4032] team0: Port device team_slave_0 added [ 42.078411][ T4024] device hsr_slave_0 entered promiscuous mode [ 42.116642][ T4024] device hsr_slave_1 entered promiscuous mode [ 42.156354][ T4024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.158556][ T4024] Cannot create hsr debugfs directory [ 42.169250][ T4032] team0: Port device team_slave_1 added [ 42.200650][ T4031] team0: Port device team_slave_0 added [ 42.204086][ T4023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.221942][ T4031] team0: Port device team_slave_1 added [ 42.224890][ T4023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.239772][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.241681][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.248678][ T4032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.278852][ T4032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.280689][ T4032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.293714][ T4032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.330170][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.332060][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.339700][ T4031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.344842][ T4023] team0: Port device team_slave_0 added [ 42.351473][ T4023] team0: Port device team_slave_1 added [ 42.374341][ T4031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.376441][ T4031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.383326][ T4031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.405032][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.407206][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.414223][ T4023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.437076][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.438968][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.445952][ T4023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.508203][ T4032] device hsr_slave_0 entered promiscuous mode [ 42.546659][ T4032] device hsr_slave_1 entered promiscuous mode [ 42.586358][ T4032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.588573][ T4032] Cannot create hsr debugfs directory [ 42.648154][ T4031] device hsr_slave_0 entered promiscuous mode [ 42.686518][ T4031] device hsr_slave_1 entered promiscuous mode [ 42.726173][ T4031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.728330][ T4031] Cannot create hsr debugfs directory [ 42.808076][ T4023] device hsr_slave_0 entered promiscuous mode [ 42.846500][ T4023] device hsr_slave_1 entered promiscuous mode [ 42.886255][ T4023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.888386][ T4023] Cannot create hsr debugfs directory [ 42.948082][ T4030] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 42.994124][ T4030] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 43.056352][ T4030] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 43.067148][ T4035] Bluetooth: hci3: command 0x0409 tx timeout [ 43.069173][ T4035] Bluetooth: hci0: command 0x0409 tx timeout [ 43.070890][ T4035] Bluetooth: hci1: command 0x0409 tx timeout [ 43.072584][ T4035] Bluetooth: hci2: command 0x0409 tx timeout [ 43.118083][ T4030] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 43.146205][ T25] Bluetooth: hci4: command 0x0409 tx timeout [ 43.229019][ T4024] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 43.263449][ T4024] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 43.309582][ T4024] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 43.358342][ T4024] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 43.419809][ T4031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 43.453837][ T4031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 43.489337][ T4031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 43.547058][ T4031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 43.658675][ T4030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.673983][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.678862][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.689826][ T4030] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.696895][ T4032] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 43.758483][ T4032] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 43.798035][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.800839][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.803910][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.805973][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.811499][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.828869][ T4023] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 43.879094][ T4023] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 43.918149][ T4032] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 43.967000][ T4023] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 44.009427][ T4023] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 44.048608][ T4032] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 44.087848][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.090949][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.093434][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.095407][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.098036][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.109402][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.131778][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.138591][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.141417][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.144336][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.164654][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.167289][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.169937][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.172974][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.177497][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.185644][ T4031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.191488][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.229727][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.235969][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.238535][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.242398][ T4031] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.264669][ T4024] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.268364][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.271099][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.273571][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.275430][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.279719][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.282140][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.284726][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.299117][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.301842][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.307147][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.309069][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.325726][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.328619][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.331129][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.333033][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.335327][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.339979][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.342412][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.344365][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.347590][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.350377][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.354185][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.370119][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.372950][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.375865][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.379518][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.382424][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.401242][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.403300][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.405429][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.409312][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.415698][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.419196][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.430496][ T4030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.438758][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.441305][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.443885][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.462292][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.465208][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.481608][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.484223][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.492091][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.494698][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.499622][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.502401][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.509352][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.521853][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.531880][ T4023] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.545192][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.549069][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.551760][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.554204][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.563650][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.574488][ T4032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.599035][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.601935][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.604521][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.606509][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.612284][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.615062][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.619489][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.621413][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.623705][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.634475][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.653688][ T4030] device veth0_vlan entered promiscuous mode [ 44.657549][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.660233][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.663264][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.669594][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.671786][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.675570][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.679817][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.682274][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.685317][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.699253][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.703591][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.706536][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.712509][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.721055][ T4032] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.723998][ T4030] device veth1_vlan entered promiscuous mode [ 44.730157][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.732652][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.735408][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.752285][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.754973][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.758552][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.773033][ T4023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.777071][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.779669][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.782559][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.785255][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.787435][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.791484][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.794276][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.805818][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.809623][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.812580][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.815342][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.817368][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.865979][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.869939][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.873085][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.883779][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.887147][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.889335][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.892513][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.924046][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.927399][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.930132][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.933073][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.935804][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.939282][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.941947][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.943984][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.948415][ T4030] device veth0_macvtap entered promiscuous mode [ 44.954903][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.967666][ T4032] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.970568][ T4032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.975109][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.978327][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.981164][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.983907][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.987290][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.990094][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.999002][ T4030] device veth1_macvtap entered promiscuous mode [ 45.002067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.004691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.008806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.013969][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.030716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.033374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.038730][ T4031] device veth0_vlan entered promiscuous mode [ 45.064557][ T4031] device veth1_vlan entered promiscuous mode [ 45.081011][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.083634][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.093065][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.099573][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.101914][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.104903][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.135570][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.145243][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.146854][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 45.149010][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.149298][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 45.152978][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.153032][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 45.171587][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 45.174404][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.179226][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.182824][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.185405][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.194035][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.197144][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.207637][ T4030] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.210017][ T4030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.212329][ T4030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.214676][ T4030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.220008][ T4024] device veth0_vlan entered promiscuous mode [ 45.227143][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 45.228583][ T4031] device veth0_macvtap entered promiscuous mode [ 45.234003][ T4024] device veth1_vlan entered promiscuous mode [ 45.254643][ T4031] device veth1_macvtap entered promiscuous mode [ 45.272886][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.275535][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.279625][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.282146][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.284685][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.288516][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.294600][ T4032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.332691][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.335475][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.342446][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.345519][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.352717][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.365743][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.369121][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.371686][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.374279][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.393055][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.395824][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.406852][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.423504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.426971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.430527][ T4024] device veth0_macvtap entered promiscuous mode [ 45.435505][ T4031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.439397][ T4031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.441695][ T4031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.443983][ T4031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.486501][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.488865][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.489319][ T4024] device veth1_macvtap entered promiscuous mode [ 45.502328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.504982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.508862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.549701][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.552428][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.568300][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.571078][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.573593][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.578867][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.582551][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.585630][ T4023] device veth0_vlan entered promiscuous mode [ 45.606430][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.608913][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.611357][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.613966][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.617436][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.619692][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.623797][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.627636][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.630697][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.633298][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.635818][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.639788][ T4032] device veth0_vlan entered promiscuous mode [ 45.653223][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.656905][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.659555][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.662301][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.666422][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.676250][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.680131][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.698852][ T4024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.701325][ T4024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.703615][ T4024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.705850][ T4024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.718655][ T4023] device veth1_vlan entered promiscuous mode [ 45.727805][ T4032] device veth1_vlan entered promiscuous mode [ 45.746181][ T332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.748293][ T332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.769850][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.772539][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.775188][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.779596][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.782153][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.796500][ T332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.798576][ T332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.826965][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.892579][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.895397][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.924970][ T4023] device veth0_macvtap entered promiscuous mode [ 45.935876][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.944761][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.949950][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.137468][ T4032] device veth0_macvtap entered promiscuous mode [ 46.164785][ T4023] device veth1_macvtap entered promiscuous mode [ 46.821356][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.828679][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.834892][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.841368][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.847536][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.852703][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.862359][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.870754][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.877009][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.883086][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.888755][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.891551][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.894401][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.902468][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.938945][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.941483][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.944044][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.987571][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.001105][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.033976][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.112931][ T4023] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.115339][ T4023] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.117871][ T4023] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.120460][ T4023] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.144209][ T4032] device veth1_macvtap entered promiscuous mode [ 47.152565][ T432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.154859][ T432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.706239][ T4103] Bluetooth: hci3: command 0x040f tx timeout [ 48.708220][ T4103] Bluetooth: hci0: command 0x040f tx timeout [ 48.718477][ T4103] Bluetooth: hci1: command 0x040f tx timeout [ 48.725954][ T4103] Bluetooth: hci2: command 0x040f tx timeout [ 48.736289][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.739908][ T4103] Bluetooth: hci4: command 0x040f tx timeout [ 48.832469][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.835296][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.839387][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.842193][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.844823][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.847581][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.850080][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.852795][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.877446][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.911160][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.914133][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.943972][ T432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.946438][ T432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.949289][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.771282][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.774093][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.779613][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.782355][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.784843][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.795116][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.837408][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.840269][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.844288][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.746770][ T4128] Bluetooth: hci2: command 0x0419 tx timeout [ 50.748787][ T4128] Bluetooth: hci1: command 0x0419 tx timeout [ 50.750475][ T4128] Bluetooth: hci0: command 0x0419 tx timeout [ 50.764532][ T4128] Bluetooth: hci3: command 0x0419 tx timeout [ 50.794070][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.804509][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.811079][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.813873][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.817844][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.859741][ T4032] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.862093][ T4032] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.864398][ T4032] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.871849][ T4032] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.882483][ T432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.884780][ T432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.917378][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 50.941766][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.258327][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.261119][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.271868][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.278491][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.287294][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.755496][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.039766][ T4170] udc-core: couldn't find an available UDC or it's busy [ 52.055135][ T4170] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 52.100588][ T4176] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 52.102935][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 52.696453][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.029163][ T4182] bond0: (slave rose0): Enslaving as an active interface with an up link [ 53.040075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 53.988999][ T4191] netlink: 'syz.1.22': attribute type 10 has an invalid length. [ 54.051088][ T4206] udc-core: couldn't find an available UDC or it's busy [ 54.053288][ T4206] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.067995][ T4191] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 56.916056][ C1] sched: RT throttling activated [ 57.000534][ T4241] udc-core: couldn't find an available UDC or it's busy [ 57.002385][ T4241] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 58.010809][ T4257] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 58.111102][ T4268] udc-core: couldn't find an available UDC or it's busy [ 58.112972][ T4268] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 58.388110][ T4276] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 61.086477][ T4319] kAFS: Can only specify source 'none' with -o dyn [ 61.122720][ T4319] ipt_CLUSTERIP: Please specify destination IP [ 63.627131][ T4343] netlink: 48 bytes leftover after parsing attributes in process `syz.0.56'. [ 65.147177][ T4373] udc-core: couldn't find an available UDC or it's busy [ 65.282059][ T4378] kAFS: Can only specify source 'none' with -o dyn [ 65.284749][ T4378] ipt_CLUSTERIP: Please specify destination IP [ 65.898743][ T4373] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.763703][ T4258] wlan1: Trigger new scan to find an IBSS to join [ 66.956181][ T4375] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 68.024416][ T4407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 68.933287][ T4409] bridge0: port 3(team0) entered blocking state [ 68.935143][ T4409] bridge0: port 3(team0) entered disabled state [ 68.937933][ T4409] device team0 entered promiscuous mode [ 68.939475][ T4409] device team_slave_0 entered promiscuous mode [ 68.941283][ T4409] device team_slave_1 entered promiscuous mode [ 68.943867][ T4409] bridge0: port 3(team0) entered blocking state [ 68.945632][ T4409] bridge0: port 3(team0) entered forwarding state [ 69.637564][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.639594][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.237163][ T4258] wlan1: Creating new IBSS network, BSSID 02:c2:55:90:94:9e [ 71.909229][ T4072] Bluetooth: hci2: command 0x0405 tx timeout [ 74.476212][ T3605] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.754314][ T3321] cfg80211: failed to load regulatory.db [ 74.756414][ T3605] usb 1-1: Using ep0 maxpacket: 8 [ 75.916117][ T3605] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 75.918429][ T3605] usb 1-1: config 179 has no interface number 0 [ 75.920045][ T3605] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 75.922828][ T3605] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 75.946330][ T3605] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 75.949339][ T3605] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 75.952265][ T3605] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 76.431096][ T3605] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 76.433776][ T3605] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.477027][ T4455] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 76.861654][ T3321] usb 1-1: USB disconnect, device number 2 [ 76.866477][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 76.998978][ T4487] kAFS: Can only specify source 'none' with -o dyn [ 77.020691][ T4487] ipt_CLUSTERIP: Please specify destination IP [ 81.328432][ T4039] block nbd0: Receive control failed (result -32) [ 84.876879][ T4581] udc-core: couldn't find an available UDC or it's busy [ 84.878847][ T4581] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 84.986870][ T4585] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 84.989093][ T4586] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 86.757066][ T4595] netlink: 'syz.4.127': attribute type 10 has an invalid length. [ 86.808343][ T4595] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 86.868482][ T4598] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 88.481663][ T4611] device batadv1 entered promiscuous mode [ 88.484027][ T4611] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 88.489590][ T4611] udc-core: couldn't find an available UDC or it's busy [ 88.491510][ T4611] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 90.521092][ T4635] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 92.286377][ T4654] netlink: 'syz.2.143': attribute type 10 has an invalid length. [ 92.297470][ T4654] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 92.946361][ T4647] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 93.982332][ T4675] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 94.901893][ T4689] Zero length message leads to an empty skb [ 95.230076][ T136] wlan1: Trigger new scan to find an IBSS to join [ 95.340683][ T4694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.155'. [ 96.302037][ T4709] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 97.139479][ T4712] netlink: 'syz.4.162': attribute type 10 has an invalid length. [ 97.901099][ T4731] kAFS: Can only specify source 'none' with -o dyn [ 98.654066][ T4733] udc-core: couldn't find an available UDC or it's busy [ 98.655987][ T4733] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 101.442233][ T4745] device batadv1 entered promiscuous mode [ 101.444407][ T4745] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 101.450064][ T4745] udc-core: couldn't find an available UDC or it's busy [ 101.452045][ T4745] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 101.459662][ T4524] wlan1: Trigger new scan to find an IBSS to join [ 104.781633][ T4783] kAFS: Can only specify source 'none' with -o dyn [ 106.536336][ T148] wlan1: Creating new IBSS network, BSSID 76:09:f3:64:8b:1d [ 107.055130][ T4777] netlink: 'syz.3.179': attribute type 10 has an invalid length. [ 107.068023][ T4777] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.098983][ T4825] device batadv2 entered promiscuous mode [ 110.101230][ T4825] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 110.406629][ T4825] udc-core: couldn't find an available UDC or it's busy [ 110.408430][ T4825] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 111.701177][ T4839] kAFS: Can only specify source 'none' with -o dyn [ 113.912909][ T4851] netlink: 'syz.1.200': attribute type 10 has an invalid length. [ 115.737369][ T4886] kAFS: Can only specify source 'none' with -o dyn [ 115.762081][ T4886] ipt_CLUSTERIP: Please specify destination IP [ 118.240247][ T4909] netlink: 'syz.0.215': attribute type 10 has an invalid length. [ 118.252255][ T4909] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 120.631960][ T4932] kAFS: Can only specify source 'none' with -o dyn [ 120.634585][ T4932] ipt_CLUSTERIP: Please specify destination IP [ 124.274153][ T4950] netlink: 'syz.0.230': attribute type 10 has an invalid length. [ 124.579917][ T4954] device batadv3 entered promiscuous mode [ 124.586585][ T4954] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 124.709530][ T4954] udc-core: couldn't find an available UDC or it's busy [ 124.711561][ T4954] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 129.294703][ T5000] netlink: 'syz.3.245': attribute type 10 has an invalid length. [ 131.158445][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.163881][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.464959][ T5036] device batadv1 entered promiscuous mode [ 133.467303][ T5036] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 133.473483][ T5036] udc-core: couldn't find an available UDC or it's busy [ 133.475441][ T5036] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 136.911628][ T153] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 139.494425][ T5092] kAFS: Can only specify source 'none' with -o dyn [ 139.537257][ T5092] ipt_CLUSTERIP: Please specify destination IP [ 139.882238][ T5105] device batadv1 entered promiscuous mode [ 139.885004][ T5105] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 139.892307][ T5105] udc-core: couldn't find an available UDC or it's busy [ 139.894249][ T5105] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 141.769539][ T13] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 142.846346][ T13] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.849446][ T13] usb 1-1: config 1 interface 0 has no altsetting 0 [ 143.006588][ T13] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 143.009219][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.011470][ T13] usb 1-1: Product: syz [ 143.012759][ T13] usb 1-1: Manufacturer: syz [ 143.018335][ T13] usb 1-1: SerialNumber: syz [ 143.349767][ T13] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input2 [ 143.365526][ T13] usb 1-1: USB disconnect, device number 3 [ 146.378887][ T5167] device batadv1 entered promiscuous mode [ 146.381146][ T5167] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 146.846264][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 147.346443][ T13] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.349463][ T13] usb 1-1: config 0 interface 0 has no altsetting 0 [ 147.351560][ T13] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 147.358557][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.372799][ T13] usb 1-1: config 0 descriptor?? [ 148.155135][ T13] hid-generic 0003:05AC:027A.0001: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 148.257802][ T5189] udc-core: couldn't find an available UDC or it's busy [ 148.273813][ T5189] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 149.129641][ T4128] usb 1-1: USB disconnect, device number 4 [ 150.353375][ T5222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 151.715637][ T5237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 151.948034][ T5227] netlink: 'syz.4.312': attribute type 10 has an invalid length. [ 152.546626][ T5245] device batadv2 entered promiscuous mode [ 152.559820][ T5245] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 153.233813][ T5254] udc-core: couldn't find an available UDC or it's busy [ 153.235676][ T5254] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 153.426750][ T5256] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 154.190816][ T5269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 154.563712][ T5274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 159.004829][ T5318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 159.281556][ T5329] udc-core: couldn't find an available UDC or it's busy [ 159.283419][ T5329] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 159.459597][ T5333] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 160.701958][ T5343] device batadv2 entered promiscuous mode [ 160.709180][ T5343] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 160.818379][ T5343] udc-core: couldn't find an available UDC or it's busy [ 160.820377][ T5343] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 162.563212][ T5356] netlink: 104 bytes leftover after parsing attributes in process `syz.3.352'. [ 163.350252][ T5381] udc-core: couldn't find an available UDC or it's busy [ 163.352282][ T5381] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 163.414232][ T5382] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 163.936116][ T4128] Bluetooth: hci0: command 0x0406 tx timeout [ 163.937921][ T4128] Bluetooth: hci3: command 0x0406 tx timeout [ 163.946424][ T4128] Bluetooth: hci4: command 0x0406 tx timeout [ 163.973515][ T3321] Bluetooth: hci2: command 0x0406 tx timeout [ 163.975883][ T3321] Bluetooth: hci1: command 0x0406 tx timeout [ 165.697825][ T5416] lo speed is unknown, defaulting to 1000 [ 165.700526][ T5416] lo speed is unknown, defaulting to 1000 [ 165.711373][ T5416] lo speed is unknown, defaulting to 1000 [ 165.742675][ T5416] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 165.811249][ T5416] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 166.181993][ T5416] lo speed is unknown, defaulting to 1000 [ 166.184285][ T5416] lo speed is unknown, defaulting to 1000 [ 166.186764][ T5416] lo speed is unknown, defaulting to 1000 [ 166.188840][ T5416] lo speed is unknown, defaulting to 1000 [ 166.190862][ T5416] lo speed is unknown, defaulting to 1000 [ 166.584211][ T5422] device batadv2 entered promiscuous mode [ 166.586539][ T5422] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 168.471865][ T3321] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 168.986629][ T4163] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 170.961565][ T5454] netlink: 'syz.0.379': attribute type 10 has an invalid length. [ 170.971425][ T5466] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 177.448227][ T5528] device batadv3 entered promiscuous mode [ 177.454510][ T5528] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 177.926619][ T4075] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 178.121148][ T5522] netlink: 'syz.1.397': attribute type 10 has an invalid length. [ 178.346403][ T4075] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.349020][ T4075] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.351076][ T4075] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 178.353510][ T4075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.525549][ T4075] usb 1-1: config 0 descriptor?? [ 178.571188][ T5538] kAFS: Can only specify source 'none' with -o dyn [ 178.574995][ T5538] ipt_CLUSTERIP: Please specify destination IP [ 179.747072][ T5545] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 179.823043][ T4075] hid-generic 0003:05AC:027A.0002: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 181.108204][ T3321] usb 1-1: USB disconnect, device number 6 [ 183.656294][ T5581] kAFS: Can only specify source 'none' with -o dyn [ 183.756500][ T5581] ipt_CLUSTERIP: Please specify destination IP [ 188.404406][ T5627] kAFS: Can only specify source 'none' with -o dyn [ 188.407056][ T5627] ipt_CLUSTERIP: Please specify destination IP [ 191.454681][ T5650] netlink: 'syz.0.432': attribute type 10 has an invalid length. [ 192.579553][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.584121][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.389233][ T5677] kAFS: Can only specify source 'none' with -o dyn [ 193.392162][ T5677] ipt_CLUSTERIP: Please specify destination IP [ 193.655850][ T5682] [ 193.656572][ T5682] ====================================================== [ 193.658447][ T5682] WARNING: possible circular locking dependency detected [ 193.660239][ T5682] 5.15.185-syzkaller #0 Not tainted [ 193.661629][ T5682] ------------------------------------------------------ [ 193.663497][ T5682] syz.1.442/5682 is trying to acquire lock: [ 193.665076][ T5682] ffff8000162886e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 193.667306][ T5682] [ 193.667306][ T5682] but task is already holding lock: [ 193.669323][ T5682] ffff0000cb4f4120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_setsockopt+0x274/0xa5c [ 193.671799][ T5682] [ 193.671799][ T5682] which lock already depends on the new lock. [ 193.671799][ T5682] [ 193.674581][ T5682] [ 193.674581][ T5682] the existing dependency chain (in reverse order) is: [ 193.676997][ T5682] [ 193.676997][ T5682] -> #1 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 193.679027][ T5682] lock_sock_nested+0xd8/0x1d4 [ 193.680449][ T5682] ax25_device_event+0x20c/0x590 [ 193.681940][ T5682] raw_notifier_call_chain+0xd4/0x164 [ 193.683520][ T5682] dev_close_many+0x2cc/0x440 [ 193.684843][ T5682] dev_close+0x148/0x1f8 [ 193.686140][ T5682] bpq_device_event+0x318/0x824 [ 193.687541][ T5682] raw_notifier_call_chain+0xd4/0x164 [ 193.689108][ T5682] dev_close_many+0x2cc/0x440 [ 193.690495][ T5682] dev_close+0x148/0x1f8 [ 193.691747][ T5682] bond_setup_by_slave+0x70/0x318 [ 193.693440][ T5682] bond_enslave+0x624/0x3014 [ 193.694866][ T5682] bond_do_ioctl+0x6ec/0xb3c [ 193.696286][ T5682] dev_ifsioc+0xc44/0xef4 [ 193.697722][ T5682] dev_ioctl+0x4d0/0xc94 [ 193.698969][ T5682] sock_do_ioctl+0x18c/0x240 [ 193.700305][ T5682] sock_ioctl+0x5c8/0x87c [ 193.701571][ T5682] __arm64_sys_ioctl+0x14c/0x1c8 [ 193.703102][ T5682] invoke_syscall+0x98/0x2b8 [ 193.704424][ T5682] el0_svc_common+0x138/0x258 [ 193.705842][ T5682] do_el0_svc+0x58/0x14c [ 193.707067][ T5682] el0_svc+0x78/0x1e0 [ 193.708204][ T5682] el0t_64_sync_handler+0xcc/0xe4 [ 193.709636][ T5682] el0t_64_sync+0x1a0/0x1a4 [ 193.710969][ T5682] [ 193.710969][ T5682] -> #0 (rtnl_mutex){+.+.}-{3:3}: [ 193.712914][ T5682] __lock_acquire+0x2928/0x651c [ 193.714304][ T5682] lock_acquire+0x1f4/0x620 [ 193.715616][ T5682] __mutex_lock_common+0x194/0x1edc [ 193.717096][ T5682] mutex_lock_nested+0xac/0x11c [ 193.718504][ T5682] rtnl_lock+0x20/0x2c [ 193.719692][ T5682] ax25_setsockopt+0x870/0xa5c [ 193.721061][ T5682] __sys_setsockopt+0x2f8/0x4b0 [ 193.722475][ T5682] __arm64_sys_setsockopt+0xb8/0xd4 [ 193.724058][ T5682] invoke_syscall+0x98/0x2b8 [ 193.725416][ T5682] el0_svc_common+0x138/0x258 [ 193.726736][ T5682] do_el0_svc+0x58/0x14c [ 193.728053][ T5682] el0_svc+0x78/0x1e0 [ 193.729255][ T5682] el0t_64_sync_handler+0xcc/0xe4 [ 193.730688][ T5682] el0t_64_sync+0x1a0/0x1a4 [ 193.732062][ T5682] [ 193.732062][ T5682] other info that might help us debug this: [ 193.732062][ T5682] [ 193.734677][ T5682] Possible unsafe locking scenario: [ 193.734677][ T5682] [ 193.736667][ T5682] CPU0 CPU1 [ 193.738066][ T5682] ---- ---- [ 193.739473][ T5682] lock(sk_lock-AF_AX25); [ 193.740596][ T5682] lock(rtnl_mutex); [ 193.742336][ T5682] lock(sk_lock-AF_AX25); [ 193.744140][ T5682] lock(rtnl_mutex); [ 193.745181][ T5682] [ 193.745181][ T5682] *** DEADLOCK *** [ 193.745181][ T5682] [ 193.747286][ T5682] 1 lock held by syz.1.442/5682: [ 193.748547][ T5682] #0: ffff0000cb4f4120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_setsockopt+0x274/0xa5c [ 193.751221][ T5682] [ 193.751221][ T5682] stack backtrace: [ 193.752800][ T5682] CPU: 1 PID: 5682 Comm: syz.1.442 Not tainted 5.15.185-syzkaller #0 [ 193.754895][ T5682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 193.757557][ T5682] Call trace: [ 193.758416][ T5682] dump_backtrace+0x0/0x43c [ 193.759594][ T5682] show_stack+0x2c/0x3c [ 193.760736][ T5682] __dump_stack+0x30/0x40 [ 193.761915][ T5682] dump_stack_lvl+0xf8/0x160 [ 193.763113][ T5682] dump_stack+0x1c/0x5c [ 193.764329][ T5682] print_circular_bug+0x148/0x1b0 [ 193.765740][ T5682] check_noncircular+0x240/0x2d4 [ 193.767018][ T5682] __lock_acquire+0x2928/0x651c [ 193.768271][ T5682] lock_acquire+0x1f4/0x620 [ 193.769488][ T5682] __mutex_lock_common+0x194/0x1edc [ 193.770884][ T5682] mutex_lock_nested+0xac/0x11c [ 193.772150][ T5682] rtnl_lock+0x20/0x2c [ 193.773228][ T5682] ax25_setsockopt+0x870/0xa5c [ 193.774539][ T5682] __sys_setsockopt+0x2f8/0x4b0 [ 193.775885][ T5682] __arm64_sys_setsockopt+0xb8/0xd4 [ 193.777270][ T5682] invoke_syscall+0x98/0x2b8 [ 193.778519][ T5682] el0_svc_common+0x138/0x258 [ 193.779732][ T5682] do_el0_svc+0x58/0x14c [ 193.780919][ T5682] el0_svc+0x78/0x1e0 [ 193.782041][ T5682] el0t_64_sync_handler+0xcc/0xe4 [ 193.783356][ T5682] el0t_64_sync+0x1a0/0x1a4 [ 193.784635][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.961248][ T5679] ================================================================== [ 193.963518][ T5679] BUG: KASAN: use-after-free in ax25_release+0x4c8/0x814 [ 193.965528][ T5679] Read of size 8 at addr ffff0000d290f208 by task syz.1.442/5679 [ 193.967611][ T5679] [ 193.968236][ T5679] CPU: 0 PID: 5679 Comm: syz.1.442 Not tainted 5.15.185-syzkaller #0 [ 193.970496][ T5679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 193.973266][ T5679] Call trace: [ 193.974151][ T5679] dump_backtrace+0x0/0x43c [ 193.975383][ T5679] show_stack+0x2c/0x3c [ 193.976524][ T5679] __dump_stack+0x30/0x40 [ 193.977701][ T5679] dump_stack_lvl+0xf8/0x160 [ 193.978898][ T5679] print_address_description+0x78/0x30c [ 193.980378][ T5679] kasan_report+0xec/0x15c [ 193.981532][ T5679] __asan_report_load8_noabort+0x44/0x50 [ 193.983016][ T5679] ax25_release+0x4c8/0x814 [ 193.984225][ T5679] sock_close+0xb4/0x1f8 [ 193.985425][ T5679] __fput+0x1c0/0x7f8 [ 193.986475][ T5679] ____fput+0x20/0x30 [ 193.987573][ T5679] task_work_run+0x12c/0x1e0 [ 193.988852][ T5679] do_notify_resume+0x24b4/0x3128 [ 193.990123][ T5679] el0_svc+0xf0/0x1e0 [ 193.991184][ T5679] el0t_64_sync_handler+0xcc/0xe4 [ 193.992526][ T5679] el0t_64_sync+0x1a0/0x1a4 [ 193.993722][ T5679] [ 193.994366][ T5679] Allocated by task 4241: [ 193.995561][ T5679] __kasan_kmalloc+0xb0/0xf0 [ 193.996816][ T5679] kmem_cache_alloc_trace+0x274/0x3fc [ 193.998259][ T5679] ax25_dev_device_up+0x5c/0x540 [ 193.999588][ T5679] ax25_device_event+0x504/0x590 [ 194.000954][ T5679] raw_notifier_call_chain+0xd4/0x164 [ 194.002377][ T5679] __dev_notify_flags+0x250/0x46c [ 194.003676][ T5679] dev_change_flags+0xc8/0x154 [ 194.004906][ T5679] dev_ifsioc+0x504/0xef4 [ 194.006079][ T5679] dev_ioctl+0x4d0/0xc94 [ 194.007190][ T5679] sock_do_ioctl+0x18c/0x240 [ 194.008349][ T5679] sock_ioctl+0x5c8/0x87c [ 194.009504][ T5679] __arm64_sys_ioctl+0x14c/0x1c8 [ 194.010811][ T5679] invoke_syscall+0x98/0x2b8 [ 194.012034][ T5679] el0_svc_common+0x138/0x258 [ 194.013245][ T5679] do_el0_svc+0x58/0x14c [ 194.014406][ T5679] el0_svc+0x78/0x1e0 [ 194.015524][ T5679] el0t_64_sync_handler+0xcc/0xe4 [ 194.016879][ T5679] el0t_64_sync+0x1a0/0x1a4 [ 194.018115][ T5679] [ 194.018695][ T5679] Freed by task 5680: [ 194.019763][ T5679] kasan_set_track+0x4c/0x84 [ 194.021003][ T5679] kasan_set_free_info+0x28/0x4c [ 194.022302][ T5679] ____kasan_slab_free+0x118/0x164 [ 194.023672][ T5679] __kasan_slab_free+0x18/0x28 [ 194.024926][ T5679] slab_free_freelist_hook+0x128/0x1e8 [ 194.026365][ T5679] kfree+0x170/0x40c [ 194.027394][ T5679] ax25_dev_device_down+0x468/0x67c [ 194.028853][ T5679] ax25_device_event+0x538/0x590 [ 194.030175][ T5679] raw_notifier_call_chain+0xd4/0x164 [ 194.031608][ T5679] __dev_notify_flags+0x250/0x46c [ 194.032935][ T5679] dev_change_flags+0xc8/0x154 [ 194.034214][ T5679] dev_ifsioc+0x504/0xef4 [ 194.035402][ T5679] dev_ioctl+0x4d0/0xc94 [ 194.036524][ T5679] sock_do_ioctl+0x18c/0x240 [ 194.037751][ T5679] sock_ioctl+0x5c8/0x87c [ 194.038912][ T5679] __arm64_sys_ioctl+0x14c/0x1c8 [ 194.040235][ T5679] invoke_syscall+0x98/0x2b8 [ 194.041468][ T5679] el0_svc_common+0x138/0x258 [ 194.042771][ T5679] do_el0_svc+0x58/0x14c [ 194.043945][ T5679] el0_svc+0x78/0x1e0 [ 194.045020][ T5679] el0t_64_sync_handler+0xcc/0xe4 [ 194.046475][ T5679] el0t_64_sync+0x1a0/0x1a4 [ 194.047659][ T5679] [ 194.048305][ T5679] The buggy address belongs to the object at ffff0000d290f200 [ 194.048305][ T5679] which belongs to the cache kmalloc-256 of size 256 [ 194.052107][ T5679] The buggy address is located 8 bytes inside of [ 194.052107][ T5679] 256-byte region [ffff0000d290f200, ffff0000d290f300) [ 194.055572][ T5679] The buggy address belongs to the page: [ 194.057107][ T5679] page:00000000a4302929 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000d290e000 pfn:0x11290e [ 194.060206][ T5679] head:00000000a4302929 order:1 compound_mapcount:0 [ 194.061907][ T5679] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 194.064080][ T5679] raw: 05ffc00000010200 fffffc0003047908 fffffc00030b7b08 ffff0000c0002480 [ 194.066354][ T5679] raw: ffff0000d290e000 000000000010000d 00000001ffffffff 0000000000000000 [ 194.068637][ T5679] page dumped because: kasan: bad access detected [ 194.070382][ T5679] [ 194.071011][ T5679] Memory state around the buggy address: [ 194.072508][ T5679] ffff0000d290f100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.074606][ T5679] ffff0000d290f180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.076755][ T5679] >ffff0000d290f200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.078939][ T5679] ^ [ 194.080107][ T5679] ffff0000d290f280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.082395][ T5679] ffff0000d290f300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.084560][ T5679] ================================================================== [ 194.236301][ T5679] Unable to handle kernel paging request at virtual address aca0037f00001bd8 [ 194.238840][ T5679] Mem abort info: [ 194.239972][ T5679] ESR = 0x0000000096000004 [ 194.241326][ T5679] EC = 0x25: DABT (current EL), IL = 32 bits [ 194.244059][ T5679] SET = 0, FnV = 0 [ 194.255705][ T5679] EA = 0, S1PTW = 0 [ 194.261696][ T5679] FSC = 0x04: level 0 translation fault [ 194.273573][ T5679] Data abort info: [ 194.278034][ T5679] ISV = 0, ISS = 0x00000004 [ 194.283102][ T5679] CM = 0, WnR = 0 [ 194.286381][ T5679] [aca0037f00001bd8] address between user and kernel address ranges [ 194.293121][ T5679] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 194.295062][ T5679] Modules linked in: [ 194.296094][ T5679] CPU: 1 PID: 5679 Comm: syz.1.442 Tainted: G B 5.15.185-syzkaller #0 [ 194.298633][ T5679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.301264][ T5679] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 194.303315][ T5679] pc : ax25_release+0x4f4/0x814 [ 194.304698][ T5679] lr : ax25_release+0x4ec/0x814 [ 194.306162][ T5679] sp : ffff800020147a00 [ 194.307245][ T5679] x29: ffff800020147a20 x28: dfff800000000000 x27: ffff0000cb4f4080 [ 194.309388][ T5679] x26: ffff0000d209c828 x25: 0000000000000002 x24: 00000000ffffffff [ 194.311520][ T5679] x23: aca0037f00001bd8 x22: ffff0000d290f200 x21: ffff0000de3b6018 [ 194.313654][ T5679] x20: ffff0000cb4f4000 x19: 1fffe0001a413905 x18: 0000000000000002 [ 194.315773][ T5679] x17: 0000000040000000 x16: ffff8000082d4c48 x15: 0000000000000002 [ 194.317910][ T5679] x14: 0000000000ff0100 x13: ffffffffffffffff x12: 0000000000ff0100 [ 194.320017][ T5679] x11: 0000000000000000 x10: 0000000000000000 x9 : ffff80001044cac4 [ 194.322214][ T5679] x8 : ffff0000d8329b40 x7 : 0000000000000000 x6 : ffff80000824419c [ 194.324400][ T5679] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80001044cab8 [ 194.326522][ T5679] x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000001 [ 194.328628][ T5679] Call trace: [ 194.329486][ T5679] ax25_release+0x4f4/0x814 [ 194.330669][ T5679] sock_close+0xb4/0x1f8 [ 194.331812][ T5679] __fput+0x1c0/0x7f8 [ 194.332912][ T5679] ____fput+0x20/0x30 [ 194.333955][ T5679] task_work_run+0x12c/0x1e0 [ 194.335154][ T5679] do_notify_resume+0x24b4/0x3128 [ 194.336513][ T5679] el0_svc+0xf0/0x1e0 [ 194.337591][ T5679] el0t_64_sync_handler+0xcc/0xe4 [ 194.338997][ T5679] el0t_64_sync+0x1a0/0x1a4 [ 194.340179][ T5679] Code: d503201f 9600afd7 52800038 4b1803f8 (b87802f8) [ 194.342004][ T5679] ---[ end trace dd41c2853ab437dc ]--- [ 194.712031][ T5679] Kernel panic - not syncing: Oops: Fatal exception [ 194.713913][ T5679] SMP: stopping secondary CPUs [ 194.715360][ T5679] Kernel Offset: disabled [ 194.716683][ T5679] CPU features: 0x8,000081c1,21302e40 [ 194.718249][ T5679] Memory Limit: none [ 195.082738][ T5679] Rebooting in 86400 seconds..