last executing test programs: 5.001364943s ago: executing program 2 (id=15): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r4}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setgroups(0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000758b83f74d7e6226907385e4fa6ee7ed909bb28491e923a94596011522bef42a107de48a9b61f918c4da799163a6"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r8 = syz_open_pts(r7, 0x0) ppoll(&(0x7f0000000140)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x3) socket$can_raw(0x1d, 0x3, 0x1) 4.246035349s ago: executing program 3 (id=18): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r3, 0x3, 0x4, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x4}, {}, {0x2}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x20040084) 4.009867273s ago: executing program 2 (id=20): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x4}, {}, {0x2}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x20040084) 4.009363192s ago: executing program 4 (id=21): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") 3.901638205s ago: executing program 1 (id=22): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r3, &(0x7f0000000240)=ANY=[], 0x40000) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f00000004c0)=""/249, 0xf9, 0x40, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000006800010025bd7000feffffff0a0000000000000004000b00060007000800000008000500", @ANYRES32, @ANYBLOB="f49542404a8c33f085052eebebcffb4ff50b46b7b1976f25b39f4a3939dbf5f5741a4d0ff3282ef2976d8e8b41a3117a736423c8058045420874"], 0x2c}}, 0x40040d0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) readv(0xffffffffffffffff, &(0x7f0000000600)=[{0x0}], 0x1) 3.569391611s ago: executing program 4 (id=23): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x1c) open(&(0x7f0000000140)='./bus\x00', 0x141bc2, 0x1c0) 3.550256712s ago: executing program 1 (id=24): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000002c0)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) 3.492944173s ago: executing program 4 (id=25): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r4}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setgroups(0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000758b83f74d7e6226907385e4fa6ee7ed909bb28491e923a94596011522bef42a107de48a9b61f918c4da799163a6"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) dup3(r7, r3, 0x0) ppoll(&(0x7f0000000140)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) socket$can_raw(0x1d, 0x3, 0x1) 2.868451605s ago: executing program 1 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x1ee}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x2, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff}, {0x4000000, 0x6}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x9}, {}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0xd, 0x349ab8f8}, {}, {}, {0x0, 0xfffefffd, 0x0, 0xffffffff, 0x0, 0x10}, {0x9, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f, 0x0, 0x0, 0xfffffffe, 0x8}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xbe2}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x4, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0xb, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x6}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x1ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {0x5}, {}, {}, {}, {0x3}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x3, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {0x4}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {0x4}, {0x2}, {}, {0x5}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 2.825417416s ago: executing program 3 (id=27): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x0) 2.724181298s ago: executing program 0 (id=28): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000005a80)={0x0, 0x0, &(0x7f0000005a40)={&(0x7f00000059c0)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 2.720791617s ago: executing program 2 (id=29): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) 2.661316299s ago: executing program 3 (id=30): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r4}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setgroups(0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000758b83f74d7e6226907385e4fa6ee7ed909bb28491e923a94596011522bef42a107de48a9b61f918c4da799163a6"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r8 = syz_open_pts(r7, 0x0) ppoll(&(0x7f0000000140)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x3) socket$can_raw(0x1d, 0x3, 0x1) 2.661066899s ago: executing program 1 (id=31): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) 2.531411001s ago: executing program 0 (id=32): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 2.12273317s ago: executing program 4 (id=33): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) 1.768779986s ago: executing program 2 (id=34): keyctl$clear(0x7, 0xfffffffffffffffa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_rr_get_interval(r0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000080000000000000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @rand_addr=' \x01\x00', 0x4}, {0xa, 0x0, 0x2, @empty, 0x86}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r7, 0x3}}, 0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) close(r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)='F', 0x1}, {0x0}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r10], 0x20, 0x2400e044}, 0xff0f) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000005b00000000000000000a971d00000000000000000000000032fdf9e414cd0fc0213b7aeaeb0c1302d2ca4a591d0686523b8ec628453267309f0d11d1e015d2df985e1e33dfc8e4578904f948f9988652554d7d87a1f8caeb69ab47195f8c336dc7634cd23c89ff8461d070c1d8eba87a195099671cc10e83f6dd094b1ae8977ca06661b980f50384f8bcf76abb7828171776"], 0x48) fcntl$getownex(r11, 0x10, &(0x7f0000000100)) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r4, r11}, 0xc) unshare(0x62040200) 1.768364436s ago: executing program 3 (id=35): socket(0x10, 0x803, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18010000400100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './mnt\x00'}, 0x6e) 1.725363167s ago: executing program 1 (id=36): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) lchown(0x0, 0x0, 0x0) 1.725001777s ago: executing program 1 (id=37): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r5, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r3, 0x3, 0x4, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x4}, {}, {0x2}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x20040084) 1.722784087s ago: executing program 0 (id=38): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x88983, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x5420, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ppoll(&(0x7f0000000100)=[{r0, 0x2068}], 0x1, 0x0, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 1.59848547s ago: executing program 4 (id=39): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x4}, {}, {0x2}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x20040084) 1.57280403s ago: executing program 0 (id=40): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2c, r0, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 1.521362231s ago: executing program 3 (id=41): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x800) read$qrtrtun(r0, 0x0, 0x0) 966.561831ms ago: executing program 2 (id=42): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1b) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 960.130252ms ago: executing program 0 (id=43): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r4}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setgroups(0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000758b83f74d7e6226907385e4fa6ee7ed909bb28491e923a94596011522bef42a107de48a9b61f918c4da799163a6"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) dup3(r7, r3, 0x0) ppoll(&(0x7f0000000140)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) socket$can_raw(0x1d, 0x3, 0x1) 913.349663ms ago: executing program 3 (id=44): fsopen(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) r1 = syz_open_pts(r0, 0x141601) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x400008, 0x1ffffffe, 0x0, 0x200007, 0x19, "680c1acfa4a5000000070000faffffff000800"}) 712.538687ms ago: executing program 2 (id=45): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0x0, 0x9d, &(0x7f0000000300)='trans=rdma,') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x7}, 0x18) pipe2(0x0, 0x4800) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 129.124468ms ago: executing program 4 (id=46): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r4}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setgroups(0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000758b83f74d7e6226907385e4fa6ee7ed909bb28491e923a94596011522bef42a107de48a9b61f918c4da799163a6"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) dup3(r7, r3, 0x0) ppoll(&(0x7f0000000140)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) socket$can_raw(0x1d, 0x3, 0x1) 0s ago: executing program 0 (id=47): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) pivot_root(0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts. [ 44.577473][ T4172] cgroup: Unknown subsys name 'net' [ 44.743974][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 45.860269][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 47.166668][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 47.194978][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 47.211522][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 47.266904][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 47.305898][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.313573][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.321513][ T4183] device bridge_slave_0 entered promiscuous mode [ 47.342037][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 47.356251][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.363374][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.371366][ T4183] device bridge_slave_1 entered promiscuous mode [ 47.424838][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.432053][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.439978][ T4193] device bridge_slave_0 entered promiscuous mode [ 47.455456][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.462627][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.470847][ T4182] device bridge_slave_0 entered promiscuous mode [ 47.485204][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.492429][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.500415][ T4193] device bridge_slave_1 entered promiscuous mode [ 47.509945][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.517000][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.524711][ T4182] device bridge_slave_1 entered promiscuous mode [ 47.533404][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.544439][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.598901][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.620938][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.627995][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.638330][ T4188] device bridge_slave_0 entered promiscuous mode [ 47.652087][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.662902][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.674169][ T4183] team0: Port device team_slave_0 added [ 47.682484][ T4183] team0: Port device team_slave_1 added [ 47.688364][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.695667][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.703429][ T4188] device bridge_slave_1 entered promiscuous mode [ 47.723528][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.753067][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.760292][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.767880][ T4190] device bridge_slave_0 entered promiscuous mode [ 47.789692][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.796634][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.823008][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.841255][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.848304][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.856830][ T4190] device bridge_slave_1 entered promiscuous mode [ 47.865656][ T4193] team0: Port device team_slave_0 added [ 47.877346][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.885083][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.911008][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.923861][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.941992][ T4182] team0: Port device team_slave_0 added [ 47.948666][ T4193] team0: Port device team_slave_1 added [ 47.965110][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.987318][ T4182] team0: Port device team_slave_1 added [ 48.015503][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.037777][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.044872][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.071169][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.083643][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.090844][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.116764][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.130122][ T4188] team0: Port device team_slave_0 added [ 48.140555][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.157600][ T4183] device hsr_slave_0 entered promiscuous mode [ 48.165594][ T4183] device hsr_slave_1 entered promiscuous mode [ 48.177717][ T4188] team0: Port device team_slave_1 added [ 48.195994][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.203172][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.229282][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.241296][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.248237][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.274826][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.316043][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.323350][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.349563][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.361971][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.368913][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.395170][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.414944][ T4190] team0: Port device team_slave_0 added [ 48.425106][ T4190] team0: Port device team_slave_1 added [ 48.445568][ T4193] device hsr_slave_0 entered promiscuous mode [ 48.452569][ T4193] device hsr_slave_1 entered promiscuous mode [ 48.459024][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.466750][ T4193] Cannot create hsr debugfs directory [ 48.494034][ T4182] device hsr_slave_0 entered promiscuous mode [ 48.501069][ T4182] device hsr_slave_1 entered promiscuous mode [ 48.507610][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.515215][ T4182] Cannot create hsr debugfs directory [ 48.539518][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.546456][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.572592][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.607246][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.614208][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.640241][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.713670][ T4188] device hsr_slave_0 entered promiscuous mode [ 48.720491][ T4188] device hsr_slave_1 entered promiscuous mode [ 48.727291][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.734939][ T4188] Cannot create hsr debugfs directory [ 48.761304][ T4190] device hsr_slave_0 entered promiscuous mode [ 48.767825][ T4190] device hsr_slave_1 entered promiscuous mode [ 48.774411][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.782077][ T4190] Cannot create hsr debugfs directory [ 48.890314][ T3521] Bluetooth: hci3: command 0x0409 tx timeout [ 48.896891][ T3521] Bluetooth: hci1: command 0x0409 tx timeout [ 48.899299][ T1324] Bluetooth: hci4: command 0x0409 tx timeout [ 48.908415][ T3521] Bluetooth: hci0: command 0x0409 tx timeout [ 48.915016][ T3521] Bluetooth: hci2: command 0x0409 tx timeout [ 49.000228][ T4182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.010632][ T4182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.019449][ T4182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.028824][ T4182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.093830][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.103952][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.128463][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.139226][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.159919][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 49.189316][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 49.198060][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 49.220203][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.229751][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 49.243327][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.258258][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.268352][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.286978][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.322131][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.333805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.346191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.363082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.378000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.387627][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.394813][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.424309][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.439377][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.447665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.456286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.466080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.475366][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.482429][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.503965][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.513294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.522907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.541904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.552264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.560804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.569129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.578209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.586511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.596211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.604617][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.616827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.625960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.647612][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.658356][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.667860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.677043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.686265][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.729747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.738395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.753072][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.760171][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.768459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.778469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.786880][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.793920][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.802214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.811058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.825857][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.854491][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.867405][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.877804][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.906057][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.922450][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.930475][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.937977][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.947171][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.956136][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.964520][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.972998][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.986619][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.008560][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.015952][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.025452][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.034814][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.042578][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.051796][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.067433][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.075562][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.087714][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.096459][ T1492] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.103513][ T1492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.118270][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.136605][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.145467][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.158154][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.166838][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.183015][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.193299][ T1492] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.200356][ T1492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.208320][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.216968][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.225506][ T1492] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.232570][ T1492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.240439][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.249262][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.266106][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.286086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.298723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.307026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.321578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.335106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.344269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.352611][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.359662][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.367244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.375957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.384636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.393193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.401872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.410755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.419000][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.426066][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.457944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.466280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.475870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.484752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.495945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.504486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.513541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.523224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.531920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.540264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.548632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.557065][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.564115][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.572671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.581015][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.589101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.608032][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.621649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.632129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.640948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.649523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.658067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.666038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.678859][ T4182] device veth0_vlan entered promiscuous mode [ 50.694169][ T4182] device veth1_vlan entered promiscuous mode [ 50.711569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.721481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.731873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.743567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.751982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.760024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.768196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.776492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.785524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.794818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.803708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.812133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.827491][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.834933][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.843635][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.864187][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.878324][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.892928][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.907146][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.915848][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.927578][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.936397][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.948321][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.956627][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.965367][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.969457][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 50.973481][ T4251] Bluetooth: hci0: command 0x041b tx timeout [ 50.979547][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 50.987351][ T4182] device veth0_macvtap entered promiscuous mode [ 50.996816][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 50.997272][ T4251] Bluetooth: hci4: command 0x041b tx timeout [ 51.029662][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.037605][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.066478][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.074250][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.084645][ T4182] device veth1_macvtap entered promiscuous mode [ 51.101708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.117687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.135160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.157549][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.170537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.194048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.208519][ T4183] device veth0_vlan entered promiscuous mode [ 51.224166][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.242837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.259472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.267692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.276769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.286970][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.315273][ T4183] device veth1_vlan entered promiscuous mode [ 51.322504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.331668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.340876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.348262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.358642][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.373159][ T4182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.383672][ T4182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.393104][ T4182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.402504][ T4182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.422418][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.433774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.441370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.479587][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.492714][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.508740][ T4193] device veth0_vlan entered promiscuous mode [ 51.524404][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.533725][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.542865][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.551850][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.561080][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.568653][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.580211][ T4183] device veth0_macvtap entered promiscuous mode [ 51.590184][ T4183] device veth1_macvtap entered promiscuous mode [ 51.607808][ T4193] device veth1_vlan entered promiscuous mode [ 51.642037][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.657539][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.666373][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.674844][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.683973][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.724777][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.739157][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.751014][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.759862][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.768370][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.777289][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.786068][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.794899][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.821215][ T1492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.822442][ T4193] device veth0_macvtap entered promiscuous mode [ 51.829145][ T1492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.840369][ T4193] device veth1_macvtap entered promiscuous mode [ 51.857135][ T4190] device veth0_vlan entered promiscuous mode [ 51.869479][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.877503][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.886700][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.895471][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.904560][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.912375][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.921265][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.929482][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.937085][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.957799][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.971070][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.981990][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.992841][ T4188] device veth0_vlan entered promiscuous mode [ 52.000129][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.008201][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.016727][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.025586][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.034240][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.042479][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.058828][ T4190] device veth1_vlan entered promiscuous mode [ 52.075472][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.085258][ T1492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.089613][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.095826][ T1492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.107761][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.118346][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.131237][ T4188] device veth1_vlan entered promiscuous mode [ 52.137951][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.149110][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.158964][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.170201][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.181314][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.191459][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.201990][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.213020][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.223613][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.234554][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.244527][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.253456][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.261778][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.270946][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.279460][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.287901][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.296385][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.316154][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.325031][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.334935][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.343837][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.382916][ T4188] device veth0_macvtap entered promiscuous mode [ 52.395755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.405528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.434079][ T4190] device veth0_macvtap entered promiscuous mode [ 52.454951][ T4188] device veth1_macvtap entered promiscuous mode [ 52.462143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.470554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.478306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.487249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.501114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.511770][ T4190] device veth1_macvtap entered promiscuous mode [ 52.589060][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.600059][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.613025][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.623869][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.634216][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.644885][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.657351][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.678324][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.687401][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.695408][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.696008][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.708143][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.720558][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.731875][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.742591][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.766359][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.782005][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.793955][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.808868][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.839779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.850771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.866226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.878110][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.893199][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.906056][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.915074][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.929368][ T4290] hub 8-0:1.0: USB hub found [ 52.934636][ T4290] hub 8-0:1.0: 1 port detected [ 52.949906][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.960966][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.972230][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.982983][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.993110][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.003862][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.015813][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.026685][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.038480][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.049698][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 53.062438][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.063674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.079845][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 53.079942][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.091506][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 53.096692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.100249][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 53.110720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.114436][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 53.137701][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.148747][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.158706][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.172538][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.182603][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.195978][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.206059][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.217241][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.228179][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.238414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.247324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.262031][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.273848][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.283186][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.293446][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.304606][ T1492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.324195][ T1492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.352859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.478464][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.494038][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.516413][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.533131][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.575983][ T1492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.586513][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.596337][ T4303] loop0: detected capacity change from 0 to 512 [ 53.632063][ T1492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.642141][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.689553][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.697474][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.717746][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.725867][ T1492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.772354][ T25] audit: type=1326 audit(1757591756.866:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e1e44ba9 code=0x7ffc0000 [ 53.795301][ T25] audit: type=1326 audit(1757591756.866:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f32e1e44ba9 code=0x7ffc0000 [ 53.810119][ T241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.842158][ T4303] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 53.859535][ T4303] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.884631][ T241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.894374][ T25] audit: type=1326 audit(1757591756.986:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e1e44ba9 code=0x7ffc0000 [ 53.917733][ T25] audit: type=1326 audit(1757591757.016:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4310 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32e1e44ba9 code=0x7ffc0000 [ 53.958979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.986858][ T25] audit: type=1326 audit(1757591757.036:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4315 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f32e1e77465 code=0x7ffc0000 [ 54.009732][ T4313] device pim6reg1 entered promiscuous mode [ 54.104344][ T25] audit: type=1326 audit(1757591757.196:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4315 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f32e1e44ba9 code=0x7ffc0000 [ 54.235671][ T4323] loop1: detected capacity change from 0 to 1024 [ 54.273458][ T4325] netlink: 272 bytes leftover after parsing attributes in process `syz.3.12'. [ 54.338051][ T4323] ======================================================= [ 54.338051][ T4323] WARNING: The mand mount option has been deprecated and [ 54.338051][ T4323] and is ignored by this kernel. Remove the mand [ 54.338051][ T4323] option from the mount to silence this warning. [ 54.338051][ T4323] ======================================================= [ 54.385140][ T25] audit: type=1326 audit(1757591757.476:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2509970ba9 code=0x7ffc0000 [ 54.443019][ T25] audit: type=1326 audit(1757591757.476:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2509970ba9 code=0x7ffc0000 [ 54.485675][ T4323] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.487723][ T25] audit: type=1326 audit(1757591757.526:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2509970ba9 code=0x7ffc0000 [ 54.690745][ T25] audit: type=1326 audit(1757591757.526:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2509970ba9 code=0x7ffc0000 [ 54.704168][ T4323] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.2: Allocating blocks 385-513 which overlap fs metadata [ 54.792185][ T4345] netlink: 830 bytes leftover after parsing attributes in process `syz.2.15'. [ 54.811585][ T4345] lo speed is unknown, defaulting to 1000 [ 54.817981][ T4345] lo speed is unknown, defaulting to 1000 [ 54.830300][ T4345] lo speed is unknown, defaulting to 1000 [ 54.852382][ T4345] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 54.888919][ T4345] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 55.051006][ T4345] lo speed is unknown, defaulting to 1000 [ 55.062542][ T4345] lo speed is unknown, defaulting to 1000 [ 55.073974][ T4345] lo speed is unknown, defaulting to 1000 [ 55.085574][ T4345] lo speed is unknown, defaulting to 1000 [ 55.097053][ T4345] lo speed is unknown, defaulting to 1000 [ 55.108363][ T4345] lo speed is unknown, defaulting to 1000 [ 55.186712][ T4297] Bluetooth: hci2: command 0x0419 tx timeout [ 55.192965][ T4297] Bluetooth: hci1: command 0x0419 tx timeout [ 55.199588][ T4297] Bluetooth: hci0: command 0x0419 tx timeout [ 55.205724][ T4297] Bluetooth: hci3: command 0x0419 tx timeout [ 55.212537][ T4297] Bluetooth: hci4: command 0x0419 tx timeout [ 55.485463][ T4323] EXT4-fs (loop1): pa ffff888075726700: logic 16, phys. 129, len 24 [ 55.493836][ T4323] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 55.553177][ T4353] loop4: detected capacity change from 0 to 512 [ 55.739085][ T4353] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #3: comm syz.4.21: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 55.786540][ T4353] EXT4-fs error (device loop4): ext4_quota_enable:6420: comm syz.4.21: Bad quota inode: 3, type: 0 [ 55.817685][ T4353] EXT4-fs warning (device loop4): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 55.836935][ T4353] EXT4-fs (loop4): mount failed [ 56.234769][ T4374] netlink: 830 bytes leftover after parsing attributes in process `syz.4.25'. [ 56.250908][ T4374] lo speed is unknown, defaulting to 1000 [ 56.256931][ T4374] lo speed is unknown, defaulting to 1000 [ 56.265224][ T4374] lo speed is unknown, defaulting to 1000 [ 56.311130][ T4374] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 56.481581][ T4374] lo speed is unknown, defaulting to 1000 [ 56.492189][ T4374] lo speed is unknown, defaulting to 1000 [ 56.499735][ T4374] lo speed is unknown, defaulting to 1000 [ 56.510436][ T4374] lo speed is unknown, defaulting to 1000 [ 56.521538][ T4374] lo speed is unknown, defaulting to 1000 [ 56.532482][ T4374] lo speed is unknown, defaulting to 1000 [ 56.936217][ T4385] IPv6: Can't replace route, no match found [ 57.178475][ T4392] netlink: 830 bytes leftover after parsing attributes in process `syz.3.30'. [ 57.193075][ T4392] siw: device registration error -23 [ 58.596980][ T4422] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.638083][ T4422] FAT-fs (loop5): unable to read boot sector [ 58.656253][ T4426] loop3: detected capacity change from 0 to 512 [ 58.832182][ T4432] netlink: 830 bytes leftover after parsing attributes in process `syz.0.43'. [ 58.850585][ T4432] siw: device registration error -23 [ 58.898051][ T4426] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 59.163276][ T4426] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.433741][ T4435] [ 59.449558][ T4435] ============================= [ 59.454418][ T4435] WARNING: suspicious RCU usage [ 59.541539][ T4435] syzkaller #0 Not tainted [ 59.564937][ T4435] ----------------------------- [ 59.588468][ T4435] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 59.632836][ T4435] [ 59.632836][ T4435] other info that might help us debug this: [ 59.632836][ T4435] [ 59.644774][ T4435] [ 59.644774][ T4435] rcu_scheduler_active = 2, debug_locks = 1 [ 59.653211][ T4435] 1 lock held by syz.2.45/4435: [ 59.668329][ T4435] #0: ffffffff8d237d88 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 59.679463][ T4435] [ 59.679463][ T4435] stack backtrace: [ 59.685722][ T4435] CPU: 0 PID: 4435 Comm: syz.2.45 Not tainted syzkaller #0 [ 59.692918][ T4435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 59.702976][ T4435] Call Trace: [ 59.706249][ T4435] [ 59.709173][ T4435] dump_stack_lvl+0x168/0x230 [ 59.713853][ T4435] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 59.719479][ T4435] ? show_regs_print_info+0x20/0x20 [ 59.724671][ T4435] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 59.730300][ T4435] ? local_bh_enable+0x20/0x20 [ 59.735073][ T4435] ? local_bh_enable+0x20/0x20 [ 59.739836][ T4435] rhltable_lookup+0x77b/0x790 [ 59.744606][ T4435] ? lock_chain_count+0x20/0x20 [ 59.749464][ T4435] ? mr_mfc_find_parent+0x190/0x190 [ 59.754657][ T4435] ? local_bh_enable+0x20/0x20 [ 59.759411][ T4435] ? preempt_schedule+0xa7/0xb0 [ 59.764255][ T4435] ? ipmr_mfc_add+0x21ad/0x2eb0 [ 59.769099][ T4435] ? preempt_schedule+0xa7/0xb0 [ 59.773942][ T4435] ? schedule_preempt_disabled+0x20/0x20 [ 59.779577][ T4435] ? lock_chain_count+0x20/0x20 [ 59.784425][ T4435] mr_mfc_find_any_parent+0xb6/0x1e0 [ 59.789726][ T4435] ? local_bh_enable+0x20/0x20 [ 59.794489][ T4435] ip_mr_forward+0x24c/0xf90 [ 59.799097][ T4435] ipmr_mfc_add+0x2466/0x2eb0 [ 59.803778][ T4435] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 59.808721][ T4435] ? __lock_acquire+0x7c60/0x7c60 [ 59.813760][ T4435] ip_mroute_setsockopt+0xe33/0x11a0 [ 59.819044][ T4435] ? ipmr_rule_default+0x70/0x70 [ 59.823996][ T4435] ? __might_sleep+0xf0/0xf0 [ 59.828583][ T4435] ip_setsockopt+0x4ad/0x3070 [ 59.833291][ T4435] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 59.838656][ T4435] ? aa_sk_perm+0x7b4/0x8f0 [ 59.843162][ T4435] ? aa_af_perm+0x2b0/0x2b0 [ 59.847672][ T4435] ? __fget_files+0x40f/0x480 [ 59.852350][ T4435] ? aa_sock_opt_perm+0x74/0x100 [ 59.857289][ T4435] ? sock_common_setsockopt+0x32/0xb0 [ 59.862655][ T4435] ? raw_setsockopt+0xc5/0x180 [ 59.867412][ T4435] ? sock_common_recvmsg+0x1b0/0x1b0 [ 59.872691][ T4435] __sys_setsockopt+0x2bf/0x3d0 [ 59.877541][ T4435] __x64_sys_setsockopt+0xb1/0xc0 [ 59.882558][ T4435] do_syscall_64+0x4c/0xa0 [ 59.886966][ T4435] ? clear_bhb_loop+0x30/0x80 [ 59.891642][ T4435] ? clear_bhb_loop+0x30/0x80 [ 59.896310][ T4435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 59.902204][ T4435] RIP: 0033:0x7f32e1e44ba9 [ 59.906614][ T4435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.926218][ T4435] RSP: 002b:00007f32e00ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 59.934636][ T4435] RAX: ffffffffffffffda RBX: 00007f32e208bfa0 RCX: 00007f32e1e44ba9 [ 59.942606][ T4435] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 59.950574][ T4435] RBP: 00007f32e1ec7e19 R08: 000000000000003c R09: 0000000000000000 [ 59.958544][ T4435] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 59.966510][ T4435] R13: 00007f32e208c038 R14: 00007f32e208bfa0 R15: 00007ffd9f28a928 [ 59.974491][ T4435] [ 59.999400][ T4435] [ 60.002650][ T4435] ============================= [ 60.008705][ T4435] WARNING: suspicious RCU usage [ 60.020639][ T4435] syzkaller #0 Not tainted [ 60.025395][ T4435] ----------------------------- [ 60.033946][ T4435] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 60.053291][ T4435] [ 60.053291][ T4435] other info that might help us debug this: [ 60.053291][ T4435] [ 60.064060][ T4435] [ 60.064060][ T4435] rcu_scheduler_active = 2, debug_locks = 1 [ 60.095716][ T4435] 1 lock held by syz.2.45/4435: [ 60.100742][ T4435] #0: ffffffff8d237d88 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 60.111030][ T4435] [ 60.111030][ T4435] stack backtrace: [ 60.117049][ T4435] CPU: 1 PID: 4435 Comm: syz.2.45 Not tainted syzkaller #0 [ 60.124243][ T4435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.134290][ T4435] Call Trace: [ 60.137569][ T4435] [ 60.140506][ T4435] dump_stack_lvl+0x168/0x230 [ 60.145187][ T4435] ? load_image+0x3b0/0x3b0 [ 60.149687][ T4435] ? show_regs_print_info+0x20/0x20 [ 60.154896][ T4435] ? lockdep_rcu_suspicious+0x110/0x180 [ 60.160439][ T4435] ? local_bh_enable+0x20/0x20 [ 60.165197][ T4435] rhltable_lookup+0x504/0x790 [ 60.169966][ T4435] ? local_bh_enable+0x20/0x20 [ 60.174727][ T4435] ? mr_mfc_find_parent+0x190/0x190 [ 60.179923][ T4435] ? local_bh_enable+0x20/0x20 [ 60.184676][ T4435] ? preempt_schedule+0xa7/0xb0 [ 60.189517][ T4435] ? ipmr_mfc_add+0x21ad/0x2eb0 [ 60.194361][ T4435] ? preempt_schedule+0xa7/0xb0 [ 60.199204][ T4435] ? schedule_preempt_disabled+0x20/0x20 [ 60.204868][ T4435] ? lock_chain_count+0x20/0x20 [ 60.209720][ T4435] mr_mfc_find_any_parent+0xb6/0x1e0 [ 60.215004][ T4435] ? local_bh_enable+0x20/0x20 [ 60.219772][ T4435] ip_mr_forward+0x24c/0xf90 [ 60.224368][ T4435] ipmr_mfc_add+0x2466/0x2eb0 [ 60.229055][ T4435] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 60.234014][ T4435] ? __lock_acquire+0x7c60/0x7c60 [ 60.239062][ T4435] ip_mroute_setsockopt+0xe33/0x11a0 [ 60.244347][ T4435] ? ipmr_rule_default+0x70/0x70 [ 60.249295][ T4435] ? __might_sleep+0xf0/0xf0 [ 60.253882][ T4435] ip_setsockopt+0x4ad/0x3070 [ 60.258563][ T4435] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 60.263927][ T4435] ? aa_sk_perm+0x7b4/0x8f0 [ 60.268435][ T4435] ? aa_af_perm+0x2b0/0x2b0 [ 60.272947][ T4435] ? __fget_files+0x40f/0x480 [ 60.277640][ T4435] ? aa_sock_opt_perm+0x74/0x100 [ 60.282577][ T4435] ? sock_common_setsockopt+0x32/0xb0 [ 60.287943][ T4435] ? raw_setsockopt+0xc5/0x180 [ 60.292706][ T4435] ? sock_common_recvmsg+0x1b0/0x1b0 [ 60.298000][ T4435] __sys_setsockopt+0x2bf/0x3d0 [ 60.302871][ T4435] __x64_sys_setsockopt+0xb1/0xc0 [ 60.307900][ T4435] do_syscall_64+0x4c/0xa0 [ 60.312314][ T4435] ? clear_bhb_loop+0x30/0x80 [ 60.316986][ T4435] ? clear_bhb_loop+0x30/0x80 [ 60.321663][ T4435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.327557][ T4435] RIP: 0033:0x7f32e1e44ba9 [ 60.331967][ T4435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.351663][ T4435] RSP: 002b:00007f32e00ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 60.360081][ T4435] RAX: ffffffffffffffda RBX: 00007f32e208bfa0 RCX: 00007f32e1e44ba9 [ 60.368048][ T4435] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 60.376017][ T4435] RBP: 00007f32e1ec7e19 R08: 000000000000003c R09: 0000000000000000 [ 60.383985][ T4435] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 60.391991][ T4435] R13: 00007f32e208c038 R14: 00007f32e208bfa0 R15: 00007ffd9f28a928 [ 60.399977][ T4435] [ 60.417244][ T4435] [ 60.419697][ T4435] ============================= [ 60.424605][ T4435] WARNING: suspicious RCU usage [ 60.435037][ T4435] syzkaller #0 Not tainted [ 60.439568][ T4435] ----------------------------- [ 60.444556][ T4435] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 60.461681][ T4435] [ 60.461681][ T4435] other info that might help us debug this: [ 60.461681][ T4435] [ 60.476171][ T4435] [ 60.476171][ T4435] rcu_scheduler_active = 2, debug_locks = 1 [ 60.485618][ T4435] 1 lock held by syz.2.45/4435: [ 60.497978][ T4435] #0: ffffffff8d237d88 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 60.509046][ T4435] [ 60.509046][ T4435] stack backtrace: [ 60.520902][ T4435] CPU: 1 PID: 4435 Comm: syz.2.45 Not tainted syzkaller #0 [ 60.528108][ T4435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.538150][ T4435] Call Trace: [ 60.541422][ T4435] [ 60.544349][ T4435] dump_stack_lvl+0x168/0x230 [ 60.549024][ T4435] ? load_image+0x3b0/0x3b0 [ 60.553523][ T4435] ? show_regs_print_info+0x20/0x20 [ 60.558725][ T4435] ? lockdep_rcu_suspicious+0x110/0x180 [ 60.564268][ T4435] ? local_bh_enable+0x20/0x20 [ 60.569030][ T4435] rhltable_lookup+0x5f8/0x790 [ 60.573797][ T4435] ? local_bh_enable+0x20/0x20 [ 60.578559][ T4435] ? mr_mfc_find_parent+0x190/0x190 [ 60.583749][ T4435] ? local_bh_enable+0x20/0x20 [ 60.588506][ T4435] ? preempt_schedule+0xa7/0xb0 [ 60.593345][ T4435] ? ipmr_mfc_add+0x21ad/0x2eb0 [ 60.598193][ T4435] ? preempt_schedule+0xa7/0xb0 [ 60.603039][ T4435] ? schedule_preempt_disabled+0x20/0x20 [ 60.608666][ T4435] ? lock_chain_count+0x20/0x20 [ 60.613541][ T4435] mr_mfc_find_any_parent+0xb6/0x1e0 [ 60.618808][ T4435] ? local_bh_enable+0x20/0x20 [ 60.623549][ T4435] ip_mr_forward+0x24c/0xf90 [ 60.628140][ T4435] ipmr_mfc_add+0x2466/0x2eb0 [ 60.632797][ T4435] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 60.637707][ T4435] ? __lock_acquire+0x7c60/0x7c60 [ 60.642713][ T4435] ip_mroute_setsockopt+0xe33/0x11a0 [ 60.647981][ T4435] ? ipmr_rule_default+0x70/0x70 [ 60.652904][ T4435] ? __might_sleep+0xf0/0xf0 [ 60.657483][ T4435] ip_setsockopt+0x4ad/0x3070 [ 60.662145][ T4435] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 60.667506][ T4435] ? aa_sk_perm+0x7b4/0x8f0 [ 60.671991][ T4435] ? aa_af_perm+0x2b0/0x2b0 [ 60.676473][ T4435] ? __fget_files+0x40f/0x480 [ 60.681128][ T4435] ? aa_sock_opt_perm+0x74/0x100 [ 60.686039][ T4435] ? sock_common_setsockopt+0x32/0xb0 [ 60.691387][ T4435] ? raw_setsockopt+0xc5/0x180 [ 60.696124][ T4435] ? sock_common_recvmsg+0x1b0/0x1b0 [ 60.701382][ T4435] __sys_setsockopt+0x2bf/0x3d0 [ 60.706210][ T4435] __x64_sys_setsockopt+0xb1/0xc0 [ 60.711211][ T4435] do_syscall_64+0x4c/0xa0 [ 60.715614][ T4435] ? clear_bhb_loop+0x30/0x80 [ 60.720265][ T4435] ? clear_bhb_loop+0x30/0x80 [ 60.724918][ T4435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.730807][ T4435] RIP: 0033:0x7f32e1e44ba9 [ 60.735197][ T4435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.754774][ T4435] RSP: 002b:00007f32e00ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 60.763175][ T4435] RAX: ffffffffffffffda RBX: 00007f32e208bfa0 RCX: 00007f32e1e44ba9 [ 60.771128][ T4435] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 60.779090][ T4435] RBP: 00007f32e1ec7e19 R08: 000000000000003c R09: 0000000000000000 [ 60.787040][ T4435] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 60.794987][ T4435] R13: 00007f32e208c038 R14: 00007f32e208bfa0 R15: 00007ffd9f28a928 [ 60.802941][ T4435] [ 60.808266][ T4441] netlink: 830 bytes leftover after parsing attributes in process `syz.4.46'.