last executing test programs: 12.463150536s ago: executing program 0 (id=327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = syz_clone(0x28080200, &(0x7f0000000280)="aa1f4c63520c7d5a6a360296ff0252c613758f09fb3805694ab7c3f120241659a50dfe1ca3a26d8216977aa377d70af80dfdeeaa1886d76bd0845ae79e9e82b53c868d6aadf0447d6924bc4a49c112d36d4606ee0b154c5c01b7e03991c00145f198e90055f7f2c2a449ac6e74368729ab05ad8da4c37936109624384259e6609a7fa6872c30c48ea81fc55f9a2aa14e5dfaefe34968e3ca1068620eeff61ecb52c79e14247cc1e1247d8d7ff2b72883b8d8eeee69aa9d3bcd1701b999564806c361601b007b84ec3b4ed50c7acea54de081639e7b42de", 0xd7, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000480)="0e01afc0b15d861ad4e05a16001a45a6cee0d9771f9a322604731f05a1a18874f74c334b33be5ec4ae2588ebcbf8ae1aee9ee79cb815968958c392b345d705aa1a02ebe9321d5685a2bc48c0685cc49900afd08d5d561055ee6b9093b1447015385f6a20115486f8a0fe0946b58a") ioprio_set$pid(0x1, r2, 0x4007) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 12.150363871s ago: executing program 0 (id=330): fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x20) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0xc0189436, &(0x7f0000000000)={'bridge_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x78, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}, {0x4}]}, 0x78}}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x80044100, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x902, 0x12) 12.105241602s ago: executing program 4 (id=331): fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x20) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0xc0189436, &(0x7f0000000000)={'bridge_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/profiling', 0x149282, 0x1d4) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x902, 0x12) 11.973827624s ago: executing program 2 (id=332): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d"], 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) close_range(r0, r0, 0x0) 9.387460539s ago: executing program 2 (id=336): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2004c000) sendmmsg(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) setpriority(0x1, 0xff, 0x9) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x100, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x80000001) 9.054259495s ago: executing program 2 (id=338): fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x20) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0xc0189436, &(0x7f0000000000)={'bridge_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x78, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}, {0x4}]}, 0x78}}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/profiling', 0x149282, 0x1d4) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x902, 0x12) 8.73292848s ago: executing program 3 (id=339): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40090}, 0x20000800) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) 7.60067879s ago: executing program 3 (id=341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = syz_clone(0x28080200, &(0x7f0000000280)="aa1f4c63520c7d5a6a360296ff0252c613758f09fb3805694ab7c3f120241659a50dfe1ca3a26d8216977aa377d70af80dfdeeaa1886d76bd0845ae79e9e82b53c868d6aadf0447d6924bc4a49c112d36d4606ee0b154c5c01b7e03991c00145f198e90055f7f2c2a449ac6e74368729ab05ad8da4c37936109624384259e6609a7fa6872c30c48ea81fc55f9a2aa14e5dfaefe34968e3ca1068620eeff61ecb52c79e14247cc1e1247d8d7ff2b72883b8d8eeee69aa9d3bcd1701b999564806c361601b007b84ec3b4ed50c7acea54de081639e7b42de", 0xd7, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000480)="0e01afc0b15d861ad4e05a16001a45a6cee0d9771f9a322604731f05a1a18874f74c334b33be5ec4ae2588ebcbf8ae1aee9ee79cb815968958c392b345d705aa1a02ebe9321d5685a2bc48c0685cc49900afd08d5d561055ee6b9093b1447015385f6a20115486f8a0fe0946b58a") ioprio_set$pid(0x1, r2, 0x4007) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 7.291043785s ago: executing program 4 (id=342): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x4a800, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_ACT={0x4}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x157ea}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 7.218569306s ago: executing program 3 (id=343): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x0, {0x401, 0x7, 0xf, 0x8, 0x3b8000, 0x4}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000400)="929a775c663f947979b88bafdc67bc877fb216e145578909651d9cb9d620520428cd9d4fd17b0e80ba61e01fe45464ff3114cd5aa2ceacb015276b", 0x3b, 0x40002020}) io_uring_enter(r4, 0x3517, 0x173d, 0x42, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) socket$inet6(0xa, 0x2, 0x0) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r7, &(0x7f0000000440)=ANY=[], 0xb3) readv(r7, &(0x7f0000000380)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x2000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$pppl2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 7.158101427s ago: executing program 0 (id=344): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)="28e6ceb00e919b519d9c75d8fcf6370a0e5820a3ab6a48c49f564a91ccef167412e24838a1258d11365ba45a2f25b09276ee5b5f9480a756f4470ea61b2fb4efb8c84c471dc9", 0x46}, {&(0x7f0000000300)="1b3599cc95cb5e69b24ff9b2fd5b1d69d1f18403cf", 0x15}, {&(0x7f0000000940)="c28cbc11b3b6845850", 0x9}, {&(0x7f00000007c0)="d7f0c87b9c16ebce229c316d29e100250a98069fc5ae230095e24fcbfaacff36fd4ae2f47ef80c0282c8cb7b5d4f0b2328ce20cd402ac061011a72e0f78a7bf154ac5a9cd20ad0f13dab6df59af67d3e681182bb734ba03810", 0x59}], 0x4}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001000)="f61354896ddadd6dd551692941291945d2caf0abafead8cd7fd2f025a147883d47465e3249627f2b6d2b4369a2e4f351921ca1dc677d15439a9af8bfb6584ae738859237c725eca9fa90786a134c5eca039ee267ff15c8fa6256f89db34ac656eafeb770bb08cc8e70f3897c2be3cd0290b8ea22af63b5e42d3c548043b6aad2b85a18a853cfe5c0699a25f1d9fe71b4165504c43dbed4b9c5c2881197f1b385578aeb7c9e4766440192efba210730005f2f04c53d003b7f284691fec94044f0eb95deacb0d8751c47f2dc56f8339fff38a2fcdf2e17c75d1df8", 0xda}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.788097644s ago: executing program 2 (id=345): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x8c0, 0x80000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x26d7, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) process_madvise(r6, 0x0, 0x0, 0x64, 0x0) 6.608737927s ago: executing program 0 (id=346): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500", 0x1a}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e35f22", 0x21}], 0x2) socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014000700000000000000000500000000000000010800"], 0x74}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x8000000, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@addrtype={{0x2c}, {0x0, 0x280}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x2, 0x7}, {0x4, 0x2, 0x4}, 0xff}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x340) 6.105517125s ago: executing program 4 (id=347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xfff2, 0xfff1}, {0xffea, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) 4.69861337s ago: executing program 4 (id=350): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) lseek(r0, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x6, 0x2, 0x30323953, 0x0, 0x8, [{0x3, 0x7fffffff}, {0x4, 0x3}, {0x5, 0x5}, {0x3b9, 0x7}, {0xb, 0x1f2d2f2}, {0x7f3a, 0xd}, {0x6, 0x3}, {0xfffffff8, 0x4}], 0x8, 0x8, 0x8, 0x0, 0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) madvise(&(0x7f00001bd000/0x4000)=nil, 0x4000, 0xc) getpid() syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 3.854000984s ago: executing program 1 (id=351): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40090}, 0x20000800) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) 3.671989827s ago: executing program 2 (id=352): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) 3.016954329s ago: executing program 1 (id=353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e100000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}]}}]}, 0x38}}, 0x20000800) 2.775951943s ago: executing program 1 (id=354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = syz_clone(0x28080200, &(0x7f0000000280)="aa1f4c63520c7d5a6a360296ff0252c613758f09fb3805694ab7c3f120241659a50dfe1ca3a26d8216977aa377d70af80dfdeeaa1886d76bd0845ae79e9e82b53c868d6aadf0447d6924bc4a49c112d36d4606ee0b154c5c01b7e03991c00145f198e90055f7f2c2a449ac6e74368729ab05ad8da4c37936109624384259e6609a7fa6872c30c48ea81fc55f9a2aa14e5dfaefe34968e3ca1068620eeff61ecb52c79e14247cc1e1247d8d7ff2b72883b8d8eeee69aa9d3bcd1701b999564806c361601b007b84ec3b4ed50c7acea54de081639e7b42de", 0xd7, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000480)="0e01afc0b15d861ad4e05a16001a45a6cee0d9771f9a322604731f05a1a18874f74c334b33be5ec4ae2588ebcbf8ae1aee9ee79cb815968958c392b345d705aa1a02ebe9321d5685a2bc48c0685cc49900afd08d5d561055ee6b9093b1447015385f6a20115486f8a0fe0946b58a") ioprio_set$pid(0x1, r1, 0x4007) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 2.227351512s ago: executing program 0 (id=355): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioperm(0x284, 0x7f, 0xe3) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r5, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2.075433155s ago: executing program 1 (id=356): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)="28e6ceb00e919b519d9c75d8fcf6370a0e5820a3ab6a48c49f564a91ccef167412e24838a1258d11365ba45a2f25b09276ee5b5f9480a756f4470ea61b2fb4efb8c84c471dc9", 0x46}, {&(0x7f0000000300)="1b3599cc95cb5e69b24ff9b2fd5b1d69d1f18403cf", 0x15}, {&(0x7f0000000940)="c28cbc11b3b6845850", 0x9}, {&(0x7f00000007c0)="d7f0c87b9c16ebce229c316d29e100250a98069fc5ae230095e24fcbfaacff36fd4ae2f47ef80c0282c8cb7b5d4f0b2328ce20cd402ac061011a72e0f78a7bf154ac5a9cd20ad0f13dab6df59af67d3e681182bb734ba03810", 0x59}], 0x4}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001000)="f61354896ddadd6dd551692941291945d2caf0abafead8cd7fd2f025a147883d47465e3249627f2b6d2b4369a2e4f351921ca1dc677d15439a9af8bfb6584ae738859237c725eca9fa90786a134c5eca039ee267ff15c8fa6256f89db34ac656eafeb770bb08cc8e70f3897c2be3cd0290b8ea22af63b5e42d3c548043b6aad2b85a18a853cfe5c0699a25f1d9fe71b4165504c43dbed4b9c5c2881197f1b385578aeb7c9e4766440192efba210730005f2f04c53d003b7f284691fec94044f0eb95deacb0d8751c47f2dc56f8339fff38a2fcdf2e17c75d1df8", 0xda}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.657601812s ago: executing program 1 (id=357): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x4a800, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_ACT={0x4}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x157ea}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.614131303s ago: executing program 3 (id=358): bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(0xffffffffffffffff) write$FUSE_BMAP(r1, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0xc000, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x4000000000010046) 601.34064ms ago: executing program 4 (id=359): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) setpriority(0x1, 0xff, 0x9) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x100, 0x0, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x80000001) 440.295913ms ago: executing program 0 (id=360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xfff2, 0xfff1}, {0xffea, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) 404.062913ms ago: executing program 3 (id=361): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="090000000100", 0x6) 266.837096ms ago: executing program 2 (id=362): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x9}, {0xfff3}}}, 0x24}}, 0x0) 122.132878ms ago: executing program 4 (id=363): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40090}, 0x20000800) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) 105.174219ms ago: executing program 1 (id=364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}]}}]}, 0x38}}, 0x20000800) 0s ago: executing program 3 (id=365): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x0, {0x401, 0x7, 0xf, 0x8, 0x3b8000, 0x4}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000400)="929a775c663f947979b88bafdc67bc877fb216e145578909651d9cb9d620520428cd9d4fd17b0e80ba61e01fe45464ff3114cd5aa2ceacb015276b", 0x3b, 0x40002020}) io_uring_enter(r4, 0x3517, 0x173d, 0x42, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) socket$inet6(0xa, 0x2, 0x0) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r7, &(0x7f0000000440)=ANY=[], 0xb3) readv(r7, &(0x7f0000000380)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x15, 0x2, 0xfffffeff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. syzkaller login: [ 58.455613][ T4240] cgroup: Unknown subsys name 'net' [ 58.612475][ T4240] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.856041][ T4240] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.289479][ T4256] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.302487][ T4266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.310278][ T4266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.312957][ T4259] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.318794][ T4266] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.333394][ T4259] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.333728][ T4266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.342452][ T4259] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.348736][ T4266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.356872][ T4259] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.363029][ T4266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.370657][ T4259] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.377315][ T4266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.384296][ T4259] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.390942][ T4266] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.397871][ T4259] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.413293][ T4267] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.421386][ T4259] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.422194][ T4267] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.428691][ T4259] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.436589][ T4267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.443545][ T4259] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.457789][ T4259] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.465101][ T4259] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.472796][ T4259] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.479904][ T4259] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.480517][ T4266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.487414][ T4259] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.494819][ T4267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.509402][ T4266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.945601][ T4254] chnl_net:caif_netlink_parms(): no params data found [ 61.993010][ T4257] chnl_net:caif_netlink_parms(): no params data found [ 62.042396][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 62.121779][ T4255] chnl_net:caif_netlink_parms(): no params data found [ 62.185281][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.193622][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.201825][ T4254] device bridge_slave_0 entered promiscuous mode [ 62.229784][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 62.245316][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.252980][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.261208][ T4254] device bridge_slave_1 entered promiscuous mode [ 62.284000][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.291250][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.300075][ T4251] device bridge_slave_0 entered promiscuous mode [ 62.329782][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.337022][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.345101][ T4251] device bridge_slave_1 entered promiscuous mode [ 62.352761][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.359995][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.367983][ T4257] device bridge_slave_0 entered promiscuous mode [ 62.398445][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.405599][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.414599][ T4257] device bridge_slave_1 entered promiscuous mode [ 62.424267][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.453374][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.481249][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.514436][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.521699][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.530193][ T4255] device bridge_slave_0 entered promiscuous mode [ 62.541154][ T4255] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.548454][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.556465][ T4255] device bridge_slave_1 entered promiscuous mode [ 62.565031][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.576935][ T4254] team0: Port device team_slave_0 added [ 62.585289][ T4257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.617956][ T4254] team0: Port device team_slave_1 added [ 62.626285][ T4257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.676418][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.683841][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.692407][ T4250] device bridge_slave_0 entered promiscuous mode [ 62.701729][ T4255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.713685][ T4251] team0: Port device team_slave_0 added [ 62.737327][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.745149][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.753415][ T4250] device bridge_slave_1 entered promiscuous mode [ 62.762107][ T4255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.772851][ T4251] team0: Port device team_slave_1 added [ 62.779685][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.786658][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.812905][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.826824][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.834063][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.860670][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.879772][ T4257] team0: Port device team_slave_0 added [ 62.927058][ T4257] team0: Port device team_slave_1 added [ 62.974119][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.985506][ T4255] team0: Port device team_slave_0 added [ 62.992493][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.000166][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.026842][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.042536][ T4254] device hsr_slave_0 entered promiscuous mode [ 63.050352][ T4254] device hsr_slave_1 entered promiscuous mode [ 63.067095][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.079257][ T4255] team0: Port device team_slave_1 added [ 63.095003][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.102355][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.128909][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.157116][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.164285][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.191063][ T4257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.237046][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.244203][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.270438][ T4257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.290395][ T4250] team0: Port device team_slave_0 added [ 63.296819][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.304382][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.330798][ T4255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.347852][ T4251] device hsr_slave_0 entered promiscuous mode [ 63.354483][ T4251] device hsr_slave_1 entered promiscuous mode [ 63.361162][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.369461][ T4251] Cannot create hsr debugfs directory [ 63.385534][ T4250] team0: Port device team_slave_1 added [ 63.394389][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.401491][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.428713][ T4255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.495861][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.503180][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.529634][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.538441][ T4266] Bluetooth: hci3: command 0x0409 tx timeout [ 63.546532][ T4266] Bluetooth: hci2: command 0x0409 tx timeout [ 63.553445][ T47] Bluetooth: hci4: command 0x0409 tx timeout [ 63.567203][ T4255] device hsr_slave_0 entered promiscuous mode [ 63.574822][ T4255] device hsr_slave_1 entered promiscuous mode [ 63.581480][ T4255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.589298][ T4255] Cannot create hsr debugfs directory [ 63.607682][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 63.607892][ T4266] Bluetooth: hci0: command 0x0409 tx timeout [ 63.621758][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.629013][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.655292][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.683376][ T4257] device hsr_slave_0 entered promiscuous mode [ 63.690268][ T4257] device hsr_slave_1 entered promiscuous mode [ 63.696824][ T4257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.704618][ T4257] Cannot create hsr debugfs directory [ 63.829919][ T4250] device hsr_slave_0 entered promiscuous mode [ 63.836857][ T4250] device hsr_slave_1 entered promiscuous mode [ 63.843974][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.851683][ T4250] Cannot create hsr debugfs directory [ 64.050421][ T4254] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.063660][ T4254] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.074193][ T4254] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.086597][ T4254] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.165636][ T4251] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.190917][ T4251] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.202717][ T4251] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.213171][ T4251] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.277865][ T4255] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.315241][ T4255] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.324538][ T4255] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.344767][ T4255] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.372649][ T4250] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.382774][ T4250] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.393253][ T4250] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.406792][ T4250] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.428684][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.491967][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.502311][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.543546][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.565190][ T4257] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.576157][ T4257] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.598147][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.613959][ T4257] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.623943][ T4257] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.646031][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.670953][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.680666][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.689548][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.700124][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.709560][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.716732][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.735270][ T4255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.755164][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.767441][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.775883][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.785207][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.793901][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.801440][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.814557][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.828227][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.852059][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.861476][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.871044][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.878294][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.893859][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.917115][ T4255] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.926282][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.935960][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.945481][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.954306][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.964824][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.973686][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.981895][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.990747][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.006089][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.015570][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.040041][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.049170][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.058767][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.065842][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.074409][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.084089][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.092940][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.100074][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.108532][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.117022][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.126882][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.135887][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.143155][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.151014][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.159370][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.198710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.210462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.221532][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.228841][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.238313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.246992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.257034][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.265614][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.274518][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.283756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.293586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.302548][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.309732][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.317862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.333376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.342148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.351609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.360794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.372733][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.381312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.390692][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.403702][ T4254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.415730][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.443030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.451897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.460726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.470864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.481471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.490525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.499373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.509608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.518322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.527069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.536613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.545629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.555115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.568159][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.584129][ T4257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.605594][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.613776][ T4266] Bluetooth: hci2: command 0x041b tx timeout [ 65.613795][ T4256] Bluetooth: hci3: command 0x041b tx timeout [ 65.619910][ T4266] Bluetooth: hci4: command 0x041b tx timeout [ 65.643652][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.676730][ T4250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.688388][ T4266] Bluetooth: hci0: command 0x041b tx timeout [ 65.690002][ T4256] Bluetooth: hci1: command 0x041b tx timeout [ 65.711315][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.737919][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.747070][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.776898][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.785995][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.795612][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.804337][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.813901][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.823321][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.855137][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.873444][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.888371][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.912049][ T4257] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.949374][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.969441][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.998542][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.005786][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.029608][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.075796][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.096105][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.113938][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.121163][ T4313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.150562][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.175857][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.230681][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.251915][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.271074][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.281601][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.323173][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.332394][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.342639][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.356840][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.366216][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.382733][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.394479][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.415935][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.443532][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.463166][ T4255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.474984][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.496073][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.562703][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.575000][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.585443][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.594771][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.632553][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.658354][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.674136][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.684633][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.699672][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.714881][ T4254] device veth0_vlan entered promiscuous mode [ 66.726101][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.748138][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.765443][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.775599][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.791522][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.823521][ T4254] device veth1_vlan entered promiscuous mode [ 66.833220][ T4255] device veth0_vlan entered promiscuous mode [ 66.840962][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.851782][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.861580][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.924083][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.934877][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.943841][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.952148][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.962633][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.972370][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.981614][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.993038][ T4255] device veth1_vlan entered promiscuous mode [ 67.007200][ T4250] device veth0_vlan entered promiscuous mode [ 67.022172][ T4254] device veth0_macvtap entered promiscuous mode [ 67.031813][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.041282][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.051495][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.061824][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.070913][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.079873][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.088853][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.096755][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.114424][ T4250] device veth1_vlan entered promiscuous mode [ 67.129345][ T4254] device veth1_macvtap entered promiscuous mode [ 67.142852][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.151573][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.160119][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.168797][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.177309][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.185893][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.220134][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.228781][ T4251] device veth0_vlan entered promiscuous mode [ 67.242459][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.255909][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.269463][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.285413][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.314642][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.324166][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.344836][ T4251] device veth1_vlan entered promiscuous mode [ 67.368384][ T4254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.377367][ T4254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.391102][ T4254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.399903][ T4254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.428071][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.436723][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.447215][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.458794][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.468177][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.477005][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.498243][ T4255] device veth0_macvtap entered promiscuous mode [ 67.522914][ T4250] device veth0_macvtap entered promiscuous mode [ 67.551660][ T4255] device veth1_macvtap entered promiscuous mode [ 67.575844][ T4250] device veth1_macvtap entered promiscuous mode [ 67.597347][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.620464][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.634315][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.643177][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.658360][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.667112][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.680588][ T4251] device veth0_macvtap entered promiscuous mode [ 67.687833][ T4256] Bluetooth: hci3: command 0x040f tx timeout [ 67.693976][ T4256] Bluetooth: hci2: command 0x040f tx timeout [ 67.697989][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 67.715633][ T4251] device veth1_macvtap entered promiscuous mode [ 67.736304][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.753578][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.767693][ T4256] Bluetooth: hci0: command 0x040f tx timeout [ 67.775090][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.787541][ T4256] Bluetooth: hci1: command 0x040f tx timeout [ 67.813283][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.831112][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.846874][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.859109][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.870755][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.878578][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.886731][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.895192][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.904355][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.913172][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.922255][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.945191][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.959087][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.969229][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.980243][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.990359][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.001901][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.013623][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.033136][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.044489][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.056966][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.066596][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.079109][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.090409][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.101322][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.112764][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.121992][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.131124][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.140138][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.149169][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.158780][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.168651][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.180291][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.191662][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.201442][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.205108][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.220574][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.225731][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.240090][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.251652][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.262991][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.282821][ T4250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.293966][ T4250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.303463][ T4250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.312457][ T4250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.327057][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.335773][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.351155][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.360467][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.369559][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.380950][ T4251] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.390805][ T4251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.399744][ T4251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.410357][ T4251] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.423824][ T4255] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.433004][ T4255] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.441750][ T4255] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.451526][ T4255] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.510072][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.520827][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.540224][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.554013][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.566299][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.581361][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.589263][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.647094][ T4257] device veth0_vlan entered promiscuous mode [ 68.688371][ T4257] device veth1_vlan entered promiscuous mode [ 68.755124][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.776088][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.786635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.838580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.855856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.869699][ T4337] loop3: detected capacity change from 0 to 128 [ 68.873470][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.890985][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.919961][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.929001][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.945766][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.963304][ T4257] device veth0_macvtap entered promiscuous mode [ 69.002925][ T4313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.022139][ T4257] device veth1_macvtap entered promiscuous mode [ 69.029208][ T4313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.045858][ T26] audit: type=1800 audit(1749324723.170:2): pid=4337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="file0" dev="loop3" ino=1048583 res=0 errno=0 [ 69.051814][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.085733][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.095622][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.128458][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.136634][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.149799][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.152049][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.172741][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.175652][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.183127][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.192169][ T4337] syz.3.4: attempt to access beyond end of device [ 69.192169][ T4337] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 69.208343][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.230570][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.243724][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.257785][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.273442][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.288485][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.294898][ T9] kworker/u4:0: attempt to access beyond end of device [ 69.294898][ T9] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 69.298509][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.323903][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.332263][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.342797][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.351839][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.387167][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.396366][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.409645][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.442358][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.463467][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.476017][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.493162][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.505209][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.521769][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.535514][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.584188][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.669184][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.693468][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.830798][ T4344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 69.897836][ T4256] Bluetooth: hci4: command 0x0419 tx timeout [ 69.905864][ T4256] Bluetooth: hci3: command 0x0419 tx timeout [ 69.913834][ T4256] Bluetooth: hci2: command 0x0419 tx timeout [ 69.921677][ T4256] Bluetooth: hci1: command 0x0419 tx timeout [ 69.928594][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 70.046497][ T4257] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.148442][ T4257] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.232525][ T4257] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.368102][ T4257] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.442742][ T14] cfg80211: failed to load regulatory.db [ 70.702373][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.712752][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.792501][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.804001][ T4355] loop1: detected capacity change from 0 to 512 [ 70.826519][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.888794][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.899009][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.923208][ T4355] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 70.994674][ T4355] EXT4-fs (loop1): orphan cleanup on readonly fs [ 71.073630][ T4355] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 71.085742][ T4355] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.106870][ T4355] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 71.134430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.213092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 71.221611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 71.229952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 71.239382][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.246574][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.267980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.284864][ T4355] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2: bg 0: block 40: padding at end of block bitmap is not set [ 71.347778][ T4371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 71.369064][ T4371] device hsr_slave_0 left promiscuous mode [ 71.391034][ T4355] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 71.415836][ T4371] device hsr_slave_1 left promiscuous mode [ 71.468227][ T4355] EXT4-fs (loop1): 1 truncate cleaned up [ 71.474171][ T4355] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 71.605757][ T4375] kernel profiling enabled (shift: 63) [ 71.616381][ T4375] profiling shift: 63 too large [ 71.654136][ T4355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 71.997407][ T4377] capability: warning: `syz.3.12' uses deprecated v2 capabilities in a way that may be insecure [ 72.572260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.620764][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 72.648152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.656527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.665726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 72.674148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 77.289702][ T4416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18'. [ 78.688018][ T4423] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 78.866104][ T52] block nbd4: Attempted send on invalid socket [ 78.872693][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 78.893541][ T4426] SQUASHFS error: Failed to read block 0x0: -5 [ 79.044304][ T4426] unable to read squashfs_super_block [ 80.538985][ T4436] Zero length message leads to an empty skb [ 81.057695][ T4448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28'. [ 85.067860][ T4488] kernel profiling enabled (shift: 63) [ 85.073379][ T4488] profiling shift: 63 too large [ 85.635161][ T4496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 89.581521][ T4534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 89.850506][ T4541] loop3: detected capacity change from 0 to 512 [ 89.855210][ T4539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'. [ 89.873706][ T4539] netlink: 'syz.1.54': attribute type 5 has an invalid length. [ 89.882177][ T4539] netlink: 20 bytes leftover after parsing attributes in process `syz.1.54'. [ 90.001774][ T4539] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 90.033935][ T4539] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 90.045188][ T4539] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 90.055479][ T4539] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 90.065957][ T4539] device geneve2 entered promiscuous mode [ 90.096798][ T4541] EXT4-fs: Ignoring removed i_version option [ 90.437705][ T4541] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.681718][ T4541] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 91.175491][ T4541] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 91.197782][ T4541] EXT4-fs (loop3): 1 truncate cleaned up [ 91.217707][ T4541] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 92.383952][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 94.052333][ T4577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 95.020945][ T4601] loop1: detected capacity change from 0 to 512 [ 95.049299][ T4601] EXT4-fs: Ignoring removed i_version option [ 96.632486][ T4601] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 96.822855][ T4601] EXT4-fs (loop1): 1 truncate cleaned up [ 96.867701][ T4601] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 97.155019][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 97.458706][ T4617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 97.470229][ T4617] netlink: 'syz.3.77': attribute type 5 has an invalid length. [ 97.478586][ T4617] netlink: 20 bytes leftover after parsing attributes in process `syz.3.77'. [ 97.509519][ T4617] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 97.518804][ T4617] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 97.530424][ T4617] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 97.539677][ T4617] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 97.554077][ T4617] device geneve2 entered promiscuous mode [ 98.966087][ T4638] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 99.031954][ T26] audit: type=1326 audit(1749324753.160:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ff18e929 code=0x7fc00000 [ 100.067626][ T4347] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.378623][ T4653] loop3: detected capacity change from 0 to 512 [ 100.385703][ T4653] EXT4-fs: Ignoring removed i_version option [ 100.520848][ T4653] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.560747][ T4347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.598937][ T4347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.634297][ T4653] EXT4-fs (loop3): 1 truncate cleaned up [ 100.657604][ T4347] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.673340][ T4653] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 100.749751][ T4347] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.834538][ T4347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.889632][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 101.017743][ T4347] usb 5-1: config 0 descriptor?? [ 101.311832][ T26] audit: type=1326 audit(1749324755.440:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9ff18e929 code=0x7fc00000 [ 101.340219][ T4347] usbhid 5-1:0.0: can't add hid device: -71 [ 101.371751][ T4347] usbhid: probe of 5-1:0.0 failed with error -71 [ 101.389674][ T26] audit: type=1326 audit(1749324755.440:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ff18e929 code=0x7fc00000 [ 101.414310][ T26] audit: type=1326 audit(1749324755.440:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ff18e929 code=0x7fc00000 [ 101.441968][ T26] audit: type=1326 audit(1749324755.440:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ff18e929 code=0x7fc00000 [ 101.515635][ T26] audit: type=1326 audit(1749324755.440:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ff18e929 code=0x7fc00000 [ 101.516746][ T4347] usb 5-1: USB disconnect, device number 2 [ 101.538908][ T26] audit: type=1326 audit(1749324755.440:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ff18e929 code=0x7fc00000 [ 101.606477][ T26] audit: type=1326 audit(1749324755.440:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ff18e929 code=0x7fc00000 [ 101.631016][ T26] audit: type=1326 audit(1749324755.440:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ff18e929 code=0x7fc00000 [ 101.654309][ T26] audit: type=1326 audit(1749324755.440:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9ff18e929 code=0x7fc00000 [ 106.851705][ T4722] kernel profiling enabled (shift: 63) [ 106.857320][ T4722] profiling shift: 63 too large [ 108.122602][ T4734] loop4: detected capacity change from 0 to 512 [ 108.178942][ T4734] EXT4-fs: Ignoring removed i_version option [ 108.248205][ T4734] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.478897][ T4734] EXT4-fs (loop4): 1 truncate cleaned up [ 108.491931][ T4734] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 108.774889][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 120.648609][ T4846] loop3: detected capacity change from 0 to 512 [ 120.710734][ T4846] EXT4-fs: Ignoring removed i_version option [ 120.731156][ T4846] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.725822][ T4846] EXT4-fs (loop3): 1 truncate cleaned up [ 121.742894][ T4846] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 122.063530][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 126.305753][ T4889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 126.318032][ T4889] netlink: 'syz.3.161': attribute type 5 has an invalid length. [ 126.325770][ T4889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.161'. [ 127.521358][ T4891] loop2: detected capacity change from 0 to 512 [ 127.544430][ T4891] EXT4-fs: Ignoring removed i_version option [ 127.566446][ T4891] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 127.666233][ T4891] EXT4-fs (loop2): 1 truncate cleaned up [ 127.673605][ T4891] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 128.121313][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 129.169944][ T1042] block nbd4: Attempted send on invalid socket [ 129.176304][ T1042] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 129.187725][ T4913] SQUASHFS error: Failed to read block 0x0: -5 [ 129.207714][ T4913] unable to read squashfs_super_block [ 132.651936][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.658272][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.257590][ T4302] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 133.480939][ T4302] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.574224][ T4302] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.663398][ T1042] block nbd3: Attempted send on invalid socket [ 133.670705][ T1042] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 133.682792][ T4959] SQUASHFS error: Failed to read block 0x0: -5 [ 133.690298][ T4959] unable to read squashfs_super_block [ 134.537554][ T4302] usb 1-1: config 0 interface 0 has no altsetting 0 [ 134.557572][ T4302] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 134.582023][ T4302] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 134.691771][ T4302] usb 1-1: Product: syz [ 134.705611][ T4302] usb 1-1: Manufacturer: syz [ 134.713543][ T4302] usb 1-1: SerialNumber: syz [ 134.738315][ T4966] netlink: 10504 bytes leftover after parsing attributes in process `syz.4.185'. [ 134.772191][ T4302] usb 1-1: config 0 descriptor?? [ 135.003393][ T4302] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 135.040187][ T4302] usb 1-1: USB disconnect, device number 2 [ 135.648702][ T4970] kernel profiling enabled (shift: 63) [ 135.654187][ T4970] profiling shift: 63 too large [ 135.671996][ T4332] udevd[4332]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.491376][ T5009] netlink: 10504 bytes leftover after parsing attributes in process `syz.1.198'. [ 139.836950][ T5014] kernel profiling enabled (shift: 63) [ 139.847982][ T5014] profiling shift: 63 too large [ 142.544778][ T5041] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.553274][ T5041] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.238474][ T5043] device bridge_slave_1 left promiscuous mode [ 143.319319][ T5043] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.601434][ T5043] device bridge_slave_0 left promiscuous mode [ 143.813851][ T5043] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.872356][ T5064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 144.933528][ T5064] netlink: 'syz.4.209': attribute type 5 has an invalid length. [ 145.016654][ T5064] netlink: 20 bytes leftover after parsing attributes in process `syz.4.209'. [ 145.074756][ T5064] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 145.130242][ T5064] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 145.200144][ T5064] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 145.249506][ T5064] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 145.307622][ T5064] device geneve2 entered promiscuous mode [ 147.148334][ T5098] loop0: detected capacity change from 0 to 512 [ 147.177764][ T5098] EXT4-fs: Ignoring removed i_version option [ 148.251053][ T5098] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 148.518793][ T5098] EXT4-fs (loop0): 1 truncate cleaned up [ 148.627592][ T5098] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 148.870786][ T5110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 148.882004][ T5110] netlink: 'syz.4.225': attribute type 5 has an invalid length. [ 148.892873][ T5110] netlink: 20 bytes leftover after parsing attributes in process `syz.4.225'. [ 149.109010][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 156.067620][ T5188] kernel profiling enabled (shift: 63) [ 156.073184][ T5188] profiling shift: 63 too large [ 161.087166][ T5221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.263'. [ 161.096203][ T5221] netlink: 'syz.4.263': attribute type 5 has an invalid length. [ 161.103903][ T5221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.263'. [ 168.260472][ T14] libceph: connect (1)[c::]:6789 error -101 [ 168.289951][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 168.382869][ T5303] ceph: No mds server is up or the cluster is laggy [ 168.409259][ T14] libceph: connect (1)[c::]:6789 error -101 [ 168.415414][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 168.512301][ T5316] loop0: detected capacity change from 0 to 512 [ 168.565707][ T5316] EXT4-fs: Ignoring removed i_version option [ 168.627658][ T5316] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 168.734413][ T5316] EXT4-fs (loop0): 1 truncate cleaned up [ 168.813313][ T5316] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 169.087285][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 170.602486][ T5351] netlink: 10504 bytes leftover after parsing attributes in process `syz.4.291'. [ 173.181424][ T5374] loop2: detected capacity change from 0 to 512 [ 173.220504][ T5374] EXT4-fs: Ignoring removed i_version option [ 173.248692][ T5374] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 173.329433][ T5374] EXT4-fs (loop2): 1 truncate cleaned up [ 173.341235][ T5374] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 173.724061][ T1042] block nbd4: Attempted send on invalid socket [ 173.730644][ T1042] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 173.742937][ T5384] SQUASHFS error: Failed to read block 0x0: -5 [ 173.757697][ T5384] unable to read squashfs_super_block [ 174.680242][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 177.364395][ T5438] loop3: detected capacity change from 0 to 512 [ 177.412703][ T5438] EXT4-fs: Ignoring removed i_version option [ 177.494586][ T5438] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 177.769012][ T5438] EXT4-fs (loop3): 1 truncate cleaned up [ 177.856797][ T5438] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 178.260017][ T4254] EXT4-fs (loop3): unmounting filesystem. [ 181.917664][ T4299] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 182.110825][ T4299] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.150628][ T4299] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.716081][ T4299] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.791429][ T4299] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 182.859975][ T4299] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 182.973763][ T4299] usb 3-1: Product: syz [ 182.994853][ T4299] usb 3-1: Manufacturer: syz [ 183.018905][ T4299] usb 3-1: SerialNumber: syz [ 183.106087][ T4299] usb 3-1: config 0 descriptor?? [ 183.247512][ T4299] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 183.353316][ T4332] udevd[4332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.433826][ T4299] usb 3-1: USB disconnect, device number 2 [ 184.216332][ T1042] block nbd3: Attempted send on invalid socket [ 184.222737][ T1042] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 184.243558][ T5503] SQUASHFS error: Failed to read block 0x0: -5 [ 184.275244][ T5503] unable to read squashfs_super_block [ 185.928837][ T4256] Bluetooth: hci4: command 0x0406 tx timeout [ 185.934927][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 185.940972][ T4266] Bluetooth: hci2: command 0x0406 tx timeout [ 185.940994][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 185.947040][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 188.388149][ T1042] block nbd1: Attempted send on invalid socket [ 188.394456][ T1042] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 188.407855][ T5553] SQUASHFS error: Failed to read block 0x0: -5 [ 188.479997][ T5553] unable to read squashfs_super_block [ 188.532226][ T5555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 188.541405][ T5555] netlink: 'syz.0.346': attribute type 5 has an invalid length. [ 188.553771][ T5555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.346'. [ 188.612671][ T5555] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 188.642329][ T5555] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 188.656839][ T5555] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 188.667569][ T5555] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 188.676930][ T5555] device geneve2 entered promiscuous mode [ 192.056819][ T5589] 9pnet_fd: Insufficient options for proto=fd [ 193.301417][ T5598] loop2: detected capacity change from 0 to 512 [ 193.360223][ T5598] EXT4-fs: Ignoring removed i_version option [ 193.473376][ T5598] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 193.584140][ T5598] EXT4-fs (loop2): 1 truncate cleaned up [ 193.600280][ T5598] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 193.664568][ T5598] [ 193.667022][ T5598] ====================================================== [ 193.674067][ T5598] WARNING: possible circular locking dependency detected [ 193.681103][ T5598] 6.1.141-syzkaller #0 Not tainted [ 193.686234][ T5598] ------------------------------------------------------ [ 193.693276][ T5598] syz.2.362/5598 is trying to acquire lock: [ 193.699186][ T5598] ffff88805523f258 (&sb->s_type->i_mutex_key#8/1){+.+.}-{3:3}, at: ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 193.711142][ T5598] [ 193.711142][ T5598] but task is already holding lock: [ 193.718512][ T5598] ffff88805523a0a0 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0x13d4/0x19f0 [ 193.727841][ T5598] [ 193.727841][ T5598] which lock already depends on the new lock. [ 193.727841][ T5598] [ 193.738329][ T5598] [ 193.738329][ T5598] the existing dependency chain (in reverse order) is: [ 193.747363][ T5598] [ 193.747363][ T5598] -> #1 (&ei->i_data_sem/3){++++}-{3:3}: [ 193.755207][ T5598] down_write+0x36/0x60 [ 193.759897][ T5598] ext4_xattr_inode_lookup_create+0x15c4/0x1d10 [ 193.766679][ T5598] ext4_xattr_ibody_set+0x1fe/0x690 [ 193.772453][ T5598] ext4_xattr_set_handle+0xa7c/0x12b0 [ 193.778371][ T5598] ext4_xattr_set+0x22a/0x320 [ 193.783579][ T5598] __vfs_setxattr+0x3e0/0x420 [ 193.788786][ T5598] __vfs_setxattr_noperm+0x129/0x5e0 [ 193.794608][ T5598] vfs_setxattr+0x168/0x2f0 [ 193.799641][ T5598] setxattr+0x2b2/0x2d0 [ 193.804325][ T5598] path_setxattr+0x142/0x280 [ 193.809465][ T5598] __x64_sys_setxattr+0xb7/0xd0 [ 193.814843][ T5598] do_syscall_64+0x4c/0xa0 [ 193.819855][ T5598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.826280][ T5598] [ 193.826280][ T5598] -> #0 (&sb->s_type->i_mutex_key#8/1){+.+.}-{3:3}: [ 193.835073][ T5598] __lock_acquire+0x2cf8/0x7c50 [ 193.840457][ T5598] lock_acquire+0x1b4/0x490 [ 193.845488][ T5598] down_write+0x36/0x60 [ 193.850261][ T5598] ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 193.857127][ T5598] ext4_xattr_block_set+0x23a/0x32a0 [ 193.862943][ T5598] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 193.869363][ T5598] __ext4_expand_extra_isize+0x301/0x3e0 [ 193.875546][ T5598] __ext4_mark_inode_dirty+0x47f/0x770 [ 193.881525][ T5598] ext4_setattr+0x1457/0x19f0 [ 193.886730][ T5598] notify_change+0xc74/0xf40 [ 193.891935][ T5598] do_truncate+0x197/0x220 [ 193.896902][ T5598] path_openat+0x27f2/0x2e70 [ 193.902040][ T5598] do_filp_open+0x1c1/0x3c0 [ 193.907084][ T5598] do_sys_openat2+0x142/0x490 [ 193.912294][ T5598] __x64_sys_openat+0x135/0x160 [ 193.917695][ T5598] do_syscall_64+0x4c/0xa0 [ 193.922651][ T5598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.929096][ T5598] [ 193.929096][ T5598] other info that might help us debug this: [ 193.929096][ T5598] [ 193.939345][ T5598] Possible unsafe locking scenario: [ 193.939345][ T5598] [ 193.946805][ T5598] CPU0 CPU1 [ 193.952167][ T5598] ---- ---- [ 193.957532][ T5598] lock(&ei->i_data_sem/3); [ 193.962160][ T5598] lock(&sb->s_type->i_mutex_key#8/1); [ 193.970241][ T5598] lock(&ei->i_data_sem/3); [ 193.977355][ T5598] lock(&sb->s_type->i_mutex_key#8/1); [ 193.982910][ T5598] [ 193.982910][ T5598] *** DEADLOCK *** [ 193.982910][ T5598] [ 193.991054][ T5598] 5 locks held by syz.2.362/5598: [ 193.996073][ T5598] #0: ffff88801f7bc460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 194.005228][ T5598] #1: ffff88805523a218 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: do_truncate+0x183/0x220 [ 194.015507][ T5598] #2: ffff88805523a3b8 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xe6f/0x19f0 [ 194.025693][ T5598] #3: ffff88805523a0a0 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0x13d4/0x19f0 [ 194.035460][ T5598] #4: ffff888055239ee0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 194.045732][ T5598] [ 194.045732][ T5598] stack backtrace: [ 194.051640][ T5598] CPU: 0 PID: 5598 Comm: syz.2.362 Not tainted 6.1.141-syzkaller #0 [ 194.059630][ T5598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.069790][ T5598] Call Trace: [ 194.073105][ T5598] [ 194.076049][ T5598] dump_stack_lvl+0x168/0x22e [ 194.080746][ T5598] ? load_image+0x3b0/0x3b0 [ 194.085255][ T5598] ? show_regs_print_info+0x12/0x12 [ 194.090473][ T5598] ? print_circular_bug+0x12b/0x1a0 [ 194.095687][ T5598] check_noncircular+0x274/0x310 [ 194.100636][ T5598] ? add_chain_block+0x940/0x940 [ 194.105579][ T5598] ? lockdep_lock+0xdc/0x1e0 [ 194.110174][ T5598] ? verify_lock_unused+0x140/0x140 [ 194.115380][ T5598] ? _find_first_zero_bit+0xcf/0x100 [ 194.120672][ T5598] __lock_acquire+0x2cf8/0x7c50 [ 194.125527][ T5598] ? __lock_acquire+0x7c50/0x7c50 [ 194.130570][ T5598] ? verify_lock_unused+0x140/0x140 [ 194.135776][ T5598] ? mark_buffer_dirty+0x2d8/0x7a0 [ 194.140905][ T5598] lock_acquire+0x1b4/0x490 [ 194.145415][ T5598] ? ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 194.151865][ T5598] ? __might_sleep+0xd0/0xd0 [ 194.156501][ T5598] ? read_lock_is_recursive+0x10/0x10 [ 194.161908][ T5598] ? __ext4_mark_inode_dirty+0x4eb/0x770 [ 194.167550][ T5598] down_write+0x36/0x60 [ 194.171802][ T5598] ? ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 194.178265][ T5598] ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 194.184529][ T5598] ? ext4_xattr_ibody_set+0x690/0x690 [ 194.189999][ T5598] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 194.195990][ T5598] ? lock_chain_count+0x20/0x20 [ 194.200857][ T5598] ext4_xattr_block_set+0x23a/0x32a0 [ 194.206171][ T5598] ? __might_sleep+0xd0/0xd0 [ 194.210788][ T5598] ? __getblk_gfp+0x4f/0xb20 [ 194.215391][ T5598] ? xattr_find_entry+0x12b/0x2f0 [ 194.220423][ T5598] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 194.225892][ T5598] ? ext4_xattr_block_find+0x241/0x2b0 [ 194.231363][ T5598] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 194.237276][ T5598] __ext4_expand_extra_isize+0x301/0x3e0 [ 194.242914][ T5598] __ext4_mark_inode_dirty+0x47f/0x770 [ 194.248393][ T5598] ext4_setattr+0x1457/0x19f0 [ 194.253074][ T5598] ? ext4_write_inode+0x5e0/0x5e0 [ 194.258100][ T5598] notify_change+0xc74/0xf40 [ 194.262705][ T5598] do_truncate+0x197/0x220 [ 194.267329][ T5598] ? aa_get_current_label+0x110/0x1d0 [ 194.272706][ T5598] ? put_page_bootmem+0x2c0/0x2c0 [ 194.277932][ T5598] ? ima_bprm_check+0x1f0/0x1f0 [ 194.282910][ T5598] ? bpf_lsm_path_truncate+0x5/0x10 [ 194.288141][ T5598] path_openat+0x27f2/0x2e70 [ 194.292827][ T5598] ? do_sys_openat2+0xcf/0x490 [ 194.297717][ T5598] ? __x64_sys_openat+0x135/0x160 [ 194.302761][ T5598] ? do_filp_open+0x3c0/0x3c0 [ 194.307521][ T5598] do_filp_open+0x1c1/0x3c0 [ 194.312032][ T5598] ? vfs_tmpfile+0x480/0x480 [ 194.316715][ T5598] ? _raw_spin_unlock+0x24/0x40 [ 194.321586][ T5598] ? alloc_fd+0x58f/0x630 [ 194.325942][ T5598] do_sys_openat2+0x142/0x490 [ 194.330698][ T5598] ? do_sys_open+0xe0/0xe0 [ 194.335148][ T5598] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 194.341153][ T5598] ? lock_chain_count+0x20/0x20 [ 194.346105][ T5598] __x64_sys_openat+0x135/0x160 [ 194.350966][ T5598] do_syscall_64+0x4c/0xa0 [ 194.355391][ T5598] ? clear_bhb_loop+0x60/0xb0 [ 194.360108][ T5598] ? clear_bhb_loop+0x60/0xb0 [ 194.364796][ T5598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.370878][ T5598] RIP: 0033:0x7f9e7418e929 [ 194.375293][ T5598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.394927][ T5598] RSP: 002b:00007f9e74f70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 194.403342][ T5598] RAX: ffffffffffffffda RBX: 00007f9e743b5fa0 RCX: 00007f9e7418e929 [ 194.411404][ T5598] RDX: 0000000000000242 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 194.419379][ T5598] RBP: 00007f9e74210b39 R08: 0000000000000000 R09: 0000000000000000 [ 194.427454][ T5598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.435440][ T5598] R13: 0000000000000000 R14: 00007f9e743b5fa0 R15: 00007fff3f4ad1b8 [ 194.443457][ T5598] [ 194.446516][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.464501][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.470917][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.730520][ T4255] EXT4-fs (loop2): unmounting filesystem.