last executing test programs: 28.38536984s ago: executing program 2 (id=3): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000001ec0), &(0x7f0000001f00)='./file0\x00', 0x18000, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES8, @ANYRESOCT=r0], 0x1, 0x304, &(0x7f0000001f80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000022c0)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000002300), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) execveat(r1, &(0x7f0000000500)='./file0\x00', &(0x7f00000007c0)={[&(0x7f0000000540)='\x00', &(0x7f0000000580)='#! ', &(0x7f00000005c0)='vfat\x00', &(0x7f0000000600)='#! ', &(0x7f0000000640)='+]\x00', &(0x7f0000000680)='#! ', &(0x7f00000006c0)='-!@<\x00', &(0x7f0000000700)='#! ', &(0x7f0000000740)='\x00', &(0x7f0000000780)='/dev/dri/card#\x00']}, &(0x7f0000000940)={[&(0x7f0000000840)='^,(-\x00', &(0x7f0000000880)='vfat\x00', &(0x7f00000008c0)='*\x00', &(0x7f0000000900)='\x00']}, 0x800) fdatasync(r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x42, 0x1b6) pwrite64(r4, &(0x7f0000000a00)="0000010042", 0x5, 0x1be) pwrite64(r4, &(0x7f0000000a80)="55aa", 0x2, 0x1fe) pwrite64(r4, &(0x7f0000000ac0)='PRIVHEAD', 0x8, 0xc00) pwrite64(r4, &(0x7f0000000b00)="0002000b", 0x4, 0xc0c) pwrite64(r4, &(0x7f0000000b80)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r4, &(0x7f0000000bc0)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r4, &(0x7f0000000c00)='\x00\x00\x00', 0x3, 0x1e812b) r5 = syz_open_dev$loop(&(0x7f0000000c40), 0x0, 0x2) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3d, 0x9, 0x8, 0x0, r6}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001e00)='memory.events.local\x00', 0x275a, 0x0) 26.668186252s ago: executing program 2 (id=12): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000001ec0), &(0x7f0000001f00)='./file0\x00', 0x18000, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES8, @ANYRESOCT=r0], 0x1, 0x304, &(0x7f0000001f80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000022c0)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000002300), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) execveat(r1, &(0x7f0000000500)='./file0\x00', &(0x7f00000007c0)={[&(0x7f0000000540)='\x00', &(0x7f0000000580)='#! ', &(0x7f00000005c0)='vfat\x00', &(0x7f0000000600)='#! ', &(0x7f0000000640)='+]\x00', &(0x7f0000000680)='#! ', &(0x7f00000006c0)='-!@<\x00', &(0x7f0000000700)='#! ', &(0x7f0000000740)='\x00', &(0x7f0000000780)='/dev/dri/card#\x00']}, &(0x7f0000000940)={[&(0x7f0000000840)='^,(-\x00', &(0x7f0000000880)='vfat\x00', &(0x7f00000008c0)='*\x00', &(0x7f0000000900)='\x00']}, 0x800) fdatasync(r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x42, 0x1b6) pwrite64(r4, &(0x7f0000000a00)="0000010042", 0x5, 0x1be) pwrite64(r4, &(0x7f0000000a80)="55aa", 0x2, 0x1fe) pwrite64(r4, &(0x7f0000000ac0)='PRIVHEAD', 0x8, 0xc00) pwrite64(r4, &(0x7f0000000b40)='12345678-1234', 0xd, 0xc30) pwrite64(r4, &(0x7f0000000b80)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r4, &(0x7f0000000bc0)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r4, &(0x7f0000000c00)='\x00\x00\x00', 0x3, 0x1e812b) r5 = syz_open_dev$loop(&(0x7f0000000c40), 0x0, 0x2) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3d, 0x9, 0x8, 0x0, r6}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001e00)='memory.events.local\x00', 0x275a, 0x0) 26.066428702s ago: executing program 2 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000180)=ANY=[], 0xfedd) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x318, 0x0) prlimit64(r0, 0x8, &(0x7f0000000300)={0x2, 0xc}, &(0x7f0000000340)) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000060000000000000002000006040000000500001ef979fd88dfc14a832d71390097470000b3f2"], &(0x7f0000000580)=""/4089, 0x3a, 0xff9, 0x1}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) syz_create_resource$binfmt(0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000480)={0x0, 'syz_tun\x00', {0x1}}) syz_emit_ethernet(0x18, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000021001122334455000a4242030001fe", @ANYRES32=r4], 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000440)='./file0\x00', 0x80, &(0x7f0000000480)=ANY=[], 0xfe, 0x862, &(0x7f00000019c0)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000001680)='net/netfilter\x00') open_tree(0xffffffffffffff9c, 0x0, 0x81100) syz_open_procfs(0x0, &(0x7f0000001980)='net/netfilter\x00') r6 = socket$inet(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001840)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000001940)=0xe8) ioprio_set$uid(0x3, r7, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xd, 0x1, 0x40], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x100000000}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}]}}]}, 0xac}}, 0x0) 25.823182546s ago: executing program 32 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000180)=ANY=[], 0xfedd) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x318, 0x0) prlimit64(r0, 0x8, &(0x7f0000000300)={0x2, 0xc}, &(0x7f0000000340)) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000060000000000000002000006040000000500001ef979fd88dfc14a832d71390097470000b3f2"], &(0x7f0000000580)=""/4089, 0x3a, 0xff9, 0x1}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) syz_create_resource$binfmt(0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000480)={0x0, 'syz_tun\x00', {0x1}}) syz_emit_ethernet(0x18, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000021001122334455000a4242030001fe", @ANYRES32=r4], 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000440)='./file0\x00', 0x80, &(0x7f0000000480)=ANY=[], 0xfe, 0x862, &(0x7f00000019c0)="$eJzs3V1sHFe9APD/uHbsOGpude9VbxWl6STplRKRumundbH6ULbrsTOtvWvtrlEiVLVR65QoTls1qkosRMhLC4gP8cRjKY+lL30ChAQSD8ATEn3ghYdKlfoCKggkBEIIo53djT/XzocTo/L7rbJnfOacM/8zO5njsT1nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIpDJZKo0mMZNX50+nvVUm67XZLdZ32/vpmmSL7UYkrX/x/W93s+7735XV97bejsTB9lcHY6iVDMXSvnvvefx/+vuK+oNJbBHQzTrce9XA6i+SiC+3grpwdnFx4dXbEMgd9LUfdxaGrrvK35Zb79NZNW/U8tnydJbmjVo6MT5eevjUVCOdymeyxplGM5tNK/Ws3KzV02OV4+noxMTJNBs5U5uvTk+WZ7Ju5mMPjZVK4+lTI3NZud6oVR9+aqRROZXPzOTV6aLMWOn1aJV5rHUgPp0302ZWnk3Tc+cXF05uF2qr0OianME1B87BB+/56LUP/3x+oXVA9mok6RyYY6OjY2Oj449OPPpYqdQ/Vhpbm1FaJ66ViL6IKJX6b8tBy+7at0lef+eI2bAiYvm/duLUDbesb6izMBN5VGM+TkcaafQV78Xrm3sjjYGoxGTUoxazrbzfDKys77w6uuP//z/8h19ttd1r4//Q0LVR/r5r69pn2yNxqJ1xaNPxvzhd7/yrv1er1Xfb0azOuxSXYykuxNlYjMVYiFfX19qzvsYmr+spc8uvwXbat7OtTkcW1cijEUnkMRvlIictcmqRxkSMx3iU4tk4FVPRiDSmIo+ZyKIRZ6IRzciKI6oS9ciiHM2oRT3SOBaVOB5pjMZETMTJSCOLkTgTtZiPakzHZJSLVs4tt11ZF9e9X3ruRy/++qO3WstxLs4XH87oFh1JWt/M7fsg4k9bFNow3N/A+N8q0dc5wO/ImMQdMnSDn+pOnLZhRywX1//9ux0GAAAAcBslxU/fk4gYiPuLpal8Jvtcd/XA7kYHAAAA7ITiL+0OtpLiUv/+SFrX/5td9r8fMXjHwwMAAAB2QFLcY5dExHA80F7q3i5V2u3YAAAAgJ1R/P7/UCsZjrhSZLj+BwAAgE+Yr/SaY//DPcUcu8PRmBtMfvLHqNcHkqtzpx9MLpZb5coX72rX6ySfvdZic+pAsr/TSJGM9y/tSyKiv5IdTLqzX/6jcy/Bx8X7gZUJCDef6z9Jkm0CiK0DKL6Kr8fhdpnDL7TTF7pr2lsZnspnspFKbebx0aTzw5Hmay+d/0IU3f9qdXZ/EufOLy6MPP/yYtHCxaut96sXO9PDJ91a0Zk7YYtYlrt3U9y/eY8HWrGUOtsd7ouIxYXS6v53ZpPt27r/yeptvhFH2mWODLfT4bX9H2ptc3Tk8dEol/f3NbPTzdeWV/V+uN370SKKoueD3d4mN/ApvBFH22WOHjvaTjaJYmxNFC9tjGJsJYqr17kvrjuKtw5fOf2Xn9eS7OR2UZy8xSgAdsu5YtaflVFobzEK/b09q/r3ftBet3rc3duteSNnuXMr32V0668a6/pjw+ie3szo/kYca5c51v5+ov/AJuNKaZMz+ivnX/lF54z+yDvf+e4zh3753rpx/QaieCeOt8t0kvjvn/UYY1t9/sa6UfXtVo23e263MTOWvJ7EQNJ++FAsPXT+4tkXF15ceGls7OR46ZFS6dGxGGg1V+okm0W6YacC8J9mu2fsvPfFa0V7PYUneWSbq+qkv/snBSPxfLwci/FCnCjuNoiIBzZvdXjVnyGc2OaqdXjVE15ObHNtuVJ2bH3ZwaNJ9Ch7ctUe+7/2Awv/eps+EAC4A45sMw4ncU972p/X7+7UuFZiufjh711JcmL1dffnI+JArzG3NZYfbz84t3t1HL3H8tV+10k/fSd2CgB8wmX1j5Ph5ptJvZ7PPTs6MTFabp7K0nqt8nRazyenszSvNrN65VS5Op2lc/Vas1bp/tJyMmukjfm5uVq9mU7V6ulcrZGfLp78nnYe/d7IZsvVZl5pzM1k5UaWVmrVZrnSTCfzRiWdm39yJm+cyupF5cZcVsmn8kq5mdeqaaM2X69kI2nayLJVBfPJrNrMp/JsIM2r6Vw9ny3Xr0bEzPxslk5mjUo9n2vW2g12t5VXp/bXZ4tmR2LDLxR+vxv7HAB226XLSxfOLi4uvHpzC7+9vNQX2xXe7T4CAGsZpQEAAAAAAAAAAAAA4N/fxtv1Wrk3dCPgQNz07YOXBqO1sPdmq7cWnml3pDuv8MqqgYi46cC6C/1xS9U3WRjouecvXV761Lvre3HzCxvbGejm3L3dfZ9713ymezoh79xO2HrhnzvX4HNPPHFh6Wr3SEj6V+/eJ6/cd+qDLLq926Kdnp/Xhltd39wfseeH32rnfKZH4aR/h/fY+50Odv9X9yrctzZnOdniP/5tP/UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwA37VwAAAP//b/Y/0A==") r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000001680)='net/netfilter\x00') open_tree(0xffffffffffffff9c, 0x0, 0x81100) syz_open_procfs(0x0, &(0x7f0000001980)='net/netfilter\x00') r6 = socket$inet(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001840)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000001940)=0xe8) ioprio_set$uid(0x3, r7, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0xd, 0x1, 0x40], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x100000000}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}]}}]}, 0xac}}, 0x0) 11.874471962s ago: executing program 1 (id=104): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000001680)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1, 0x4, 0x0, 0x0, 0x5, 0x40}, 0xe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000005e80)={0x0, 0x10, &(0x7f0000005ec0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000005f00)=0x10) setsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r0, 0x84, 0x83, &(0x7f0000005f80)={r2, 0x1}, 0x8) 11.714417928s ago: executing program 1 (id=107): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) readv(r0, &(0x7f0000001740)=[{&(0x7f0000000400)=""/4094, 0xffe}, {&(0x7f0000001400)=""/111, 0x6f}, {&(0x7f0000001480)=""/231, 0xe7}, {&(0x7f0000000080)=""/34, 0x22}, {&(0x7f0000000300)=""/117, 0x75}, {&(0x7f0000001580)=""/118, 0x76}, {&(0x7f0000001640)=""/241, 0xf1}], 0x7) 11.605500399s ago: executing program 1 (id=109): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r0, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000000000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f00000004c0), 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4004010) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 11.19438905s ago: executing program 1 (id=113): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000001ec0), &(0x7f0000001f00)='./file0\x00', 0x18000, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES8, @ANYRESOCT=r0], 0x1, 0x304, &(0x7f0000001f80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000022c0)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000002300), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) execveat(r1, &(0x7f0000000500)='./file0\x00', &(0x7f00000007c0)={[&(0x7f0000000540)='\x00', &(0x7f0000000580)='#! ', &(0x7f00000005c0)='vfat\x00', &(0x7f0000000600)='#! ', &(0x7f0000000640)='+]\x00', &(0x7f0000000680)='#! ', &(0x7f00000006c0)='-!@<\x00', &(0x7f0000000700)='#! ', &(0x7f0000000740)='\x00', &(0x7f0000000780)='/dev/dri/card#\x00']}, &(0x7f0000000940)={[&(0x7f0000000840)='^,(-\x00', &(0x7f0000000880)='vfat\x00', &(0x7f00000008c0)='*\x00', &(0x7f0000000900)='\x00']}, 0x800) fdatasync(r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x42, 0x1b6) pwrite64(r4, &(0x7f0000000a00)="0000010042", 0x5, 0x1be) pwrite64(r4, &(0x7f0000000a80)="55aa", 0x2, 0x1fe) pwrite64(r4, &(0x7f0000000ac0)='PRIVHEAD', 0x8, 0xc00) pwrite64(r4, &(0x7f0000000b00)="0002000b", 0x4, 0xc0c) pwrite64(r4, &(0x7f0000000b40)='12345678-1234', 0xd, 0xc30) pwrite64(r4, &(0x7f0000000b80)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r4, &(0x7f0000000bc0)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r4, &(0x7f0000000c00)='\x00\x00\x00', 0x3, 0x1e812b) r5 = syz_open_dev$loop(&(0x7f0000000c40), 0x0, 0x2) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000000c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3d, 0x9, 0x8, 0x0, r6}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 10.232588896s ago: executing program 1 (id=131): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16=r2, @ANYRES16=r0], 0xfdef) 9.138439456s ago: executing program 1 (id=141): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x820, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x7f4, 0x2, [@TCA_BPF_ACT={0x7f0, 0x1, [@m_mirred={0x634, 0xd, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x73, 0x10, 0x20000000, 0x8, 0xa8a}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x8, 0x2, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x1, 0x3, 0x100, 0x100}, 0x1}}]}, {0x5a5, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x1b8, 0x12, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0x400}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0xf2, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee81ecbc147aa5d146be79432192fc1574145998b7d3b55d80dd7464335395b4f37be9047482b255b6f0dec2c748724aa49cbfa5ba9725d35fc7"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x820}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 8.933929486s ago: executing program 33 (id=141): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x820, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x7f4, 0x2, [@TCA_BPF_ACT={0x7f0, 0x1, [@m_mirred={0x634, 0xd, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x73, 0x10, 0x20000000, 0x8, 0xa8a}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x8, 0x2, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x1, 0x3, 0x100, 0x100}, 0x1}}]}, {0x5a5, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x1b8, 0x12, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0x400}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0xf2, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee81ecbc147aa5d146be79432192fc1574145998b7d3b55d80dd7464335395b4f37be9047482b255b6f0dec2c748724aa49cbfa5ba9725d35fc7"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x820}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.429378967s ago: executing program 0 (id=170): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa00"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000000700000000000000fcffffffffffffff00000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000200000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x29) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) socket$kcm(0xf, 0x3, 0x2) write(r1, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x69, 0x0, 0x0, 0x6, 0x0, @private=0xaa10108, @local, {[@generic={0x7, 0x3, '\x00'}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x7}}}}}}, 0x0) 4.366792163s ago: executing program 5 (id=171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newaddr={0x20, 0x14, 0x601, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000f50400000007"], 0x11) 4.279099752s ago: executing program 0 (id=174): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x5e, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044081) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x6, 0x6}}, {0x4}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008088) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.114565418s ago: executing program 5 (id=177): socket$netlink(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x4000045}, 0x22000800) 4.114378449s ago: executing program 0 (id=178): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)='wi', 0x2}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000400)={0x0, 0xa004}, 0x4) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 4.016161618s ago: executing program 5 (id=180): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000004c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000680)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x1, 0x3, 0x6, 0xf, {0x2, 0x5}}, 0x5) 3.840738586s ago: executing program 0 (id=190): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xffbe385a2a019298}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x44) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x20040859) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x64, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x64}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4008011) socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) 3.118630418s ago: executing program 3 (id=192): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x9, 0x8, 0x10000}) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000080)={&(0x7f0000000040)=[{0x1, 0x9, 0x2}, {0x8, 0xf3af, 0x1}, {0x80000001, 0x3ff}], 0x3, 0x10, 0x9, 0x2}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000000c0)={0x7f, 0xab}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000140)='lo\x00') r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000001c0), 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8b, 0x8b, 0x3, [@datasec={0xd, 0x4, 0x0, 0xf, 0x3, [{0x2, 0x5, 0x1}, {0x4, 0x6, 0x7}, {0x2, 0xafe, 0x2}, {0x4, 0xb, 0x8}], "dc8a9a"}, @typedef={0x3, 0x0, 0x0, 0x8, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x1}}, @volatile={0x2}, @int={0xd, 0x0, 0x0, 0x1, 0x10, 0x69, 0x0, 0x7, 0x6}, @const={0x8, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/159, 0xa7, 0x9f, 0x0, 0x2, 0x10000}, 0x28) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000400)={0x340, @tick=0x5, 0xfb, {0xff, 0x9}, 0x7, 0x2, 0x8}) r5 = syz_open_dev$hidraw(&(0x7f0000000440), 0x3ff, 0x90000) ioctl$HIDIOCGRAWNAME(r5, 0x80404804, &(0x7f0000000480)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000004c0)={0x2, 0xffffffffffffffff, 0xc0800}, &(0x7f0000000500)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x8000, 0x7f4f, 0x99, 0x8, {{0x36, 0x4, 0x1, 0x2a, 0xd8, 0x65, 0x0, 0x4, 0x2f, 0x0, @multicast1, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0xba, 0x3, 0xe, [{@local, 0x7}, {@remote, 0x9}]}, @end, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x54, 0x66, 0x1, 0x4, [{@remote, 0x100}, {@empty, 0x6}, {@broadcast, 0x2}, {@multicast1, 0x3}, {@empty, 0xe}, {@private=0xa010102, 0xf8ef}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@empty, 0x5}, {@rand_addr=0x64010100, 0x5}]}, @lsrr={0x83, 0x17, 0x39, [@remote, @private=0xa010101, @remote, @broadcast, @local]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x50, 0x1, 0xc, [{@multicast1, 0xffff}]}, @timestamp={0x44, 0x28, 0xcd, 0x0, 0xa, [0xfff, 0x98b34ee, 0x8000, 0x9, 0x4, 0x1, 0xb63, 0xe4, 0x9]}]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000680)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, r7}) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x40201, 0x80, 0x1}, 0x18) fanotify_mark(r1, 0x400, 0x0, r8, &(0x7f0000000740)='./file0\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r9, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x78, r10, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x94}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0xd010) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r9, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, r11, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5c}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'gre0\x00', r7, 0x8, 0x20, 0x800, 0x5, {{0x11, 0x4, 0x0, 0x4, 0x44, 0x64, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@lsrr={0x83, 0xb, 0x2e, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @lsrr={0x83, 0xf, 0x26, [@dev={0xac, 0x14, 0x14, 0x1d}, @remote, @multicast1]}, @ssrr={0x89, 0x13, 0x3a, [@local, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x2c}}, 0x11) r13 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000c40), &(0x7f0000000c80)=0xe, 0x800) sendfile(r13, r1, &(0x7f0000000cc0)=0xc4c1, 0x8) r14 = syz_open_dev$vcsa(&(0x7f0000000d00), 0xe, 0x7cba3302cc215478) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)={0x1b, 0x0, 0x0, 0x6, 0x0, r14, 0xfffffffc, '\x00', 0x0, r3, 0x2, 0x5, 0x3}, 0x50) 2.970570113s ago: executing program 4 (id=193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x303, 0x4000, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4004010) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 920.111068ms ago: executing program 0 (id=194): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x5) accept(r0, &(0x7f0000000040)=@pptp, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 916.928118ms ago: executing program 3 (id=195): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) 838.596026ms ago: executing program 4 (id=196): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 838.365236ms ago: executing program 5 (id=197): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x26e1, 0x0) close(r1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x218, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) sendto$inet(r0, &(0x7f0000000700), 0x0, 0x4040004, &(0x7f0000000740)={0x2, 0x1234, @local}, 0x10) 757.181725ms ago: executing program 5 (id=198): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 723.928598ms ago: executing program 3 (id=199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000041) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000"], 0x340a) 678.567293ms ago: executing program 4 (id=200): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f020000000002080003000000001e70dce02d5beaef5b", 0x68}], 0x1}, 0x4800) ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, 0x0) 624.652827ms ago: executing program 5 (id=201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local}) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@empty, @local, [], [], '\x00', '\x00', {}, {}, 0x6c}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000b40)='./proc\x00', &(0x7f0000000b80)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./proc/net/xt_recent/syz0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pread64(r7, &(0x7f0000000c00)=""/15, 0xf, 0x7) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x1f}}}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2cd2ea416826061122f7b9a564e17ced"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "deb7ae45de8731bc"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c50ba1b03ccbab44"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3e4d57741af045a9742c561c01563a36"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b516c8149a63dd9011136ed668db6636"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x101}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x20000014) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x64, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x100000, @random=0x3b, 0x5b04, @val, @val, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @val={0x5, 0x3, {0x10, 0x3, 0x4}}, @val={0x25, 0x3, {0x0, 0x3}}, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0xe9, 0x1, 0x10}}, @void, @void, @void, @void}}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x400c0) 580.941732ms ago: executing program 4 (id=202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31032bbd7000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="08000600a4"], 0x24}, 0x1, 0x0, 0x0, 0x26040001}, 0x0) 580.850672ms ago: executing program 6 (id=143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x810) 478.492473ms ago: executing program 3 (id=203): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0x4, 0x12, 0x18d6, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x2}, 0x48) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000000c0)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x63, 0x65, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010102}, "b1903e5c0e154f00104d980859f75d0043e894ffa2c2a759face5a21139dd257a10d0310e84dc640369a55b56da4ad44941179082162b77f640f57fdf20ab6d9e1000000000000007fa09d6e4b3fc8"}}}}}, 0x75) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, 0x0) 457.142344ms ago: executing program 6 (id=204): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x78, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x8001}, 0x20004014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x24000000) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000b40)=0x9, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x1c, &(0x7f0000000940)=ANY=[@ANYBLOB="1808000000000102000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000450902000003000085200000d5450300b7020000000000007b9af0ff00000000c509000000010000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34766}]}, &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) 433.685677ms ago: executing program 4 (id=205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "7f000001"}]}]}}}, {0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf8}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000600)="01020304", 0x4, 0x0, &(0x7f0000000700)={0x2, 0x1234, @local}, 0x10) 316.891838ms ago: executing program 6 (id=206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x5, 0x34, @random="b2"}]}, 0x38}, 0x1, 0x0, 0x0, 0xf040}, 0x0) 254.494075ms ago: executing program 3 (id=207): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x26e1, 0x0) close(r1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x218, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) sendto$inet(r0, &(0x7f0000000700), 0x0, 0x4040004, &(0x7f0000000740)={0x2, 0x1234, @local}, 0x10) 254.299115ms ago: executing program 4 (id=208): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) r1 = socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0xfffffffffffffff8, 0x800000000000, 0x400, 0x800, 0x40006, 0x9}, 0x0, &(0x7f0000000040)={0x1f, 0x0, 0x381, 0x1000000009, 0x100000000000004, 0x9e22, 0x0, 0x1}, 0x0, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000200)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2ba400", 0xc, 0x11, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x1, 0x100, @void}}}}}}}}, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, 0x0, 0x2400c040) 196.145281ms ago: executing program 6 (id=209): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000009c0)={0x2, &(0x7f0000000a00)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x44, 0xfffffffe}]}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000400)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0x24, 0x64, 0x0, 0x7, 0x21, 0x0, @empty, @empty}, {{0x4e20, 0x4e20, 0x4, 0x1, 0x2, 0x0, 0x0, 0x6, 0x2, "f52240", 0x8, "9cfbab"}}}}}}, 0x0) 116.254249ms ago: executing program 3 (id=210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0x1}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x20000007, 0x4, 0x58c66743fee8f43f, 0xb, 0xdc}, 0x1, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000480), 0x56) sendmsg$kcm(r6, &(0x7f00000004c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 30.520197ms ago: executing program 6 (id=211): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000040000901feffffff00000000017c0000040042800c00018006000600800a0000500002804a00178046"], 0x74}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 0s ago: executing program 0 (id=212): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34c57}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. [ 58.442907][ T4175] cgroup: Unknown subsys name 'net' [ 58.617438][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.071421][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.304889][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.313010][ T4192] rdma_rxe: rxe_register_device failed with error -23 [ 61.318427][ T4190] rdma_rxe: rxe_register_device failed with error -23 [ 61.325191][ T4189] rdma_rxe: rxe_register_device failed with error -23 [ 61.329028][ T4191] rdma_rxe: rxe_register_device failed with error -23 [ 61.334565][ T4189] rdma_rxe: failed to add rxe_eth0 [ 61.345252][ T4192] rdma_rxe: failed to add rxe_eth0 [ 61.353563][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.373578][ T4191] rdma_rxe: failed to add rxe_eth0 [ 61.383724][ T4190] rdma_rxe: failed to add rxe_eth0 [ 61.392122][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.535389][ T4188] infiniband rxe0: set active [ 61.543788][ T4188] infiniband rxe0: added rxe_eth0 [ 61.550584][ T13] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.598546][ T4188] RDS/IB: rxe0: added [ 61.603351][ T4188] smc: adding ib device rxe0 with port count 1 [ 61.609671][ T4188] smc: ib device rxe0 port 1 has pnetid [ 61.639262][ T1108] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.665474][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.761096][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 61.834128][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 61.874467][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.955673][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 61.976270][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 62.020823][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.127700][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.142575][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.150840][ T4189] device bridge_slave_0 entered promiscuous mode [ 62.169463][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.177241][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.185659][ T4191] device bridge_slave_0 entered promiscuous mode [ 62.194612][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.201764][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.210331][ T4191] device bridge_slave_1 entered promiscuous mode [ 62.228669][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.245820][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.253417][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.261571][ T4189] device bridge_slave_1 entered promiscuous mode [ 62.374925][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.386941][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.413876][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.420987][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.438507][ T4190] device bridge_slave_0 entered promiscuous mode [ 62.451133][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.462311][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.471780][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.484555][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.495801][ T4192] device bridge_slave_0 entered promiscuous mode [ 62.511003][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.517727][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.530730][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.539534][ T4190] device bridge_slave_1 entered promiscuous mode [ 62.595169][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.627100][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.635489][ T4192] device bridge_slave_1 entered promiscuous mode [ 62.712413][ T4189] team0: Port device team_slave_0 added [ 62.718583][ T13] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.726948][ T4191] team0: Port device team_slave_0 added [ 62.754089][ T4189] team0: Port device team_slave_1 added [ 62.762082][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.780740][ T4191] team0: Port device team_slave_1 added [ 62.791744][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.835930][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.854177][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.877497][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.890388][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.921782][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.940443][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.947851][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.979589][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.010924][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.024089][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.056115][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.079414][ T4192] team0: Port device team_slave_0 added [ 63.095425][ T4190] team0: Port device team_slave_0 added [ 63.104393][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.111402][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.137684][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.158049][ T4192] team0: Port device team_slave_1 added [ 63.165838][ T4190] team0: Port device team_slave_1 added [ 63.188912][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.196126][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.222836][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.236204][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.243278][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.269684][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.281254][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 63.282102][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 63.288029][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 63.298402][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 63.314370][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 63.335996][ T4189] device hsr_slave_0 entered promiscuous mode [ 63.343167][ T4189] device hsr_slave_1 entered promiscuous mode [ 63.360310][ T3853] infiniband rxe0: set active [ 63.388458][ T4191] device hsr_slave_0 entered promiscuous mode [ 63.396193][ T4191] device hsr_slave_1 entered promiscuous mode [ 63.403550][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.411405][ T4191] Cannot create hsr debugfs directory [ 63.417378][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.436689][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.443945][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.470050][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.487775][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.494914][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.521368][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.557723][ T4192] device hsr_slave_0 entered promiscuous mode [ 63.565404][ T4192] device hsr_slave_1 entered promiscuous mode [ 63.571931][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.579503][ T4192] Cannot create hsr debugfs directory [ 63.671664][ T4190] device hsr_slave_0 entered promiscuous mode [ 63.678672][ T4190] device hsr_slave_1 entered promiscuous mode [ 63.685650][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.693399][ T4190] Cannot create hsr debugfs directory [ 63.811597][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 63.985340][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.013085][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.023333][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.038562][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.045828][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.054606][ T4188] device bridge_slave_0 entered promiscuous mode [ 64.063466][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.080258][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.087737][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.098352][ T4188] device bridge_slave_1 entered promiscuous mode [ 64.121006][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.133072][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.156777][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.175031][ T4188] team0: Port device team_slave_0 added [ 64.188452][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.226478][ T4188] team0: Port device team_slave_1 added [ 64.239591][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.251736][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.278341][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.289321][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.296529][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.323850][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.336815][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.344093][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.370497][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.396559][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.409160][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.437840][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.494649][ T4188] device hsr_slave_0 entered promiscuous mode [ 64.501375][ T4188] device hsr_slave_1 entered promiscuous mode [ 64.508970][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.516871][ T4188] Cannot create hsr debugfs directory [ 64.530539][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.539943][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.550411][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.561045][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.594502][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.671020][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.680508][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.703706][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.748877][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.758877][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.769289][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.776528][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.788997][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.812685][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.821699][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.831350][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.840210][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.847328][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.864771][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.874479][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.897446][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.916184][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.926326][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.956092][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.963400][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.973063][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.981370][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.991036][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.001054][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.009546][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.019723][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.029555][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.039281][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.067976][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.081110][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.089847][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.099272][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.108374][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.115493][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.123897][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.131551][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.139632][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.147850][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.158903][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.168248][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.176846][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.183928][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.212195][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.233501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.251079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.260389][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.267536][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.276473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.285621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.294798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.303630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.312435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.320633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.335341][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.345168][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.352158][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 65.355403][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.359468][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 65.367753][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.381256][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 65.387707][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.387894][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 65.400864][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 65.411670][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.422893][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.431582][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.451383][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.458533][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.480857][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.493249][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.508766][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.520209][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.529070][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.544385][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.552564][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.577872][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.589794][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.606726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.617050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.628530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.640611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.669691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.681130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.698916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.711545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.720651][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.727752][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.736319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.745238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.754291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.763206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.771630][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.778714][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.786600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.795296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.805285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.815235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.824211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.834048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.843332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.875038][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.883985][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.893332][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.903915][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.943335][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.958266][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.968177][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.984744][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.995890][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.003728][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.011169][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.023824][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.038675][ T4191] device veth0_vlan entered promiscuous mode [ 66.047118][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.063195][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.089691][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.098262][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.114061][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.123621][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.138909][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.148044][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.167356][ T4191] device veth1_vlan entered promiscuous mode [ 66.200473][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.210138][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.219574][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.228957][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.246986][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.255833][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.277532][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.292809][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.310302][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.319100][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.329168][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.343557][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.357429][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.369743][ T4191] device veth0_macvtap entered promiscuous mode [ 66.381610][ T4189] device veth0_vlan entered promiscuous mode [ 66.389461][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.400775][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.410146][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.418388][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.426305][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.439724][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.449325][ T4191] device veth1_macvtap entered promiscuous mode [ 66.470855][ T4189] device veth1_vlan entered promiscuous mode [ 66.486327][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.495434][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.506280][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.515647][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.525288][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.532441][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.547654][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.570550][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.578878][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.588793][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.619349][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.629140][ T4189] device veth0_macvtap entered promiscuous mode [ 66.640241][ T4189] device veth1_macvtap entered promiscuous mode [ 66.656148][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.664594][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.674095][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.683131][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.691498][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.698583][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.706673][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.715773][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.725669][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.733296][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.742192][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.750845][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.760256][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.769445][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.778613][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.791420][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.811357][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.825692][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.838629][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.849465][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.856982][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.867149][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.876941][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.886340][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.895243][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.904439][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.914978][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.924119][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.939761][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.949205][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.960622][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.969726][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.001530][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.013654][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.026763][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.038137][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.049396][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.064897][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.074312][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.083259][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.091655][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.102287][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.111202][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.120207][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.129700][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.139381][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.147246][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.155349][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.167070][ T4192] device veth0_vlan entered promiscuous mode [ 67.205870][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.215597][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.231028][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.240384][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.252810][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.261665][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.292770][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.301083][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.349453][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.374515][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.392257][ T4192] device veth1_vlan entered promiscuous mode [ 67.407449][ T4190] device veth0_vlan entered promiscuous mode [ 67.432678][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 67.442015][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.450008][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.457882][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 67.464145][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 67.470166][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 67.476645][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 67.501686][ T4190] device veth1_vlan entered promiscuous mode [ 67.512528][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.520584][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.532223][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.540199][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.573842][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.598682][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.613086][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.620604][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.636884][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.650601][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.678284][ T4192] device veth0_macvtap entered promiscuous mode [ 67.687598][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.697742][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.706910][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.730864][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.730966][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.745455][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.756678][ T4190] device veth0_macvtap entered promiscuous mode [ 67.767040][ T4192] device veth1_macvtap entered promiscuous mode [ 67.777067][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.786945][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.797587][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.807822][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.816859][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.844853][ T4190] device veth1_macvtap entered promiscuous mode [ 67.870533][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.902575][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.910525][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.929519][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.940927][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.951134][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.963170][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.974984][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.998385][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.008478][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.018186][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.035978][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.047513][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.058253][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.077079][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.088624][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.107288][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.121648][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.131298][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.150331][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.169357][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.180408][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.200526][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.228082][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.239062][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.249463][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.261538][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.708796][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.733097][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.754297][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.772786][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.794364][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.818977][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.846280][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.865968][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.884951][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.897939][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.909631][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.041145][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.068052][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.107782][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.120689][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.512058][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 69.518620][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 69.535959][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 69.549838][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 69.559924][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 69.635962][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.651345][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.661848][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.670846][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.764641][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.769769][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.788825][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.809182][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.831304][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.840832][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.856600][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.869116][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.884779][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.900125][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.010434][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.064463][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.728700][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.792456][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.926519][ T4188] device veth0_vlan entered promiscuous mode [ 71.019227][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.069572][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.358377][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.366680][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.457987][ T4346] loop3: detected capacity change from 0 to 512 [ 71.460822][ T4188] device veth1_vlan entered promiscuous mode [ 71.498251][ T4346] EXT4-fs error (device loop3): __ext4_iget:4919: inode #2: block 131072: comm syz.3.8: invalid block [ 71.543710][ T4349] loop2: detected capacity change from 0 to 128 [ 71.562438][ T4346] EXT4-fs (loop3): get root inode failed [ 71.568320][ T4346] EXT4-fs (loop3): mount failed [ 71.594920][ T4352] loop1: detected capacity change from 0 to 128 [ 71.609117][ T4188] device veth0_macvtap entered promiscuous mode [ 71.616330][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.625961][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.636346][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.651459][ T4188] device veth1_macvtap entered promiscuous mode [ 71.710759][ T4355] tc_dump_action: action bad kind [ 71.785971][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.816500][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.839974][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.874291][ T4356] attempt to access beyond end of device [ 71.874291][ T4356] loop2: rw=2049, want=329, limit=128 [ 71.898657][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.909272][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.921002][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.931279][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.943224][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.103715][ T4352] attempt to access beyond end of device [ 72.103715][ T4352] loop1: rw=2049, want=1025, limit=128 [ 72.115158][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.155615][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.202787][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.231194][ T4359] loop0: detected capacity change from 0 to 368 [ 72.250558][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.288433][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.355757][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.381466][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.391632][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.403416][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.422171][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.506105][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.522560][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.545745][ T4352] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 72.550273][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.557751][ T4352] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 72.571660][ T4352] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 72.578384][ T4352] loop0: [ 72.584800][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.587462][ T4364] loop3: detected capacity change from 0 to 512 [ 72.603077][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.661284][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.680324][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.692903][ T1180] attempt to access beyond end of device [ 72.692903][ T1180] loop1: rw=1, want=1041, limit=128 [ 72.723611][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.733511][ T1180] attempt to access beyond end of device [ 72.733511][ T1180] loop1: rw=1, want=1033, limit=128 [ 72.746541][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.767933][ T4364] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 72.858470][ T4364] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.10: invalid indirect mapped block 256 (level 1) [ 72.896250][ T4364] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.10: invalid indirect mapped block 2683928664 (level 1) [ 72.914289][ T4364] EXT4-fs (loop3): 1 truncate cleaned up [ 72.920410][ T4364] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000006,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 73.049862][ T4375] loop0: detected capacity change from 0 to 64 [ 73.099570][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.119193][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.131804][ T4375] MINIX-fs: bad superblock or unable to read bitmaps [ 73.137803][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.166955][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.172479][ T4371] loop1: detected capacity change from 0 to 4096 [ 73.194219][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.198960][ T4371] ======================================================= [ 73.198960][ T4371] WARNING: The mand mount option has been deprecated and [ 73.198960][ T4371] and is ignored by this kernel. Remove the mand [ 73.198960][ T4371] option from the mount to silence this warning. [ 73.198960][ T4371] ======================================================= [ 73.261460][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.396941][ T4338] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.409464][ T4371] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 73.421765][ T4181] udevd[4181]: incorrect nilfs2 checksum on /dev/loop1 [ 73.448543][ T4364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 73.456780][ T4371] NILFS (loop1): mounting unchecked fs [ 73.474719][ T4371] NILFS (loop1): recovery required for readonly filesystem [ 73.489152][ T4371] NILFS (loop1): write access will be enabled during recovery [ 73.558609][ T4380] fuse: Unknown parameter '00000000000000000000003' [ 73.576238][ T4338] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.639805][ T4371] NILFS (loop1): norecovery option specified, skipping roll-forward recovery [ 73.676936][ T4338] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.691423][ T4382] loop4: detected capacity change from 0 to 128 [ 73.803163][ T4338] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.869763][ T4382] attempt to access beyond end of device [ 73.869763][ T4382] loop4: rw=2049, want=561, limit=128 [ 73.922542][ T4276] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.961194][ T4384] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.046141][ T4383] loop0: detected capacity change from 0 to 440 [ 74.122207][ T4276] usb 4-1: device descriptor read/64, error -71 [ 74.155184][ T4382] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 74.185654][ T4382] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 74.204790][ T4382] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 74.221792][ T4382] loop0: [ 74.299956][ T3560] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 74.309909][ T3560] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 74.342089][ T3560] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 74.361616][ T3560] loop0: [ 74.369792][ T4384] chnl_net:caif_netlink_parms(): no params data found [ 74.412254][ T4276] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 74.565990][ T4384] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.573487][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.592276][ T4384] device bridge_slave_0 entered promiscuous mode [ 74.635358][ T4395] loop1: detected capacity change from 0 to 512 [ 74.640482][ T4384] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.672939][ T4276] usb 4-1: device descriptor read/64, error -71 [ 74.682232][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.684348][ T4395] EXT4-fs (loop1): Invalid want_extra_isize 13 [ 74.748068][ T4384] device bridge_slave_1 entered promiscuous mode [ 74.803979][ T4276] usb usb4-port1: attempt power cycle [ 74.832627][ T4384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.855543][ T4401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26'. [ 74.861642][ T4384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.899582][ T4384] team0: Port device team_slave_0 added [ 74.908081][ T4384] team0: Port device team_slave_1 added [ 74.939601][ T4384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.970028][ T4384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.013316][ T4384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.026393][ T4384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.042068][ T4384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.071692][ T4384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.145163][ T4384] device hsr_slave_0 entered promiscuous mode [ 75.156604][ T4384] device hsr_slave_1 entered promiscuous mode [ 75.172604][ T4384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.182154][ T4325] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 75.199214][ T4384] Cannot create hsr debugfs directory [ 75.252183][ T4276] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 75.274158][ T4177] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.372269][ T4276] usb 4-1: device descriptor read/8, error -71 [ 75.466419][ T4384] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.541821][ T4384] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.553231][ T4384] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.585519][ T4384] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.602531][ T4305] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.648757][ T4325] usb 5-1: unable to get BOS descriptor or descriptor too short [ 75.656753][ T4276] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 75.713942][ T4325] usb 5-1: not running at top speed; connect to a high speed hub [ 75.721637][ T4427] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 75.770686][ T4384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.802352][ T4325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 75.824461][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 75.870483][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.892880][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.902479][ T4276] usb 4-1: device not accepting address 5, error -71 [ 75.909860][ T4276] usb usb4-port1: unable to enumerate USB device [ 75.910000][ T4384] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.923792][ T1110] Bluetooth: hci4: command 0x0409 tx timeout [ 75.983132][ T4440] netlink: 348 bytes leftover after parsing attributes in process `syz.1.25'. [ 75.996586][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.007356][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.017711][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.024874][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.052793][ T4305] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 76.062983][ T4325] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 76.080847][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.089421][ T4305] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 76.108367][ T4325] usb 5-1: Product: syz [ 76.114682][ T4305] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.134687][ T4325] usb 5-1: Manufacturer: syz [ 76.139453][ T4325] usb 5-1: SerialNumber: syz [ 76.197995][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.206543][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.212884][ T4398] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 76.233234][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.245552][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.252783][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.261665][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.272015][ T4440] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 76.284592][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.304530][ T4440] NILFS (loop1): mounting unchecked fs [ 76.330289][ T4440] NILFS (loop1): recovery required for readonly filesystem [ 76.331833][ T4181] udevd[4181]: incorrect nilfs2 checksum on /dev/loop1 [ 76.346000][ T4440] NILFS (loop1): write access will be enabled during recovery [ 76.356210][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.364494][ T4305] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 76.383201][ T4305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 76.392573][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.406734][ T4305] usb 1-1: Product: syz [ 76.411094][ T4305] usb 1-1: Manufacturer: syz [ 76.416991][ T4305] usb 1-1: SerialNumber: syz [ 76.425211][ T4440] NILFS (loop1): norecovery option specified, skipping roll-forward recovery [ 76.425317][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.491172][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.525927][ T4450] set_capacity_and_notify: 2 callbacks suppressed [ 76.525985][ T4450] loop3: detected capacity change from 0 to 64 [ 76.630307][ T4450] FAULT_INJECTION: forcing a failure. [ 76.630307][ T4450] name failslab, interval 1, probability 0, space 0, times 1 [ 76.643828][ T4450] CPU: 1 PID: 4450 Comm: syz.3.28 Not tainted syzkaller #0 [ 76.651056][ T4450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.661131][ T4450] Call Trace: [ 76.664427][ T4450] [ 76.667390][ T4450] dump_stack_lvl+0x188/0x250 [ 76.672100][ T4450] ? show_regs_print_info+0x20/0x20 [ 76.677318][ T4450] ? load_image+0x410/0x410 [ 76.681861][ T4450] ? __might_sleep+0xf0/0xf0 [ 76.686470][ T4450] ? __lock_acquire+0x7d40/0x7d40 [ 76.691624][ T4450] should_fail+0x383/0x4b0 [ 76.696074][ T4450] should_failslab+0x5/0x20 [ 76.700598][ T4450] slab_pre_alloc_hook+0x51/0xc0 [ 76.705557][ T4450] __kmalloc+0x6b/0x340 [ 76.709741][ T4450] ? tomoyo_encode+0x28a/0x550 [ 76.714542][ T4450] tomoyo_encode+0x28a/0x550 [ 76.719166][ T4450] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 76.724838][ T4450] tomoyo_path_number_perm+0x251/0x6b0 [ 76.730323][ T4450] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 76.735824][ T4450] ? __lock_acquire+0x7d40/0x7d40 [ 76.740966][ T4450] ? do_raw_spin_lock+0x128/0x2f0 [ 76.746043][ T4450] ? lookup_one_qstr_excl+0x11c/0x240 [ 76.751439][ T4450] tomoyo_path_mkdir+0xad/0xf0 [ 76.756223][ T4450] ? tomoyo_path_unlink+0xf0/0xf0 [ 76.761362][ T4450] ? kern_path_create+0x190/0x190 [ 76.766501][ T4450] security_path_mkdir+0xe0/0x130 [ 76.771563][ T4450] do_mkdirat+0x15e/0x5c0 [ 76.776087][ T4450] ? strncpy_from_user+0x1f4/0x350 [ 76.781220][ T4450] ? vfs_mkdir+0x570/0x570 [ 76.785660][ T4450] ? getname_flags+0x1f9/0x4f0 [ 76.790454][ T4450] __x64_sys_mkdir+0x6a/0x80 [ 76.795069][ T4450] do_syscall_64+0x4c/0xa0 [ 76.799509][ T4450] ? clear_bhb_loop+0x30/0x80 [ 76.804209][ T4450] ? clear_bhb_loop+0x30/0x80 [ 76.808909][ T4450] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.814823][ T4450] RIP: 0033:0x7f45b9dc5559 [ 76.819259][ T4450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.838885][ T4450] RSP: 002b:00007f45b7ffb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 76.847355][ T4450] RAX: ffffffffffffffda RBX: 00007f45ba04c090 RCX: 00007f45b9dc5559 [ 76.855434][ T4450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 76.863424][ T4450] RBP: 00007f45b7ffb090 R08: 0000000000000000 R09: 0000000000000000 [ 76.871419][ T4450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.879408][ T4450] R13: 00007f45ba04c128 R14: 00007f45ba04c090 R15: 00007ffd65266b08 [ 76.887419][ T4450] [ 76.891036][ T4450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 77.027640][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.086653][ T4305] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 77.993202][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 78.022621][ T4456] loop3: detected capacity change from 0 to 512 [ 78.239362][ T4456] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.29: iget: bad i_size value: 38620345925642 [ 78.379920][ T4456] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.29: couldn't read orphan inode 15 (err -117) [ 78.524504][ T4456] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.982119][ T4177] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 79.392389][ T4177] usb 4-1: unable to get BOS descriptor or descriptor too short [ 79.462405][ T4177] usb 4-1: not running at top speed; connect to a high speed hub [ 79.602449][ T4177] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 79.639667][ T4177] usb 4-1: can't read configurations, error -61 [ 79.832311][ T4177] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 80.068481][ T4305] usb 1-1: USB disconnect, device number 2 [ 80.072210][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 80.091682][ T4305] usblp0: removed [ 80.121324][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.166872][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.209592][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.230192][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.242307][ T4177] usb 4-1: unable to get BOS descriptor or descriptor too short [ 80.282822][ T4177] usb 4-1: not running at top speed; connect to a high speed hub [ 80.303818][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.314647][ T4325] usb 5-1: MIDIStreaming interface descriptor not found [ 80.370314][ T4482] Zero length message leads to an empty skb [ 80.419110][ T4483] syz.1.30 uses obsolete (PF_INET,SOCK_PACKET) [ 80.425764][ T4177] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 80.440933][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.448719][ T4177] usb 4-1: can't read configurations, error -61 [ 80.464343][ T4325] usb 5-1: USB disconnect, device number 2 [ 80.475818][ T4177] usb usb4-port1: attempt power cycle [ 80.489532][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.498628][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.523361][ T4482] device bridge_slave_0 left promiscuous mode [ 80.530369][ T4482] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.578662][ T4482] device bridge_slave_1 left promiscuous mode [ 80.594845][ T4482] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.627516][ T4482] bond0: (slave bond_slave_0): Releasing backup interface [ 80.668570][ T4482] bond0: (slave bond_slave_1): Releasing backup interface [ 80.727766][ T4482] team0: Port device team_slave_0 removed [ 80.751446][ T4482] team0: Port device team_slave_1 removed [ 80.765829][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.773820][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.785556][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.791037][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.793538][ T4482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.809061][ T4458] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 80.910304][ T4486] team0: Mode changed to "loadbalance" [ 80.916906][ T4177] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 80.970020][ T4491] tipc: Started in network mode [ 80.985992][ T4491] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 80.997950][ T4491] tipc: Enabled bearer , priority 0 [ 81.026029][ T4489] device vlan0 entered promiscuous mode [ 81.089796][ T4489] team0: Port device vlan0 added [ 81.182054][ T4177] usb 4-1: device not accepting address 8, error -71 [ 81.226225][ T4482] syz.0.33 (4482) used greatest stack depth: 20144 bytes left [ 81.428506][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.447867][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.509001][ T4384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.719497][ T4523] device syzkaller0 entered promiscuous mode [ 82.152395][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 82.363589][ T4325] tipc: Node number set to 11578026 [ 82.412023][ T4338] device hsr_slave_0 left promiscuous mode [ 82.446117][ T4338] device hsr_slave_1 left promiscuous mode [ 82.502142][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.509627][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.520255][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.535472][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.549281][ T4338] device bridge_slave_1 left promiscuous mode [ 82.561307][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.583309][ T4338] device bridge_slave_0 left promiscuous mode [ 82.589554][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.632435][ T4338] device veth1_macvtap left promiscuous mode [ 82.638966][ T4338] device veth0_macvtap left promiscuous mode [ 82.645623][ T4338] device veth1_vlan left promiscuous mode [ 82.653420][ T4338] device veth0_vlan left promiscuous mode [ 82.857988][ T4338] team0 (unregistering): Port device team_slave_1 removed [ 82.881790][ T4338] team0 (unregistering): Port device team_slave_0 removed [ 82.895928][ T4338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.911511][ T4338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.987053][ T4338] bond0 (unregistering): Released all slaves [ 83.071404][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.098848][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.161134][ T4572] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.218587][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.235648][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.269009][ T4384] device veth0_vlan entered promiscuous mode [ 83.287087][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.318306][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.348089][ T4384] device veth1_vlan entered promiscuous mode [ 83.410347][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.431540][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.444018][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.482998][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.503095][ T4384] device veth0_macvtap entered promiscuous mode [ 83.528001][ T4599] loop3: detected capacity change from 0 to 256 [ 83.554144][ T4384] device veth1_macvtap entered promiscuous mode [ 83.594723][ T4599] exfat: Deprecated parameter 'utf8' [ 83.603312][ T4603] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.619984][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.656784][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.667757][ T4599] exfat: Deprecated parameter 'utf8' [ 83.684491][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.717611][ T4599] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 83.750730][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.799959][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.843678][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.915291][ T4384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.985960][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.049421][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.165422][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.270535][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.416725][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.505401][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.591067][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.658885][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.691361][ T4384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.702538][ T4384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.719592][ T4384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.735471][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.757819][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.836170][ T4618] netlink: 212 bytes leftover after parsing attributes in process `syz.1.68'. [ 84.890486][ T4384] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.921818][ T4622] loop1: detected capacity change from 0 to 4096 [ 84.936829][ T4384] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.947427][ T4384] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.966623][ T4384] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.981800][ T4632] device syzkaller0 entered promiscuous mode [ 85.058533][ T4622] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 85.082122][ T4622] NILFS (loop1): mounting unchecked fs [ 85.087650][ T4622] NILFS (loop1): recovery required for readonly filesystem [ 85.125005][ T4622] NILFS (loop1): write access will be enabled during recovery [ 85.169713][ T4421] udevd[4421]: incorrect nilfs2 checksum on /dev/loop1 [ 85.183395][ T4622] NILFS (loop1): norecovery option specified, skipping roll-forward recovery [ 85.230233][ T4640] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.284935][ T4643] netlink: 'syz.0.77': attribute type 1 has an invalid length. [ 85.297747][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.299026][ T4643] netlink: 224 bytes leftover after parsing attributes in process `syz.0.77'. [ 85.335299][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.439931][ T4421] udevd[4421]: incorrect nilfs2 checksum on /dev/loop1 [ 85.455811][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.512221][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.520484][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.653685][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.790891][ T4655] device syzkaller0 entered promiscuous mode [ 86.722059][ T7] cfg80211: failed to load regulatory.db [ 87.713420][ T4733] device syzkaller0 entered promiscuous mode [ 88.214156][ T4760] loop1: detected capacity change from 0 to 128 [ 88.473630][ T4760] attempt to access beyond end of device [ 88.473630][ T4760] loop1: rw=2049, want=577, limit=128 [ 88.593142][ T4784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'. [ 88.637772][ T4777] loop0: detected capacity change from 0 to 336 [ 88.764918][ T4760] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 88.811695][ T4760] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 88.844930][ T4760] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 88.861378][ T4760] loop0: [ 88.890466][ T4798] netlink: 'syz.5.126': attribute type 12 has an invalid length. [ 88.931153][ T3560] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 88.961047][ T3560] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 88.996706][ T3560] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 89.046415][ T3560] loop0: [ 89.126261][ T4806] device syzkaller0 entered promiscuous mode [ 89.610728][ T4837] jffs2: notice: (4837) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 90.096824][ T4823] device syzkaller1 entered promiscuous mode [ 90.482163][ T4862] loop4: detected capacity change from 0 to 128 [ 90.648585][ T4862] attempt to access beyond end of device [ 90.648585][ T4862] loop4: rw=2049, want=417, limit=128 [ 90.802588][ T4338] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.835212][ T4862] loop0: detected capacity change from 0 to 624 [ 90.858056][ T4884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.151'. [ 90.916617][ T4869] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 90.929733][ T4338] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.999796][ T4869] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 91.011077][ T4869] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 91.018422][ T4869] loop0: [ 91.073884][ T4338] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.161721][ T4895] device syzkaller1 entered promiscuous mode [ 91.188922][ T4338] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.261038][ T9] attempt to access beyond end of device [ 91.261038][ T9] loop4: rw=1, want=1041, limit=128 [ 91.279718][ T4887] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.522132][ T4286] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.721374][ T4341] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 91.912724][ T4286] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.927053][ T4286] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 91.939598][ T4286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.961353][ T4887] chnl_net:caif_netlink_parms(): no params data found [ 91.988240][ T4286] as10x_usb: device has been detected [ 92.001199][ T4286] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 92.043609][ T4286] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 92.067851][ T4887] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.075570][ T4887] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.083994][ T4887] device bridge_slave_0 entered promiscuous mode [ 92.093640][ T4887] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.101072][ T4887] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.110094][ T4887] device bridge_slave_1 entered promiscuous mode [ 92.127325][ T4286] as10x_usb: error during firmware upload part1 [ 92.141639][ T4286] Registered device Abilis Systems DVB-Titan [ 92.144740][ T4887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.177467][ T4887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.249424][ T4887] team0: Port device team_slave_0 added [ 92.261203][ T4887] team0: Port device team_slave_1 added [ 92.305538][ T4887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.313302][ T4887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.339631][ T4887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.353193][ T4887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.360594][ T4887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.387557][ T4887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.448474][ T4177] usb 1-1: USB disconnect, device number 3 [ 92.473990][ T4887] device hsr_slave_0 entered promiscuous mode [ 92.488389][ T4887] device hsr_slave_1 entered promiscuous mode [ 92.495542][ T4887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.498972][ T4177] Unregistered device Abilis Systems DVB-Titan [ 92.508181][ T4887] Cannot create hsr debugfs directory [ 92.517857][ T4177] as10x_usb: device has been disconnected [ 92.671354][ T4338] device hsr_slave_0 left promiscuous mode [ 92.678112][ T4338] device hsr_slave_1 left promiscuous mode [ 92.685965][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.693621][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.702908][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.710421][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.719302][ T4338] device bridge_slave_1 left promiscuous mode [ 92.725952][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.734896][ T4338] device bridge_slave_0 left promiscuous mode [ 92.741114][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.753907][ T4338] device veth1_macvtap left promiscuous mode [ 92.760006][ T4338] device veth0_macvtap left promiscuous mode [ 92.767170][ T4338] device veth1_vlan left promiscuous mode [ 92.774038][ T4338] device veth0_vlan left promiscuous mode [ 92.947812][ T4338] team0 (unregistering): Port device team_slave_1 removed [ 92.961744][ T4338] team0 (unregistering): Port device team_slave_0 removed [ 92.977267][ T4338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.994807][ T4338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.084610][ T4338] bond0 (unregistering): Released all slaves [ 93.113296][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 94.604571][ T4907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.621964][ T4924] netlink: 256 bytes leftover after parsing attributes in process `syz.3.164'. [ 94.636403][ T4887] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 94.670758][ T4887] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 94.726161][ T4887] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 94.754899][ T4887] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 94.829643][ T4943] device vlan0 entered promiscuous mode [ 94.870580][ T4939] device syzkaller1 entered promiscuous mode [ 94.972981][ T4954] netlink: 72 bytes leftover after parsing attributes in process `syz.0.170'. [ 95.202459][ T4887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.212609][ T4325] Bluetooth: hci3: command 0x041b tx timeout [ 95.269792][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.295912][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.303212][ T4979] loop3: detected capacity change from 0 to 1024 [ 95.331351][ T4979] EXT4-fs (loop3): Ignoring removed oldalloc option [ 95.353093][ T4979] EXT4-fs (loop3): Ignoring removed orlov option [ 95.399791][ T4887] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.419781][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.430324][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.439880][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.447015][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.459511][ T4979] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,max_dir_size_kb=0x0000000000000002,grpjquota=,,errors=continue. Quota mode: none. [ 95.487140][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.530294][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.551567][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.560676][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.567845][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.576002][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.586533][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.600025][ T4979] netlink: 'syz.3.179': attribute type 2 has an invalid length. [ 95.619370][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.634733][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.652978][ T4979] EXT4-fs error (device loop3): __ext4_new_inode:1294: comm syz.3.179: failed to insert inode 15: doubly allocated? [ 95.696475][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.709173][ T4979] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2812: Unable to expand inode 13. Delete some EAs or run e2fsck. [ 95.718027][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.728764][ T4979] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 95.741450][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.768015][ T4887] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.785624][ T4887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.807849][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.820478][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.840863][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.851824][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.872758][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.000297][ T5008] Cannot find set identified by id 0 to match [ 96.081010][ T5015] netlink: 32 bytes leftover after parsing attributes in process `syz.4.187'. [ 96.120286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.136797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.151828][ T4887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.202081][ T5021] syz.3.189 (5021) used greatest stack depth: 19952 bytes left [ 96.278785][ T5028] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.423534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.433172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.450857][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.461033][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.470325][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.481341][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.491691][ T4887] device veth0_vlan entered promiscuous mode [ 96.505473][ T4887] device veth1_vlan entered promiscuous mode [ 96.528970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.540652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.550032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.560698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.573330][ T4887] device veth0_macvtap entered promiscuous mode [ 96.585016][ T4887] device veth1_macvtap entered promiscuous mode [ 96.603666][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.614442][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.625604][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.636650][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.646805][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.657450][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.668734][ T4887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.681067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.689567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.698416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.707142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.718137][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.729125][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.739013][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.749683][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.759964][ T4887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.771023][ T4887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.782875][ T4887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.791024][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.801396][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.814914][ T4887] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.824087][ T4887] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.833092][ T4887] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.844153][ T4887] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.282418][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 98.369444][ T4982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.488835][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.512826][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.537135][ T5045] Cannot find set identified by id 0 to match [ 98.543674][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.600015][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.617168][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.653618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.675956][ T5053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.200'. [ 99.114920][ T5079] ip_tables: iptables: counters copy to user failed while replacing table [ 99.225207][ T5084] dccp_invalid_packet: P.Data Offset(4) too small [ 99.314149][ T5088] device syzkaller0 entered promiscuous mode [ 99.388377][ T4445] Bluetooth: hci3: command 0x0419 tx timeout [ 99.404686][ T5088] [ 99.407170][ T5088] ============================================ [ 99.413627][ T5088] WARNING: possible recursive locking detected [ 99.419793][ T5088] syzkaller #0 Not tainted [ 99.424214][ T5088] -------------------------------------------- [ 99.430352][ T5088] syz.3.210/5088 is trying to acquire lock: [ 99.436234][ T5088] ffff88805eacc108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 99.445360][ T5088] [ 99.445360][ T5088] but task is already holding lock: [ 99.452722][ T5088] ffff88805eacc108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 99.462122][ T5088] [ 99.462122][ T5088] other info that might help us debug this: [ 99.470199][ T5088] Possible unsafe locking scenario: [ 99.470199][ T5088] [ 99.477659][ T5088] CPU0 [ 99.480934][ T5088] ---- [ 99.484202][ T5088] lock(&sch->q.lock); [ 99.488351][ T5088] lock(&sch->q.lock); [ 99.492599][ T5088] [ 99.492599][ T5088] *** DEADLOCK *** [ 99.492599][ T5088] [ 99.500729][ T5088] May be due to missing lock nesting notation [ 99.500729][ T5088] [ 99.509033][ T5088] 3 locks held by syz.3.210/5088: [ 99.514050][ T5088] #0: ffffffff8d11f000 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 99.523647][ T5088] #1: ffff88805eacc108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 99.533210][ T5088] #2: ffffffff8d11f000 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 99.542774][ T5088] [ 99.542774][ T5088] stack backtrace: [ 99.548670][ T5088] CPU: 0 PID: 5088 Comm: syz.3.210 Not tainted syzkaller #0 [ 99.556063][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.566122][ T5088] Call Trace: [ 99.569560][ T5088] [ 99.572637][ T5088] dump_stack_lvl+0x188/0x250 [ 99.577360][ T5088] ? show_regs_print_info+0x20/0x20 [ 99.582580][ T5088] ? print_deadlock_bug+0x435/0x5d0 [ 99.587790][ T5088] ? _find_first_zero_bit+0xd1/0xf0 [ 99.593088][ T5088] __lock_acquire+0x67eb/0x7d40 [ 99.597966][ T5088] ? verify_lock_unused+0x140/0x140 [ 99.603349][ T5088] ? mark_lock+0x94/0x320 [ 99.607676][ T5088] ? __lock_acquire+0x13b3/0x7d40 [ 99.612711][ T5088] lock_acquire+0x19f/0x400 [ 99.617222][ T5088] ? __dev_queue_xmit+0xa2b/0x2e50 [ 99.622336][ T5088] ? verify_lock_unused+0x140/0x140 [ 99.627547][ T5088] ? read_lock_is_recursive+0x10/0x10 [ 99.632934][ T5088] ? rcu_read_lock_bh_held+0x76/0xf0 [ 99.638222][ T5088] ? rcu_read_lock_held+0x40/0x40 [ 99.643248][ T5088] _raw_spin_lock+0x2a/0x40 [ 99.647781][ T5088] ? __dev_queue_xmit+0xa2b/0x2e50 [ 99.652992][ T5088] __dev_queue_xmit+0xa2b/0x2e50 [ 99.657937][ T5088] ? dev_queue_xmit+0x20/0x20 [ 99.662624][ T5088] ? __kernel_text_address+0x9a/0x100 [ 99.667997][ T5088] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 99.673900][ T5088] ? lockdep_hardirqs_on+0x94/0x140 [ 99.679096][ T5088] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 99.685006][ T5088] ? _raw_spin_unlock+0x40/0x40 [ 99.689864][ T5088] ? stack_trace_save+0xa6/0xf0 [ 99.694717][ T5088] ? netdev_core_pick_tx+0x300/0x300 [ 99.700001][ T5088] sch_frag_xmit_hook+0x2d8/0x1be0 [ 99.705209][ T5088] ? __kasan_slab_alloc+0xa9/0xc0 [ 99.710235][ T5088] ? __kasan_slab_alloc+0x92/0xc0 [ 99.715257][ T5088] ? slab_post_alloc_hook+0x4c/0x380 [ 99.720578][ T5088] ? kmem_cache_alloc+0x15d/0x280 [ 99.725599][ T5088] ? skb_clone+0x1bd/0x350 [ 99.730016][ T5088] ? tcf_mirred_act+0x5b0/0x1640 [ 99.734952][ T5088] ? tcf_action_exec+0x177/0x570 [ 99.739886][ T5088] ? basic_classify+0x1ae/0x2c0 [ 99.744737][ T5088] ? tcf_classify+0x218/0xad0 [ 99.749408][ T5088] ? qfq_enqueue+0x31b/0x1310 [ 99.754081][ T5088] ? dev_qdisc_enqueue+0x48/0x210 [ 99.759105][ T5088] ? __dev_queue_xmit+0xbde/0x2e50 [ 99.764216][ T5088] ? packet_sendmsg+0x3b4f/0x4de0 [ 99.769246][ T5088] ? mq_dump_class_stats+0x430/0x430 [ 99.774531][ T5088] ? do_syscall_64+0x4c/0xa0 [ 99.779207][ T5088] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.785287][ T5088] ? __copy_skb_header+0x3ba/0x4f0 [ 99.790399][ T5088] ? memcpy+0x3c/0x60 [ 99.794377][ T5088] ? __copy_skb_header+0x3ba/0x4f0 [ 99.799592][ T5088] ? __skb_clone+0x446/0x6c0 [ 99.804194][ T5088] ? skb_clone+0x1f1/0x350 [ 99.808613][ T5088] ? tcf_mirred_act+0x59a/0x1640 [ 99.813640][ T5088] tcf_mirred_act+0xc5a/0x1640 [ 99.818421][ T5088] tcf_action_exec+0x177/0x570 [ 99.823189][ T5088] basic_classify+0x1ae/0x2c0 [ 99.827867][ T5088] tcf_classify+0x218/0xad0 [ 99.832371][ T5088] qfq_enqueue+0x31b/0x1310 [ 99.837063][ T5088] ? sch_tree_lock+0x110/0x110 [ 99.841827][ T5088] ? do_raw_spin_lock+0x128/0x2f0 [ 99.846852][ T5088] ? __rwlock_init+0x140/0x140 [ 99.851721][ T5088] ? __alloc_skb+0x473/0x750 [ 99.856308][ T5088] dev_qdisc_enqueue+0x48/0x210 [ 99.861155][ T5088] __dev_queue_xmit+0xbde/0x2e50 [ 99.866097][ T5088] ? dev_queue_xmit+0x20/0x20 [ 99.870788][ T5088] ? virtio_net_hdr_to_skb+0xca1/0x1260 [ 99.876439][ T5088] ? packet_cached_dev_get+0x270/0x270 [ 99.881984][ T5088] ? skb_put+0x10e/0x200 [ 99.886223][ T5088] packet_sendmsg+0x3b4f/0x4de0 [ 99.891165][ T5088] ? aa_sk_perm+0x7dc/0x910 [ 99.895687][ T5088] ? packet_getsockopt+0x9a0/0x9a0 [ 99.900795][ T5088] ? aa_setprocattr_changehat+0x31e/0x580 [ 99.906597][ T5088] ? apparmor_socket_sendmsg+0x88/0x230 [ 99.912140][ T5088] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 99.917437][ T5088] ? security_socket_sendmsg+0x7c/0xa0 [ 99.922894][ T5088] ? packet_getsockopt+0x9a0/0x9a0 [ 99.928001][ T5088] ____sys_sendmsg+0x5be/0x8f0 [ 99.932765][ T5088] ? __sys_sendmsg_sock+0x30/0x30 [ 99.937873][ T5088] ? import_iovec+0x6f/0xa0 [ 99.942379][ T5088] ___sys_sendmsg+0x236/0x2e0 [ 99.947052][ T5088] ? __sys_sendmsg+0x290/0x290 [ 99.951820][ T5088] __se_sys_sendmsg+0x1b7/0x2a0 [ 99.956665][ T5088] ? __x64_sys_sendmsg+0x80/0x80 [ 99.961594][ T5088] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 99.967575][ T5088] ? lockdep_hardirqs_on+0x94/0x140 [ 99.972772][ T5088] do_syscall_64+0x4c/0xa0 [ 99.977183][ T5088] ? clear_bhb_loop+0x30/0x80 [ 99.981871][ T5088] ? clear_bhb_loop+0x30/0x80 [ 99.986610][ T5088] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.992507][ T5088] RIP: 0033:0x7f45b9dc5559 [ 99.996934][ T5088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.016556][ T5088] RSP: 002b:00007f45b801c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.024974][ T5088] RAX: ffffffffffffffda RBX: 00007f45ba04bfa0 RCX: 00007f45b9dc5559 [ 100.032942][ T5088] RDX: 0000000000004005 RSI: 00002000000004c0 RDI: 0000000000000006 [ 100.040919][ T5088] RBP: 00007f45b9e5cb20 R08: 0000000000000000 R09: 0000000000000000 [ 100.048891][ T5088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.056957][ T5088] R13: 00007f45ba04c038 R14: 00007f45ba04bfa0 R15: 00007ffd65266b08 [ 100.064929][ T5088]