last executing test programs: 9.124257206s ago: executing program 3 (id=605): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) io_setup(0x2278, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x2000001) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x9) ioctl$KDGKBTYPE(r0, 0x4b33, 0x0) 9.063761447s ago: executing program 2 (id=606): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, '.'}}]}) 7.270338859s ago: executing program 4 (id=611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB="2cb2"], 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETCARRIER(r3, 0x400454e2, 0x0) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x8}, 0x14) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{0x0, 0xdd12}], 0x1, 0x0, 0x0, 0x30008803}, 0x44040) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r6) sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="011102730000003da26142000000000033c1b2a80630e1153226f922319b209d5f000000000000e3f7c4c8ae18e7d0ba2a020bad34d55ed77de34110a743bc7f9896c76c894c77734d74719736456a", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ce2a4fa77baa108b"], 0x48}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0xb4, 0x436, 0x1, 0x70bd29, 0x25dfdbfc, {0x3}, [@generic="7c6c22d4493cb3bced976aa17e5d8a06a739853f310e155bf15bde9c9dc9b7ce56eae4c1cdb91a9e9de1110b8454ac21f70b5b5eb5b89995aa73ee8272294415dab05d4397f18a4e8b5a04ea80916e96d9c8869d297d01cf33b43de69aa696b27ab7d825e160d3e14333680a07c09f29b57c1ea6b74341e864d67c193c46e97f4a667d8c8de1cf43fb0365e3bb5050d7a89852d95420f8b5303579242d"]}, 0xb4}, 0x1, 0x200000000000000, 0x0, 0x24040010}, 0x24000080) 6.909445638s ago: executing program 2 (id=612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x10, 0x1, 0x0, 0x8f}, 0x3, 0x2, [{0x5, 0x1, 0xffffffc0, 0x800, 0x9, 0xfffff77a}]}, [{0x2, 0x765, 0x800, 0x3ff, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x6, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x2, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x8, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffffff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3000, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x800, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x80, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x5, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0x7ff, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x5}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x9, 0x8f24}, {0x8000, 0x0, 0x6e73, 0x9, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x8, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0x8, 0x8, 0xca14, 0x1, 0x10001}, {0x401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x200, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xf, 0x2, 0x3, 0x2, 0x1, 0xd3}, {0x8, 0xdf3, 0x2, 0xfffffffc, 0x3}, {0xfffffffd, 0x2, 0xff, 0xd7c, 0xffffff7c, 0xd}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x8, 0x6612, 0xfffffff8, 0x3, 0x99, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x6, 0x4, 0x47, 0x2}, {0x3, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x200, 0x0, 0x7a5e, 0x80000000, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x6b10cf10, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0xb1b, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0x5, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x4}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x0, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x9, 0x2}, {0xffff, 0xc23, 0x0, 0x8, 0xfff, 0x1ff}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x0, 0xf, 0x5}, {0x1000, 0x7, 0x1, 0x1, 0x4, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0x1, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xb2f, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xfffffffc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x9, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x4, 0x0, 0x800, 0x7}, {0x8, 0x80, 0x1, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0xb5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x602, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x101, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x8, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1ff, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x7}, {0x2, 0x7f, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x7}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x1, 0xfffffffe, 0x1, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0x8000, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x10, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x5, 0x7}, {0x5, 0x3, 0x3882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e105", 0x13}], 0x1}, 0x0) 6.689775493s ago: executing program 4 (id=614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(0x0, 0x80880) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x47) setreuid(0x0, 0xee00) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xb, 0xe}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x7ff, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xd, 0x18, 0xd, 0x2, 0x8, 0xfffffffe}}, {0x4}}]}]}, 0x68}}, 0x4004004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) 6.684728493s ago: executing program 2 (id=615): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000200), 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./file0', 0x7) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1', 0x1) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, 0x0, 0x0) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') write(0xffffffffffffffff, &(0x7f0000000800)='transport=loop,nqn=testsubsys', 0x1d) nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0) 6.062720287s ago: executing program 3 (id=619): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000001c0)={r1, 0x0, 0xd}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x3, 0x0, 0x8000}}, 0x26) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) close_range(r6, 0xffffffffffffffff, 0x0) 5.860468642s ago: executing program 3 (id=620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40488c1}, 0x80) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0xb}, {0xd, 0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x61}]}}]}, 0x40}}, 0x40000880) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.767454664s ago: executing program 2 (id=622): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000000)={[{@nomblk_io_submit}]}, 0x0, 0x236, &(0x7f0000010000)="$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") ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0xa25) 5.451321582s ago: executing program 3 (id=624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB="2cb2"], 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETCARRIER(r3, 0x400454e2, 0x0) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x8}, 0x14) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{0x0, 0xdd12}], 0x1, 0x0, 0x0, 0x30008803}, 0x44040) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r6) sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="011102730000003da26142000000000033c1b2a80630e1153226f922319b209d5f000000000000e3f7c4c8ae18e7d0ba2a020bad34d55ed77de34110a743bc7f9896c76c894c77734d74719736456a", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ce2a4fa77baa108b"], 0x48}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0xb4, 0x436, 0x1, 0x70bd29, 0x25dfdbfc, {0x3}, [@generic="7c6c22d4493cb3bced976aa17e5d8a06a739853f310e155bf15bde9c9dc9b7ce56eae4c1cdb91a9e9de1110b8454ac21f70b5b5eb5b89995aa73ee8272294415dab05d4397f18a4e8b5a04ea80916e96d9c8869d297d01cf33b43de69aa696b27ab7d825e160d3e14333680a07c09f29b57c1ea6b74341e864d67c193c46e97f4a667d8c8de1cf43fb0365e3bb5050d7a89852d95420f8b5303579242d"]}, 0xb4}, 0x1, 0x200000000000000, 0x0, 0x24040010}, 0x24000080) 4.575268922s ago: executing program 2 (id=626): syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) io_setup(0x2278, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) 4.310312079s ago: executing program 3 (id=627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='select <', 0x8) write(r1, &(0x7f0000000100)='file read /etc/passwd /as/\\-id=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) 3.919638728s ago: executing program 3 (id=629): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) io_setup(0x2278, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x2000001) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x9) ioctl$KDGKBTYPE(r0, 0x4b33, 0x0) 3.496519208s ago: executing program 1 (id=631): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000500), 0xff, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="11042abd7008fddbdf2514000000080003001f4465a3c3fbb4a1b93b1625ca67b2ced72eac04ae7d3bc51ade012d681ae27794664ebc10cc2e13d1acf375cbd1313a1acfde1f024a1d3769f858a5a2a12b6403b3c5ec0c43398564329eb6be2de388c1bc4dfb7d55642687498a0eafc0a52d30c3d5899596ced09f7a20686bbf328d", @ANYRES32=r6, @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0xfffa, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x6, 0x0, 0x7, 0x6, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x2, 0x3}, 0xe) shutdown(r7, 0x1) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000680)) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdb7d}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x4059) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 2.387858534s ago: executing program 0 (id=633): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x5412, 0x4) 2.387488964s ago: executing program 1 (id=634): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x4, 0x40, 0xb, 0x6, 0x85f, 0x6, 0x1, 0x7fffffff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40488c1}, 0x80) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0xb}, {0xd, 0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x61}]}}]}, 0x40}}, 0x40000880) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.283333606s ago: executing program 0 (id=635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dedbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x1, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x54815}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, 0x0) 2.09429179s ago: executing program 1 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='select <', 0x8) 1.827221877s ago: executing program 0 (id=637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB="2cb2"], 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETCARRIER(r3, 0x400454e2, 0x0) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x8}, 0x14) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{0x0, 0xdd12}], 0x1, 0x0, 0x0, 0x30008803}, 0x44040) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r6) sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$can_bcm(r1, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0xb4, 0x436, 0x1, 0x70bd29, 0x25dfdbfc, {0x3}, [@generic="7c6c22d4493cb3bced976aa17e5d8a06a739853f310e155bf15bde9c9dc9b7ce56eae4c1cdb91a9e9de1110b8454ac21f70b5b5eb5b89995aa73ee8272294415dab05d4397f18a4e8b5a04ea80916e96d9c8869d297d01cf33b43de69aa696b27ab7d825e160d3e14333680a07c09f29b57c1ea6b74341e864d67c193c46e97f4a667d8c8de1cf43fb0365e3bb5050d7a89852d95420f8b5303579242d"]}, 0xb4}, 0x1, 0x200000000000000, 0x0, 0x24040010}, 0x24000080) 1.003815666s ago: executing program 0 (id=638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x10, 0x1, 0x0, 0x8f}, 0x3, 0x2, [{0x5, 0x1, 0xffffffc0, 0x800, 0x9, 0xfffff77a}]}, [{0x2, 0x765, 0x800, 0x3ff, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x6, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x2, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x8, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffffff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3000, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x800, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x80, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x5, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0x7ff, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x5}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x9, 0x8f24}, {0x8000, 0x0, 0x6e73, 0x9, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x8, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0x8, 0x8, 0xca14, 0x1, 0x10001}, {0x401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x200, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xf, 0x2, 0x3, 0x2, 0x1, 0xd3}, {0x8, 0xdf3, 0x2, 0xfffffffc, 0x3}, {0xfffffffd, 0x2, 0xff, 0xd7c, 0xffffff7c, 0xd}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x8, 0x6612, 0xfffffff8, 0x3, 0x99, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x6, 0x4, 0x47, 0x2}, {0x3, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x200, 0x0, 0x7a5e, 0x80000000, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x6b10cf10, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0xb1b, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0x5, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x4}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x0, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x9, 0x2}, {0xffff, 0xc23, 0x0, 0x8, 0xfff, 0x1ff}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x0, 0xf, 0x5}, {0x1000, 0x7, 0x1, 0x1, 0x4, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0x1, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xb2f, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xfffffffc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x9, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x4, 0x0, 0x800, 0x7}, {0x8, 0x80, 0x1, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0xb5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x602, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x101, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x8, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1ff, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x7}, {0x2, 0x7f, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x7}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x1, 0xfffffffe, 0x1, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0x8000, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x10, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x5, 0x7}, {0x5, 0x3, 0x3882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e105", 0x13}], 0x1}, 0x0) 1.002900996s ago: executing program 4 (id=639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='select <', 0x8) write(r1, &(0x7f0000000100)='file read /etc/passwd /as/\\-id=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) 931.810607ms ago: executing program 1 (id=640): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r0, &(0x7f0000002180)={0x50, 0x0, r2, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2404}}, 0x50) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3, {0x403, 0x0, 0x8, 0xfff}}, 0x20) getdents64(r1, 0x0, 0x20000) 631.074715ms ago: executing program 0 (id=641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 579.301016ms ago: executing program 4 (id=642): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x2000, 0xa9) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x404000000ff, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d81a17f7061a74df2cfc06c89f3d9e234b30c50997d3bef4090ebcdda37bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b063cc14ad3300", [0x2002, 0x6]}}) 373.643641ms ago: executing program 1 (id=643): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x10, 0x28, 0x65, 0x0, 0xe, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0x7, 0x0, 0x86}}}}}}, 0x0) 372.944201ms ago: executing program 2 (id=644): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000500), 0xff, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="11042abd7008fddbdf2514000000080003001f4465a3c3fbb4a1b93b1625ca67b2ced72eac04ae7d3bc51ade012d681ae27794664ebc10cc2e13d1acf375cbd1313a1acfde1f024a1d3769f858a5a2a12b6403b3c5ec0c43398564329eb6be2de388c1bc4dfb7d55642687498a0eafc0a52d30c3d5899596ced09f7a20686bbf328d", @ANYRES32=r6, @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0xfffa, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x6, 0x0, 0x7, 0x6, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x2, 0x3}, 0xe) shutdown(r7, 0x1) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000680)) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdb7d}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x4059) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 176.733476ms ago: executing program 4 (id=645): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}]}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001780)=""/70, 0x0, 0x9000}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/75, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4008af04, &(0x7f0000000040)) 176.370736ms ago: executing program 0 (id=646): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x7, 0x4, 0x3}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000200)=@l2tp6={0xa, 0x500, 0x80000, @empty, 0xfffffff8, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 126.149456ms ago: executing program 1 (id=647): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x161, 0x40000867, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x777) syncfs(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 4 (id=648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB="2cb2"], 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETCARRIER(r3, 0x400454e2, 0x0) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x8}, 0x14) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{0x0, 0xdd12}], 0x1, 0x0, 0x0, 0x30008803}, 0x44040) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r6) sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$can_bcm(r1, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0xb4, 0x436, 0x1, 0x70bd29, 0x25dfdbfc, {0x3}, [@generic="7c6c22d4493cb3bced976aa17e5d8a06a739853f310e155bf15bde9c9dc9b7ce56eae4c1cdb91a9e9de1110b8454ac21f70b5b5eb5b89995aa73ee8272294415dab05d4397f18a4e8b5a04ea80916e96d9c8869d297d01cf33b43de69aa696b27ab7d825e160d3e14333680a07c09f29b57c1ea6b74341e864d67c193c46e97f4a667d8c8de1cf43fb0365e3bb5050d7a89852d95420f8b5303579242d"]}, 0xb4}, 0x1, 0x200000000000000, 0x0, 0x24040010}, 0x24000080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. [ 62.599954][ T4172] cgroup: Unknown subsys name 'net' [ 62.783559][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.340242][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.874898][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 65.961046][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 66.024642][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.032725][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.041234][ T4186] device bridge_slave_0 entered promiscuous mode [ 66.049992][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 66.074901][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.084725][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.093375][ T4186] device bridge_slave_1 entered promiscuous mode [ 66.118481][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 66.165244][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 66.209640][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.228675][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.258103][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.265189][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.273756][ T4195] device bridge_slave_0 entered promiscuous mode [ 66.300380][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.307867][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.316324][ T4195] device bridge_slave_1 entered promiscuous mode [ 66.361249][ T4186] team0: Port device team_slave_0 added [ 66.369874][ T4186] team0: Port device team_slave_1 added [ 66.386183][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.393301][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.402098][ T4187] device bridge_slave_0 entered promiscuous mode [ 66.424429][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.431626][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.439827][ T4200] device bridge_slave_0 entered promiscuous mode [ 66.455170][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.462491][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.471024][ T4200] device bridge_slave_1 entered promiscuous mode [ 66.478590][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.485692][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.494063][ T4187] device bridge_slave_1 entered promiscuous mode [ 66.509176][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.545998][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.563231][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.570440][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.597086][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.609398][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.616940][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.624842][ T4185] device bridge_slave_0 entered promiscuous mode [ 66.635401][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.653794][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.666033][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.683785][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.691086][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.717795][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.729332][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.736589][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.744524][ T4185] device bridge_slave_1 entered promiscuous mode [ 66.761202][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.791522][ T4195] team0: Port device team_slave_0 added [ 66.807299][ T4200] team0: Port device team_slave_0 added [ 66.814951][ T4200] team0: Port device team_slave_1 added [ 66.829845][ T4195] team0: Port device team_slave_1 added [ 66.863471][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.876584][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.907763][ T4187] team0: Port device team_slave_0 added [ 66.919062][ T4186] device hsr_slave_0 entered promiscuous mode [ 66.926910][ T4186] device hsr_slave_1 entered promiscuous mode [ 66.955613][ T4187] team0: Port device team_slave_1 added [ 66.962610][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.970000][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.996378][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.016548][ T4185] team0: Port device team_slave_0 added [ 67.023557][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.032010][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.058393][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.084009][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.091372][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.117978][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.131555][ T4185] team0: Port device team_slave_1 added [ 67.138400][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.145401][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.172028][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.189885][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.197445][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.223459][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.263787][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.271048][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.297339][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.330381][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.337565][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.364628][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.402638][ T4200] device hsr_slave_0 entered promiscuous mode [ 67.409742][ T4200] device hsr_slave_1 entered promiscuous mode [ 67.416982][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.424810][ T4200] Cannot create hsr debugfs directory [ 67.431232][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.438795][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.464784][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.479546][ T4195] device hsr_slave_0 entered promiscuous mode [ 67.487138][ T4195] device hsr_slave_1 entered promiscuous mode [ 67.493785][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.501445][ T4195] Cannot create hsr debugfs directory [ 67.566881][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 67.566891][ T1324] Bluetooth: hci3: command 0x0409 tx timeout [ 67.594325][ T4187] device hsr_slave_0 entered promiscuous mode [ 67.601329][ T4187] device hsr_slave_1 entered promiscuous mode [ 67.608642][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.616611][ T4187] Cannot create hsr debugfs directory [ 67.645961][ T1324] Bluetooth: hci4: command 0x0409 tx timeout [ 67.647273][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 67.652100][ T1324] Bluetooth: hci0: command 0x0409 tx timeout [ 67.680358][ T4185] device hsr_slave_0 entered promiscuous mode [ 67.687961][ T4185] device hsr_slave_1 entered promiscuous mode [ 67.694533][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.702255][ T4185] Cannot create hsr debugfs directory [ 67.982020][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.994015][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.003266][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.019654][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.078977][ T4195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.091974][ T4195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.109172][ T4195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.133325][ T4195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.172749][ T4200] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.195330][ T4200] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.228220][ T4200] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.238138][ T4200] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.274355][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.291029][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.304575][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.315570][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.360191][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.396879][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.407195][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.419416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.429979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.440703][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.454149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.463827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.474114][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.481518][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.493758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.521870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.532606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.541794][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.548988][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.560187][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.572072][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.584445][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.599949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.632338][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.640686][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.649041][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.671584][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.682131][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.692306][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.701511][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.719831][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.732074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.741901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.767654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.780192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.789902][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.797051][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.806648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.815105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.823758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.845769][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.856658][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.866026][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.873157][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.882318][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.891741][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.902273][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.930235][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.938968][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.947864][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.964928][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.996958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.013831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.022982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.038464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.053378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.063756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.082988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.102911][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.130597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.139874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.150781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.166068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.174655][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.181810][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.198704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.210074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.220979][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.228174][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.238046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.248181][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.275469][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.288714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.297658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.307287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.318797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.328530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.354218][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.402777][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.411682][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.420479][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.429917][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.438164][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.448184][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.458643][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.467468][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.477953][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.487657][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.496427][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.504014][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.514233][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.525049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.536760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.545325][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.552493][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.562372][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.578839][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.614823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.624077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.640558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.653267][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.657718][ T1110] Bluetooth: hci2: command 0x041b tx timeout [ 69.661095][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.674897][ T1110] Bluetooth: hci3: command 0x041b tx timeout [ 69.686818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.695719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.704800][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.711999][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.721054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.729929][ T1110] Bluetooth: hci0: command 0x041b tx timeout [ 69.736253][ T1110] Bluetooth: hci1: command 0x041b tx timeout [ 69.743074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.751259][ T1110] Bluetooth: hci4: command 0x041b tx timeout [ 69.759325][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.766488][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.774449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.784135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.841523][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.857725][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.874195][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.884442][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.895124][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.905453][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.916089][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.924900][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.934222][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.942979][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.951346][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.960018][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.971241][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.001505][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.018449][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.029211][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.038199][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.047204][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.055706][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.067101][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.075607][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.086295][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.095066][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.104115][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.114350][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.141224][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.161795][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.173690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.188985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.238431][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.245774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.267801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.287033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.294704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.318090][ T4186] device veth0_vlan entered promiscuous mode [ 70.327472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.337599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.363757][ T4186] device veth1_vlan entered promiscuous mode [ 70.404217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.413666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.429865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.444115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.453679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.463001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.471782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.489587][ T4195] device veth0_vlan entered promiscuous mode [ 70.529526][ T4195] device veth1_vlan entered promiscuous mode [ 70.583261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.594189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.610384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.620979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.630770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.640148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.665226][ T4186] device veth0_macvtap entered promiscuous mode [ 70.677695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.686714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.695039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.703252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.712359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.722665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.736961][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.746596][ T4200] device veth0_vlan entered promiscuous mode [ 70.764871][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.782154][ T4186] device veth1_macvtap entered promiscuous mode [ 70.791536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.801044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.810940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.819958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.829457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.854976][ T4200] device veth1_vlan entered promiscuous mode [ 70.871806][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.881949][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.894213][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.907785][ T4195] device veth0_macvtap entered promiscuous mode [ 70.938518][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.958793][ T4195] device veth1_macvtap entered promiscuous mode [ 70.977267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.985504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.000604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.014231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.028352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.043499][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.066782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.075635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.092632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.104243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.122635][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.134582][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.150546][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.161610][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.190394][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.201715][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.215224][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.253728][ T4200] device veth0_macvtap entered promiscuous mode [ 71.262522][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.273348][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.282815][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.298199][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.307887][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.318050][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.327398][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.353146][ T4200] device veth1_macvtap entered promiscuous mode [ 71.369234][ T4185] device veth0_vlan entered promiscuous mode [ 71.379230][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.390215][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.402247][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.414099][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.422416][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.432422][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.441682][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.454003][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.456188][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.477344][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.485924][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.494836][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.504487][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.513454][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.535201][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.546553][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.565402][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.577543][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.588534][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.600655][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.618491][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.631345][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.644559][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.655644][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.666496][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.678295][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.691582][ T4200] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.700515][ T4200] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.709984][ T4200] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.719519][ T4200] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.728921][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 71.744710][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 71.760037][ T4187] device veth0_vlan entered promiscuous mode [ 71.775574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.785150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.794930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.804527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.814960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.824618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.835516][ T4185] device veth1_vlan entered promiscuous mode [ 71.842012][ T4263] Bluetooth: hci4: command 0x040f tx timeout [ 71.848746][ T4263] Bluetooth: hci1: command 0x040f tx timeout [ 71.854895][ T4263] Bluetooth: hci0: command 0x040f tx timeout [ 71.884856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.896955][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.905127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.922536][ T4187] device veth1_vlan entered promiscuous mode [ 72.005059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.019237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.030697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.051254][ T4187] device veth0_macvtap entered promiscuous mode [ 72.076609][ T1267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.084668][ T1267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.101722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.111086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.120084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.128410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.145960][ T4187] device veth1_macvtap entered promiscuous mode [ 72.153071][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.164781][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.182883][ T4185] device veth0_macvtap entered promiscuous mode [ 72.192642][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.203966][ T4185] device veth1_macvtap entered promiscuous mode [ 72.220840][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.232860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.241729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.250573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.260942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.270347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.279114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.309170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.349065][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.361594][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.374837][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.385628][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.395893][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.406786][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.418534][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.432101][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.443019][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.453518][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.465722][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.476554][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.487419][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.497857][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.509082][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.520729][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.537882][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.546797][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.557344][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.568034][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.576988][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.580169][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.595846][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.607167][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.619751][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.630427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.639797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.649079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.660159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.670338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.679680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.689502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.703347][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.714799][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.726640][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.737156][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.747415][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.758365][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.770501][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.781308][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.793326][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.811022][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.818646][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.819942][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.837035][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.845797][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.855045][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.867936][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.879306][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.888163][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.910225][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.923246][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.933426][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.942657][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.987826][ T1267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.995707][ T1267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.032018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.193193][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.229433][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.251283][ T4270] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 73.271875][ T4269] loop1: detected capacity change from 0 to 128 [ 73.297588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.305291][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.342437][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.367572][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.392224][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.410366][ T4273] binder_alloc: 4272: binder_alloc_buf size 12312 failed, no address space [ 73.431735][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.446646][ T4273] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 73.537203][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.689067][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.881596][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 74.171104][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 74.432598][ T4228] Bluetooth: hci0: command 0x0419 tx timeout [ 74.440777][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 74.451750][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.522396][ T4228] Bluetooth: hci4: command 0x0419 tx timeout [ 74.543679][ T26] audit: type=1326 audit(1787874532.625:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4287 comm="syz.3.9" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732f7d20d9 code=0x7ffc0000 [ 74.570838][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.720817][ T26] audit: type=1326 audit(1787874532.625:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4287 comm="syz.3.9" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732f7d20d9 code=0x7ffc0000 [ 74.768156][ T4290] loop1: detected capacity change from 0 to 128 [ 74.797417][ T4293] loop3: detected capacity change from 0 to 512 [ 74.863893][ T26] audit: type=1326 audit(1787874532.625:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4287 comm="syz.3.9" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732f7d20d9 code=0x7ffc0000 [ 74.895703][ T26] audit: type=1326 audit(1787874532.625:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4287 comm="syz.3.9" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f732f7d20d9 code=0x7ffc0000 [ 74.928837][ T26] audit: type=1326 audit(1787874532.625:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4287 comm="syz.3.9" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f732f7d20d9 code=0x7ffc0000 [ 74.959112][ T26] audit: type=1326 audit(1787874532.685:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4287 comm="syz.3.9" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f732f7d20d9 code=0x7ffc0000 [ 74.992884][ T26] audit: type=1326 audit(1787874532.685:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4287 comm="syz.3.9" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f732f7d20d9 code=0x7ffc0000 [ 76.415842][ C1] sched: RT throttling activated [ 76.426569][ T4290] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.453067][ T4290] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.246477][ T4309] Zero length message leads to an empty skb [ 77.261105][ T4309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 79.256659][ T4336] netlink: 40 bytes leftover after parsing attributes in process `syz.4.20'. [ 79.430574][ T4323] loop2: detected capacity change from 0 to 8192 [ 79.460971][ T4343] loop4: detected capacity change from 0 to 128 [ 79.471131][ T4339] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17'. [ 79.547823][ T4345] device syzkaller0 entered promiscuous mode [ 79.581766][ T4343] EXT4-fs (loop4): Test dummy encryption mode enabled [ 79.612062][ T4343] EXT4-fs (loop4): inline encryption not supported [ 79.647410][ T4343] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,mb_optimize_scan=0x0000000000000000,inlinecrypt,auto_da_alloc,,errors=continue. Quota mode: none. [ 79.692103][ T4351] loop1: detected capacity change from 0 to 8 [ 79.696449][ T4343] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.854604][ T4351] unable to read fragment index table [ 80.293389][ T4343] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 80.377979][ T4385] loop2: detected capacity change from 0 to 256 [ 80.406204][ T4354] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 80.651324][ T4406] syz.1.36 uses obsolete (PF_INET,SOCK_PACKET) [ 80.886748][ T4411] netlink: 36 bytes leftover after parsing attributes in process `syz.1.38'. [ 80.952263][ T4417] device syzkaller0 entered promiscuous mode [ 81.174832][ T4430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.44'. [ 82.199606][ T4439] loop1: detected capacity change from 0 to 512 [ 82.302917][ T4448] loop3: detected capacity change from 0 to 128 [ 82.348086][ T4439] ======================================================= [ 82.348086][ T4439] WARNING: The mand mount option has been deprecated and [ 82.348086][ T4439] and is ignored by this kernel. Remove the mand [ 82.348086][ T4439] option from the mount to silence this warning. [ 82.348086][ T4439] ======================================================= [ 82.552502][ T4439] EXT4-fs (loop1): inline encryption not supported [ 82.643127][ T4439] EXT4-fs (loop1): 1 orphan inode deleted [ 82.649310][ T4439] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,inlinecrypt,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,journal_dev=0x0000000000000008,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. [ 83.534388][ T4485] loop4: detected capacity change from 0 to 512 [ 83.612726][ T4485] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.663334][ T4485] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.719223][ T4485] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.62: invalid indirect mapped block 9 (level 0) [ 83.773543][ T4485] EXT4-fs (loop4): 1 truncate cleaned up [ 83.804302][ T4485] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 84.043711][ T4495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'. [ 84.175307][ T4505] loop3: detected capacity change from 0 to 128 [ 84.252810][ T4505] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 84.305517][ T4505] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.222226][ T4528] tipc: Started in network mode [ 85.256859][ T4528] tipc: Node identity 42ebb83bed0f, cluster identity 4711 [ 85.265251][ T4528] tipc: Enabled bearer , priority 0 [ 85.298143][ T4521] device syzkaller0 entered promiscuous mode [ 85.304187][ T4505] fscrypt: Error allocating hmac(sha512): -2 [ 85.360556][ T4521] tipc: Resetting bearer [ 85.387686][ T4518] tipc: Resetting bearer [ 85.462657][ T4518] tipc: Disabling bearer [ 85.638337][ T4542] device syzkaller0 entered promiscuous mode [ 85.700523][ T4546] device syzkaller0 entered promiscuous mode [ 85.755789][ T4546] tipc: Enabled bearer , priority 0 [ 85.783754][ T4548] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 85.826532][ T4545] tipc: Resetting bearer [ 85.833204][ T4553] loop1: detected capacity change from 0 to 1024 [ 85.867235][ T4553] EXT4-fs (loop1): Ignoring removed bh option [ 85.914043][ T4545] tipc: Disabling bearer [ 85.923414][ T4553] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,delalloc,barrier=0x0000000000000004,journal_ioprio=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,abort,bh,init_itable,jqfmt=vfsv1,usrquota,. Quota mode: writeback. [ 86.013662][ T4560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.83'. [ 86.793276][ T13] cfg80211: failed to load regulatory.db [ 87.310537][ T4590] device syzkaller0 entered promiscuous mode [ 87.576307][ T4603] device syzkaller0 entered promiscuous mode [ 87.662271][ T4603] tipc: Started in network mode [ 87.677993][ T4603] tipc: Node identity 7245078c2f0f, cluster identity 4711 [ 87.699469][ T4603] tipc: Enabled bearer , priority 0 [ 88.487099][ T4602] device syzkaller0 entered promiscuous mode [ 88.776606][ T4603] tipc: Resetting bearer [ 88.849446][ T4603] tipc: Disabling bearer [ 88.911902][ T4628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 89.684108][ T4230] tipc: Node number set to 1565132684 [ 90.542434][ T4662] device syzkaller0 entered promiscuous mode [ 90.613179][ T4670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 90.695696][ T4665] device syzkaller0 entered promiscuous mode [ 90.833748][ T4647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.543309][ T4665] tipc: Enabled bearer , priority 0 [ 91.645168][ T4680] tipc: Resetting bearer [ 91.739381][ T4680] tipc: Disabling bearer [ 91.819810][ T4696] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 91.881020][ T4696] fuse: Bad value for 'fd' [ 91.921533][ T4699] loop4: detected capacity change from 0 to 1024 [ 92.041875][ T4699] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 92.051736][ T4699] EXT4-fs (loop4): Ignoring removed bh option [ 92.129076][ T4699] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a00ec01c, mo2=0002] [ 92.143889][ T4708] binder: 4705:4708 ioctl c0306201 200000000080 returned -14 [ 92.163616][ T4699] System zones: 0-1, 3-12 [ 92.178847][ T4708] binder: 4705:4708 ioctl c0306201 2000000003c0 returned -14 [ 92.196855][ T4699] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,nomblk_io_submit,resuid=0x0000000000000000,bsddf,sysvgroups,nodelalloc,quota,grpid,bh,,errors=continue. Quota mode: writeback. [ 92.877891][ T4726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 93.357996][ T4720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.679280][ T4738] device syzkaller0 entered promiscuous mode [ 93.986351][ T4257] Bluetooth: hci4: command 0x2016 tx timeout [ 94.282676][ T4744] tipc: Enabled bearer , priority 0 [ 94.362061][ T4744] device syzkaller0 entered promiscuous mode [ 94.431409][ T4746] tipc: Resetting bearer [ 94.626276][ T4743] tipc: Resetting bearer [ 94.655731][ T4743] tipc: Disabling bearer [ 94.703880][ T4761] device syzkaller0 entered promiscuous mode [ 95.102131][ T4775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 95.778556][ T4771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.843834][ T4787] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.253659][ T4257] Bluetooth: hci4: command 0x0406 tx timeout [ 96.868350][ T4816] tipc: Started in network mode [ 96.873294][ T4816] tipc: Node identity 46946577af0d, cluster identity 4711 [ 96.887215][ T4816] tipc: Enabled bearer , priority 0 [ 96.897582][ T4813] device syzkaller0 entered promiscuous mode [ 96.926837][ T4813] tipc: Resetting bearer [ 96.955781][ T4812] tipc: Resetting bearer [ 96.983143][ T4812] tipc: Disabling bearer [ 97.285080][ T4827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.155'. [ 98.147311][ T4835] loop2: detected capacity change from 0 to 512 [ 98.280966][ T4840] device syzkaller0 entered promiscuous mode [ 98.414640][ T4835] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 98.876565][ T4834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.981164][ T4835] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3894: comm syz.2.156: Allocating blocks 41-42 which overlap fs metadata [ 99.032782][ T4844] loop3: detected capacity change from 0 to 1024 [ 99.041258][ T4835] EXT4-fs (loop2): Remounting filesystem read-only [ 99.048868][ T4835] Quota error (device loop2): write_blk: dquota write failed [ 99.062598][ T4835] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 99.086241][ T4835] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 99.096440][ T4835] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.156: Failed to acquire dquot type 1 [ 99.117734][ T4835] EXT4-fs (loop2): Remounting filesystem read-only [ 99.124660][ T4835] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 99.162713][ T4835] EXT4-fs (loop2): Remounting filesystem read-only [ 99.169895][ T4835] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.156: corrupted inode contents [ 99.182664][ T4835] EXT4-fs (loop2): Remounting filesystem read-only [ 99.189661][ T4835] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #12: comm syz.2.156: mark_inode_dirty error [ 99.202381][ T4835] EXT4-fs (loop2): Remounting filesystem read-only [ 99.236312][ T4835] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.156: corrupted inode contents [ 99.291691][ T4835] EXT4-fs (loop2): Remounting filesystem read-only [ 99.300657][ T4844] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.325577][ T4835] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.156: mark_inode_dirty error [ 99.344691][ T4835] EXT4-fs (loop2): Remounting filesystem read-only [ 99.358328][ T4835] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.156: corrupted inode contents [ 99.478605][ T4835] EXT4-fs (loop2): Remounting filesystem read-only [ 99.488750][ T4835] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 99.550712][ T4835] EXT4-fs (loop2): Remounting filesystem read-only [ 99.607653][ T4835] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.156: corrupted inode contents [ 99.658707][ T4860] loop4: detected capacity change from 0 to 1024 [ 99.683933][ T4835] EXT4-fs (loop2): Remounting filesystem read-only [ 99.691038][ T4835] EXT4-fs error (device loop2): ext4_truncate:4286: inode #12: comm syz.2.156: mark_inode_dirty error [ 99.708921][ T4835] EXT4-fs (loop2): Remounting filesystem read-only [ 99.715686][ T4835] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 99.732439][ T4835] EXT4-fs (loop2): Remounting filesystem read-only [ 99.749028][ T4835] EXT4-fs (loop2): 1 truncate cleaned up [ 99.785537][ T4835] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,init_itable,resgid=0x00000000000000002. Quota mode: writeback. [ 99.856586][ T4860] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 99.959332][ T4860] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 99.979057][ T4860] EXT4-fs (loop4): orphan cleanup on readonly fs [ 100.091539][ T4860] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #3: block 3: comm syz.4.162: lblock 3 mapped to illegal pblock 3 (length 1) [ 100.166393][ T4870] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.192819][ T4860] Quota error (device loop4): write_blk: dquota write failed [ 100.202700][ T4860] Quota error (device loop4): find_free_dqentry: Can't write quota data block 3 [ 100.234858][ T4860] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 100.274097][ T4860] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.162: Failed to acquire dquot type 0 [ 100.326831][ T4860] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 3: comm syz.4.162: lblock 3 mapped to illegal pblock 3 (length 1) [ 100.351714][ T4860] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 100.363468][ T4860] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.162: Failed to acquire dquot type 0 [ 100.377063][ T4860] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.162: Freeing blocks not in datazone - block = 0, count = 4096 [ 100.514887][ T4860] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 3: comm syz.4.162: lblock 3 mapped to illegal pblock 3 (length 1) [ 100.658208][ T4860] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 100.676685][ T4875] device syzkaller0 entered promiscuous mode [ 100.744961][ T4860] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.162: Failed to acquire dquot type 0 [ 100.834426][ T4860] EXT4-fs (loop4): 1 orphan inode deleted [ 100.868636][ T4860] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000006,max_batch_time=0x0000000000000007,acl,journal_dev=0x0000000000000001,auto_da_alloc,jqfmt=vfsold,dax=never,usrjquota=,,errors=continue. Quota mode: writeback. [ 100.987805][ T4860] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 101.076813][ T4885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 101.232056][ T4890] device syzkaller0 entered promiscuous mode [ 101.987762][ T4886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.326841][ T4909] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 103.349626][ T4929] tipc: Enabling of bearer rejected, failed to enable media [ 104.240518][ T4954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 104.656064][ T4966] tipc: Started in network mode [ 104.661756][ T4966] tipc: Node identity e60600abd47, cluster identity 4711 [ 104.673384][ T4966] tipc: Enabled bearer , priority 0 [ 104.687508][ T4966] device syzkaller0 entered promiscuous mode [ 104.726416][ T4966] tipc: Resetting bearer [ 104.744196][ T4968] device syzkaller0 entered promiscuous mode [ 104.773024][ T4965] tipc: Resetting bearer [ 104.807395][ T4965] tipc: Disabling bearer [ 105.773771][ T4971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.920883][ T4977] tipc: Enabling of bearer rejected, failed to enable media [ 106.151389][ T5003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.198'. [ 106.261264][ T5009] device syzkaller0 entered promiscuous mode [ 106.817638][ T5024] tipc: Enabled bearer , priority 0 [ 106.825455][ T5024] device syzkaller0 entered promiscuous mode [ 106.846888][ T5024] tipc: Resetting bearer [ 106.890817][ T5023] tipc: Resetting bearer [ 106.962869][ T5023] tipc: Disabling bearer [ 106.994806][ T5026] device syzkaller0 entered promiscuous mode [ 108.323174][ T5044] tipc: Enabling of bearer rejected, failed to enable media [ 108.722511][ T5059] No such timeout policy "syz1" [ 109.223527][ T5049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.939911][ T5065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 110.874100][ T5082] tc action pedit 'at' offset -2147483645 out of bounds [ 110.881626][ T5082] tc action pedit 'at' offset -2147483645 out of bounds [ 110.888670][ T5082] tc action pedit 'at' offset -2147483645 out of bounds [ 110.895768][ T5082] tc action pedit 'at' offset -2147483645 out of bounds [ 110.902907][ T5082] tc action pedit 'at' offset -2147483645 out of bounds [ 110.909958][ T5082] tc action pedit 'at' offset -2147483645 out of bounds [ 110.916987][ T5082] tc action pedit 'at' offset -2147483645 out of bounds [ 110.924004][ T5082] tc action pedit 'at' offset -2147483645 out of bounds [ 110.931014][ T5082] tc action pedit 'at' offset -2147483645 out of bounds [ 110.938163][ T5082] tc action pedit 'at' offset -2147483645 out of bounds [ 110.945989][ T5082] 0: reclassify loop, rule prio 0, protocol 800 [ 111.054516][ T5089] tipc: Enabled bearer , priority 0 [ 111.069311][ T5089] device syzkaller0 entered promiscuous mode [ 111.092111][ T5089] tipc: Resetting bearer [ 111.101940][ T5088] tipc: Resetting bearer [ 111.122398][ T5088] tipc: Disabling bearer [ 111.708523][ T5108] tipc: Enabling of bearer rejected, failed to enable media [ 112.343132][ T5121] device syzkaller0 entered promiscuous mode [ 112.568892][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.223'. [ 113.787345][ T5111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.991323][ T5152] loop4: detected capacity change from 0 to 4096 [ 115.244126][ T5155] 0: reclassify loop, rule prio 0, protocol 800 [ 115.282546][ T5158] tipc: Enabled bearer , priority 0 [ 115.293713][ T5158] device syzkaller0 entered promiscuous mode [ 115.310490][ T5152] EXT4-fs (loop4): Test dummy encryption mode enabled [ 115.354667][ T5158] tipc: Resetting bearer [ 115.370826][ T5152] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 115.370941][ T5157] tipc: Resetting bearer [ 115.415577][ T5157] tipc: Disabling bearer [ 116.799837][ T5180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.237'. [ 117.146829][ T5206] tipc: Enabling of bearer rejected, failed to enable media [ 117.897932][ T5227] tipc: Enabled bearer , priority 0 [ 117.984619][ T5230] device syzkaller0 entered promiscuous mode [ 118.063921][ T5225] tipc: Resetting bearer [ 118.124584][ T5225] tipc: Disabling bearer [ 118.179746][ T5208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.342716][ T5241] device syzkaller0 entered promiscuous mode [ 119.496979][ T5259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 119.949782][ T5270] tcf_pedit_act: 24 callbacks suppressed [ 119.949806][ T5270] tc action pedit 'at' offset -2147483645 out of bounds [ 119.962579][ T5270] tc action pedit 'at' offset -2147483645 out of bounds [ 119.969598][ T5270] tc action pedit 'at' offset -2147483645 out of bounds [ 119.976619][ T5270] tc action pedit 'at' offset -2147483645 out of bounds [ 119.983604][ T5270] tc action pedit 'at' offset -2147483645 out of bounds [ 119.990635][ T5270] tc action pedit 'at' offset -2147483645 out of bounds [ 119.997742][ T5270] tc action pedit 'at' offset -2147483645 out of bounds [ 120.004761][ T5270] tc action pedit 'at' offset -2147483645 out of bounds [ 120.011882][ T5270] tc action pedit 'at' offset -2147483645 out of bounds [ 120.018902][ T5270] tc action pedit 'at' offset -2147483645 out of bounds [ 120.025945][ T5270] 0: reclassify loop, rule prio 0, protocol 800 [ 120.090272][ T5272] tipc: Enabled bearer , priority 0 [ 120.110669][ T5272] device syzkaller0 entered promiscuous mode [ 120.134021][ T5272] tipc: Resetting bearer [ 120.143926][ T5271] tipc: Resetting bearer [ 120.162346][ T5271] tipc: Disabling bearer [ 120.230956][ T5276] device syzkaller0 entered promiscuous mode [ 120.604831][ T5284] device syzkaller0 entered promiscuous mode [ 121.583363][ T5290] device syzkaller0 entered promiscuous mode [ 121.774755][ T5304] tipc: Enabling of bearer rejected, failed to enable media [ 122.103308][ T5317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'. [ 122.283001][ T5332] tipc: Enabled bearer , priority 0 [ 122.292024][ T5332] device syzkaller0 entered promiscuous mode [ 122.326596][ T5332] tipc: Resetting bearer [ 122.340539][ T5331] tipc: Resetting bearer [ 122.363958][ T5331] tipc: Disabling bearer [ 122.464346][ T5338] device syzkaller0 entered promiscuous mode [ 123.336894][ T5339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.670692][ T5353] device syzkaller0 entered promiscuous mode [ 124.166883][ T5371] tipc: Enabling of bearer rejected, failed to enable media [ 124.272694][ T5379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 124.542342][ T5388] tipc: Enabled bearer , priority 0 [ 124.561941][ T5388] device syzkaller0 entered promiscuous mode [ 124.612201][ T5388] tipc: Resetting bearer [ 124.700336][ T5398] device syzkaller0 entered promiscuous mode [ 124.768308][ T5387] tipc: Resetting bearer [ 124.798779][ T5387] tipc: Disabling bearer [ 125.801605][ T5417] device syzkaller0 entered promiscuous mode [ 125.870060][ T5415] device syzkaller0 entered promiscuous mode [ 126.066021][ T5422] tipc: Enabling of bearer rejected, failed to enable media [ 126.426929][ T5437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 126.583758][ T5414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.945657][ T5452] tipc: Enabled bearer , priority 0 [ 126.965498][ T5452] device syzkaller0 entered promiscuous mode [ 127.001216][ T5452] tipc: Resetting bearer [ 127.009463][ T5451] tipc: Resetting bearer [ 127.028260][ T5451] tipc: Disabling bearer [ 127.036792][ T5454] device syzkaller0 entered promiscuous mode [ 128.376361][ T5478] device syzkaller0 entered promiscuous mode [ 128.378565][ T5482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'. [ 128.509554][ T5490] tipc: Enabling of bearer rejected, failed to enable media [ 128.895559][ T5506] tipc: Enabled bearer , priority 0 [ 128.903297][ T5506] device syzkaller0 entered promiscuous mode [ 128.972741][ T5506] tipc: Resetting bearer [ 128.993884][ T5505] tipc: Resetting bearer [ 129.156537][ T5505] tipc: Disabling bearer [ 129.243205][ T5516] device syzkaller0 entered promiscuous mode [ 130.153351][ T5526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.285316][ T5533] device syzkaller0 entered promiscuous mode [ 130.487309][ T5541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 130.758514][ T5555] device syzkaller0 entered promiscuous mode [ 130.795486][ T5558] tipc: Enabling of bearer rejected, failed to enable media [ 131.415594][ T5575] tipc: Started in network mode [ 131.438132][ T5575] tipc: Node identity a294c028d9df, cluster identity 4711 [ 131.459398][ T5575] tipc: Enabled bearer , priority 0 [ 132.494116][ T5577] device syzkaller0 entered promiscuous mode [ 132.516526][ T5581] tipc: Resetting bearer [ 132.544747][ T5574] tipc: Resetting bearer [ 132.569890][ T5574] tipc: Disabling bearer [ 132.590417][ T23] tipc: Node number set to 2068561960 [ 132.615054][ T5591] device syzkaller0 entered promiscuous mode [ 132.646594][ T5592] device syzkaller0 entered promiscuous mode [ 132.917619][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.924530][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.965451][ T5607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 133.050693][ T5600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.282666][ T5623] tipc: Enabling of bearer rejected, failed to enable media [ 134.438078][ T5642] tipc: Enabled bearer , priority 0 [ 134.466852][ T5642] device syzkaller0 entered promiscuous mode [ 134.488665][ T5642] tipc: Resetting bearer [ 134.512310][ T5645] device syzkaller0 entered promiscuous mode [ 134.550688][ T5640] tipc: Resetting bearer [ 134.572654][ T5640] tipc: Disabling bearer [ 134.761696][ T5657] device syzkaller0 entered promiscuous mode [ 134.863992][ T5661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 135.364800][ T5678] tipc: Enabled bearer , priority 0 [ 135.411008][ T5678] tipc: Resetting bearer [ 135.454295][ T5677] tipc: Disabling bearer [ 137.222856][ T5691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.292152][ T5698] tipc: Enabled bearer , priority 0 [ 137.305420][ T5698] device syzkaller0 entered promiscuous mode [ 137.333122][ T5698] tipc: Resetting bearer [ 137.351877][ T5697] tipc: Resetting bearer [ 137.392092][ T5697] tipc: Disabling bearer [ 137.516840][ T5706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 137.877555][ T5718] device syzkaller0 entered promiscuous mode [ 138.301428][ T5730] tipc: Enabling of bearer rejected, failed to enable media [ 139.135097][ T5742] tipc: Enabled bearer , priority 0 [ 139.242791][ T5742] device syzkaller0 entered promiscuous mode [ 139.277487][ T5742] tipc: Resetting bearer [ 139.287597][ T5749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 139.325745][ T5740] tipc: Resetting bearer [ 139.373048][ T5740] tipc: Disabling bearer [ 139.983103][ T5762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.083794][ T5771] device syzkaller0 entered promiscuous mode [ 140.613772][ T5775] device syzkaller0 entered promiscuous mode [ 142.062831][ T5788] tipc: Enabling of bearer rejected, failed to enable media [ 142.144807][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 142.235715][ T5806] tipc: Enabled bearer , priority 0 [ 142.272734][ T5806] device syzkaller0 entered promiscuous mode [ 142.319507][ T5806] tipc: Resetting bearer [ 142.356779][ T5818] device syzkaller0 entered promiscuous mode [ 142.391802][ T5805] tipc: Resetting bearer [ 142.427895][ T5805] tipc: Disabling bearer [ 142.886989][ T5822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.223706][ T5850] device syzkaller0 entered promiscuous mode [ 144.461600][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 144.985263][ T5874] tipc: Enabled bearer , priority 0 [ 145.006319][ T5871] device syzkaller0 entered promiscuous mode [ 145.056629][ T5871] tipc: Resetting bearer [ 145.077779][ T5870] tipc: Resetting bearer [ 145.106172][ T5870] tipc: Disabling bearer [ 145.268012][ T5879] device syzkaller0 entered promiscuous mode [ 146.050002][ T5885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.870813][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.418'. [ 146.931022][ T5904] device syzkaller0 entered promiscuous mode [ 146.948723][ T5904] tipc: Enabled bearer , priority 0 [ 146.981873][ T5904] tipc: Resetting bearer [ 147.022481][ T5903] tipc: Resetting bearer [ 147.117830][ T5903] tipc: Disabling bearer [ 147.230453][ T5918] device syzkaller0 entered promiscuous mode [ 147.332165][ T5921] tipc: Enabled bearer , priority 0 [ 147.344594][ T5924] device syzkaller0 entered promiscuous mode [ 147.450262][ T5913] tipc: Resetting bearer [ 147.486625][ T5912] tipc: Resetting bearer [ 147.537874][ T5912] tipc: Disabling bearer [ 148.843190][ T5938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.566038][ T5962] device syzkaller0 entered promiscuous mode [ 149.689840][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 150.144213][ T5978] device syzkaller0 entered promiscuous mode [ 150.184915][ T5978] tipc: Enabled bearer , priority 0 [ 150.214348][ T5980] tipc: Enabled bearer , priority 0 [ 150.253314][ T5978] tipc: Resetting bearer [ 150.273500][ T5980] device syzkaller0 entered promiscuous mode [ 150.306182][ T5977] tipc: Resetting bearer [ 150.399118][ T5977] tipc: Disabling bearer [ 150.758959][ T5980] tipc: Resetting bearer [ 150.776663][ T5979] tipc: Resetting bearer [ 150.821394][ T5979] tipc: Disabling bearer [ 151.754323][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'. [ 152.313648][ T6032] device syzkaller0 entered promiscuous mode [ 152.325573][ T6032] tipc: Enabled bearer , priority 0 [ 152.354767][ T6032] tipc: Resetting bearer [ 152.365379][ T6030] tipc: Resetting bearer [ 152.401724][ T6030] tipc: Disabling bearer [ 152.485454][ T6034] tipc: Enabled bearer , priority 0 [ 152.522469][ T6034] device syzkaller0 entered promiscuous mode [ 152.613825][ T6034] tipc: Resetting bearer [ 152.646808][ T6033] tipc: Resetting bearer [ 152.702903][ T6033] tipc: Disabling bearer [ 152.745762][ T6040] device syzkaller0 entered promiscuous mode [ 153.338767][ T6035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.538349][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 154.624885][ T6074] device syzkaller0 entered promiscuous mode [ 154.831808][ T6079] tipc: Enabled bearer , priority 0 [ 154.864163][ T6079] device syzkaller0 entered promiscuous mode [ 154.900427][ T6079] tipc: Resetting bearer [ 154.941814][ T6078] tipc: Resetting bearer [ 154.972508][ T6078] tipc: Disabling bearer [ 154.986986][ T6082] device syzkaller0 entered promiscuous mode [ 155.050457][ T6085] device syzkaller0 entered promiscuous mode [ 155.084200][ T6085] tipc: Enabled bearer , priority 0 [ 155.125080][ T6085] tipc: Resetting bearer [ 155.171520][ T6083] tipc: Resetting bearer [ 155.203648][ T6083] tipc: Disabling bearer [ 156.224679][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'. [ 156.922366][ T6131] device syzkaller0 entered promiscuous mode [ 156.965085][ T6133] tipc: Enabled bearer , priority 0 [ 157.007038][ T6133] device syzkaller0 entered promiscuous mode [ 157.076451][ T6137] device syzkaller0 entered promiscuous mode [ 157.111259][ T6133] tipc: Resetting bearer [ 157.130828][ T6137] tipc: Enabled bearer , priority 0 [ 157.151954][ T6132] tipc: Resetting bearer [ 157.199690][ T6132] tipc: Disabling bearer [ 157.335063][ T6136] tipc: Resetting bearer [ 157.433977][ T6136] tipc: Disabling bearer [ 158.471934][ T6141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.038984][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 159.745644][ T6187] device syzkaller0 entered promiscuous mode [ 160.125143][ T6198] tipc: Enabled bearer , priority 0 [ 160.153860][ T6198] device syzkaller0 entered promiscuous mode [ 160.230437][ T6198] tipc: Resetting bearer [ 160.285688][ T6196] tipc: Resetting bearer [ 160.341351][ T6196] tipc: Disabling bearer [ 161.867005][ T6215] device syzkaller0 entered promiscuous mode [ 161.979698][ T6215] tipc: Enabled bearer , priority 0 [ 162.011401][ T6215] tipc: Resetting bearer [ 162.103467][ T6214] tipc: Resetting bearer [ 162.127144][ T6214] tipc: Disabling bearer [ 162.141337][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'. [ 162.823907][ T6251] tipc: Enabled bearer , priority 0 [ 162.841298][ T6251] device syzkaller0 entered promiscuous mode [ 163.137707][ T6251] tipc: Resetting bearer [ 163.208428][ T6250] tipc: Resetting bearer [ 163.243904][ T6250] tipc: Disabling bearer [ 164.374626][ T6260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.592573][ T6273] device syzkaller0 entered promiscuous mode [ 164.618471][ T6273] tipc: Enabled bearer , priority 0 [ 164.675154][ T6273] tipc: Resetting bearer [ 164.722228][ T6272] tipc: Resetting bearer [ 164.766262][ T6272] tipc: Disabling bearer [ 164.946074][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 165.295213][ T6293] device syzkaller0 entered promiscuous mode [ 166.257749][ T6306] tipc: Enabled bearer , priority 0 [ 166.286526][ T6306] device syzkaller0 entered promiscuous mode [ 166.396572][ T6309] tipc: Resetting bearer [ 166.421355][ T6305] tipc: Resetting bearer [ 166.444499][ T6305] tipc: Disabling bearer [ 167.519821][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 168.047693][ T6341] device syzkaller0 entered promiscuous mode [ 168.156596][ T6341] tipc: Enabled bearer , priority 0 [ 168.223344][ T6341] tipc: Resetting bearer [ 168.247719][ T6340] tipc: Resetting bearer [ 168.281903][ T6340] tipc: Disabling bearer [ 168.383142][ T6357] tipc: Enabled bearer , priority 0 [ 168.399873][ T6357] device syzkaller0 entered promiscuous mode [ 168.438330][ T6330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.474597][ T6357] tipc: Resetting bearer [ 168.506748][ T6356] tipc: Resetting bearer [ 168.542747][ T6356] tipc: Disabling bearer [ 169.587692][ T6377] device syzkaller0 entered promiscuous mode [ 170.109435][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'. [ 171.028638][ T6417] tipc: Enabling of bearer rejected, failed to enable media [ 171.067317][ T6416] tipc: Enabled bearer , priority 0 [ 171.106661][ T6416] device syzkaller0 entered promiscuous mode [ 171.157501][ T6416] tipc: Resetting bearer [ 171.175012][ T6415] tipc: Resetting bearer [ 171.204805][ T6415] tipc: Disabling bearer [ 171.900167][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'. [ 172.584663][ T6455] device syzkaller0 entered promiscuous mode [ 172.615619][ T6455] tipc: Enabled bearer , priority 0 [ 172.654759][ T6455] tipc: Resetting bearer [ 172.676357][ T6454] tipc: Resetting bearer [ 172.708486][ T6454] tipc: Disabling bearer [ 172.763140][ T6463] tipc: Enabled bearer , priority 0 [ 172.771743][ T6463] device syzkaller0 entered promiscuous mode [ 172.814649][ T6463] tipc: Resetting bearer [ 172.844399][ T6462] tipc: Resetting bearer [ 173.083049][ T6462] tipc: Disabling bearer [ 173.910939][ T6452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.907612][ T6488] device syzkaller0 entered promiscuous mode [ 175.232034][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 176.203595][ T6521] tipc: Enabled bearer , priority 0 [ 176.278125][ T6524] device syzkaller0 entered promiscuous mode [ 176.375754][ T6521] tipc: Resetting bearer [ 176.418827][ T6520] tipc: Resetting bearer [ 176.441838][ T6520] tipc: Disabling bearer [ 177.512164][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'. [ 177.654045][ T6555] bonding: unable to delete non-existent b [ 178.218968][ T6582] tipc: Enabling of bearer rejected, failed to enable media [ 179.095082][ T6565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.051610][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 180.184590][ T6625] device syzkaller0 entered promiscuous mode [ 180.525320][ T6635] device syzkaller0 entered promiscuous mode [ 180.559190][ T6635] tipc: Enabled bearer , priority 0 [ 180.604866][ T6635] tipc: Resetting bearer [ 180.643969][ T6633] tipc: Resetting bearer [ 180.670367][ T6633] tipc: Disabling bearer [ 182.638085][ T6655] nvmet: adding nsid 1 to subsystem testsubsys [ 182.902022][ T6655] nvmet: transport type 0 not supported [ 182.933807][ T26] audit: type=1326 audit(1787874641.015:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.1.617" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ee06780d9 code=0x0 [ 182.960467][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'. [ 183.012011][ T26] audit: type=1326 audit(1787874641.075:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.1.617" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ee06780d9 code=0x0 [ 183.041521][ T6676] fuse: Unknown parameter 'b �ø�f#Ù…ýïŸí‹så.ô©€(wq' [ 183.117767][ T6676] gadgetfs: bound to dummy_udc driver [ 183.363191][ T6687] gadgetfs: suspended from state 2 [ 183.416114][ T4257] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 183.448498][ T6691] tipc: Enabled bearer , priority 0 [ 183.471607][ T6696] loop2: detected capacity change from 0 to 128 [ 183.482493][ T6691] tipc: Resetting bearer [ 183.501344][ T6689] tipc: Disabling bearer [ 183.567643][ T6696] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 183.582626][ T6700] device syzkaller0 entered promiscuous mode [ 183.703481][ T6696] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,,errors=continue. Quota mode: none. [ 183.733629][ T6696] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 183.987559][ T6696] EXT4-fs warning (device loop2): ext4_group_extend:1852: can't read last block, resize aborted [ 184.406888][ T6654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.266558][ T6732] loop5: detected capacity change from 0 to 7 [ 185.316178][ T6732] Dev loop5: unable to read RDB block 7 [ 185.322480][ T6732] loop5: AHDI p1 p2 p3 [ 185.345878][ T6732] loop5: partition table partially beyond EOD, truncated [ 185.377670][ T6732] loop5: p1 start 1818582900 is beyond EOD, truncated [ 185.405050][ T6732] loop5: p3 start 335544320 is beyond EOD, truncated [ 186.853661][ T6766] tipc: Enabled bearer , priority 0 [ 186.882848][ T6766] tipc: Resetting bearer [ 186.921269][ T6765] tipc: Disabling bearer [ 186.955000][ T6770] tipc: Enabled bearer , priority 0 [ 186.974727][ T6770] device syzkaller0 entered promiscuous mode [ 187.042116][ T6769] tipc: Resetting bearer [ 187.135544][ T6769] tipc: Disabling bearer [ 188.657792][ T6798] loop7: detected capacity change from 0 to 7 [ 188.660008][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.673757][ T6796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.706012][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.706478][ T4262] Dev loop7: unable to read RDB block 7 [ 188.724899][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.735360][ T4262] loop7: unable to read partition table [ 188.748584][ T4262] loop7: partition table beyond EOD, truncated [ 188.790141][ T6798] Dev loop7: unable to read RDB block 7 [ 188.817386][ T6798] loop7: unable to read partition table [ 188.823295][ T6798] loop7: partition table beyond EOD, truncated [ 188.853819][ T6798] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 188.960683][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'. [ 189.176912][ T4196] ------------[ cut here ]------------ [ 189.182807][ T4196] WARNING: CPU: 0 PID: 4196 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450 [ 189.197902][ T4196] Modules linked in: [ 189.201860][ T4196] CPU: 0 PID: 4196 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 189.209561][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.219740][ T4196] Workqueue: hci4 hci_conn_timeout [ 189.224924][ T4196] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 189.231365][ T4196] Code: 8b 8d e8 24 71 de f8 48 8b 35 75 48 ab 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 66 1e 6e f8 e8 e1 48 99 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 189.251254][ T4196] RSP: 0018:ffffc90002e9fc08 EFLAGS: 00010293 [ 189.258885][ T4196] RAX: ffffffff88dfc6bf RBX: ffff88807babe138 RCX: ffff888062279dc0 [ 189.267089][ T4196] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 189.275265][ T4196] RBP: 00000000ffffffff R08: ffff88807babe013 R09: 1ffff1100f757c02 [ 189.285170][ T4196] R10: dffffc0000000000 R11: ffffed100f757c03 R12: ffff88806267c808 [ 189.293318][ T4196] R13: dffffc0000000000 R14: ffff88807babe000 R15: ffff88807babe010 [ 189.301494][ T4196] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 189.311192][ T4196] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.317911][ T4196] CR2: 0000555563438a38 CR3: 000000007e492000 CR4: 00000000003506f0 [ 189.326124][ T4196] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.334147][ T4196] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.342869][ T4196] Call Trace: [ 189.346325][ T4196] [ 189.349298][ T4196] process_one_work+0x867/0xff0 [ 189.355218][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 189.361029][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 189.366434][ T4196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 189.371505][ T4196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 189.378995][ T4196] ? wq_worker_running+0x97/0x170 [ 189.384133][ T4196] worker_thread+0xad7/0x12a0 [ 189.398491][ T4196] kthread+0x42e/0x520 [ 189.402680][ T4196] ? rcu_lock_release+0x20/0x20 [ 189.407889][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 189.412579][ T4196] ret_from_fork+0x1f/0x30 [ 189.417707][ T4196] [ 189.420783][ T4196] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 189.428095][ T4196] CPU: 0 PID: 4196 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 189.435680][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.445775][ T4196] Workqueue: hci4 hci_conn_timeout [ 189.450939][ T4196] Call Trace: [ 189.454248][ T4196] [ 189.457221][ T4196] dump_stack_lvl+0x188/0x250 [ 189.461946][ T4196] ? show_regs_print_info+0x20/0x20 [ 189.467208][ T4196] ? load_image+0x410/0x410 [ 189.471766][ T4196] panic+0x2f8/0x850 [ 189.475716][ T4196] ? bpf_jit_dump+0xd0/0xd0 [ 189.480268][ T4196] ? ret_from_fork+0x1f/0x30 [ 189.484906][ T4196] ? hci_conn_timeout+0x24f/0x450 [ 189.489976][ T4196] __warn+0x248/0x2b0 [ 189.493998][ T4196] ? hci_conn_timeout+0x24f/0x450 [ 189.499066][ T4196] report_bug+0x1b9/0x2e0 [ 189.503449][ T4196] handle_bug+0x3a/0x70 [ 189.507640][ T4196] exc_invalid_op+0x16/0x40 [ 189.512181][ T4196] asm_exc_invalid_op+0x16/0x20 [ 189.517082][ T4196] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 189.522752][ T4196] Code: 8b 8d e8 24 71 de f8 48 8b 35 75 48 ab 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 66 1e 6e f8 e8 e1 48 99 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 189.542713][ T4196] RSP: 0018:ffffc90002e9fc08 EFLAGS: 00010293 [ 189.548826][ T4196] RAX: ffffffff88dfc6bf RBX: ffff88807babe138 RCX: ffff888062279dc0 [ 189.556848][ T4196] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 189.564863][ T4196] RBP: 00000000ffffffff R08: ffff88807babe013 R09: 1ffff1100f757c02 [ 189.572878][ T4196] R10: dffffc0000000000 R11: ffffed100f757c03 R12: ffff88806267c808 [ 189.580892][ T4196] R13: dffffc0000000000 R14: ffff88807babe000 R15: ffff88807babe010 [ 189.588915][ T4196] ? hci_conn_timeout+0x24f/0x450 [ 189.593991][ T4196] ? hci_conn_timeout+0x24f/0x450 [ 189.599064][ T4196] process_one_work+0x867/0xff0 [ 189.603969][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 189.609671][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 189.615008][ T4196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 189.620079][ T4196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 189.625678][ T4196] ? wq_worker_running+0x97/0x170 [ 189.630757][ T4196] worker_thread+0xad7/0x12a0 [ 189.635511][ T4196] kthread+0x42e/0x520 [ 189.639624][ T4196] ? rcu_lock_release+0x20/0x20 [ 189.644523][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 189.649158][ T4196] ret_from_fork+0x1f/0x30 [ 189.653636][ T4196] [ 189.656840][ T4196] Kernel Offset: disabled [ 189.661396][ T4196] Rebooting in 86400 seconds..