last executing test programs: 2m57.607119727s ago: executing program 3 (id=4): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x800f, 0x0, 0x101}, &(0x7f00000000c0)=0x10) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r4) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 2m56.635178678s ago: executing program 3 (id=6): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x80) 2m50.722274564s ago: executing program 3 (id=15): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) memfd_create(&(0x7f0000001240)='[\v\xdbX\xae[\x1a\xad\xd1md\xc8\x85HX\xa9%\f\x1a,\xe2\x9c\xb4\xd7\xbc\xf1\xb3\x86\xe2/Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xc8\f\xe5\x89\x17\xee|J\x90=5\xed\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q%\x8a\xda\x05\x00f\xe3j%\x00\x00\x1c#\xc6\xd8\xdbD\x92P\xe16W\x10\xdau\xc7\x8f\xaa\x8d\xa9\x97\x9d\xcb\x1e\x80\xe7\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\xbdD\xcc\'\xa2\xaf`\xf6L\x0e\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecM\xe4H\xb7\xaf\xa8\x96dh\xa9\xab > \xac\x00O^\x14\xcbv\x17Hkb\xe7\xcb\x9d;\xd2\x9f\x05\xd1\x00\x8b\xd3\x9f\a\x99^v\xf7\xfa\xe5\xf0h\x87l\xd9\x15\xd2\x87~?\xb1\x9d\xc1\x92`\x8a\r\xfc\xeb\x14\xd1\x94\fv\x8a\xe3\x1d\x0fj}\x9f\xedsc\xd3\xee\xe6cXw\xa1\xbc\xd0o\xf9\x9cJ\b\x00\xd8;\\ik0+\xc8\xf2\x87\xdf\t\x97\x9dB\xc1\xa0\xa71\xf25GU|]A\x1eel \x8ff\xc6\nt\xd0\x91\x9d\x8c\xa4\xe5\xde\x06\x00\xffE\xf4\x96#\x92-9\xe5\xa7\xf8%\xb0I\xd4\x91r\xbf\x1bOS\xee}\x16\x87\x05\xf2\xb9\x81\x14\xe2NZ\\I\xd0[\xc4\xf2\"\x87\xf5\xb8\x95.M\xb1S\xbd\xe4i\x00\xc1b\t]?}0\t\xebV\xbci\xa5\x05\xca\xb6\xc22\x7fL\x89&\xa0\xcfMULr0rs\xb4\n\xa6)\xe23\xf0\x8d\x9dO\xb9\xc9\x83\xabS\x013\"\x1b\x97K\x17\x16\x89\a\xee\xc903\xad\x15\x1cH\xd2\x95\x91\xb4$\x1b\xbf\xaf\xf5\x9b\xc2\x85\xe7[\xe5\xfb}\x1d@f2\x11\x13Y\x98\xa4\xecWEE\x9eI\x05\v\x11\xad\x93!^T\xe5N\xf6LI\x9a6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x1a\xc9(a\x06>g\xe5\x00:\x9au\xef\x14\t\x1f8E\x86\xcb\xd0e\x17\xfb\xc1', 0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x0, 0x4, 0x6, 0x1, 0x6, 0x43}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x5c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x26}}, {0x4e26, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "b47233e19f10929b698cc6876071b37f37d06232afe3700d", "0dcc0f9b4038187fd0ea9a12d6db7ed3b59a831af9887dc7a7eb90392c61dd8f"}}}}, 0x6a) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, 0x0, &(0x7f0000000640)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r5, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000), 0x0) r6 = io_uring_setup(0x5755, &(0x7f00000001c0)={0x0, 0xf463, 0x40, 0x1, 0x1a9}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) io_uring_register$IORING_UNREGISTER_RING_FDS(r6, 0x15, &(0x7f0000003800)=[{0x0, 0x1, 0x0}], 0x1) 2m35.650196796s ago: executing program 32 (id=15): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) memfd_create(&(0x7f0000001240)='[\v\xdbX\xae[\x1a\xad\xd1md\xc8\x85HX\xa9%\f\x1a,\xe2\x9c\xb4\xd7\xbc\xf1\xb3\x86\xe2/Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xc8\f\xe5\x89\x17\xee|J\x90=5\xed\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q%\x8a\xda\x05\x00f\xe3j%\x00\x00\x1c#\xc6\xd8\xdbD\x92P\xe16W\x10\xdau\xc7\x8f\xaa\x8d\xa9\x97\x9d\xcb\x1e\x80\xe7\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\xbdD\xcc\'\xa2\xaf`\xf6L\x0e\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecM\xe4H\xb7\xaf\xa8\x96dh\xa9\xab > \xac\x00O^\x14\xcbv\x17Hkb\xe7\xcb\x9d;\xd2\x9f\x05\xd1\x00\x8b\xd3\x9f\a\x99^v\xf7\xfa\xe5\xf0h\x87l\xd9\x15\xd2\x87~?\xb1\x9d\xc1\x92`\x8a\r\xfc\xeb\x14\xd1\x94\fv\x8a\xe3\x1d\x0fj}\x9f\xedsc\xd3\xee\xe6cXw\xa1\xbc\xd0o\xf9\x9cJ\b\x00\xd8;\\ik0+\xc8\xf2\x87\xdf\t\x97\x9dB\xc1\xa0\xa71\xf25GU|]A\x1eel \x8ff\xc6\nt\xd0\x91\x9d\x8c\xa4\xe5\xde\x06\x00\xffE\xf4\x96#\x92-9\xe5\xa7\xf8%\xb0I\xd4\x91r\xbf\x1bOS\xee}\x16\x87\x05\xf2\xb9\x81\x14\xe2NZ\\I\xd0[\xc4\xf2\"\x87\xf5\xb8\x95.M\xb1S\xbd\xe4i\x00\xc1b\t]?}0\t\xebV\xbci\xa5\x05\xca\xb6\xc22\x7fL\x89&\xa0\xcfMULr0rs\xb4\n\xa6)\xe23\xf0\x8d\x9dO\xb9\xc9\x83\xabS\x013\"\x1b\x97K\x17\x16\x89\a\xee\xc903\xad\x15\x1cH\xd2\x95\x91\xb4$\x1b\xbf\xaf\xf5\x9b\xc2\x85\xe7[\xe5\xfb}\x1d@f2\x11\x13Y\x98\xa4\xecWEE\x9eI\x05\v\x11\xad\x93!^T\xe5N\xf6LI\x9a6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x1a\xc9(a\x06>g\xe5\x00:\x9au\xef\x14\t\x1f8E\x86\xcb\xd0e\x17\xfb\xc1', 0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x0, 0x4, 0x6, 0x1, 0x6, 0x43}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x5c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x26}}, {0x4e26, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "b47233e19f10929b698cc6876071b37f37d06232afe3700d", "0dcc0f9b4038187fd0ea9a12d6db7ed3b59a831af9887dc7a7eb90392c61dd8f"}}}}, 0x6a) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, 0x0, &(0x7f0000000640)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r5, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000), 0x0) r6 = io_uring_setup(0x5755, &(0x7f00000001c0)={0x0, 0xf463, 0x40, 0x1, 0x1a9}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) io_uring_register$IORING_UNREGISTER_RING_FDS(r6, 0x15, &(0x7f0000003800)=[{0x0, 0x1, 0x0}], 0x1) 2m8.905357495s ago: executing program 5 (id=31): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) connect$can_j1939(r1, &(0x7f00000002c0)={0x1d, r2, 0x800003, {0x2, 0xf0, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 1m53.77108142s ago: executing program 33 (id=31): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) connect$can_j1939(r1, &(0x7f00000002c0)={0x1d, r2, 0x800003, {0x2, 0xf0, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 28.699021839s ago: executing program 6 (id=235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, 0x0, 0x80) 20.608700923s ago: executing program 6 (id=246): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES8=r2], &(0x7f0000000000)='GPL\x00', 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0xaa}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r4, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) socket$xdp(0x2c, 0x3, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000080)={'syz0\x00', {0x0, 0x40}, 0x0, [0x80000000, 0x3, 0x3fc, 0x7, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x80000, 0x2, 0x0, 0xfffefffe, 0x0, 0xfffffffd, 0x1, 0x7], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc4, 0x2, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x0, 0x40000, 0x7, 0xc0800000, 0x0, 0x10000, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x0, 0x6, 0x200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff54, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0xce2], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x204, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$qrtrtun(0xffffff9c, &(0x7f00000000c0), 0x4102) write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x12) 8.859003262s ago: executing program 0 (id=267): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x3000000}, 0x8) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x3, 0x0, [{0xffff1000, 0x65, &(0x7f0000001840)=""/101}, {0x1, 0x2b, &(0x7f00000004c0)=""/43}, {0x240000, 0x13, &(0x7f0000000240)=""/19}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 8.465348674s ago: executing program 4 (id=271): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES8=r2], &(0x7f0000000000)='GPL\x00', 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0xaa}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r4, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) socket$xdp(0x2c, 0x3, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000080)={'syz0\x00', {0x0, 0x40}, 0x0, [0x80000000, 0x3, 0x3fc, 0x7, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x80000, 0x2, 0x0, 0xfffefffe, 0x0, 0xfffffffd, 0x1, 0x7], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc4, 0x2, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x0, 0x40000, 0x7, 0xc0800000, 0x0, 0x10000, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x0, 0x6, 0x200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff54, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0xce2], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x204, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) openat$qrtrtun(0xffffff9c, &(0x7f00000000c0), 0x4102) write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x12) 8.314245429s ago: executing program 1 (id=272): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x4, "fc5c"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}, 0x4000004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x30, r3, 0x211, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r9, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40090) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r9, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x18c, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x58, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xea}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb4}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f1df36266bd5257abadae85d82ca27e6"}]}, @NL802154_ATTR_SEC_KEY={0x108, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_ID={0x88, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x200}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffe}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9f5e7d80051659207ef24cecff8c4058"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d7713caf13be6fa65357431edea2781be87dfa6ce78f1fbe120cb7b2fe56473c"}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x2}, 0x40000c0) 7.284369641s ago: executing program 0 (id=273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x80) 7.234765893s ago: executing program 6 (id=274): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES8=r2], &(0x7f0000000000)='GPL\x00', 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0xaa}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r4, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) socket$xdp(0x2c, 0x3, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000080)={'syz0\x00', {0x0, 0x40}, 0x0, [0x80000000, 0x3, 0x3fc, 0x7, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x80000, 0x2, 0x0, 0xfffefffe, 0x0, 0xfffffffd, 0x1, 0x7], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc4, 0x2, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x0, 0x40000, 0x7, 0xc0800000, 0x0, 0x10000, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x0, 0x6, 0x200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff54, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0xce2], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x204, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) openat$qrtrtun(0xffffff9c, &(0x7f00000000c0), 0x4102) write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x12) 7.135736336s ago: executing program 2 (id=275): lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@random={'os2.', '\x00'}, &(0x7f0000000080)=""/187, 0xbb) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) write$cgroup_int(r0, &(0x7f0000000740)=0xfffffffffffffffc, 0x12) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x6558}, @val={0x3, 0x1, 0x0, 0x1000, 0x7, 0x3}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @broadcast, @remote}}, 0x42) socket$inet(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x0) r3 = getpid() sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x6a, 0xa, 0x2, 0x4, @private1, @loopback, 0x7800, 0x10, 0x81, 0x4}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 7.134828546s ago: executing program 4 (id=276): lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@random={'os2.', '\x00'}, &(0x7f0000000080)=""/187, 0xbb) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) write$cgroup_int(r0, &(0x7f0000000740)=0xfffffffffffffffc, 0x12) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x6558}, @val={0x3, 0x1, 0x0, 0x1000, 0x7, 0x3}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @broadcast, @remote}}, 0x42) socket$inet(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x0) r3 = getpid() sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x6a, 0xa, 0x2, 0x4, @private1, @loopback, 0x7800, 0x10, 0x81, 0x4}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 7.114987006s ago: executing program 1 (id=277): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.094337017s ago: executing program 1 (id=278): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES8=r2], &(0x7f0000000000)='GPL\x00', 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0xaa}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r4, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) socket$xdp(0x2c, 0x3, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000080)={'syz0\x00', {0x0, 0x40}, 0x0, [0x80000000, 0x3, 0x3fc, 0x7, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x80000, 0x2, 0x0, 0xfffefffe, 0x0, 0xfffffffd, 0x1, 0x7], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc4, 0x2, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x0, 0x40000, 0x7, 0xc0800000, 0x0, 0x10000, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x0, 0x6, 0x200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff54, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0xce2], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x204, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) openat$qrtrtun(0xffffff9c, &(0x7f00000000c0), 0x4102) write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x12) 6.03392235s ago: executing program 6 (id=279): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, 0x0, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r3, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r8 = gettid() r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x30, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x468}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x30}}, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000000)={0x0, 0x400, 0x2, 0x1, 0xfffffffd, 0xffffff00}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00007b030000000000009f440000000000006b0a00fe000000007b13000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$CEC_RECEIVE(r10, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9e}) setrlimit(0xf, &(0x7f0000000000)) socket$inet(0x2, 0x4, 0x1) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x10048000}, 0x20048041) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='gretap0 8', @ANYRESOCT=r2], 0x6e) openat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) 5.936724343s ago: executing program 2 (id=280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x68, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 5.935766593s ago: executing program 4 (id=281): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES8=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0xaa}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r3, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) socket$xdp(0x2c, 0x3, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz0\x00', {0x0, 0x40}, 0x0, [0x80000000, 0x3, 0x3fc, 0x7, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x80000, 0x2, 0x0, 0xfffefffe, 0x0, 0xfffffffd, 0x1, 0x7], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc4, 0x2, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x0, 0x40000, 0x7, 0xc0800000, 0x0, 0x10000, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x0, 0x6, 0x200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff54, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0xce2], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x204, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) openat$qrtrtun(0xffffff9c, &(0x7f00000000c0), 0x4102) 4.647427584s ago: executing program 1 (id=282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad386dd", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3.619365206s ago: executing program 0 (id=283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) memfd_create(&(0x7f0000001240)='[\v\xdbX\xae[\x1a\xad\xd1md\xc8\x85HX\xa9%\f\x1a,\xe2\x9c\xb4\xd7\xbc\xf1\xb3\x86\xe2/Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xc8\f\xe5\x89\x17\xee|J\x90=5\xed\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q%\x8a\xda\x05\x00f\xe3j%\x00\x00\x1c#\xc6\xd8\xdbD\x92P\xe16W\x10\xdau\xc7\x8f\xaa\x8d\xa9\x97\x9d\xcb\x1e\x80\xe7\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\xbdD\xcc\'\xa2\xaf`\xf6L\x0e\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecM\xe4H\xb7\xaf\xa8\x96dh\xa9\xab > \xac\x00O^\x14\xcbv\x17Hkb\xe7\xcb\x9d;\xd2\x9f\x05\xd1\x00\x8b\xd3\x9f\a\x99^v\xf7\xfa\xe5\xf0h\x87l\xd9\x15\xd2\x87~?\xb1\x9d\xc1\x92`\x8a\r\xfc\xeb\x14\xd1\x94\fv\x8a\xe3\x1d\x0fj}\x9f\xedsc\xd3\xee\xe6cXw\xa1\xbc\xd0o\xf9\x9cJ\b\x00\xd8;\\ik0+\xc8\xf2\x87\xdf\t\x97\x9dB\xc1\xa0\xa71\xf25GU|]A\x1eel \x8ff\xc6\nt\xd0\x91\x9d\x8c\xa4\xe5\xde\x06\x00\xffE\xf4\x96#\x92-9\xe5\xa7\xf8%\xb0I\xd4\x91r\xbf\x1bOS\xee}\x16\x87\x05\xf2\xb9\x81\x14\xe2NZ\\I\xd0[\xc4\xf2\"\x87\xf5\xb8\x95.M\xb1S\xbd\xe4i\x00\xc1b\t]?}0\t\xebV\xbci\xa5\x05\xca\xb6\xc22\x7fL\x89&\xa0\xcfMULr0rs\xb4\n\xa6)\xe23\xf0\x8d\x9dO\xb9\xc9\x83\xabS\x013\"\x1b\x97K\x17\x16\x89\a\xee\xc903\xad\x15\x1cH\xd2\x95\x91\xb4$\x1b\xbf\xaf\xf5\x9b\xc2\x85\xe7[\xe5\xfb}\x1d@f2\x11\x13Y\x98\xa4\xecWEE\x9eI\x05\v\x11\xad\x93!^T\xe5N\xf6LI\x9a6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x1a\xc9(a\x06>g\xe5\x00:\x9au\xef\x14\t\x1f8E\x86\xcb\xd0e\x17\xfb\xc1', 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x0, 0x4, 0x6, 0x1, 0x6, 0x43}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x5c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x26}}, {0x4e26, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "b47233e19f10929b698cc6876071b37f37d06232afe3700d", "0dcc0f9b4038187fd0ea9a12d6db7ed3b59a831af9887dc7a7eb90392c61dd8f"}}}}, 0x6a) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) io_uring_setup(0x5755, &(0x7f00000001c0)={0x0, 0xf463, 0x40, 0x1, 0x1a9}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) 3.550052088s ago: executing program 4 (id=284): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x3000000}, 0x8) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x3, 0x0, [{0xffff1000, 0x65, &(0x7f0000001840)=""/101}, {0x1, 0x2b, &(0x7f00000004c0)=""/43}, {0x240000, 0x13, &(0x7f0000000240)=""/19}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.450088943s ago: executing program 4 (id=285): lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@random={'os2.', '\x00'}, &(0x7f0000000080)=""/187, 0xbb) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) write$cgroup_int(r0, &(0x7f0000000740)=0xfffffffffffffffc, 0x12) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x6558}, @val={0x3, 0x1, 0x0, 0x1000, 0x7, 0x3}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @broadcast, @remote}}, 0x42) socket$inet(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x0) r3 = getpid() sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x6a, 0xa, 0x2, 0x4, @private1, @loopback, 0x7800, 0x10, 0x81, 0x4}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 2.391700065s ago: executing program 6 (id=286): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x800f, 0x0, 0x101, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x6}, &(0x7f0000000280)=0x8) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x103000, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 2.388947825s ago: executing program 0 (id=287): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 2.21348634s ago: executing program 1 (id=288): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x4, "fc5c"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}, 0x4000004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x30, r3, 0x211, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r9, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40090) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r9, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x18c, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x58, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xea}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb4}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f1df36266bd5257abadae85d82ca27e6"}]}, @NL802154_ATTR_SEC_KEY={0x108, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_ID={0x88, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x200}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffe}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9f5e7d80051659207ef24cecff8c4058"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d7713caf13be6fa65357431edea2781be87dfa6ce78f1fbe120cb7b2fe56473c"}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x2}, 0x40000c0) 1.826704242s ago: executing program 2 (id=289): removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 1.782010124s ago: executing program 2 (id=290): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES8=r2], &(0x7f0000000000)='GPL\x00', 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0xaa}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r4, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) socket$xdp(0x2c, 0x3, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000080)={'syz0\x00', {0x0, 0x40}, 0x0, [0x80000000, 0x3, 0x3fc, 0x7, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x80000, 0x2, 0x0, 0xfffefffe, 0x0, 0xfffffffd, 0x1, 0x7], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc4, 0x2, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x0, 0x40000, 0x7, 0xc0800000, 0x0, 0x10000, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x0, 0x6, 0x200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff54, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0xce2], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x204, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) openat$qrtrtun(0xffffff9c, &(0x7f00000000c0), 0x4102) write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x12) 738.220927ms ago: executing program 6 (id=291): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x800f, 0x0, 0x101, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x6}, &(0x7f0000000280)=0x8) r6 = openat$vsock(0xffffffffffffff9c, 0x0, 0x103000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 536.826863ms ago: executing program 2 (id=292): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 495.725914ms ago: executing program 0 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x80) 452.583086ms ago: executing program 1 (id=294): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, 0x0, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r3, &(0x7f0000001040)={0x9, {"a2e3ad21ed0d09f90e3d090987f70e06d038e7ff7fc6e5539b0d5b0e8b099b3f360068090890e0878f0e1ac6e7f89b334d959b4a9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a6193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000400000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617679314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec230911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918c91243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac5a4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4b333bd5bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3be3b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ce0700c7e658828163e2d25c4aa348561f927eff7f3aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f05004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d486046b2c0e2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee6157eb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de225727aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78749a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29c60acebdbe8ddbd75c2f998d8a57f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95ff80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8870b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513007000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae8489d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60299473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d946a2daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810300000000000000a12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf000000800000000007b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0e797e8bd1f4108b7807fb36207685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ad50dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b9048017848416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1db44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b00f1000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de9c0587c2cb5fe36d7d3e5db21b013b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cf4b23329072e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06810002000000000000957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f3e90d5943dbc10360a1a49700d1dfbf66d69f6fbafe1e83cdde8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000100", 0x35e}}, 0x1006) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r8 = gettid() r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x30, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x468}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x30}}, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000000)={0x0, 0x400, 0x2, 0x1, 0xfffffffd, 0xffffff00}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$CEC_RECEIVE(r10, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9e}) setrlimit(0xf, &(0x7f0000000000)) socket$inet(0x2, 0x4, 0x1) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x10048000}, 0x20048041) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='gretap0 8', @ANYRESOCT=r2], 0x6e) openat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) 150.710155ms ago: executing program 4 (id=295): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x3000000}, 0x8) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x3, 0x0, [{0xffff1000, 0x65, &(0x7f0000001840)=""/101}, {0x1, 0x2b, &(0x7f00000004c0)=""/43}, {0x240000, 0x13, &(0x7f0000000240)=""/19}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 31.132669ms ago: executing program 2 (id=296): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$eJzs3d9rW1UcAPDvTdut+6HtYAz1QQp7cDKXrq0/JvgwH0WHA33XkGRlNF1Gk461Dtwe3IsvMgQRB6Lvvvs4/Af8KwY6GDKKPuwlctObLluTNu3StVs+H7jtOffe9Jxv7v2enpubkAAG1kT6IxfxakR8l0SMtW0bjmzjxOp+Kw+uFdMliUbjs3+SSLJ1rf2T7PehrPJKRPzxTcTJ3Pp2a0vLc4VKpbyQ1Sfr85cna0vLpy7OF2bLs+VL0zMzZ96ZmX7/vXf7Fuub5//78dM7H5359vjKD7/dO3IribNxONvWHsdTuN5emYiJ7DkZibNP7DjVh8b2kmS3O8C2DGV5PhLpGDAWQ1nWd9QYe5ZdA3bY12laAwMqkf8woFrzgNa1fZ+ug58b9z9cvQBaH//w6msjMdq8Njq4kjx2ZZRe7473of20jd//vn0rXaJ/r0MAbOr6jYg4PTy8fvxLsvFv+073sM+TbRj/4Nm5k85/3uo0/8mtzX+iw/znUIfc3Y7N8z93rw/NdJXO/z7oOP9du2k1PpTVXmrO+UaSCxcr5XRsezkiTsTI/rS+wf2cL3MrdxvdNrbP/9Ilbb81F8z6cW94/+OPKRXqhacKus39GxGvdZz/JmvHP+lw/NPn43yPbRwr336927bN499ZjV8i3uh4/B/d0Uo2vj852TwfJltnxXr/3jz2Z7f2dzv+9Pgf3Dj+8aT9fm1t6238PPqw3G3bds//fcnnzfK+bN3VQr2+MBWxL/lk/frpR49t1Vv7p/GfOL7x+Nfp/D+QJnaP8d88erN919Gtxb+z0vhLWzr+Wy/c/firn7q139vxf7tZOpGt6WX867WDT/PcAQAAAAAAwF6Ti4jDkeTya+VcLp9ffX/H0TiYq1Rr9ZMXqouXStH8rOx4jORad7rH2t4PMZW9H7ZVn36iPhMRRyLi+6EDzXq+WK2Udjt4AAAAAAAAAAAAAAAAAAAA2CMORYx2+vx/6q+h3e4dsOM2+Mpv4AXXPf+zLf34pidgT/L/HwaX/IfBJf9hcMl/GFzyHwaX/IfBJf9hcG0l/389t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPn0qWx8uBaMa2XriwtzlWvnCqVa3P5+cVivlhduJyfrVZnK+V8sTq/2d+rVKuXp6Zj8epkvVyrT9aWlr+Yry5eethYVR55JlEBAAAAAAAAAAAAAAAAAADA86W2tDxXqFTKCwoK2yoM741uKPS5sNsjEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA88n8AAAD//75iP7A=") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r8, 0x400, 0x0) 0s ago: executing program 0 (id=297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x42) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0xffffffff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 28.129175][ T4314] cgroup: Unknown subsys name 'net' [ 28.359425][ T4314] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.658803][ T4314] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.329349][ T4331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.331293][ T4331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.332604][ T4331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.342703][ T4334] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.344380][ T4334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.346044][ T4334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.346127][ T4333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.347443][ T4334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.349028][ T4333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.349801][ T4334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.350526][ T4333] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.351992][ T4334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.352919][ T4333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.353782][ T4334] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.354748][ T4333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.355686][ T4334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.357261][ T4333] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.359031][ T4334] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.391201][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.392669][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.393991][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.397331][ T4334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.398791][ T4334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.400363][ T4334] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.401535][ T4334] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.402981][ T4334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.404275][ T4334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.410771][ T4334] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.412296][ T4334] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.413563][ T4334] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.515284][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 29.563194][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.564433][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.565934][ T4327] device bridge_slave_0 entered promiscuous mode [ 29.569052][ T4340] chnl_net:caif_netlink_parms(): no params data found [ 29.577937][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.579054][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.580423][ T4327] device bridge_slave_1 entered promiscuous mode [ 29.590964][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.593440][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.602598][ T4327] team0: Port device team_slave_0 added [ 29.606782][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.608850][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.610304][ T4340] device bridge_slave_0 entered promiscuous mode [ 29.612151][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 29.614665][ T4327] team0: Port device team_slave_1 added [ 29.615690][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.617053][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.618411][ T4340] device bridge_slave_1 entered promiscuous mode [ 29.619835][ T4336] chnl_net:caif_netlink_parms(): no params data found [ 29.632558][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 29.638584][ T4340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.642036][ T4340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.648777][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.649872][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.653996][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.665438][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.666477][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.670252][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.680401][ T4340] team0: Port device team_slave_0 added [ 29.688632][ T4340] team0: Port device team_slave_1 added [ 29.702796][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.703929][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.705418][ T4336] device bridge_slave_0 entered promiscuous mode [ 29.716169][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.717661][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.719208][ T4336] device bridge_slave_1 entered promiscuous mode [ 29.722549][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.723757][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.725142][ T4326] device bridge_slave_0 entered promiscuous mode [ 29.727272][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.728264][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.731911][ T4340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.733653][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.734825][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.736192][ T4326] device bridge_slave_1 entered promiscuous mode [ 29.741905][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.743049][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.744389][ T4330] device bridge_slave_0 entered promiscuous mode [ 29.748429][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.749515][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.753175][ T4340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.755037][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.756051][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.760014][ T4330] device bridge_slave_1 entered promiscuous mode [ 29.787772][ T4327] device hsr_slave_0 entered promiscuous mode [ 29.846729][ T4327] device hsr_slave_1 entered promiscuous mode [ 29.917434][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.919900][ T4336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.926418][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.928722][ T4336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.936095][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.942370][ T4336] team0: Port device team_slave_0 added [ 29.946325][ T4326] team0: Port device team_slave_0 added [ 29.948309][ T4326] team0: Port device team_slave_1 added [ 29.951211][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.953434][ T4336] team0: Port device team_slave_1 added [ 30.007637][ T4340] device hsr_slave_0 entered promiscuous mode [ 30.056831][ T4340] device hsr_slave_1 entered promiscuous mode [ 30.096606][ T4340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.097881][ T4340] Cannot create hsr debugfs directory [ 30.102040][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.103089][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.107211][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.114929][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.116070][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.120205][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.122823][ T4330] team0: Port device team_slave_0 added [ 30.125300][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.126320][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.130273][ T4336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.134665][ T4330] team0: Port device team_slave_1 added [ 30.139632][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.140746][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.144376][ T4336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.153576][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.154667][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.159615][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.168026][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.169128][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.172779][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.237569][ T4326] device hsr_slave_0 entered promiscuous mode [ 30.286774][ T4326] device hsr_slave_1 entered promiscuous mode [ 30.326693][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.327828][ T4326] Cannot create hsr debugfs directory [ 30.397623][ T4336] device hsr_slave_0 entered promiscuous mode [ 30.436715][ T4336] device hsr_slave_1 entered promiscuous mode [ 30.476560][ T4336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.477717][ T4336] Cannot create hsr debugfs directory [ 30.527702][ T4330] device hsr_slave_0 entered promiscuous mode [ 30.567285][ T4330] device hsr_slave_1 entered promiscuous mode [ 30.616568][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.617906][ T4330] Cannot create hsr debugfs directory [ 30.705563][ T4327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.744285][ T4327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.790681][ T4327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.837690][ T4327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.880526][ T4340] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.927730][ T4340] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.969203][ T4340] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.007588][ T4340] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.082628][ T4326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.099206][ T4326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.157804][ T4326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.228360][ T4336] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.298073][ T4326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.342419][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.343995][ T4336] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.366807][ T4337] Bluetooth: hci2: command 0x0409 tx timeout [ 31.378397][ T4336] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.418703][ T4336] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.446828][ T4334] Bluetooth: hci3: command 0x0409 tx timeout [ 31.446849][ T4337] Bluetooth: hci4: command 0x0409 tx timeout [ 31.447889][ T4334] Bluetooth: hci1: command 0x0409 tx timeout [ 31.448877][ T4337] Bluetooth: hci0: command 0x0409 tx timeout [ 31.464329][ T4330] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.498763][ T4330] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.547901][ T4330] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.587689][ T4330] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.637340][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.640843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.642779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.649977][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.654997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.657162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.659365][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.660607][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.662136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.669496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.671228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.672713][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.673796][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.675058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.677252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.682398][ T4340] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.690768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.701840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.703471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.705036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.706405][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.707587][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.710778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.728522][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.730308][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.731825][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.733306][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.734680][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.735781][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.740964][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.747748][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.748981][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.750542][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.752031][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.755724][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.759099][ T4336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.764837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.766412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.774163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.775938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.777447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.779024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.783593][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.785239][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.789641][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.791511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.792899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.794222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.796338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.800931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.804867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.807086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.808714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.810259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.811689][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.812764][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.814436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.826220][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.827949][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.829317][ T1615] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.830532][ T1615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.831796][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.833309][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.834887][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.837744][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.844349][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.845909][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.849796][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.855042][ T4336] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.867619][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.869154][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.870653][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.872093][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.873627][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.875059][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.878620][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.882451][ T4340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.884390][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.900495][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.902027][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.903415][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.904890][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.906281][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.907361][ T4378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.914625][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.916257][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.918114][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.919190][ T4378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.920483][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.922475][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.924240][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.925727][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.929015][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.934695][ T4336] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.936286][ T4336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.951143][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.952377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.954538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.956084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.961349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.962989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.964453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.966021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.968044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.969763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.971225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.974721][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.976245][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.977655][ T1573] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.978695][ T1573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.980755][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.984112][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 31.985261][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.000910][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.002515][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.003916][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.004883][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.010725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.012467][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.018141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.019790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.033206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.034742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.036251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.041563][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.049844][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.053357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.054714][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.061513][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.063047][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.066260][ T4330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.069489][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.071336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.072684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.076095][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.077362][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.084502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.086067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.089719][ T4340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.106042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.108094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.109997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.111375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.118524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.119786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.124700][ T4336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.126137][ T4327] device veth0_vlan entered promiscuous mode [ 32.135044][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.136958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.145125][ T4327] device veth1_vlan entered promiscuous mode [ 32.147275][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.148893][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.150436][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.151967][ T4340] device veth0_vlan entered promiscuous mode [ 32.154121][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.155520][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.161405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.162896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.182136][ T4340] device veth1_vlan entered promiscuous mode [ 32.191312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.192812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.194237][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.195611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.198189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.200226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.201759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.210040][ T4327] device veth0_macvtap entered promiscuous mode [ 32.211822][ T4336] device veth0_vlan entered promiscuous mode [ 32.214470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.215983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.217657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.224619][ T4327] device veth1_macvtap entered promiscuous mode [ 32.237263][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.240260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.241755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.242980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.244156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.245502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.249892][ T4336] device veth1_vlan entered promiscuous mode [ 32.255800][ T4340] device veth0_macvtap entered promiscuous mode [ 32.265070][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.266860][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.268203][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.269555][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.271085][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.277989][ T4340] device veth1_macvtap entered promiscuous mode [ 32.282059][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.283277][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.284833][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.286340][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.296453][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.298625][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.300302][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.301730][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.303226][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.304565][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.309721][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.313410][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.315010][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.320600][ T4326] device veth0_vlan entered promiscuous mode [ 32.322462][ T4327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.323812][ T4327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.324988][ T4327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.326273][ T4327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.330655][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.332224][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.334262][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.341844][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.343445][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.344890][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.346998][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.349744][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.351387][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.354540][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.355902][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.358768][ T4330] device veth0_vlan entered promiscuous mode [ 32.360139][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.361659][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.363735][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.369275][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.370855][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.373854][ T4336] device veth0_macvtap entered promiscuous mode [ 32.381094][ T4340] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.382333][ T4340] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.383612][ T4340] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.384850][ T4340] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.390026][ T4326] device veth1_vlan entered promiscuous mode [ 32.392860][ T4336] device veth1_macvtap entered promiscuous mode [ 32.401774][ T4330] device veth1_vlan entered promiscuous mode [ 32.429116][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.430632][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.432059][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.433518][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.434907][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.436251][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.439267][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.440711][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.446423][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.450017][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.456309][ T4326] device veth0_macvtap entered promiscuous mode [ 32.461909][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.463504][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.464860][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.466292][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.468728][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.469804][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.471340][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.472986][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.481745][ T4330] device veth0_macvtap entered promiscuous mode [ 32.484586][ T4330] device veth1_macvtap entered promiscuous mode [ 32.488588][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.489333][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.489788][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.491304][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.494041][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.495394][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.498031][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.499691][ T4326] device veth1_macvtap entered promiscuous mode [ 32.502885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.504300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.505662][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.511126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.513268][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.514800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.523455][ T4336] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.528671][ T4336] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.530124][ T4336] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.531344][ T4336] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.536207][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.538352][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.539734][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.541156][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.542506][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.543994][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.546230][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.554130][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.555674][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.557941][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.559533][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.560913][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.562402][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.564507][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.569607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.571321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.572878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.574285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.583285][ T4330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.584612][ T4330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.585858][ T4330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.587333][ T4330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.590581][ T1573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.591800][ T1573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.593362][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.596015][ T1573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.599525][ T1573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.610167][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.611867][ T1573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.613096][ T1573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.634113][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.637163][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.638688][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.640019][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.641434][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.642918][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.644391][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.645791][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.653674][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.655884][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.669062][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.671143][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.675353][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.677146][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.678546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.711712][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.713390][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.714947][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.717880][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.719305][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.720733][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.722120][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.723519][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.725661][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.759800][ T4326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.787175][ T4326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.788595][ T4326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.789901][ T4326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.824235][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.825915][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.849550][ T1615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.855167][ T1615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.859902][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.862279][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.867142][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.868758][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.224714][ T1615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.227135][ T1615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.232970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.237547][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.240747][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.242058][ T4413] loop2: detected capacity change from 0 to 1024 [ 33.242695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.282261][ T4413] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 33.283826][ T1615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.285256][ T1615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.286995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.697055][ T4337] Bluetooth: hci2: command 0x041b tx timeout [ 33.699551][ T4328] Bluetooth: hci0: command 0x041b tx timeout [ 33.700510][ T4334] Bluetooth: hci1: command 0x041b tx timeout [ 33.701577][ T4337] Bluetooth: hci4: command 0x041b tx timeout [ 33.701701][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 34.124299][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 34.504559][ T4439] syz.4.9 uses obsolete (PF_INET,SOCK_PACKET) [ 36.176564][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 36.177640][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 36.178613][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 36.179609][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 36.180608][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 38.103547][ T4461] loop0: detected capacity change from 0 to 512 [ 39.402782][ T4333] Bluetooth: hci2: command 0x0419 tx timeout [ 39.403835][ T4333] Bluetooth: hci0: command 0x0419 tx timeout [ 39.404831][ T4333] Bluetooth: hci4: command 0x0419 tx timeout [ 39.405772][ T4333] Bluetooth: hci1: command 0x0419 tx timeout [ 39.407039][ T4333] Bluetooth: hci3: command 0x0419 tx timeout [ 39.637449][ T4461] EXT4-fs warning (device loop0): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop0. [ 42.878398][ T4486] loop1: detected capacity change from 0 to 4096 [ 43.151134][ T4487] loop2: detected capacity change from 0 to 512 [ 44.700328][ T4485] sched: RT throttling activated [ 45.940879][ T4487] EXT4-fs warning (device loop2): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop2. [ 45.953274][ T4486] ntfs3: loop1: Failed to load $MFT. [ 48.383108][ T4534] loop4: detected capacity change from 0 to 512 [ 48.690957][ T4534] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 48.709668][ T4532] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 49.297209][ T4519] device syzkaller1 entered promiscuous mode [ 49.356094][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 50.977845][ T4556] loop2: detected capacity change from 0 to 512 [ 51.996090][ T4563] loop0: detected capacity change from 0 to 512 [ 52.014250][ T4556] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 52.047754][ T4563] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.26: corrupted in-inode xattr [ 52.054470][ T4563] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.26: couldn't read orphan inode 15 (err -117) [ 52.059396][ T4563] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 52.194282][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 52.298453][ T4572] device syzkaller0 entered promiscuous mode [ 52.807176][ T4538] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 53.199008][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 55.045371][ T4588] loop1: detected capacity change from 0 to 4096 [ 55.257191][ T4579] loop0: detected capacity change from 0 to 4096 [ 55.393180][ T4579] ntfs3: loop0: Failed to load $MFT. [ 55.404214][ T4588] ntfs3: loop1: Failed to load $MFT. [ 56.074382][ T4333] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 56.076340][ T4333] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 56.078482][ T4333] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 56.079980][ T4333] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 56.081336][ T4333] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 56.082613][ T4333] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 56.623586][ T4609] loop0: detected capacity change from 0 to 4096 [ 56.650457][ T4609] ntfs3: loop0: Failed to load $MFT. [ 58.089282][ T4333] Bluetooth: hci5: command 0x0409 tx timeout [ 58.127783][ T4590] chnl_net:caif_netlink_parms(): no params data found [ 59.208931][ T4633] loop4: detected capacity change from 0 to 512 [ 59.938913][ T4633] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 59.964049][ T4630] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 60.166572][ T4333] Bluetooth: hci5: command 0x041b tx timeout [ 60.672297][ T4590] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.673568][ T4590] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.675070][ T4590] device bridge_slave_0 entered promiscuous mode [ 60.677427][ T4590] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.678596][ T4590] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.680035][ T4590] device bridge_slave_1 entered promiscuous mode [ 60.688381][ T4590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.691045][ T4590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.698846][ T4590] team0: Port device team_slave_0 added [ 60.701352][ T4590] team0: Port device team_slave_1 added [ 60.713002][ T4590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.714237][ T4590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.718309][ T4590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.725452][ T4590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.726703][ T4590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.730929][ T4590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.778111][ T4590] device hsr_slave_0 entered promiscuous mode [ 60.835417][ T4590] device hsr_slave_1 entered promiscuous mode [ 60.888246][ T47] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 60.890082][ T47] CPU: 0 PID: 47 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 60.891124][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 60.892578][ T47] Workqueue: hci1 hci_rx_work [ 60.893272][ T47] Call trace: [ 60.893734][ T47] dump_backtrace+0x1c0/0x1ec [ 60.894467][ T47] show_stack+0x2c/0x3c [ 60.895074][ T47] __dump_stack+0x30/0x40 [ 60.895701][ T47] dump_stack_lvl+0xf4/0x15c [ 60.896331][ T47] dump_stack+0x1c/0x5c [ 60.896972][ T47] sysfs_create_dir_ns+0x244/0x264 [ 60.897766][ T47] kobject_add_internal+0x598/0xb08 [ 60.898507][ T47] kobject_add+0x140/0x20c [ 60.899227][ T47] device_add+0x3f8/0xefc [ 60.899942][ T47] hci_conn_add_sysfs+0xbc/0x1c8 [ 60.900686][ T47] le_conn_complete_evt+0xcc8/0x1244 [ 60.901493][ T47] hci_le_conn_complete_evt+0x114/0x3f4 [ 60.902305][ T47] hci_le_meta_evt+0x2c0/0x4a0 [ 60.902982][ T47] hci_event_packet+0x6b8/0xf18 [ 60.903730][ T47] hci_rx_work+0x328/0xa84 [ 60.904408][ T47] process_one_work+0x7f8/0x13a4 [ 60.905193][ T47] worker_thread+0x8c4/0xfec [ 60.905860][ T47] kthread+0x250/0x2d8 [ 60.906437][ T47] ret_from_fork+0x10/0x20 [ 60.907955][ T47] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 60.909925][ T47] Bluetooth: hci1: failed to register connection device [ 60.958613][ T4590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.959812][ T4590] Cannot create hsr debugfs directory [ 61.118700][ T4658] can0: slcan on ttyS3. [ 61.425088][ T4590] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 62.162051][ T4590] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 62.248211][ T4653] can0 (unregistered): slcan off ttyS3. [ 62.261378][ T4590] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 62.406681][ T4333] Bluetooth: hci5: command 0x040f tx timeout [ 62.747402][ T4590] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 62.898662][ T4590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.915898][ T4590] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.924676][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.928091][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 62.929806][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.113264][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.115019][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.117378][ T4560] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.118416][ T4560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.119788][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.121381][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.446880][ T4560] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.448087][ T4560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.453429][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.495541][ T4698] loop0: detected capacity change from 0 to 4096 [ 63.521092][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.542305][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.555246][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.572768][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.579260][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.776309][ T4716] loop2: detected capacity change from 0 to 512 [ 64.093499][ T4716] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 64.489057][ T4719] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 64.632101][ T24] cfg80211: failed to load regulatory.db [ 64.743648][ T47] Bluetooth: hci5: command 0x0419 tx timeout [ 64.749728][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.750739][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.763575][ T4590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.765201][ T4590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.777539][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.779253][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.780707][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.782057][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.783567][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.784928][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.786473][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.876215][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 65.118671][ T4728] loop4: detected capacity change from 0 to 4096 [ 65.704061][ T4728] ntfs3: loop4: Failed to load $MFT. [ 66.022200][ T4731] loop2: detected capacity change from 0 to 512 [ 66.062281][ T4698] ntfs3: loop0: Failed to load $MFT. [ 66.082993][ T4731] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 66.264471][ T4737] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 66.267561][ T4737] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 1 with max blocks 32 with error 28 [ 66.269463][ T4737] EXT4-fs (loop2): This should not happen!! Data will be lost [ 66.269463][ T4737] [ 66.270863][ T4737] EXT4-fs (loop2): Total free blocks count 0 [ 66.271757][ T4737] EXT4-fs (loop2): Free/Dirty block details [ 66.272662][ T4737] EXT4-fs (loop2): free_blocks=65280 [ 66.273369][ T4737] EXT4-fs (loop2): dirty_blocks=32 [ 66.274201][ T4737] EXT4-fs (loop2): Block reservation details [ 66.275062][ T4737] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 66.349190][ T4610] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.357234][ T4739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'. [ 66.737593][ T4610] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.475257][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 67.548065][ T4610] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.648807][ T4610] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.656401][ T4590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.661629][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.662788][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.776935][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 67.779598][ T4759] loop4: detected capacity change from 0 to 128 [ 67.794262][ T4759] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 68.594491][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.598492][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.656075][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 69.210451][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.212190][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.215052][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.220224][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.223658][ T4590] device veth0_vlan entered promiscuous mode [ 69.230524][ T4590] device veth1_vlan entered promiscuous mode [ 69.503677][ T4590] device veth0_macvtap entered promiscuous mode [ 69.506536][ T4590] device veth1_macvtap entered promiscuous mode [ 69.676703][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.679824][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.684509][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.690168][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.693931][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.118565][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.122396][ T4800] device syzkaller0 entered promiscuous mode [ 70.125354][ T4590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.130098][ T4590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.131641][ T4590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.135294][ T4590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.138962][ T4590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.142611][ T4590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.146280][ T4590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.153124][ T4590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.155816][ T4590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.162529][ T4590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.438059][ T4590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.499920][ T4814] loop4: detected capacity change from 0 to 1024 [ 70.505660][ T4814] ======================================================= [ 70.505660][ T4814] WARNING: The mand mount option has been deprecated and [ 70.505660][ T4814] and is ignored by this kernel. Remove the mand [ 70.505660][ T4814] option from the mount to silence this warning. [ 70.505660][ T4814] ======================================================= [ 70.533413][ T4814] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 70.575415][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.578348][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.727173][ T4590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.733828][ T4590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.737461][ T4590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.745931][ T4590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.748785][ T4590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.750226][ T4590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.751662][ T4590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.753298][ T4590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.754682][ T4590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.756250][ T4590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.759129][ T4590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.760325][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.762042][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.370770][ T4590] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.372144][ T4590] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.373417][ T4590] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.374703][ T4590] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.758583][ T4817] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 73.787577][ T4840] slcan: can't register candev [ 73.792468][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 74.956136][ T4410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.957743][ T4410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.959020][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.974460][ T4870] device syzkaller0 entered promiscuous mode [ 75.383620][ T4879] loop2: detected capacity change from 0 to 512 [ 75.560164][ T4879] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 75.996573][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.997796][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.998998][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.625400][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 80.147887][ T4961] loop1: detected capacity change from 0 to 512 [ 81.283905][ T4961] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 81.754511][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 81.872912][ T4610] device hsr_slave_0 left promiscuous mode [ 82.195068][ T4610] device hsr_slave_1 left promiscuous mode [ 82.508481][ T4610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.510481][ T4610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.564762][ T4610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.571315][ T4610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.606646][ T4610] device bridge_slave_1 left promiscuous mode [ 82.608749][ T4610] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.658640][ T4610] device bridge_slave_0 left promiscuous mode [ 82.660764][ T4610] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.048305][ T4610] device veth1_macvtap left promiscuous mode [ 83.049781][ T4610] device veth0_macvtap left promiscuous mode [ 83.051878][ T4610] device veth1_vlan left promiscuous mode [ 83.072519][ T4610] device veth0_vlan left promiscuous mode [ 83.078466][ C0] vcan0: j1939_tp_rxtimer: 0x00000000fcca39ef: rx timeout, send abort [ 83.080582][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000fd3117f5: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 83.111202][ T4994] loop4: detected capacity change from 0 to 128 [ 83.130468][ T4994] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.580289][ C0] vcan0: j1939_tp_rxtimer: 0x00000000fcca39ef: abort rx timeout. Force session deactivation [ 83.861636][ T5007] loop2: detected capacity change from 0 to 128 [ 83.861804][ T5005] loop1: detected capacity change from 0 to 1024 [ 83.873940][ T5007] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 83.904430][ T5005] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 83.983267][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 84.547511][ T5020] loop4: detected capacity change from 0 to 512 [ 84.550958][ T5020] EXT4-fs: Ignoring removed oldalloc option [ 86.193760][ T5024] loop0: detected capacity change from 0 to 4096 [ 88.758432][ T5019] netlink: 24 bytes leftover after parsing attributes in process `syz.4.95'. [ 88.811210][ T4965] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 88.818267][ T5024] ntfs3: loop0: Failed to load $MFT. [ 88.818621][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 88.832092][ T5020] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.95: inode #1: comm syz.4.95: iget: illegal inode # [ 88.835050][ T5020] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.95: error while reading EA inode 1 err=-117 [ 88.840138][ T5020] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 88.841256][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 88.842208][ T5020] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.95: inode #1: comm syz.4.95: iget: illegal inode # [ 88.848349][ T5020] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.95: error while reading EA inode 1 err=-117 [ 88.851193][ T5020] EXT4-fs (loop4): 1 orphan inode deleted [ 88.852144][ T5020] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 88.908812][ T5030] loop1: detected capacity change from 0 to 1024 [ 88.928452][ T5030] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 89.357458][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 89.726966][ T5046] loop4: detected capacity change from 0 to 4096 [ 90.053855][ T5046] ntfs3: loop4: Failed to load $MFT. [ 90.686386][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 90.690555][ T5048] loop2: detected capacity change from 0 to 512 [ 90.875031][ T5048] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.100: corrupted in-inode xattr [ 90.880152][ T5048] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.100: couldn't read orphan inode 15 (err -117) [ 90.882002][ T5048] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.555292][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 91.587450][ T5057] loop2: detected capacity change from 0 to 1024 [ 91.598275][ T5057] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.452690][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 92.479936][ T5066] loop2: detected capacity change from 0 to 128 [ 92.491232][ T5066] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.518742][ T4610] team0 (unregistering): Port device team_slave_1 removed [ 92.635235][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 92.678393][ T4610] team0 (unregistering): Port device team_slave_0 removed [ 92.877137][ T4610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.886482][ T5077] loop1: detected capacity change from 0 to 1024 [ 92.916646][ T5077] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 93.119760][ T4610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.532595][ T5085] loop2: detected capacity change from 0 to 1024 [ 93.549526][ T5085] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 93.946839][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 95.120315][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 96.619750][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.621613][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.623214][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.624693][ T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.626347][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 96.627622][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.853110][ T4610] bond0 (unregistering): Released all slaves [ 97.107468][ T4975] netlink: 4 bytes leftover after parsing attributes in process `syz.5.31'. [ 97.367881][ T5129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.113'. [ 97.671532][ T5138] loop4: detected capacity change from 0 to 512 [ 98.092558][ T5138] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 98.578680][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 98.597074][ T4333] Bluetooth: hci4: command 0x0409 tx timeout [ 99.502805][ T5162] loop4: detected capacity change from 0 to 4096 [ 100.678001][ T4333] Bluetooth: hci4: command 0x041b tx timeout [ 100.859404][ T5159] slcan: can't register candev [ 100.890887][ T5162] ntfs3: loop4: Failed to load $MFT. [ 100.980457][ T5165] device syzkaller0 entered promiscuous mode [ 101.125883][ T5176] loop1: detected capacity change from 0 to 1024 [ 101.155762][ T5176] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 101.784845][ T5185] loop4: detected capacity change from 0 to 4096 [ 101.882594][ T5185] ntfs3: loop4: Failed to load $MFT. [ 102.480758][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 102.670727][ T4333] Bluetooth: hci4: command 0x040f tx timeout [ 103.737158][ T5213] loop2: detected capacity change from 0 to 1024 [ 103.757772][ T5213] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 103.837287][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 104.069540][ T5221] loop1: detected capacity change from 0 to 512 [ 104.375594][ T5221] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 104.464522][ T5219] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 104.794260][ T4333] Bluetooth: hci4: command 0x0419 tx timeout [ 104.829467][ T5224] loop2: detected capacity change from 0 to 1024 [ 104.855632][ T5224] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 105.667554][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 115.161521][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 115.248560][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.249737][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.251331][ T5117] device bridge_slave_0 entered promiscuous mode [ 115.256764][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.258257][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.259913][ T5117] device bridge_slave_1 entered promiscuous mode [ 115.283140][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 115.286695][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.290810][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.302009][ T5117] team0: Port device team_slave_0 added [ 115.304680][ T5117] team0: Port device team_slave_1 added [ 115.324501][ T5249] loop1: detected capacity change from 0 to 1024 [ 115.330979][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.332006][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.337018][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.341408][ T5251] loop2: detected capacity change from 0 to 128 [ 115.345319][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.346332][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.349772][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.425810][ T5251] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 115.439890][ T5249] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 116.240248][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 116.269395][ T5117] device hsr_slave_0 entered promiscuous mode [ 116.349643][ T5117] device hsr_slave_1 entered promiscuous mode [ 116.682877][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.684947][ T5117] Cannot create hsr debugfs directory [ 117.589333][ T5117] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 117.869975][ T5117] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 117.877473][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 117.956902][ T5117] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 118.019163][ T5300] loop0: detected capacity change from 0 to 512 [ 118.021637][ T5300] EXT4-fs: Ignoring removed oldalloc option [ 118.197749][ T5300] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.137: inode #1: comm syz.0.137: iget: illegal inode # [ 118.201006][ T5300] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.137: error while reading EA inode 1 err=-117 [ 118.209795][ T5300] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.137: inode #1: comm syz.0.137: iget: illegal inode # [ 118.212836][ T5300] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.137: error while reading EA inode 1 err=-117 [ 118.216607][ T5300] EXT4-fs (loop0): 1 orphan inode deleted [ 118.217567][ T5300] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 118.238663][ T5300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.137'. [ 118.362103][ T5117] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 118.692365][ T4610] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.137908][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.330661][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 119.348937][ T4610] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.355008][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.356957][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.358416][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.372476][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.377778][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.379756][ T1615] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.380790][ T1615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.568152][ T5319] loop4: detected capacity change from 0 to 512 [ 119.868941][ T5319] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 120.296218][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.407060][ T4610] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.078581][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 121.084027][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.085686][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.095798][ T4498] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.097035][ T4498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.112516][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.122991][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.125871][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.128908][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.195404][ T5336] loop1: detected capacity change from 0 to 1024 [ 121.199209][ T4610] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.207076][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.209994][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.228516][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.230037][ T5336] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 121.237572][ T5117] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.239113][ T5117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.259854][ T5334] device syzkaller0 entered promiscuous mode [ 121.263315][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.269637][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.278128][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.375657][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.377276][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.400339][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 121.606387][ T5350] loop0: detected capacity change from 0 to 512 [ 121.993038][ T5350] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 122.951725][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 122.976883][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.978181][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.982295][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.917060][ T5402] loop1: detected capacity change from 0 to 512 [ 124.291599][ T5402] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 124.372412][ T5402] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 124.766607][ T5406] loop0: detected capacity change from 0 to 512 [ 124.827351][ T5406] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 124.920280][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 124.960700][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.962357][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.983329][ T5417] device syzkaller0 entered promiscuous mode [ 125.312875][ T5424] loop2: detected capacity change from 0 to 4096 [ 125.318300][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.319642][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.133593][ T5424] ntfs3: loop2: Failed to load $MFT. [ 126.174830][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.176477][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.177994][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.179252][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.198544][ T5117] device veth0_vlan entered promiscuous mode [ 126.209502][ T5117] device veth1_vlan entered promiscuous mode [ 126.217325][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 126.544400][ T5117] device veth0_macvtap entered promiscuous mode [ 126.546051][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.548338][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.550670][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.554135][ T5117] device veth1_macvtap entered promiscuous mode [ 126.561812][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.563580][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.565188][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.571208][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.572669][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.574410][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.576068][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.580833][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.582277][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.583715][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.587335][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.693594][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.695490][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.696971][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.701208][ T5439] device syzkaller0 entered promiscuous mode [ 130.126732][ T5447] loop1: detected capacity change from 0 to 512 [ 130.128165][ T5447] EXT4-fs: Ignoring removed oldalloc option [ 130.266231][ T5447] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.158: inode #1: comm syz.1.158: iget: illegal inode # [ 130.268943][ T5447] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.158: error while reading EA inode 1 err=-117 [ 130.271527][ T5447] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.158: inode #1: comm syz.1.158: iget: illegal inode # [ 130.273745][ T5447] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.158: error while reading EA inode 1 err=-117 [ 130.278311][ T5447] EXT4-fs (loop1): 1 orphan inode deleted [ 130.279426][ T5447] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 130.288956][ T5447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.158'. [ 130.563144][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.564778][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.569362][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.571107][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.572511][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.574047][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.575490][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.595512][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.597094][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.598793][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.621883][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.625916][ T5117] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.627303][ T5117] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.628591][ T5117] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.630047][ T5117] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.721547][ T4467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.722810][ T4467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.747315][ T4467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.748611][ T4467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.889477][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 130.939858][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.941939][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.943398][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.944696][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 131.830328][ T5485] slcan: can't register candev [ 132.052181][ T5496] loop4: detected capacity change from 0 to 1024 [ 133.316082][ T5507] loop0: detected capacity change from 0 to 512 [ 133.317844][ T5507] EXT4-fs: Ignoring removed oldalloc option [ 134.759792][ T5509] loop2: detected capacity change from 0 to 512 [ 134.761309][ T5509] EXT4-fs: Ignoring removed oldalloc option [ 137.159621][ T5509] EXT4-fs: failed to create workqueue [ 137.160547][ T5509] EXT4-fs (loop2): mount failed [ 137.178128][ T5507] EXT4-fs: failed to create workqueue [ 137.179000][ T5507] EXT4-fs (loop0): mount failed [ 137.189681][ T5496] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4. [ 143.222010][ T5541] loop1: detected capacity change from 0 to 512 [ 143.223403][ T5541] EXT4-fs: Ignoring removed oldalloc option [ 144.193092][ T5541] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.170: inode #1: comm syz.1.170: iget: illegal inode # [ 144.196661][ T5541] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.170: error while reading EA inode 1 err=-117 [ 144.199582][ T5541] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.170: inode #1: comm syz.1.170: iget: illegal inode # [ 144.202129][ T5541] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.170: error while reading EA inode 1 err=-117 [ 144.206607][ T5541] EXT4-fs (loop1): 1 orphan inode deleted [ 144.207558][ T5541] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 144.288361][ T5541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.170'. [ 144.713815][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 144.760746][ T5556] loop1: detected capacity change from 0 to 1024 [ 144.804218][ T5556] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 145.447827][ T5574] loop0: detected capacity change from 0 to 512 [ 145.828996][ T5574] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 146.485581][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 146.727788][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 146.961069][ T5592] loop1: detected capacity change from 0 to 1024 [ 147.350828][ T5592] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 147.874317][ T5607] loop4: detected capacity change from 0 to 512 [ 148.266102][ T5607] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 148.681082][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 148.878278][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 149.375484][ T5643] loop6: detected capacity change from 0 to 1024 [ 149.418950][ T5643] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 149.534809][ T5652] loop2: detected capacity change from 0 to 1024 [ 149.898903][ T5652] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 150.332315][ T5671] loop4: detected capacity change from 0 to 1024 [ 150.333749][ T5117] EXT4-fs (loop6): unmounting filesystem. [ 150.404937][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 150.419981][ T5671] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 152.469742][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 152.490637][ T5699] netlink: 36 bytes leftover after parsing attributes in process `syz.6.193'. [ 152.506989][ T4333] Bluetooth: hci2: command 0x0406 tx timeout [ 152.508088][ T4334] Bluetooth: hci1: command 0x0406 tx timeout [ 152.509015][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 152.509937][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 153.436389][ T5710] loop4: detected capacity change from 0 to 512 [ 153.458219][ T5710] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.194: corrupted in-inode xattr [ 153.463509][ T5710] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.194: couldn't read orphan inode 15 (err -117) [ 153.465579][ T5710] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 153.542919][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 153.585736][ T5699] netlink: 36 bytes leftover after parsing attributes in process `syz.6.193'. [ 153.658944][ T5718] binder: 5717:5718 tried to acquire reference to desc 0, got 1 instead [ 153.698320][ T5718] binder_alloc: 5717: pid 5717 spamming oneway? 2 buffers allocated for a total size of 5120 [ 153.702425][ T22] binder: undelivered TRANSACTION_COMPLETE [ 153.703427][ T22] binder: undelivered TRANSACTION_COMPLETE [ 153.718229][ T22] binder: undelivered transaction 6, process died. [ 153.719303][ T22] binder: undelivered transaction 5, process died. [ 153.869850][ T5734] loop0: detected capacity change from 0 to 1024 [ 154.275814][ T5744] loop6: detected capacity change from 0 to 512 [ 154.507074][ T5744] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 154.897502][ T5747] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 154.992855][ T5734] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 155.407916][ T4610] device hsr_slave_0 left promiscuous mode [ 155.453715][ T4610] device hsr_slave_1 left promiscuous mode [ 155.509591][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 155.588982][ T5117] EXT4-fs (loop6): unmounting filesystem. [ 155.622950][ T4610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.624890][ T4610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.626443][ T4610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.627665][ T4610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.632469][ T4610] device bridge_slave_1 left promiscuous mode [ 155.640605][ T4610] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.641310][ T5777] loop6: detected capacity change from 0 to 512 [ 155.659787][ T5777] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.206: corrupted in-inode xattr [ 155.662589][ T5777] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.206: couldn't read orphan inode 15 (err -117) [ 155.664737][ T5777] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 155.694906][ T4610] device bridge_slave_0 left promiscuous mode [ 155.696132][ T5117] EXT4-fs (loop6): unmounting filesystem. [ 155.696164][ T4610] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.842780][ T4610] device veth1_macvtap left promiscuous mode [ 155.843776][ T4610] device veth0_macvtap left promiscuous mode [ 155.844660][ T4610] device veth1_vlan left promiscuous mode [ 155.845605][ T4610] device veth0_vlan left promiscuous mode [ 155.848481][ T5789] loop1: detected capacity change from 0 to 1024 [ 155.879337][ T5789] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 156.705059][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 156.759978][ T5797] binder: 5796:5797 tried to acquire reference to desc 0, got 1 instead [ 156.761714][ T5797] binder_alloc: 5796: pid 5796 spamming oneway? 2 buffers allocated for a total size of 5120 [ 156.763544][ T4601] binder: undelivered TRANSACTION_COMPLETE [ 156.764447][ T4601] binder: undelivered TRANSACTION_COMPLETE [ 156.773759][ T24] binder: undelivered transaction 12, process died. [ 156.774896][ T24] binder: undelivered transaction 11, process died. [ 160.003568][ T4610] team0 (unregistering): Port device team_slave_1 removed [ 160.139635][ T4610] team0 (unregistering): Port device team_slave_0 removed [ 160.303664][ T4610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.508655][ T4610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.856043][ T4610] bond0 (unregistering): Released all slaves [ 162.071029][ T5785] netlink: 36 bytes leftover after parsing attributes in process `syz.6.207'. [ 162.074122][ T5787] netlink: 36 bytes leftover after parsing attributes in process `syz.6.207'. [ 162.606367][ T5837] loop0: detected capacity change from 0 to 512 [ 162.609783][ T5837] EXT4-fs: Ignoring removed oldalloc option [ 163.853090][ T5840] loop4: detected capacity change from 0 to 512 [ 163.854660][ T5840] EXT4-fs: Ignoring removed oldalloc option [ 167.334386][ T5837] EXT4-fs: error -4 creating inode table initialization thread [ 167.336004][ T5837] EXT4-fs (loop0): mount failed [ 167.391158][ T5840] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.219: inode #1: comm syz.4.219: iget: illegal inode # [ 167.393496][ T5840] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.219: error while reading EA inode 1 err=-117 [ 167.396753][ T5840] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.219: inode #1: comm syz.4.219: iget: illegal inode # [ 167.398992][ T5840] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.219: error while reading EA inode 1 err=-117 [ 167.400968][ T5840] EXT4-fs (loop4): 1 orphan inode deleted [ 167.401858][ T5840] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 167.419298][ T5839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.219'. [ 169.282079][ T5860] input: syz0 as /devices/virtual/input/input2 [ 170.234411][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 170.544751][ T5883] input: syz0 as /devices/virtual/input/input3 [ 173.330871][ T5892] input: syz0 as /devices/virtual/input/input4 [ 174.144733][ T5893] loop0: detected capacity change from 0 to 512 [ 174.147295][ T5893] EXT4-fs: Ignoring removed oldalloc option [ 179.076518][ T5893] EXT4-fs: failed to create workqueue [ 179.077417][ T5893] EXT4-fs (loop0): mount failed [ 179.160120][ T5898] binder: 5897:5898 tried to acquire reference to desc 0, got 1 instead [ 179.254965][ T5898] binder_alloc: 5897: pid 5897 spamming oneway? 2 buffers allocated for a total size of 5120 [ 179.260695][ T4373] binder: undelivered TRANSACTION_COMPLETE [ 179.269121][ T4373] binder: undelivered transaction 18, process died. [ 179.270171][ T4373] binder: undelivered transaction 17, process died. [ 179.382043][ T5908] loop1: detected capacity change from 0 to 512 [ 179.386924][ T5908] EXT4-fs: Ignoring removed oldalloc option [ 181.275567][ T5912] loop6: detected capacity change from 0 to 512 [ 181.297017][ T5908] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.229: inode #1: comm syz.1.229: iget: illegal inode # [ 181.299552][ T5908] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.229: error while reading EA inode 1 err=-117 [ 181.302574][ T5908] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.229: inode #1: comm syz.1.229: iget: illegal inode # [ 181.304604][ T5908] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.229: error while reading EA inode 1 err=-117 [ 181.306563][ T5908] EXT4-fs (loop1): 1 orphan inode deleted [ 181.307438][ T5908] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 181.375723][ T5912] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 181.544032][ T5924] loop0: detected capacity change from 0 to 512 [ 181.565815][ T5117] EXT4-fs (loop6): unmounting filesystem. [ 181.612051][ T5924] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 181.698463][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 181.822504][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 183.656731][ T5950] loop4: detected capacity change from 0 to 512 [ 183.678419][ T5937] device syzkaller0 entered promiscuous mode [ 189.614626][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.617524][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.202194][ T5984] input: syz0 as /devices/virtual/input/input5 [ 191.659992][ T5993] loop0: detected capacity change from 0 to 512 [ 191.661804][ T5993] EXT4-fs: Ignoring removed oldalloc option [ 191.858513][ T5994] loop1: detected capacity change from 0 to 512 [ 191.860143][ T5994] EXT4-fs: Ignoring removed oldalloc option [ 195.339642][ T6000] device syzkaller0 entered promiscuous mode [ 195.341608][ T5994] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.248: inode #1: comm syz.1.248: iget: illegal inode # [ 195.341651][ T5993] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.247: inode #1: comm syz.0.247: iget: illegal inode # [ 195.344351][ T5994] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.248: error while reading EA inode 1 err=-117 [ 195.347682][ T5993] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.247: error while reading EA inode 1 err=-117 [ 195.347799][ T5994] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.248: inode #1: comm syz.1.248: iget: illegal inode # [ 195.351668][ T5993] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.247: inode #1: comm syz.0.247: iget: illegal inode # [ 195.351681][ T5994] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.248: error while reading EA inode 1 err=-117 [ 195.357665][ T5994] EXT4-fs (loop1): 1 orphan inode deleted [ 195.358640][ T5994] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 195.359165][ T5993] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.247: error while reading EA inode 1 err=-117 [ 195.362416][ T5993] EXT4-fs (loop0): 1 orphan inode deleted [ 195.363329][ T5993] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 195.488286][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 195.489954][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 195.615720][ T6015] device syzkaller0 entered promiscuous mode [ 197.591858][ T6044] device syzkaller0 entered promiscuous mode [ 197.939181][ T6070] loop4: detected capacity change from 0 to 512 [ 197.942092][ T6070] EXT4-fs: Ignoring removed oldalloc option [ 198.157407][ T6070] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.260: inode #1: comm syz.4.260: iget: illegal inode # [ 198.169057][ T6070] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.260: error while reading EA inode 1 err=-117 [ 198.172232][ T6070] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.260: inode #1: comm syz.4.260: iget: illegal inode # [ 198.174654][ T6070] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.260: error while reading EA inode 1 err=-117 [ 198.180872][ T6070] EXT4-fs (loop4): 1 orphan inode deleted [ 198.181859][ T6070] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 199.107136][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 200.001175][ T6073] overlayfs: statfs failed on './file0' [ 200.229452][ T6089] input: syz0 as /devices/virtual/input/input6 [ 201.590263][ T6114] device syzkaller0 entered promiscuous mode [ 201.622035][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 202.123932][ T6132] input: syz0 as /devices/virtual/input/input7 [ 203.234829][ T6138] device syzkaller0 entered promiscuous mode [ 205.666254][ T6169] input: syz0 as /devices/virtual/input/input10 [ 206.706741][ T6178] capability: warning: `syz.6.279' uses deprecated v2 capabilities in a way that may be insecure [ 206.718102][ T6180] Zero length message leads to an empty skb [ 210.162835][ T6245] device syzkaller0 entered promiscuous mode [ 210.357373][ T6259] loop2: detected capacity change from 0 to 1024 [ 210.399624][ T6259] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 234.039401][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [kworker/u4:1:11] [ 234.040677][ C0] Modules linked in: [ 234.041309][ C0] irq event stamp: 584346 [ 234.042002][ C0] hardirqs last enabled at (584345): [] exit_to_kernel_mode+0xcc/0xfc [ 234.043407][ C0] hardirqs last disabled at (584346): [] el1_interrupt+0x24/0x54 [ 234.044732][ C0] softirqs last enabled at (576760): [] handle_softirqs+0xaec/0xc60 [ 234.046028][ C0] softirqs last disabled at (576719): [] __do_softirq+0x14/0x20 [ 234.047363][ C0] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 234.048315][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 234.049611][ C0] Workqueue: events_unbound toggle_allocation_gate [ 234.050544][ C0] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 234.051585][ C0] pc : smp_call_function_many_cond+0x1358/0x142c [ 234.052463][ C0] lr : smp_call_function_many_cond+0x1370/0x142c [ 234.053376][ C0] sp : ffff80001ca17830 [ 234.053947][ C0] x29: ffff80001ca17890 x28: 0000000000000001 x27: ffff80001523d000 [ 234.055087][ C0] x26: 0000000000000011 x25: ffff800015240f40 x24: ffff00019f5101c0 [ 234.056258][ C0] x23: 1fffe00033ea2038 x22: dfff800000000000 x21: ffff00019f535a08 [ 234.057338][ C0] x20: 0000000000000001 x19: ffff80001543a760 x18: 000000009cc8530b [ 234.058462][ C0] x17: dfff800000000000 x16: ffff800011a529a8 x15: 0000000000000000 [ 234.059583][ C0] x14: 0000000000000001 x13: 1fffe00033ea6b41 x12: 0000000000ff0100 [ 234.060694][ C0] x11: ff00800008409680 x10: 0000000000000000 x9 : 0000000000000000 [ 234.061821][ C0] x8 : 0000000000000011 x7 : 0000000000000000 x6 : 0000000000000000 [ 234.062872][ C0] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff800008409674 [ 234.063945][ C0] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 234.065021][ C0] Call trace: [ 234.065491][ C0] smp_call_function_many_cond+0x1358/0x142c [ 234.066271][ C0] kick_all_cpus_sync+0x40/0xa0 [ 234.066953][ C0] arch_jump_label_transform_apply+0x14/0x20 [ 234.067796][ C0] __jump_label_update+0x30c/0x334 [ 234.068484][ C0] jump_label_update+0x304/0x3b4 [ 234.069156][ C0] static_key_enable_cpuslocked+0x11c/0x220 [ 234.070013][ C0] static_key_enable+0x24/0x38 [ 234.070673][ C0] toggle_allocation_gate+0xc8/0x42c [ 234.071394][ C0] process_one_work+0x7f8/0x13a4 [ 234.072047][ C0] worker_thread+0x8c4/0xfec [ 234.072695][ C0] kthread+0x250/0x2d8 [ 234.073290][ C0] ret_from_fork+0x10/0x20 [ 234.073888][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 234.074794][ C0] CPU: 0 PID: 11 Comm: kworker/u4:1 Tainted: G L syzkaller #0 [ 234.075950][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 234.077277][ C0] Workqueue: events_unbound toggle_allocation_gate [ 234.078175][ C0] Call trace: [ 234.078627][ C0] dump_backtrace+0x1c0/0x1ec [ 234.079303][ C0] show_stack+0x2c/0x3c [ 234.079864][ C0] __dump_stack+0x30/0x40 [ 234.080480][ C0] dump_stack_lvl+0xf4/0x15c [ 234.081133][ C0] dump_stack+0x1c/0x5c [ 234.081756][ C0] panic+0x2f8/0x7ac [ 234.082336][ C0] softlockup_fn+0x0/0x120 [ 234.082965][ C0] __hrtimer_run_queues+0x408/0xc40 [ 234.083668][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 234.084349][ C0] arch_timer_handler_virt+0x74/0x88 [ 234.085086][ C0] handle_percpu_devid_irq+0x174/0x34c [ 234.085838][ C0] generic_handle_domain_irq+0xe0/0x140 [ 234.086601][ C0] gic_handle_irq+0x70/0x1d8 [ 234.087220][ C0] call_on_irq_stack+0x30/0x48 [ 234.087886][ C0] do_interrupt_handler+0xd4/0x138 [ 234.088643][ C0] el1_interrupt+0x34/0x54 [ 234.089233][ C0] el1h_64_irq_handler+0x18/0x24 [ 234.089893][ C0] el1h_64_irq+0x64/0x68 [ 234.090519][ C0] smp_call_function_many_cond+0x1358/0x142c [ 234.091337][ C0] kick_all_cpus_sync+0x40/0xa0 [ 234.092020][ C0] arch_jump_label_transform_apply+0x14/0x20 [ 234.092833][ C0] __jump_label_update+0x30c/0x334 [ 234.093609][ C0] jump_label_update+0x304/0x3b4 [ 234.094310][ C0] static_key_enable_cpuslocked+0x11c/0x220 [ 234.095115][ C0] static_key_enable+0x24/0x38 [ 234.095822][ C0] toggle_allocation_gate+0xc8/0x42c [ 234.096577][ C0] process_one_work+0x7f8/0x13a4 [ 234.097262][ C0] worker_thread+0x8c4/0xfec [ 234.097902][ C0] kthread+0x250/0x2d8 [ 234.098454][ C0] ret_from_fork+0x10/0x20 [ 234.099083][ C0] SMP: stopping secondary CPUs [ 235.189033][ C0] SMP: failed to stop secondary CPUs 0-1 [ 235.189939][ C0] Kernel Offset: disabled [ 235.190578][ C0] CPU features: 0x080000,000f0097,a65bfea7 [ 235.191340][ C0] Memory Limit: none [ 235.200791][ C0] [ 235.201138][ C0] ================================ [ 235.201844][ C0] WARNING: inconsistent lock state [ 235.202636][ C0] syzkaller #0 Tainted: G L [ 235.203520][ C0] -------------------------------- [ 235.204254][ C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 235.205257][ C0] kworker/u4:1/11 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 235.206136][ C0] ffff8000152814b8 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c [ 235.207614][ C0] {HARDIRQ-ON-W} state was registered at: [ 235.208434][ C0] lock_acquire+0x20c/0x63c [ 235.209120][ C0] _raw_spin_lock+0x54/0x6c [ 235.209908][ C0] efi_call_rts+0x3c8/0x9d8 [ 235.210616][ C0] process_one_work+0x7f8/0x13a4 [ 235.211526][ C0] worker_thread+0x8c4/0xfec [ 235.212223][ C0] kthread+0x250/0x2d8 [ 235.212908][ C0] ret_from_fork+0x10/0x20 [ 235.213592][ C0] irq event stamp: 584346 [ 235.214207][ C0] hardirqs last enabled at (584345): [] exit_to_kernel_mode+0xcc/0xfc [ 235.215689][ C0] hardirqs last disabled at (584346): [] el1_interrupt+0x24/0x54 [ 235.217038][ C0] softirqs last enabled at (576760): [] handle_softirqs+0xaec/0xc60 [ 235.218418][ C0] softirqs last disabled at (576719): [] __do_softirq+0x14/0x20 [ 235.219721][ C0] [ 235.219721][ C0] other info that might help us debug this: [ 235.220842][ C0] Possible unsafe locking scenario: [ 235.220842][ C0] [ 235.221924][ C0] CPU0 [ 235.222397][ C0] ---- [ 235.222875][ C0] lock(efi_rt_lock); [ 235.223470][ C0] [ 235.224072][ C0] lock(efi_rt_lock); [ 235.224703][ C0] [ 235.224703][ C0] *** DEADLOCK *** [ 235.224703][ C0] [ 235.225858][ C0] 6 locks held by kworker/u4:1/11: [ 235.226569][ C0] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x6b8/0x13a4 [ 235.228121][ C0] #1: ffff80001ca17c20 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x6fc/0x13a4 [ 235.229886][ C0] #2: ffff8000152b7010 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x1c/0x38 [ 235.231188][ C0] #3: ffff8000154a4b28 (jump_label_mutex){+.+.}-{3:3}, at: static_key_enable_cpuslocked+0xc4/0x220 [ 235.232772][ C0] #4: ffff800015417480 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 235.234019][ C0] #5: ffff8000172ee908 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x180/0x820 [ 235.235371][ C0] [ 235.235371][ C0] stack backtrace: [ 235.236249][ C0] CPU: 0 PID: 11 Comm: kworker/u4:1 Tainted: G L syzkaller #0 [ 235.237519][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 235.238904][ C0] Workqueue: events_unbound toggle_allocation_gate [ 235.239856][ C0] Call trace: [ 235.240333][ C0] dump_backtrace+0x1c0/0x1ec [ 235.241009][ C0] show_stack+0x2c/0x3c [ 235.241678][ C0] __dump_stack+0x30/0x40 [ 235.242332][ C0] dump_stack_lvl+0xf4/0x15c [ 235.242960][ C0] dump_stack+0x1c/0x5c [ 235.243589][ C0] print_usage_bug+0x4c0/0x6d8 [ 235.244303][ C0] mark_lock_irq+0x850/0xab0 [ 235.244959][ C0] mark_lock+0x224/0x320 [ 235.245587][ C0] __lock_acquire+0xa4c/0x6800 [ 235.246279][ C0] lock_acquire+0x20c/0x63c [ 235.246946][ C0] _raw_spin_lock+0x54/0x6c [ 235.247644][ C0] virt_efi_set_variable_nonblocking+0x74/0x16c [ 235.248643][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 235.249609][ C0] efi_pstore_write+0x298/0x39c [ 235.250301][ C0] pstore_dump+0x5b0/0x820 [ 235.250952][ C0] kmsg_dump+0x170/0x260 [ 235.251558][ C0] panic+0x384/0x7ac [ 235.252121][ C0] softlockup_fn+0x0/0x120 [ 235.252734][ C0] __hrtimer_run_queues+0x408/0xc40 [ 235.253493][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 235.254234][ C0] arch_timer_handler_virt+0x74/0x88 [ 235.254944][ C0] handle_percpu_devid_irq+0x174/0x34c [ 235.255758][ C0] generic_handle_domain_irq+0xe0/0x140 [ 235.256526][ C0] gic_handle_irq+0x70/0x1d8 [ 235.257216][ C0] call_on_irq_stack+0x30/0x48 [ 235.257880][ C0] do_interrupt_handler+0xd4/0x138 [ 235.258711][ C0] el1_interrupt+0x34/0x54 [ 235.259328][ C0] el1h_64_irq_handler+0x18/0x24 [ 235.260073][ C0] el1h_64_irq+0x64/0x68 [ 235.260670][ C0] smp_call_function_many_cond+0x1358/0x142c [ 235.261508][ C0] kick_all_cpus_sync+0x40/0xa0 [ 235.262193][ C0] arch_jump_label_transform_apply+0x14/0x20 [ 235.263042][ C0] __jump_label_update+0x30c/0x334 [ 235.263787][ C0] jump_label_update+0x304/0x3b4 [ 235.264454][ C0] static_key_enable_cpuslocked+0x11c/0x220 [ 235.265279][ C0] static_key_enable+0x24/0x38 [ 235.265979][ C0] toggle_allocation_gate+0xc8/0x42c [ 235.266759][ C0] process_one_work+0x7f8/0x13a4 [ 235.267529][ C0] worker_thread+0x8c4/0xfec [ 235.268207][ C0] kthread+0x250/0x2d8 [ 235.268771][ C0] ret_from_fork+0x10/0x20 [ 235.490971][ C0] Rebooting in 86400 seconds..