last executing test programs: 24.330195486s ago: executing program 4 (id=26): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0x40001a2) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) r3 = fcntl$getown(r0, 0x9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r3}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) capset(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') truncate(&(0x7f0000000400)='./file0\x00', 0x10001) 22.898890802s ago: executing program 3 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/rfkill/rfkill1/soft\x00', 0xa01, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000103640)) 21.917036593s ago: executing program 3 (id=32): alarm(0x8000000000000001) r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x2) mknod(0x0, 0x8001420, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000f80)='ext4\x00', &(0x7f0000000fc0)='./file1\x00', 0x1000040, &(0x7f0000001000)={[{@noblock_validity}, {@usrquota}, {@noblock_validity}]}, 0x1, 0x5a3, &(0x7f0000001040)="$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") mount$bind(0x0, &(0x7f0000001600)='.\x00', 0x0, 0x1281828, 0x0) alarm(0x5) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, 0x0) syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./bus\x00', 0x10008, &(0x7f0000000a80)={[{@nombcache}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}]}, 0xfb, 0x4a9, &(0x7f0000000ac0)="$eJzs3M9vVNUeAPDvnenPx4/28Xi8B4JW0Ej80dKCysIFGk1caGKiC1zWtiAyUENrAqTRYgwuDYl74tLEv8CdG6MujIlbTVwaEmK6obAac2fupdPpTOlA25HO55N05pz7Y8753nvOzLn39t4AOtZQ+pJEbI+I3yJioJpdvsBQ9W1xYW7i9sLcRBLl8tt/JZXlbi3MTeSL5uttyzKHCxGFz5I4kawsd+bS5bPjpdLUhSw/Mnvuw5GZS5efO3Nu/PTU6anzY8ePHzs6+uILY8+vS5xpXLf2fTy9f+/r7157c+Lktfd+/Cat1p4D1fm1cdzT7QYBNTDUmyXK5XL9vCfXXNjDYUdNOulqY0VoSTEi0t3VXen/A1GMpZ03EK992tbKARuqXC6Xe5vPni8DW1gS7a4B0B75D316/Jv/bdLQ4x/h5ssRPVl6cWFuYvFu/F1RyKZ3b2D5QxFxcv7O9fQvWj0PAQBwHypjm2cbjf8KsafyXr3WsTO7hjIYEf+OiF0R8Z+I2B0R/42oLPu/iPh/deXywBrLH6rLrxz/FG40rPM6Scd/L9WM/RZr4s/eBotZbkcl/u7k1JnS1JFsmxyO7t40P7pKGd+9+usXzebVjv9O9t65npafjwWzCtzoqjtBNzk+O75eG+HmlYh9XY3iT+5eCUhbwN6I2NfaR+/ME2ee/np/s4WWxT/fKP5VrMN1pvJXEU9V9/981MWfS1a/PjnSF6WpIyN5q1jpp1+uvtWs/AeKfx3cPPhINbG0/+uWqGlopdLUhZnWy7j6++dNj2nuHX/j9t+TvFPpkz+/X512cXx29sJoRE/yRiWfH9NVpo8trXtxfLY/zefLp+3/8KHG/X9Xtk66/9OtlDbiAxHxaEQ8ltX98Yg4GBGHVon/h1ee+GCV+JNIon37/0rEZMPvv7vtfzCpvV5/H4ni2e+/bXbFfG37/1jMV75rqyrff/ew1go+4OYDAACAh0IhIrZHUhiupoe2R6EwPFz9H/7d8a9CaXpm9plT0x+dn6zeIzAY3YX8TNdAzfnQ0WQ++8Rqfiw7V5zPP5qdN/6y2F/JD09MlybbHDt0um3L+3/k/T/1Z7HdtQM2nPu1oHPV9/9Cm+oBbL61/P47FoCtaXn/70tf+ttVF2BzOf6HztWo/39Slzf+h61pZf//o8Ej64CtyPgfOpf+D51L/4eO1Mrt/HGi2ay+iGjlsQD5zQL3/1SBvjXf4d8pifyJFxtZVn9cPtuTTYlCmyItttjYtkQi7TGbW+jSM1QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeZn8HAAD//wIp2cY=") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x7ff}, 0x20000000, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$sndpcmc(&(0x7f0000000680), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r3, 0x4148, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0, 0xb8}}, 0x0) alarm(0x7000000) 20.849938992s ago: executing program 4 (id=35): write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0xa, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000066c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000006700)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x92, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000006e40), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000006e80)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000006ec0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006f00)={0x0, 0x0, &(0x7f0000006f40)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x709d26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006fc0)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000007040)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 19.731523866s ago: executing program 3 (id=38): syz_usb_connect$uac2(0x5, 0xa5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x80010, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d80)={0xffffffffffffffff, 0x0, &(0x7f0000000dc0), &(0x7f0000000e00), 0x800, r3}, 0x38) 19.572425112s ago: executing program 1 (id=39): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x200, 0x0, 0x1}) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}]}, 0x34}}, 0x804) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x14, 0x2, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40408d0}, 0x20000084) bpf$MAP_CREATE(0x0, 0x0, 0x48) 18.733646408s ago: executing program 0 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x14e) dup(0xffffffffffffffff) landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0) socket$kcm(0x2, 0xa, 0x2) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000400)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 18.71180972s ago: executing program 4 (id=41): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@data_ordered}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv0}, {@usrjquota}]}, 0xff, 0x459, &(0x7f0000000280)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000780)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000800)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000880), 0x651, 0x0) recvmmsg(r1, &(0x7f00000008c0), 0x10106, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000980)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x81}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x854}, 0x4) 17.269849257s ago: executing program 1 (id=43): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0xc, 0x1, 0x6, 0x82}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000400), 0x56) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000580)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) 17.160581438s ago: executing program 0 (id=44): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x4000, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000080)={0x8, 0x4e22, @broadcast}, 0x10, &(0x7f00000000c0)=[{0x0, 0x27}, {&(0x7f0000000100)="08003b117c123a3d", 0x8}], 0x2}, 0x20008890) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000180)=""/155, &(0x7f0000000240)=0x9b) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x18, 0x5, &(0x7f00000009c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000000a00)='GPL\x00', 0xf}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000340)={'syzkaller0\x00', @random="002000000102"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="000300007573443b280012800b00010065727370616e000018000280040012000800050004000000080004"], 0x58}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x110}}, 0x0) 14.88878707s ago: executing program 1 (id=46): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000800)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000900), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000940), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x6) setns(0xc9, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) mount(0x0, 0x0, 0x0, 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c80)='./sys\x00', &(0x7f0000000cc0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r3, &(0x7f0000000d40)=""/10, 0x5b) 14.886756301s ago: executing program 4 (id=47): prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000005) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb635773f05ebbeec, 0x13, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000003c0)) socket$inet_mptcp(0x2, 0x1, 0x106) accept(r1, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) 14.848778685s ago: executing program 2 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x9, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) userfaultfd(0x801) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffff8000, '\x00', 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x704}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x62, 0x9, 0x700}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x6}, 0x8) 14.822499877s ago: executing program 0 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) getpid() mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0x6, 0xc) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x5, 0x7ff}}, 0xfe68) 13.593187282s ago: executing program 2 (id=50): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x2, 0x1, 0x3, {0xa, 0x4e23, 0xd, @loopback, 0x2}}}, 0x32) connect$pppl2tp(r4, &(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) 13.590173443s ago: executing program 3 (id=51): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r4, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="a81e08826b964c9bd1180000000001010411000000000600cf93d11e"], 0x18}}, 0x0) 13.588419223s ago: executing program 1 (id=52): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x48011) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_audit(0x10, 0x3, 0x9) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) socket(0xa, 0x3, 0x3a) r4 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f0000000340)={'bridge0\x00', @ifru_ivalue=0xc}) 3.672925475s ago: executing program 3 (id=53): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) futex(0x0, 0x7, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x431, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x7453c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4f, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004805}, 0xc080) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b80)=@newtfilter={0x478, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0xe}, {0x0, 0x1}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x448, 0x2, [@TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xfffff482, 0x9, 0x0, 0x6, 0x3, 0x2, 0x0, 0x3d, 0x80, 0x28, 0x1005, 0x4, 0x4, 0x0, 0x5, 0x6, 0xe, 0x10, 0x8000, 0x8a3c, 0x7, 0x5f, 0xfffffffb, 0x80000000, 0xc, 0x6, 0x6, 0x0, 0x8, 0x4567f271, 0x6, 0x5, 0xd509, 0x6, 0x1000, 0x762b00, 0x6b54e9f7, 0xc1d, 0x6ca, 0xa, 0xf5f8, 0x48f, 0x8000, 0xefbb, 0x10000, 0x1, 0x3ff, 0xc650, 0xd7, 0xfb80, 0x0, 0x1000, 0x10, 0x2cfd, 0x3, 0xa, 0x6, 0x9, 0x74c, 0xffffffff, 0x9, 0x8, 0x9, 0x3, 0x5, 0x7, 0x3, 0x0, 0x8, 0x10000, 0x7b, 0x2a, 0x8000, 0x8, 0x8, 0x1000, 0x5, 0x6, 0x3, 0xb, 0xfffffffa, 0x0, 0x2, 0x8, 0x10, 0x5, 0x7ff, 0x8, 0x86, 0x44, 0x5, 0x3, 0x6, 0x739, 0x7ff, 0xcc3c, 0x0, 0xf68f, 0x7, 0x5, 0x3, 0xfffffffa, 0xc82, 0xac, 0x5, 0xd6, 0x1, 0x8, 0x882, 0x6, 0x80000000, 0x3df, 0x9, 0x3, 0x9, 0x7, 0x9, 0x7, 0x7, 0x7, 0x49, 0x80000001, 0x9, 0x8, 0x10000, 0x7, 0x0, 0x0, 0xda53000, 0xfffffffc, 0xfffff800, 0x80, 0x0, 0x3, 0x9, 0xb, 0x0, 0x0, 0x2, 0xf, 0x5, 0x1013dd8d, 0xa80e, 0x365, 0x1, 0x4, 0x3, 0x3, 0x10000, 0x8, 0xf9d, 0x400, 0x80000001, 0x10, 0x3, 0x7fffffff, 0x7, 0x7, 0x349f, 0xe7, 0xc, 0x8, 0x81, 0x1, 0x9, 0xb, 0x7, 0x1, 0x7fff, 0x7, 0x1, 0x0, 0x1, 0x0, 0x3, 0x7, 0x6, 0x10000, 0x5, 0x3, 0x3ff, 0x2288, 0x6c, 0x101, 0x3, 0x85, 0x6, 0x1, 0x4, 0xc8, 0xff, 0x5, 0x15, 0x6, 0x5, 0x5, 0xe3f, 0x1000, 0x3, 0x3, 0x4, 0x10001, 0xab, 0x0, 0x7, 0x5, 0x1, 0xffff, 0xfffffffe, 0x10001, 0xe68, 0x2, 0x4f, 0x9, 0xe, 0x40, 0x80, 0x10000, 0xb, 0x8000, 0x7, 0x1ff, 0x800, 0x74ad, 0x7, 0x6, 0xe2e, 0x8, 0x101, 0x5, 0x8, 0x10, 0x7f, 0x7, 0x3, 0x5, 0x3, 0x8, 0x401, 0x1, 0x81, 0x0, 0xfff, 0x4, 0x5, 0x0, 0xf01, 0x7, 0x2, 0x3afa, 0x8dfb, 0xb, 0x4, 0x8, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x10000000, 0xa04, 0x4, 0x2, {0xb, 0x0, 0x9, 0x6, 0x2, 0x3}, {0x2, 0x0, 0x1, 0x6, 0x3, 0x7}, 0x8, 0x1, 0x4}}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000500), 0x4) write(r0, &(0x7f0000000100)="060000000300010000", 0x9) 3.670132335s ago: executing program 0 (id=54): sigaltstack(&(0x7f0000000280)={&(0x7f00000002c0)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000001300)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000001340)) timer_settime(0x0, 0x0, &(0x7f0000001380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x200000a, 0x32, 0xffffffffffffffff, 0xf1f6f000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x6) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2adc0, 0x1c1, 0x6}, 0x18) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbfi\xd9\r\x8d\x9f\xbe\x0ei\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x50, 0x46]}, 0x35) syz_open_procfs(0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = epoll_create1(0x0) epoll_pwait(r4, &(0x7f0000000180)=[{}], 0x1, 0xfffffff8, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000200)={0x30000008}) dup3(r2, r3, 0x0) 3.668372516s ago: executing program 2 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) setns(0xc9, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000002c0)={@nfc_llcp={0x27, 0x0, 0x1, 0x1, 0x9, 0x8, "bcfcb22cca4176f812940c68705ba2654eb46d955b84e97139305d358eccd2191ee88cfd109ab05885591e7859499899dcd529718d619218d5952d69f21a30", 0x20}, {&(0x7f0000000380)=""/150, 0x96}, 0x0, 0x5d}, 0xa0) 3.650178008s ago: executing program 4 (id=56): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000940)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000980)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000bc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x3, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x7, 0x6, 0xa, 0xfe, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0x1000, 0xe403, 0x5e4b, 0xfff], [0x7, 0x7, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x84, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x8, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0xc}}]}}]}, 0x48}}, 0x4010) 3.517567361s ago: executing program 1 (id=57): mkdirat(0xffffffffffffff9c, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x40000000000032a, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) keyctl$reject(0x13, 0x0, 0x100, 0xc98, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x150) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000005c0), 0x171}}], 0x400000000000172, 0x4000000) 2.580458847s ago: executing program 2 (id=58): socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 1.952332061s ago: executing program 0 (id=59): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000004c0), 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4000, 0x0, 0x8004, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@private2, {0x327, 0x9, 0x0, 0x100000004, 0x20000000000000, 0x0, 0x1, 0xe10}, {0x0, 0x0, 0x2}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x3502, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) 1.907370506s ago: executing program 1 (id=60): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x224}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000380)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x97, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x9}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='{:\x00\x00\xea\xff', &(0x7f0000000180), 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='\x7f\x00\x8f\xc4bh\x80\x8d\x1bxbt\x9f\xe5\xeb\xf0)\x1cA)\xab\xe7\xf2-t\xad\n\x12c\x06\xa7\x1a\a\x1b:\xecnNC\xbc\x9e9[\x92\xd3\xcf\xder?\fr\xe7\x03\xc5GR0\xde^\xe1\xd9J\x94w|l\xbc%\x99=\x81\x9a\x95?\xab\xa5\x83\x1fu\xc6\x9fl\x17\xf6\xd3\x05\xb9\xf8 \x04\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000280)='.8\x06\x00]\x04\xb5\xc6-\x17\xb6\xcf\xb56t\n\xed9\xbb!K\xeb\xe1\xa1K\xd0%\x1f\xae\x14\xdb\xe1f\xe3\xeb\xd8\x1b.\xb4Pg\xbf\t\xdf\xaaDd\xd9*\x15\xc9\xfa\x80\xf3fh\x8c-~\xdd\x1e\xa5J\xc9N8\xc6\xcf\xae\xa5f\xa7\xf8G\xb00xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x10042) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r9, 0x4) 1.837786563s ago: executing program 4 (id=62): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x8, 0x1, 0x3c, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r3, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) 1.711884556s ago: executing program 2 (id=63): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfffffee2) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000480)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 105.71739ms ago: executing program 0 (id=64): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x675f, 0x9, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x7, 0xb, 0xdc}, 0x2, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000400), 0x56) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 0s ago: executing program 3 (id=65): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}]}, 0x54}, 0x1, 0xba01}, 0x30008804) socket(0x10, 0x803, 0x0) pipe(0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r3) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, 0x0, 0x4000000) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x11, 0x2, 0x10001) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts. [ 62.760325][ T4176] cgroup: Unknown subsys name 'net' [ 62.898103][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.372993][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.003732][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.020797][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.033007][ T4189] rdma_rxe: rxe_register_device failed with error -23 [ 66.033924][ T4201] rdma_rxe: rxe_register_device failed with error -23 [ 66.041231][ T4189] rdma_rxe: failed to add rxe_eth0 [ 66.049280][ T4195] rdma_rxe: rxe_register_device failed with error -23 [ 66.063975][ T4195] rdma_rxe: failed to add rxe_eth0 [ 66.078150][ T4196] rdma_rxe: rxe_register_device failed with error -23 [ 66.078489][ T4201] rdma_rxe: failed to add rxe_eth0 [ 66.101423][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.115120][ T4196] rdma_rxe: failed to add rxe_eth0 [ 66.278774][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.278208][ T4190] infiniband rxe0: set active [ 66.290374][ T4190] infiniband rxe0: added rxe_eth0 [ 66.298865][ T3854] infiniband rxe0: set active [ 66.328893][ T1109] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.388622][ T4190] RDS/IB: rxe0: added [ 66.393591][ T4190] smc: adding ib device rxe0 with port count 1 [ 66.399908][ T4190] smc: ib device rxe0 port 1 has pnetid [ 66.422126][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.455976][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.515723][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 66.553922][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 66.588456][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 66.637563][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 66.769956][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.910430][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.928374][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.937258][ T4189] device bridge_slave_0 entered promiscuous mode [ 66.957365][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.978913][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.990353][ T4189] device bridge_slave_1 entered promiscuous mode [ 67.001741][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.008842][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.021789][ T4195] device bridge_slave_0 entered promiscuous mode [ 67.053717][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.086666][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.101560][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.109780][ T4195] device bridge_slave_1 entered promiscuous mode [ 67.132380][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.139500][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.162589][ T4201] device bridge_slave_0 entered promiscuous mode [ 67.170488][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.185391][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.216036][ T4196] device bridge_slave_0 entered promiscuous mode [ 67.243872][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.250993][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.259239][ T4201] device bridge_slave_1 entered promiscuous mode [ 67.275488][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.287457][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.295659][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.304214][ T4196] device bridge_slave_1 entered promiscuous mode [ 67.313820][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.336311][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.359798][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.384310][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.396255][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.416551][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.462316][ T4189] team0: Port device team_slave_0 added [ 67.480033][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.493029][ T4195] team0: Port device team_slave_0 added [ 67.502879][ T4195] team0: Port device team_slave_1 added [ 67.536093][ T4189] team0: Port device team_slave_1 added [ 67.544811][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.556038][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.563479][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.589799][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.616432][ T4201] team0: Port device team_slave_0 added [ 67.639609][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.647165][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.676165][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.713997][ T4201] team0: Port device team_slave_1 added [ 67.723516][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.730520][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.765600][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.785737][ T4196] team0: Port device team_slave_0 added [ 67.814653][ T4190] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.822197][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.829405][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.891486][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.913799][ T4196] team0: Port device team_slave_1 added [ 67.937182][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.951367][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.992342][ T1109] Bluetooth: hci3: command 0x0409 tx timeout [ 67.999082][ T1109] Bluetooth: hci1: command 0x0409 tx timeout [ 67.999268][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 68.021470][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.021666][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 68.047198][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 68.092511][ T4195] device hsr_slave_0 entered promiscuous mode [ 68.099877][ T4195] device hsr_slave_1 entered promiscuous mode [ 68.140822][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.150182][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.181772][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.238452][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.249348][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.280311][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.295999][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.303318][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.329708][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.357252][ T4189] device hsr_slave_0 entered promiscuous mode [ 68.364494][ T4189] device hsr_slave_1 entered promiscuous mode [ 68.371899][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.379752][ T4189] Cannot create hsr debugfs directory [ 68.443422][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.460196][ T4201] device hsr_slave_0 entered promiscuous mode [ 68.467305][ T4201] device hsr_slave_1 entered promiscuous mode [ 68.477042][ T4201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.485995][ T4201] Cannot create hsr debugfs directory [ 68.588387][ T4196] device hsr_slave_0 entered promiscuous mode [ 68.596736][ T4196] device hsr_slave_1 entered promiscuous mode [ 68.607625][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.616566][ T4196] Cannot create hsr debugfs directory [ 68.918339][ T3854] infiniband rxe0: set active [ 68.923813][ T1337] rxe_eth0 speed is unknown, defaulting to 1000 [ 68.949353][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 68.986641][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.008014][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.061161][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.075432][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.127907][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.145754][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.153836][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.162607][ T4190] device bridge_slave_0 entered promiscuous mode [ 69.171290][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.183691][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.190768][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.199106][ T4190] device bridge_slave_1 entered promiscuous mode [ 69.225545][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.244196][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.260986][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.279111][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.303753][ T4190] team0: Port device team_slave_0 added [ 69.317410][ T4190] team0: Port device team_slave_1 added [ 69.338081][ T4201] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.370394][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.378002][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.404191][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.416563][ T4201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.433593][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.440576][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.467067][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.491159][ T4201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.504658][ T4201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.535371][ T4190] device hsr_slave_0 entered promiscuous mode [ 69.543436][ T4190] device hsr_slave_1 entered promiscuous mode [ 69.550663][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.558698][ T4190] Cannot create hsr debugfs directory [ 69.584260][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.614700][ T4196] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.626695][ T4196] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.636683][ T4196] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.649329][ T4196] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.694881][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.706531][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.716946][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.760009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.769849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.780690][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.788053][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.797389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.808108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.817002][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.824126][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.832188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.863114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.872923][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.909136][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.933971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.944664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.954266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.965042][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.974292][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.992294][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.019305][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.029004][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.059342][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.070294][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.081512][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 70.091832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.100645][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 70.108390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.117828][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 70.124385][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 70.126089][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.130651][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 70.137504][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.154728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.163313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.172594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.181120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.189812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.198945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.213049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.222724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.231183][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.238311][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.246657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.283071][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.307137][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.321174][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.331611][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.341230][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.350913][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.360551][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.375848][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.386496][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.400574][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.428191][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.442160][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.450084][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.459408][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.467809][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.476070][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.485087][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.497463][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.510483][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.523750][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.536978][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.549605][ T3081] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.556788][ T3081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.571527][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.580279][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.590818][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.601310][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.623610][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.643137][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.657969][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.665110][ T3081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.674543][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.683832][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.693263][ T3081] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.700405][ T3081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.714786][ T3081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.752854][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.773804][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.789444][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.799761][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.810217][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.820235][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.837718][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.848001][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.860722][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.869559][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.876695][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.890559][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.908003][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.917579][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.927168][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.936097][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.946941][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.975650][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.986115][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.995435][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.005631][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.017287][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.033840][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.050740][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.078481][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.102432][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.110504][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.133520][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.141062][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.164113][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.175490][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.188446][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.219222][ T4201] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.250647][ T4201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.271030][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.283635][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.290170][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.306428][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.315652][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.324521][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.333088][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.348910][ T4195] device veth0_vlan entered promiscuous mode [ 71.378857][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.405496][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.415157][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.432126][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.450538][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.489355][ T4195] device veth1_vlan entered promiscuous mode [ 71.501693][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.520001][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.531705][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.571826][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.580029][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.596814][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.630807][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.658264][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.668349][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.691227][ T4195] device veth0_macvtap entered promiscuous mode [ 71.705661][ T4196] device veth0_vlan entered promiscuous mode [ 71.721222][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.745066][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.754936][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.763589][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.774034][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.785144][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.793343][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.801124][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.810083][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.819893][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.835822][ T4196] device veth1_vlan entered promiscuous mode [ 71.860304][ T4189] device veth0_vlan entered promiscuous mode [ 71.876814][ T4195] device veth1_macvtap entered promiscuous mode [ 71.894861][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.904796][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.914760][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.924225][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.933046][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.940119][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.948612][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.957240][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.968456][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.977198][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.985951][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.993087][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.001067][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.009528][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.017163][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.026926][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.035319][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.043323][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.057605][ T4189] device veth1_vlan entered promiscuous mode [ 72.098033][ T4196] device veth0_macvtap entered promiscuous mode [ 72.108623][ T4196] device veth1_macvtap entered promiscuous mode [ 72.118104][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.127283][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.136739][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.146233][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.155054][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 72.158244][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.162441][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 72.173209][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.185975][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 72.194175][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 72.210853][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.220505][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.229709][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.238002][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 72.263719][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.271871][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.283385][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.296094][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.309195][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.319855][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.332613][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.341099][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.350176][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.359611][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.368342][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.377537][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.386750][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.404374][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.416258][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.428300][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.445371][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.454628][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.465393][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.474378][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.485321][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.494740][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.503999][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.513166][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.523275][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.533538][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.542270][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.553974][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.562969][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.582663][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.591099][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.600197][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.609460][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.621261][ T4196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.631164][ T4196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.641724][ T4196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.650462][ T4196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.664438][ T4189] device veth0_macvtap entered promiscuous mode [ 72.673510][ T4201] device veth0_vlan entered promiscuous mode [ 72.683252][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.692061][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.700478][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.710272][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.733813][ T4189] device veth1_macvtap entered promiscuous mode [ 72.767689][ T4201] device veth1_vlan entered promiscuous mode [ 72.847017][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.863732][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.889109][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.899834][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.918228][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.943267][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.957663][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.973537][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.986446][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.997093][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.007591][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.019578][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.050454][ T4201] device veth0_macvtap entered promiscuous mode [ 73.073681][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.083568][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.100980][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.112402][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.126184][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.143221][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.154685][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.163663][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.188611][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.205697][ T4201] device veth1_macvtap entered promiscuous mode [ 73.237989][ T440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.248029][ T440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.260209][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.271873][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.279732][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.287988][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.328112][ T1284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.340136][ T1284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.372667][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.386037][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.401214][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.412218][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.424131][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.436818][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.446867][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.457596][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.468955][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.479165][ T1284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.488414][ T1284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.506116][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.513291][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.526054][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.539086][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.548784][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.557944][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.568601][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.579709][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.590087][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.605624][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.620132][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.631142][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.643640][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.685006][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.695517][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.705699][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.717212][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.731185][ T4201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.748402][ T4201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.758678][ T4201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.775160][ T4201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.833941][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.845103][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.858136][ T4190] device veth0_vlan entered promiscuous mode [ 73.886615][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.903052][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.922308][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.930187][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.986286][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.007837][ T4190] device veth1_vlan entered promiscuous mode [ 74.067287][ T4328] "syz.0.1" (4328) uses obsolete ecb(arc4) skcipher [ 74.567390][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.639516][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.776771][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.856369][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 74.863496][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 74.869573][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 74.875844][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 74.882022][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 74.935291][ T4190] device veth0_macvtap entered promiscuous mode [ 74.945969][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.962897][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.972988][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.008965][ T1284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.024163][ T1284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.095768][ T4336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 75.126238][ T1284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.416917][ T4338] 9pnet: Insufficient options for proto=fd [ 75.641341][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.771335][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 76.801333][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 76.811342][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 76.891333][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 76.933833][ T4190] device veth1_macvtap entered promiscuous mode [ 76.971344][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 77.242073][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.249961][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.288761][ T4342] loop4: detected capacity change from 0 to 512 [ 77.297364][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.257974][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.307482][ T4342] EXT4-fs (loop4): quotafile must be on filesystem root [ 78.540963][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.740788][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.841261][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.852811][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.866075][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.866622][ T4357] Zero length message leads to an empty skb [ 78.884271][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.895510][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.910126][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.921463][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.943416][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.963994][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.999595][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.029733][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.182603][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.192648][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.203205][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.226182][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.934060][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.967465][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.988119][ T4362] loop3: detected capacity change from 0 to 512 [ 80.067678][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.090467][ T4362] EXT4-fs error (device loop3): __ext4_iget:4919: inode #2: block 131072: comm syz.3.12: invalid block [ 80.108037][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.131202][ T4362] EXT4-fs (loop3): get root inode failed [ 80.147281][ T4362] EXT4-fs (loop3): mount failed [ 80.804506][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.829421][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.867748][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.890584][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.912065][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.318860][ T4384] loop2: detected capacity change from 0 to 128 [ 81.745929][ T4384] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 82.805779][ T4384] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 82.836408][ T4384] FAT-fs (loop2): Filesystem has been set read-only [ 82.893130][ T4384] fuse: Bad value for 'fd' [ 82.922842][ T4397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.951830][ T4397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.970759][ T4384] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 82.977974][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.037235][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.089496][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.108081][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.462165][ T4412] netlink: 'syz.2.20': attribute type 12 has an invalid length. [ 83.786814][ T4420] netlink: 104 bytes leftover after parsing attributes in process `syz.4.21'. [ 83.965226][ T4426] loop4: detected capacity change from 0 to 512 [ 84.020231][ T4429] loop1: detected capacity change from 0 to 256 [ 84.088700][ T4426] EXT4-fs (loop4): Ignoring removed nobh option [ 84.167200][ T4429] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 84.205546][ T4426] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.23: invalid indirect mapped block 256 (level 2) [ 84.331939][ T4426] EXT4-fs (loop4): 2 truncates cleaned up [ 84.348061][ T4426] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 85.529998][ T4425] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.23: bg 0: block 5: invalid block bitmap [ 85.560010][ T4425] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 85.573245][ T4425] EXT4-fs (loop4): This should not happen!! Data will be lost [ 85.573245][ T4425] [ 85.582990][ T4425] EXT4-fs (loop4): Total free blocks count 0 [ 85.589002][ T4425] EXT4-fs (loop4): Free/Dirty block details [ 85.595428][ T4425] EXT4-fs (loop4): free_blocks=0 [ 85.600461][ T4425] EXT4-fs (loop4): dirty_blocks=33 [ 85.605692][ T4425] EXT4-fs (loop4): Block reservation details [ 85.611764][ T4425] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 85.772088][ T4422] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.666202][ T13] cfg80211: failed to load regulatory.db [ 88.430351][ T4471] loop3: detected capacity change from 0 to 1024 [ 88.992127][ T4471] ======================================================= [ 88.992127][ T4471] WARNING: The mand mount option has been deprecated and [ 88.992127][ T4471] and is ignored by this kernel. Remove the mand [ 88.992127][ T4471] option from the mount to silence this warning. [ 88.992127][ T4471] ======================================================= [ 89.259107][ T4481] syz.4.35 uses obsolete (PF_INET,SOCK_PACKET) [ 89.303737][ T4479] netlink: 2 bytes leftover after parsing attributes in process `syz.2.34'. [ 89.323836][ T4471] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,usrquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 89.435507][ T4471] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.741339][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 89.831339][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 89.901351][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 89.941354][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 91.404899][ T4497] loop4: detected capacity change from 0 to 512 [ 92.791890][ T4497] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 92.806293][ T4502] netlink: 'syz.0.40': attribute type 2 has an invalid length. [ 92.826973][ T4497] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 92.885023][ T4512] device syzkaller0 entered promiscuous mode [ 92.906540][ T4512] 0: reclassify loop, rule prio 0, protocol 800 [ 93.653475][ T4517] IPVS: length: 155 != 8 [ 94.921317][ C0] sched: RT throttling activated [ 96.975776][ T4549] bridge0: port 3(ip6gretap0) entered blocking state [ 96.982805][ T4549] bridge0: port 3(ip6gretap0) entered disabled state [ 106.400642][ T4549] device ip6gretap0 entered promiscuous mode [ 106.408916][ T4549] bridge0: port 3(ip6gretap0) entered blocking state [ 106.416022][ T4549] bridge0: port 3(ip6gretap0) entered forwarding state [ 106.644028][ T4571] netlink: 84 bytes leftover after parsing attributes in process `syz.4.56'. [ 108.244763][ T4565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.53'. [ 110.019448][ T4605] device syzkaller0 entered promiscuous mode [ 110.092627][ T4605] [ 110.095045][ T4605] ============================================ [ 110.101210][ T4605] WARNING: possible recursive locking detected [ 110.107381][ T4605] syzkaller #0 Not tainted [ 110.111818][ T4605] -------------------------------------------- [ 110.117986][ T4605] syz.0.64/4605 is trying to acquire lock: [ 110.123808][ T4605] ffff88801fcd2108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 110.133088][ T4605] [ 110.133088][ T4605] but task is already holding lock: [ 110.140468][ T4605] ffff88807b53d108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 110.149658][ T4605] [ 110.149658][ T4605] other info that might help us debug this: [ 110.157732][ T4605] Possible unsafe locking scenario: [ 110.157732][ T4605] [ 110.165199][ T4605] CPU0 [ 110.168502][ T4605] ---- [ 110.171799][ T4605] lock(&sch->q.lock); [ 110.175978][ T4605] lock(&sch->q.lock); [ 110.180159][ T4605] [ 110.180159][ T4605] *** DEADLOCK *** [ 110.180159][ T4605] [ 110.188321][ T4605] May be due to missing lock nesting notation [ 110.188321][ T4605] [ 110.196653][ T4605] 3 locks held by syz.0.64/4605: [ 110.201607][ T4605] #0: ffffffff8d11f000 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 110.211246][ T4605] #1: ffff88807b53d108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 110.220857][ T4605] #2: ffffffff8d11f000 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 110.230463][ T4605] [ 110.230463][ T4605] stack backtrace: [ 110.236392][ T4605] CPU: 1 PID: 4605 Comm: syz.0.64 Not tainted syzkaller #0 [ 110.243612][ T4605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 110.253697][ T4605] Call Trace: [ 110.256997][ T4605] [ 110.259944][ T4605] dump_stack_lvl+0x188/0x250 [ 110.264654][ T4605] ? show_regs_print_info+0x20/0x20 [ 110.269905][ T4605] ? print_deadlock_bug+0x435/0x5d0 [ 110.275133][ T4605] ? _find_first_zero_bit+0xd1/0xf0 [ 110.280362][ T4605] __lock_acquire+0x67eb/0x7d40 [ 110.285253][ T4605] ? verify_lock_unused+0x140/0x140 [ 110.290484][ T4605] ? lockdep_unlock+0x143/0x2e0 [ 110.295363][ T4605] ? lockdep_lock+0x1f0/0x1f0 [ 110.300076][ T4605] ? verify_lock_unused+0x140/0x140 [ 110.305296][ T4605] ? add_lock_to_list+0x18d/0x280 [ 110.310349][ T4605] ? __siphash_unaligned+0x286/0x3d0 [ 110.315667][ T4605] ? __skb_get_hash_net+0x2e3/0x4d0 [ 110.320895][ T4605] ? __skb_get_hash_symmetric+0x3b0/0x3b0 [ 110.326774][ T4605] lock_acquire+0x19f/0x400 [ 110.331310][ T4605] ? __dev_queue_xmit+0xa2b/0x2e50 [ 110.336465][ T4605] ? read_lock_is_recursive+0x10/0x10 [ 110.341874][ T4605] ? rcu_read_lock_bh_held+0x76/0xf0 [ 110.347191][ T4605] ? rcu_read_lock_held+0x40/0x40 [ 110.352249][ T4605] _raw_spin_lock+0x2a/0x40 [ 110.356787][ T4605] ? __dev_queue_xmit+0xa2b/0x2e50 [ 110.361935][ T4605] __dev_queue_xmit+0xa2b/0x2e50 [ 110.366930][ T4605] ? dev_queue_xmit+0x20/0x20 [ 110.371630][ T4605] ? __kernel_text_address+0x9a/0x100 [ 110.377043][ T4605] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 110.382969][ T4605] ? lockdep_hardirqs_on+0x94/0x140 [ 110.388197][ T4605] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 110.394115][ T4605] ? _raw_spin_unlock+0x40/0x40 [ 110.398992][ T4605] ? stack_trace_save+0xa6/0xf0 [ 110.403917][ T4605] ? netdev_core_pick_tx+0x300/0x300 [ 110.409241][ T4605] sch_frag_xmit_hook+0x2d8/0x1be0 [ 110.414409][ T4605] ? __kasan_slab_alloc+0xa9/0xc0 [ 110.419471][ T4605] ? __kasan_slab_alloc+0x92/0xc0 [ 110.424517][ T4605] ? slab_post_alloc_hook+0x4c/0x380 [ 110.429831][ T4605] ? kmem_cache_alloc+0x15d/0x280 [ 110.434871][ T4605] ? skb_clone+0x1bd/0x350 [ 110.439328][ T4605] ? tcf_mirred_act+0x5b0/0x1640 [ 110.444294][ T4605] ? tcf_action_exec+0x177/0x570 [ 110.449260][ T4605] ? basic_classify+0x1ae/0x2c0 [ 110.454227][ T4605] ? tcf_classify+0x218/0xad0 [ 110.458926][ T4605] ? hfsc_enqueue+0x31d/0x10a0 [ 110.463712][ T4605] ? dev_qdisc_enqueue+0x48/0x210 [ 110.468766][ T4605] ? __dev_queue_xmit+0xbde/0x2e50 [ 110.473930][ T4605] ? packet_sendmsg+0x3bbd/0x4e70 [ 110.478983][ T4605] ? mq_dump_class_stats+0x430/0x430 [ 110.484291][ T4605] ? do_syscall_64+0x4c/0xa0 [ 110.488954][ T4605] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.495064][ T4605] ? __copy_skb_header+0x3ba/0x4f0 [ 110.500225][ T4605] ? memcpy+0x3c/0x60 [ 110.504258][ T4605] ? __copy_skb_header+0x3ba/0x4f0 [ 110.509405][ T4605] ? __skb_clone+0x446/0x6c0 [ 110.514055][ T4605] ? skb_clone+0x1f1/0x350 [ 110.518498][ T4605] ? tcf_mirred_act+0x59a/0x1640 [ 110.523470][ T4605] tcf_mirred_act+0xc5a/0x1640 [ 110.528267][ T4605] tcf_action_exec+0x177/0x570 [ 110.533064][ T4605] basic_classify+0x1ae/0x2c0 [ 110.537772][ T4605] tcf_classify+0x218/0xad0 [ 110.542406][ T4605] hfsc_enqueue+0x31d/0x10a0 [ 110.547037][ T4605] ? rcu_lock_release+0x20/0x20 [ 110.551925][ T4605] ? do_raw_spin_lock+0x128/0x2f0 [ 110.556983][ T4605] ? __rwlock_init+0x140/0x140 [ 110.561770][ T4605] ? __alloc_skb+0x473/0x750 [ 110.566391][ T4605] dev_qdisc_enqueue+0x48/0x210 [ 110.571278][ T4605] __dev_queue_xmit+0xbde/0x2e50 [ 110.576254][ T4605] ? dev_queue_xmit+0x20/0x20 [ 110.580984][ T4605] ? virtio_net_hdr_to_skb+0xca1/0x1260 [ 110.586572][ T4605] ? packet_cached_dev_get+0x270/0x270 [ 110.592065][ T4605] ? skb_put+0x10e/0x200 [ 110.596367][ T4605] packet_sendmsg+0x3bbd/0x4e70 [ 110.601247][ T4605] ? aa_sk_perm+0x910/0x910 [ 110.605815][ T4605] ? aa_sk_perm+0x7dc/0x910 [ 110.610457][ T4605] ? packet_getsockopt+0x9a0/0x9a0 [ 110.615604][ T4605] ? unpack_trans_table+0x39e/0x1690 [ 110.620922][ T4605] ? apparmor_socket_sendmsg+0x88/0x230 [ 110.626507][ T4605] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 110.631819][ T4605] ? security_socket_sendmsg+0x7c/0xa0 [ 110.637306][ T4605] ? packet_getsockopt+0x9a0/0x9a0 [ 110.642455][ T4605] ____sys_sendmsg+0x5be/0x8f0 [ 110.647253][ T4605] ? __sys_sendmsg_sock+0x30/0x30 [ 110.652305][ T4605] ? import_iovec+0x6f/0xa0 [ 110.656842][ T4605] ___sys_sendmsg+0x236/0x2e0 [ 110.661556][ T4605] ? __sys_sendmsg+0x290/0x290 [ 110.666387][ T4605] __se_sys_sendmsg+0x1b7/0x2a0 [ 110.671269][ T4605] ? __x64_sys_sendmsg+0x80/0x80 [ 110.676233][ T4605] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.682268][ T4605] ? lockdep_hardirqs_on+0x94/0x140 [ 110.687500][ T4605] do_syscall_64+0x4c/0xa0 [ 110.691953][ T4605] ? clear_bhb_loop+0x30/0x80 [ 110.696679][ T4605] ? clear_bhb_loop+0x30/0x80 [ 110.701409][ T4605] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.707364][ T4605] RIP: 0033:0x7f7d23e9ab19 [ 110.711804][ T4605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.731477][ T4605] RSP: 002b:00007f7d220f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.739924][ T4605] RAX: ffffffffffffffda RBX: 00007f7d24120fa0 RCX: 00007f7d23e9ab19 [ 110.747922][ T4605] RDX: 0000000000004005 RSI: 0000200000000440 RDI: 0000000000000006 [ 110.756014][ T4605] RBP: 00007f7d23f32b70 R08: 0000000000000000 R09: 0000000000000000 [ 110.764007][ T4605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.772004][ T4605] R13: 00007f7d24121038 R14: 00007f7d24120fa0 R15: 00007ffd39d3d268 [ 110.780014][ T4605] [ 110.789879][ T4287] Bluetooth: hci0: command 0x0c3a tx timeout [ 110.844671][ T4607] device vlan2 entered promiscuous mode [ 110.865825][ T4607] device bond0 entered promiscuous mode [ 110.884533][ T4607] device bond_slave_0 entered promiscuous mode [ 110.900256][ T4607] device bond_slave_1 entered promiscuous mode [ 112.871667][ T4287] Bluetooth: hci0: command 0x0c1a tx timeout