last executing test programs: 31.743879783s ago: executing program 2 (id=231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 31.588480738s ago: executing program 2 (id=233): unshare(0x24060400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 31.127312583s ago: executing program 2 (id=235): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") ioctl$SG_BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000002c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 29.52388179s ago: executing program 2 (id=238): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000002c0), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000680), 0x0) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=r1], 0x80}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x2, 0xa, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x33, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x9}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xd2}]}}]}, 0x44}}, 0x20000005) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, &(0x7f0000000100)) close(r6) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000200)={r2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=ANY=[@ANYBLOB="48000000100003050000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c280000500030004", @ANYRES8=r5, @ANYBLOB="80d173585708e17740f167dab1e349a996f59768ee2ad4cec1b4e1fd957e210562fbe08404d29d477d9764a42e11fc80d372dc9aedc852d8978c6706f0b95d1cb2bd89f64c0cd39dee26073892fabba945daebebc53258ce2ddf8b6de49e759dd4f7dafc75c42a9ece34f2d510ca86979242d05ceab3cfaadc3fbb2936d627d29967d780", @ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x8011}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000001080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$llc_int(r7, 0x10c, 0x7, &(0x7f0000000240), &(0x7f0000000080)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e80)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x22, 0x0, "70a59b8ef73b52114bf0854b6d184de8fb2add2d2bb9149a8c9b8ad1ff7568565a98f80146847b0c6c4698efb8d42bed462e33eef5219090f01c40a3103cf5a30f2c0cdc339b7665ca4fe3c1d75e3fda"}, 0xd8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000640)={0x6, 'pimreg1\x00', {}, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000002000010000000000fdffadfd8effff0a101400000000080e00010014000200fc020000000074cf0000000000000001080017004e224e22140001002001000000000000000000000000000160d5f6de2bfe26bca5e103da6b56f89f3195376956f30a1acf7ffab4dc8635b322ce7c44f78928cf88527fe7366befc47231707dfef022a7899a770a34adb282c51869125a9b739a273831ebd6e66537c135ddb820c22b8f3895050ac88e5ee74458e2a64328d6ffd0a365a4210d640bd56609000b74d0ee13973619a6a2d966b71bff7018be6620aed0fba87fe022d2c72a2dc8be89103dca6f9db738ed5f10432ce146c1"], 0x4c}}, 0x4) 29.204933101s ago: executing program 2 (id=239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x20004000) 27.583852989s ago: executing program 2 (id=243): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000007000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x7, 0x27, &(0x7f0000000540)=""/39, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x7, 0x4, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000600)=[r0, r2], &(0x7f0000000640)=[{0x1, 0x4, 0x1, 0x3}], 0x10, 0x329e}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r0, &(0x7f0000000bc0)="53782e4dac368243e19da1828d08bedafa41f15ed1d27ad77689835e32b06eb94d6d332f0c417499811245eeae338477c0933d476eed7b963f4afab72f7364a15426f2abde9830e7623ce97cdbdd63ebf6a19d9d5aa79670e3e6727fe7b86a153c73d69af59285", &(0x7f0000000ec0)=""/217}, 0x20) r3 = socket(0x1d, 0x2, 0x6) accept$ax25(r3, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000740), 0x103200, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000140)={r6, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000002c0)={r6, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000440)={r6, 0x1, 0x6, @local}, 0x10) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000780)=0x1) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xa, 0x0, &(0x7f0000000000)="259a53f271a76d267300", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x84) 25.135256028s ago: executing program 3 (id=251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 24.878541623s ago: executing program 3 (id=252): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a00faff6c617463680000002c00028014000300f4f03b0200000000010007116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000010000000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='sched_process_wait\x00', r1, 0x0, 0x81200}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000700)={'bridge0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e0000000000000005000000ef00000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x50) writev(r7, &(0x7f0000000900)=[{&(0x7f0000000540)='x', 0x1}], 0x1) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="10010000", @ANYRES16=r8, @ANYBLOB="000229bd7000fedbdf25170000004c00068008000100336f00003d00040067636d286165732900000000000000000000000000000000000000000000000015000000f4dfa95cba3cdeae921d58d1c5126e0f24c1e66ca900000078000480340007800800030001008e440201ba0d99fb000008000200310100000800020009000000080001001a000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r10, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, r13, 0x0, 0xf3a, 0x0) write$cgroup_pid(r13, &(0x7f0000000000), 0xffffff98) splice(r9, 0x0, r13, 0x0, 0x80, 0xe) write(r11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x2f, &(0x7f0000000100)=""/47, 0x40f00, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x1], &(0x7f0000000240)=[{0x2, 0x4, 0x9, 0x7}, {0x1, 0x2, 0x5, 0x7}, {0x5, 0x2, 0x2, 0x3}, {0x3, 0x1, 0x7, 0x8}, {0x3, 0x3, 0x5, 0x2}, {0x5, 0x1, 0x2, 0x7}, {0x5, 0x3, 0xb, 0x9}], 0x10, 0x7fff}, 0x94) 22.232835521s ago: executing program 3 (id=256): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x600) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) shutdown(r0, 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x102) 20.873576274s ago: executing program 3 (id=262): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xf8, 0x0, 0x1, 0x0, 0x4020000, 0x0, 0xff, 0x0, 0xfffffeff, [0x0, 0xd257]}}) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r0, 0x180000000) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) 20.561429314s ago: executing program 3 (id=265): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = accept(r0, &(0x7f0000000080), &(0x7f0000000000)=0x80) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24000000) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xa) sendmmsg(0xffffffffffffffff, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)="7c11de5ff5b2917e7f62a3b7d8d7b17e8741b1fd9b24ac6c5493c39f5c427b52d505a166d9983b27efad63efc03ba89d0bb458ddbe5b4ee802b3dbef6a24939f7a66b7cefc290cee6b30d6950afcee89bfbdbe27b43928bb36eeb7c89eb720391a38f9554e254d33f2b77ee7189c9c0cc3ea4acda01abdd2dff02a49515856a13b5b4f083661bcda50d8069720dc2f737edba98b9167f683ef3ba3a7ec60e8a26079b945b73e149491a0b3ad430218564361c1d3253e34b6db88d6d76504c0d820f6332d40aab75b4cf6", 0xca}], 0x1, &(0x7f0000002cc0)=[{0x10, 0x104, 0x741}, {0xd0, 0x101, 0x80000001, "61f10d4ff616c3bd7845ae94164fa1519a04e431209cecec7c14be81a03fecca6a15802b0262ee7d493c8aed9c3d529b0dba01ac2acb95469f9f3ee867d9d5abc9da0b33175a0e0bf97f72052a2860c70b673289a72a3153126dd9ef7a67e337ce012710780ce7ea39d74224097e1e128bdfe3e6a76d6a43b6b00070255eb98c65597ab1710b84006ada5dbb04b69106f90e0e398dd9f79e011665ed7d0c75308e8f1aa5cc4067a2dedc5a6b082d8832a05b90694dc57cf5ceaf"}], 0xe0}}, {{&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x7, @local, 0x2f620dcf, 0x1}, 0x80, &(0x7f0000000740)=[{&(0x7f0000001a40)="4623daa44e562a8b5d894226f977055e915fa996bbbd4487a7aa4e3718ce6a8f9fdb0ea8b47fcc", 0x27}, {0x0}, {&(0x7f00000005c0)="c3ba5e749c1977a958cd2270220aa2ea1bac8bbb65e59542259291352aaf81eb8764d238f038787f5374e3337e38cb12b853b26627d1b837864d4a8dffa5f0d88e924b63d5d76f37df34761fec628b39495bf28451f3c9b0f5ba3212fe28a3bca611f1de9f", 0x65}, {&(0x7f0000000540)="2ae76efebd96e075a8e0f54f45d40e5e495943", 0x13}, {&(0x7f0000001bc0)="828c05b9e26abedc4d41064e3d9a4d28a00c4ecb26f7d3f6d121b123b3dc1f46d7beed5f0c029ac04ccda6379727d8f6e8f1de48ecab1513afac8940dc4375eb3eaf47f7b9cfbd1b33ac6f9deb19bd28fe63b504dfe3bdd11fb25a4e7d91a50ce6e269684e3c6750aa4ce980782d4f16755ecde4cf7cd1995821cfff7ce98dc16a214bbd1e33d534ede074ccbf5a237154ab4b66c90e9a140f4e868725063ebb53e0094eff0a1b8bd88b1719d086572910ee34e116f50c5056c43b32bbdba78e91416dca745038730647e87bd2377ba8c50b7dbcb0d365fa501c94eb7d27f28f49306d13077eddf60579", 0xea}, {0x0}], 0x6, &(0x7f0000003080)}}], 0x2, 0x8d0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') vmsplice(r4, &(0x7f00000004c0)=[{&(0x7f00000000c0)="382ad5b60049b8ee240469e24e27a31a8e0aaba58adce451e394c1fa312d6346505c3ee030c77905ab150a4dc6d505b598e7259be67b5e20447d8def8b6f4b530c4e7980c99e9952c334fef3b3a63eee1d28f67d960b82da654f62bbf137d91efd3b5cb33753c9bbd883060d1c925a4bcc86d2a03820acd9aeea80aeb119387eeea761b7bffc3d9a0a4c865c1a687e13dc9b4ccf1846bc731db2fe7a2a403ce9acf34137d8864ae42316ce784a7752b4a7ac536078d28a84c38bd35999f5523e8bd5da4958eac384bdafbd08a0beddcb746d1b8fe235e4d3b6439a148c7e4e96f3d229b8bc3248a8018be33c0afd", 0xee}, {&(0x7f00000001c0)}, {&(0x7f0000000640)="f14f7e384d3888e86ac40d6dd3f1d4d703f0455b99031471b3a27cbe5e4ee694059021f98dcb3fa91cb75cfe5b53998d2b808b02a7c1b6460e361668c2af01c4320ef8f29c744cba51c9c94dc2dd7adb81648715e1d9e6eb5f6b6cc9eefca966d1c4942a392c0108e369886629687074dd770f8e8c62455d9b4d643a4991aea793700018770bb75872dc3001618a1658b694535b7bc211711897db0ea2e5cc19db1be42aa13ea63064f71d611cacfac3cb31833146504c5b7c9d74bae7d521561690de5645c814dfcb8d0fdb156598160c769204e28c9823a49a2b351885ccc2b7e50832b8d6fec111496519f14c9a58", 0xf0}, {&(0x7f0000000280)="ea01ac3d09c2283a8244055677d957762479b4a7bc735f4f5a4351c8baaabdbb6bbda7a018145e9bc9b96404fba6c9f939a3dad90d8977de4aee51f8148a82bd4f457fac880c749d3849ac00c7934400afb100d3537bf944a067b9957c8f10ca4497123a121dffe4", 0x68}, {&(0x7f0000000300)="e4584c5309d1e1b65c84abd2b27bb0a8fdd96408b7873d2b65d9ca5b77edbfeeef5a40b937cde295042991702396bc6dfe201e5d332830dc62009e0f980075cf158fbe225f2b6c9c5e5e1cfde1262cbd529d60f3b6bfb1619966b2bac08fd49555a92c2afbe13ba29d02c2fe0f34ecc7f559a4f3c4b3a9af89b3b82fa20f502f87841670d50dfb51c2c9e18bb57b1c2e10845a1e671bb30b7f5c23ee61c3eb4eba5d555a84ea40bfafe8fe274babf62cf2f32462d81c9357fe57be", 0xbb}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f00000003c0)="4a73edc507d58ead5a9fd4da3647699c876cada567b175923ba013c081258853db6ed8c1e1db8d2e57e0a03202d73cc9b93e00143d097ec0f17b27a70927913e18b7cd0be7c72f327398c87ae8865cef6f9f51c7cfa86aeedc9f9088efc3aa2561fc15e50d159a40394e915f641cf6f7d2eed7eb50b63b358cea6a86353b91cc5f8c12e1ec9006d4549356cb1ddd72cce8027d1aeab1a300c29f4480adc80dd87fb699c5eca34f6c8a970575efd220fb5c9fc928f8de2080fb1467330fb8", 0xbe}], 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_int(r7, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req={0x3, 0x1, 0x2, 0x5}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/ipc\x00') 19.584495289s ago: executing program 3 (id=270): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000008000000000000095000000002b190017163b5b1300cb87f183b310d21d6d7a7e55e7cc990f6e712f452668775bd83a2063eebfb28acac360ea56557e98c00f1a5cce782a9cc01d125fa55bba77510e8833df6f927842bdc08f777856e4de2a67d8f0e70bdd3ed1ce8f00001c2345c71c04c492c7090001fba66194c4799d2e1dd08df818cd03956564bf2252bc4e1d4606f194b8d52f998f2668f0ac13accec93fac1b41ab49e3634c630ae5c7d518848f527f5f1d229c219560e022a4238152000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000280)="9c2a243dd44b74479d0ff63aa37a6b0f7b8e0ca0dfdc84e6f96ade74d7b2e2f4dad7604b43985a5df1f5f7e5387d2068bd86b82fef09cb184b1a743513d89f", 0x3f) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$FIOCLEX(r3, 0x5451) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r7, @ANYBLOB="040027bd7000fddbdf2502000000040001805000068014000400fc02000000000000000000000000000114000400fe8000000000000000000000000000aa050002000100000014000400fc02000000000000000000000000000108000700", @ANYRES32=r8, @ANYRESOCT=r5, @ANYRES32=0x0, @ANYBLOB="080003000200000008000400ff000000"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x50, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xc}, 0x10, 0x0, r6}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r9, r10, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r11, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r11, 0x0, 0x0}, 0x10) clock_gettime(0x0, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x1, 0x84) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 19.260646971s ago: executing program 1 (id=273): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") ioctl$SG_BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000002c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 19.06848947s ago: executing program 4 (id=275): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000000000000005b0008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008"], 0x38}}, 0x10) 18.942773422s ago: executing program 4 (id=276): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18.220125293s ago: executing program 4 (id=277): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) 18.074555037s ago: executing program 1 (id=279): socket(0x400000000010, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 18.000167394s ago: executing program 4 (id=280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x20014880) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 17.924946701s ago: executing program 4 (id=281): r0 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xba}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xb0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000740)=""/165, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x4000) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r6, 0x4) sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x3}}}, 0x32) connect$inet6(r1, &(0x7f0000000500)={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8ce3}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x8}, 0x94) 17.814898552s ago: executing program 1 (id=283): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7f, 0xffffffc1, 0x0, 0x222e, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x80000000, 0x5}, 0x50) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a84d", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, &(0x7f0000000000)={0x24, @long}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r6, &(0x7f0000000100), 0x0, 0x726, 0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400ee0002060500000000000000000000000000090002c52c98b6320000e2ff0000000005000100060000001400079d08000640000000000800134000000000050005000a00000016000300686173683a6e65742c706f72742c6e657400edff00000000"], 0x64}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}}, 0x0) socket$alg(0x26, 0x5, 0x0) r10 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000e00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB, @ANYBLOB="5ced1a9ed4e19044b2e1d182e389e0395bb14472b95056fa0df9e8a891b12197cd2d7e1b049a5d7b9d9423601188014c2d6f2afe609464032d78738a390c1e8320cc6798f9776e46c9561cf666a7bf2c28c03f0847fd8aa908d420a2dbcd7fe68a95e0b9349c334f065ed1814e4e61b3846d872986"], 0x3c}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) sendmsg$AUDIT_USER(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0xf8, 0x3ed, 0x100, 0x70bd2d, 0x25dfdbfe, "0f772360d4ddad4f929e412f72f34d0a818fc426dc4560f5e3d113210528151e8c464be2a6089fa5f93a02e46cca23c18f58e5eb9b3cdf38e4232fa0f1de1cf7dca2b97ad1a37f0bb784238d06080d189bd1a3c5baaf0c759cf0867f420f9470f556397d60fad1623232d5e327354da1aa67c166208341fc2b2e65917827fec5b657f45260c0fefe254a5b82abe2a68b00286b9113e1700aa4db1112d19c829b56b2996d0958f939a884af5d11ca8e218f091e948b2a9ef4dec1d628bbc7ced191418feb1aac033f8dde4f48e478dbf5420f4156bd955f1be806b92bbd7a1cfbd04b6459d6f117", ["", "", "", "", ""]}, 0xf8}, 0x1, 0x0, 0x0, 0x81}, 0xc4) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)=0x5) 17.592294584s ago: executing program 1 (id=284): bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00000900000000000000000000000100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/25], 0x48) 17.387478813s ago: executing program 1 (id=286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64(r1, 0x0, 0x0, 0xee) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x20000040) r2 = socket$inet6(0xa, 0x80002, 0x0) listen(r2, 0xc98e) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYRES32=0x1], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, 0x0, &(0x7f0000001580)=""/92}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0x1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%-010d \x00'}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0xd1}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30}}]}, &(0x7f0000000240)='GPL\x00', 0xa, 0x72, &(0x7f0000000680)=""/114, 0x41100, 0x4, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x0, 0xb, 0x9}, 0x10, 0x266f0, 0xffffffffffffffff, 0x5, &(0x7f0000000840)=[0xffffffffffffffff, r4, r5, r6], &(0x7f0000000880)=[{0x1, 0x1, 0x10, 0x4}, {0x3, 0x5, 0xa}, {0x2, 0x3, 0x7, 0x7}, {0x2, 0x3, 0xd, 0x6}, {0x0, 0x2, 0x2, 0xa}], 0x10, 0x81}, 0x94) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000400000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000700000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x1405, 0x1, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r8) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r11, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004804) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}]}, 0x70}, 0x1, 0x0, 0x0, 0x10000}, 0x8080) 17.276212505s ago: executing program 0 (id=287): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17.21819858s ago: executing program 0 (id=288): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010"], 0xb4}, 0x1, 0x0, 0x0, 0x4008054}, 0x40805) r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 16.875764074s ago: executing program 1 (id=289): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a00faff6c617463680000002c00028014000300f4f03b0200000000010007116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000010000000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='sched_process_wait\x00', r1, 0x0, 0x81200}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000700)={'bridge0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e0000000000000005000000ef00000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x50) writev(r7, &(0x7f0000000900)=[{&(0x7f0000000540)='x', 0x1}], 0x1) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="10010000", @ANYRES16=r8, @ANYBLOB="000229bd7000fedbdf25170000004c00068008000100336f00003d00040067636d286165732900000000000000000000000000000000000000000000000015000000f4dfa95cba3cdeae921d58d1c5126e0f24c1e66ca900000078000480340007800800030001008e440201ba0d99fb000008000200310100000800020009000000080001001a000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r10, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, r13, 0x0, 0xf3a, 0x0) write$cgroup_pid(r13, &(0x7f0000000000), 0xffffff98) splice(r9, 0x0, r13, 0x0, 0x80, 0xe) write(r11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x2f, &(0x7f0000000100)=""/47, 0x40f00, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x1], &(0x7f0000000240)=[{0x2, 0x4, 0x9, 0x7}, {0x1, 0x2, 0x5, 0x7}, {0x5, 0x2, 0x2, 0x3}, {0x3, 0x1, 0x7, 0x8}, {0x3, 0x3, 0x5, 0x2}, {0x5, 0x1, 0x2, 0x7}, {0x5, 0x3, 0xb, 0x9}], 0x10, 0x7fff}, 0x94) 16.873835234s ago: executing program 0 (id=299): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) unshare(0x400) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) 16.736105048s ago: executing program 0 (id=290): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") ioctl$SG_BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000002c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 16.735752697s ago: executing program 4 (id=291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0xffffffffffffff30, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000600000000000000006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 15.618763497s ago: executing program 0 (id=292): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, 0x0, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, 0x0}}], 0x1, 0x145) 15.526284025s ago: executing program 0 (id=293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffb800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 12.2001987s ago: executing program 32 (id=243): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000007000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x7, 0x27, &(0x7f0000000540)=""/39, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x7, 0x4, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000600)=[r0, r2], &(0x7f0000000640)=[{0x1, 0x4, 0x1, 0x3}], 0x10, 0x329e}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r0, &(0x7f0000000bc0)="53782e4dac368243e19da1828d08bedafa41f15ed1d27ad77689835e32b06eb94d6d332f0c417499811245eeae338477c0933d476eed7b963f4afab72f7364a15426f2abde9830e7623ce97cdbdd63ebf6a19d9d5aa79670e3e6727fe7b86a153c73d69af59285", &(0x7f0000000ec0)=""/217}, 0x20) r3 = socket(0x1d, 0x2, 0x6) accept$ax25(r3, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000740), 0x103200, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000140)={r6, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000002c0)={r6, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000440)={r6, 0x1, 0x6, @local}, 0x10) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000780)=0x1) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xa, 0x0, &(0x7f0000000000)="259a53f271a76d267300", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x84) 4.185547642s ago: executing program 33 (id=270): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000008000000000000095000000002b190017163b5b1300cb87f183b310d21d6d7a7e55e7cc990f6e712f452668775bd83a2063eebfb28acac360ea56557e98c00f1a5cce782a9cc01d125fa55bba77510e8833df6f927842bdc08f777856e4de2a67d8f0e70bdd3ed1ce8f00001c2345c71c04c492c7090001fba66194c4799d2e1dd08df818cd03956564bf2252bc4e1d4606f194b8d52f998f2668f0ac13accec93fac1b41ab49e3634c630ae5c7d518848f527f5f1d229c219560e022a4238152000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000280)="9c2a243dd44b74479d0ff63aa37a6b0f7b8e0ca0dfdc84e6f96ade74d7b2e2f4dad7604b43985a5df1f5f7e5387d2068bd86b82fef09cb184b1a743513d89f", 0x3f) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$FIOCLEX(r3, 0x5451) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r7, @ANYBLOB="040027bd7000fddbdf2502000000040001805000068014000400fc02000000000000000000000000000114000400fe8000000000000000000000000000aa050002000100000014000400fc02000000000000000000000000000108000700", @ANYRES32=r8, @ANYRESOCT=r5, @ANYRES32=0x0, @ANYBLOB="080003000200000008000400ff000000"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x50, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xc}, 0x10, 0x0, r6}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r9, r10, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r11, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r11, 0x0, 0x0}, 0x10) clock_gettime(0x0, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x1, 0x84) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 1.100409403s ago: executing program 34 (id=289): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a00faff6c617463680000002c00028014000300f4f03b0200000000010007116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000010000000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='sched_process_wait\x00', r1, 0x0, 0x81200}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000700)={'bridge0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e0000000000000005000000ef00000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x50) writev(r7, &(0x7f0000000900)=[{&(0x7f0000000540)='x', 0x1}], 0x1) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="10010000", @ANYRES16=r8, @ANYBLOB="000229bd7000fedbdf25170000004c00068008000100336f00003d00040067636d286165732900000000000000000000000000000000000000000000000015000000f4dfa95cba3cdeae921d58d1c5126e0f24c1e66ca900000078000480340007800800030001008e440201ba0d99fb000008000200310100000800020009000000080001001a000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r10, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, r13, 0x0, 0xf3a, 0x0) write$cgroup_pid(r13, &(0x7f0000000000), 0xffffff98) splice(r9, 0x0, r13, 0x0, 0x80, 0xe) write(r11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x2f, &(0x7f0000000100)=""/47, 0x40f00, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x1], &(0x7f0000000240)=[{0x2, 0x4, 0x9, 0x7}, {0x1, 0x2, 0x5, 0x7}, {0x5, 0x2, 0x2, 0x3}, {0x3, 0x1, 0x7, 0x8}, {0x3, 0x3, 0x5, 0x2}, {0x5, 0x1, 0x2, 0x7}, {0x5, 0x3, 0xb, 0x9}], 0x10, 0x7fff}, 0x94) 1.050187477s ago: executing program 35 (id=291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0xffffffffffffff30, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000600000000000000006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 0s ago: executing program 36 (id=293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffb800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.21' (ED25519) to the list of known hosts. [ 73.680581][ T4255] cgroup: Unknown subsys name 'net' [ 73.812041][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.348288][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.464645][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.473002][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.481009][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.489102][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.496972][ T4278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.504565][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.513422][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.521228][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.528175][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.529019][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.536062][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.544576][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.549822][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.557265][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.571937][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.572506][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.580284][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.587196][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.594153][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.601331][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.609979][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.615636][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.622845][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.629374][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.636692][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.643433][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.650897][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.657474][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.665311][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.672588][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.110626][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 78.240304][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 78.306894][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 78.332615][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 78.397318][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.404596][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.414444][ T4275] device bridge_slave_0 entered promiscuous mode [ 78.432872][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.440425][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.449221][ T4267] device bridge_slave_0 entered promiscuous mode [ 78.475824][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.482956][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.491591][ T4275] device bridge_slave_1 entered promiscuous mode [ 78.508653][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.515880][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.524059][ T4267] device bridge_slave_1 entered promiscuous mode [ 78.536059][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 78.596686][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.634099][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.641934][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.650294][ T4282] device bridge_slave_0 entered promiscuous mode [ 78.660951][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.681941][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.710889][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.718266][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.726928][ T4282] device bridge_slave_1 entered promiscuous mode [ 78.744789][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.760013][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.767188][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.775581][ T4266] device bridge_slave_0 entered promiscuous mode [ 78.793657][ T4275] team0: Port device team_slave_0 added [ 78.813125][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.820548][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.829275][ T4266] device bridge_slave_1 entered promiscuous mode [ 78.846974][ T4275] team0: Port device team_slave_1 added [ 78.857509][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.904234][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.916392][ T4267] team0: Port device team_slave_0 added [ 78.957424][ T4267] team0: Port device team_slave_1 added [ 78.964069][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.971274][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.997999][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.019852][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.027257][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.035680][ T4269] device bridge_slave_0 entered promiscuous mode [ 79.045151][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.062764][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.069903][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.096273][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.115464][ T4282] team0: Port device team_slave_0 added [ 79.121668][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.128993][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.137611][ T4269] device bridge_slave_1 entered promiscuous mode [ 79.146171][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.167969][ T4282] team0: Port device team_slave_1 added [ 79.192464][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.199496][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.225845][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.238485][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.245523][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.272192][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.331765][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.339110][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.365474][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.378948][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.391704][ T4266] team0: Port device team_slave_0 added [ 79.407551][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.414678][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.440883][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.453508][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.464178][ T4266] team0: Port device team_slave_1 added [ 79.490721][ T4275] device hsr_slave_0 entered promiscuous mode [ 79.498275][ T4275] device hsr_slave_1 entered promiscuous mode [ 79.528564][ T4269] team0: Port device team_slave_0 added [ 79.548514][ T4267] device hsr_slave_0 entered promiscuous mode [ 79.556066][ T4267] device hsr_slave_1 entered promiscuous mode [ 79.562820][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.570831][ T4267] Cannot create hsr debugfs directory [ 79.588773][ T4269] team0: Port device team_slave_1 added [ 79.595554][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.602579][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.629912][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.680405][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.687484][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.713487][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.735835][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 79.742170][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 79.748444][ T4278] Bluetooth: hci0: command 0x0409 tx timeout [ 79.748464][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 79.748632][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 79.811949][ T4282] device hsr_slave_0 entered promiscuous mode [ 79.818925][ T4282] device hsr_slave_1 entered promiscuous mode [ 79.826769][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.834554][ T4282] Cannot create hsr debugfs directory [ 79.843894][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.851240][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.878042][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.893244][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.900325][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.926697][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.979479][ T4266] device hsr_slave_0 entered promiscuous mode [ 79.987004][ T4266] device hsr_slave_1 entered promiscuous mode [ 79.993795][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.001679][ T4266] Cannot create hsr debugfs directory [ 80.058115][ T4269] device hsr_slave_0 entered promiscuous mode [ 80.065216][ T4269] device hsr_slave_1 entered promiscuous mode [ 80.071942][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.080108][ T4269] Cannot create hsr debugfs directory [ 80.360705][ T4275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.378402][ T4275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.389906][ T4275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.400631][ T4275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.458492][ T4267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.470356][ T4267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.481679][ T4267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.494036][ T4267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.617756][ T4282] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.629401][ T4282] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.663531][ T4282] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.677278][ T4282] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.707455][ T4269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.718132][ T4269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.752375][ T4269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.764834][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.780990][ T4269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.823289][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.838340][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.850318][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.870419][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.879181][ T4266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.891099][ T4266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.901546][ T4266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.925365][ T4266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.942837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.953282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.963007][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.970471][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.981877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.023926][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.032361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.043326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.055724][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.062892][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.070982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.078978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.093118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.102592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.153322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.162634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.172618][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.179807][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.188427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.197592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.206699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.215838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.224821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.234791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.244449][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.251653][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.260467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.271760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.280435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.289753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.308268][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.318205][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.331285][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.358942][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.390174][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.408649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.426741][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.437267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.489504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.504356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.520045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.531840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.544513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.572881][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.622673][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.652565][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.667573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.680952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.692391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.709087][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.758186][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.781242][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.812284][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.820570][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 81.820589][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 81.826747][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 81.826796][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 81.826827][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 81.880913][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.939552][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.011383][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.030777][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.052963][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.086629][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.093820][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.115388][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.136137][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.144786][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.152095][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.160161][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.174280][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.183166][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.201985][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.225207][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.234008][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.244800][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.252000][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.265690][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.274689][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.289924][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.297109][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.313340][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.360869][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.369852][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.396536][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.413246][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.423698][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.435701][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.444380][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.451584][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.463396][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.480010][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.490393][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.503960][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.512980][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.537527][ T4282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.548251][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.572017][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.581736][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.590784][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.602927][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.613466][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.622719][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.631702][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.640854][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.649677][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.657001][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.664866][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.674230][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.682659][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.706413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.714002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.760586][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.783562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.801748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.816533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.830177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.840193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.869154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.897277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.930720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.953898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.962851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.971810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.980497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.989443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.999728][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.010196][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.026368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.045124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.054199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.110095][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.135970][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.160983][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.188097][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.210476][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.268795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.297603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.329168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.354878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.378802][ T4275] device veth0_vlan entered promiscuous mode [ 83.435688][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.450499][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.460382][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.474221][ T4275] device veth1_vlan entered promiscuous mode [ 83.529542][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.566576][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.623412][ T4275] device veth0_macvtap entered promiscuous mode [ 83.669474][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.680176][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.701477][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.741725][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.750949][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.759923][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.769646][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.781977][ T4282] device veth0_vlan entered promiscuous mode [ 83.792130][ T4275] device veth1_macvtap entered promiscuous mode [ 83.820699][ T4282] device veth1_vlan entered promiscuous mode [ 83.878782][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.895038][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 83.901131][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 83.907632][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 83.907654][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 83.913707][ T4276] Bluetooth: hci4: command 0x040f tx timeout [ 83.943837][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.953837][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.968227][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.977263][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.986415][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.999775][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.010079][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.021388][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.045276][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.054199][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.066947][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.077124][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.094781][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.104424][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.114263][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.124267][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.133576][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.198622][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.207726][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.218315][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.228685][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.250045][ T4267] device veth0_vlan entered promiscuous mode [ 84.274713][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.286331][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.302670][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.312861][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.322710][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.332406][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.340987][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.351185][ T4282] device veth0_macvtap entered promiscuous mode [ 84.367328][ T4282] device veth1_macvtap entered promiscuous mode [ 84.380621][ T4267] device veth1_vlan entered promiscuous mode [ 84.401124][ T4266] device veth0_vlan entered promiscuous mode [ 84.431529][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.440662][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.450104][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.461186][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.470287][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.479525][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.488050][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.513058][ T4266] device veth1_vlan entered promiscuous mode [ 84.533657][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.544182][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.568574][ T4267] device veth0_macvtap entered promiscuous mode [ 84.579563][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.591369][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.603188][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.618590][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.628217][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.637535][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.648141][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.658867][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.669830][ T4267] device veth1_macvtap entered promiscuous mode [ 84.681970][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.693095][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.701936][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.706329][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.721791][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.742701][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.751025][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.759873][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.771020][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.790557][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.799181][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.817712][ T4282] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.826640][ T4282] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.835634][ T4282] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.844387][ T4282] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.866998][ T4269] device veth0_vlan entered promiscuous mode [ 84.879927][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.888253][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.904750][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.917470][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.928382][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.939818][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.951265][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.970200][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.972134][ T4269] device veth1_vlan entered promiscuous mode [ 84.987497][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.001595][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.010091][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.019489][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.029067][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.038329][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.047250][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.073380][ T4266] device veth0_macvtap entered promiscuous mode [ 85.102068][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.113311][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.123462][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.134198][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.147506][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.188967][ T4266] device veth1_macvtap entered promiscuous mode [ 85.208303][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.219204][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.237227][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.246229][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.260216][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.280041][ T4267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.291044][ T4267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.300384][ T4267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.309418][ T4267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.416696][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.427241][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.437203][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.448122][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.458217][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.469324][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.481398][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.503630][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.513368][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.514868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.530383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.542617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.552352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.562799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.583330][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.598824][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.608933][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.619527][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.630132][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.640984][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.654804][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.666659][ T4269] device veth0_macvtap entered promiscuous mode [ 85.696230][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.706993][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.716626][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.727240][ T4266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.737259][ T4266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.748566][ T4266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.757803][ T4266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.772578][ T4269] device veth1_macvtap entered promiscuous mode [ 85.794688][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.804440][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.844359][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.864011][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.881002][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.912769][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.924290][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.935423][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.945857][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.957445][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.969707][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.977984][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 85.979755][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 85.985879][ T4278] Bluetooth: hci4: command 0x0419 tx timeout [ 85.990650][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 85.996453][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 86.023786][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.032567][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.041590][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.059228][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.074503][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.076139][ T4396] Bluetooth: MGMT ver 1.22 [ 86.086115][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.100559][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.110593][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.121109][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.131321][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.142324][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.154471][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.190181][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.197270][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.210088][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.225834][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.234876][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.245962][ T4269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.255105][ T4269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.269104][ T4269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.279662][ T4269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.432818][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.453063][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.482935][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.525750][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.533810][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.567038][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.606244][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.614374][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.662982][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.691023][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.701325][ T26] cfg80211: failed to load regulatory.db [ 86.736287][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.745278][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.768391][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.805514][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.844399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.605979][ T4433] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0 [ 87.606328][ T4427] tipc: Started in network mode [ 87.672456][ T4427] tipc: Node identity 467ded73628f, cluster identity 4711 [ 87.682178][ T4427] tipc: Enabled bearer , priority 0 [ 87.700273][ T4429] device syzkaller0 entered promiscuous mode [ 87.826413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.834712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 87.843041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 87.851337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #188!!! [ 87.859670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #188!!! [ 87.872899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #188!!! [ 87.881327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 87.889714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 88.217435][ T4427] tipc: Resetting bearer [ 88.796446][ T4371] tipc: Node number set to 619900275 [ 90.840361][ T4424] tipc: Resetting bearer [ 90.871982][ T4424] tipc: Disabling bearer [ 91.043741][ T4466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 91.178051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 91.186481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 91.298959][ T4476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.30'. [ 91.325099][ T4476] netlink: 32 bytes leftover after parsing attributes in process `syz.0.30'. [ 91.347657][ T4478] Bluetooth: MGMT ver 1.22 [ 91.374840][ T4472] syz.4.29 uses obsolete (PF_INET,SOCK_PACKET) [ 91.427681][ T4481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'. [ 91.692095][ T4488] netlink: 32 bytes leftover after parsing attributes in process `syz.2.33'. [ 91.738655][ T4490] Zero length message leads to an empty skb [ 92.141699][ T4504] netlink: 40 bytes leftover after parsing attributes in process `syz.3.39'. [ 92.218550][ T4510] loop0: detected capacity change from 0 to 1024 [ 92.325607][ T4510] ======================================================= [ 92.325607][ T4510] WARNING: The mand mount option has been deprecated and [ 92.325607][ T4510] and is ignored by this kernel. Remove the mand [ 92.325607][ T4510] option from the mount to silence this warning. [ 92.325607][ T4510] ======================================================= [ 92.383253][ T4510] EXT4-fs: Ignoring removed oldalloc option [ 92.618350][ T4510] EXT4-fs: Ignoring removed bh option [ 92.703485][ T4510] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.897582][ T4510] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 94.361669][ T4536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 94.392045][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 94.654510][ T4539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 94.664440][ T4539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.46'. [ 96.890010][ T4578] netlink: 'syz.1.60': attribute type 13 has an invalid length. [ 96.961300][ T4587] loop3: detected capacity change from 0 to 1024 [ 96.976360][ T4589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.61'. [ 96.995897][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.015426][ T4587] EXT4-fs: Ignoring removed oldalloc option [ 97.038565][ T4587] EXT4-fs: Ignoring removed bh option [ 97.073189][ T4587] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.127035][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.162627][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.164241][ T4587] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 97.877075][ T4598] netlink: 48 bytes leftover after parsing attributes in process `syz.0.64'. [ 98.152039][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 98.601220][ T4613] loop1: detected capacity change from 0 to 1024 [ 98.632353][ T4613] EXT4-fs: Ignoring removed oldalloc option [ 98.665501][ T4613] EXT4-fs: Ignoring removed bh option [ 98.685433][ T4613] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.797277][ T4613] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 99.971145][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 100.164264][ T4652] loop1: detected capacity change from 0 to 1024 [ 100.180308][ T4652] EXT4-fs: Ignoring removed oldalloc option [ 100.198737][ T4652] EXT4-fs: Ignoring removed bh option [ 100.230712][ T4652] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.336345][ T4652] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 101.344608][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 102.636161][ T4636] netlink: 'syz.4.72': attribute type 16 has an invalid length. [ 102.643904][ T4636] netlink: 'syz.4.72': attribute type 17 has an invalid length. [ 102.668413][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.677516][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.689067][ T4636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.706285][ T4646] netlink: 'syz.3.76': attribute type 12 has an invalid length. [ 102.725058][ T4650] netlink: 'syz.3.76': attribute type 4 has an invalid length. [ 103.977658][ T4687] tipc: Started in network mode [ 104.003237][ T4687] tipc: Node identity c22c180a1736, cluster identity 4711 [ 104.036350][ T4687] tipc: Enabled bearer , priority 0 [ 104.091614][ T4691] device syzkaller0 entered promiscuous mode [ 104.228828][ T4687] tipc: Resetting bearer [ 104.315240][ T4703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.93'. [ 104.371692][ T4686] tipc: Resetting bearer [ 104.430561][ T4686] tipc: Disabling bearer [ 105.405468][ T4740] loop1: detected capacity change from 0 to 1024 [ 105.419360][ T4740] EXT4-fs: Ignoring removed oldalloc option [ 105.425594][ T4740] EXT4-fs: Ignoring removed bh option [ 105.431718][ T4740] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.501279][ T4740] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 106.502252][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 106.637224][ T4753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.108'. [ 107.737597][ T4722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.101'. [ 107.751462][ T4722] device vlan2 entered promiscuous mode [ 107.757538][ T4722] device bond0 entered promiscuous mode [ 107.763126][ T4722] device bond_slave_0 entered promiscuous mode [ 107.769845][ T4722] device bond_slave_1 entered promiscuous mode [ 108.198928][ T4771] loop0: detected capacity change from 0 to 1024 [ 108.280197][ T4771] EXT4-fs: Ignoring removed oldalloc option [ 108.325327][ T4771] EXT4-fs: Ignoring removed bh option [ 108.345598][ T4771] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.469990][ T4771] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 109.446286][ T4806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.475433][ T4805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.119'. [ 109.543291][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 109.840907][ T4817] netlink: 'syz.4.121': attribute type 13 has an invalid length. [ 109.933844][ T4817] netlink: 'syz.4.121': attribute type 17 has an invalid length. [ 111.208524][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.366310][ T4817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.522255][ T4856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.673616][ T4842] netlink: 'syz.0.125': attribute type 16 has an invalid length. [ 111.733088][ T4842] netlink: 'syz.0.125': attribute type 17 has an invalid length. [ 111.790329][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.810381][ T4817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.822833][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.866231][ T4842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.239679][ T4872] loop0: detected capacity change from 0 to 1024 [ 112.257230][ T4873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.132'. [ 112.292620][ T4872] EXT4-fs: Ignoring removed oldalloc option [ 112.344209][ T4872] EXT4-fs: Ignoring removed bh option [ 112.414438][ T4872] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.536061][ T4872] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 112.904942][ T4892] overlayfs: './file1' not a directory [ 113.507615][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 113.769627][ T4904] netlink: 'syz.4.139': attribute type 13 has an invalid length. [ 113.789557][ T4907] netlink: 40 bytes leftover after parsing attributes in process `syz.0.140'. [ 113.953794][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.019502][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.036497][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.242365][ T4928] ax25_connect(): syz.3.145 uses autobind, please contact jreuter@yaina.de [ 114.305006][ T4918] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 117.005877][ T4970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 117.498712][ T4989] device syzkaller1 entered promiscuous mode [ 117.553574][ T4991] netlink: 'syz.0.168': attribute type 5 has an invalid length. [ 118.848862][ T5008] tipc: Enabled bearer , priority 0 [ 118.880045][ T5008] device syzkaller0 entered promiscuous mode [ 118.969212][ T5008] tipc: Resetting bearer [ 119.042054][ T5006] tipc: Resetting bearer [ 119.136117][ T5006] tipc: Disabling bearer [ 119.491259][ T5024] binder: BINDER_SET_CONTEXT_MGR already set [ 119.864549][ T5024] binder: 5022:5024 ioctl 4018620d 2000000002c0 returned -16 [ 120.709019][ T5055] team0: No ports can be present during mode change [ 120.759547][ T5057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.882334][ T5062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'. [ 121.259766][ T5077] netlink: 'syz.2.192': attribute type 13 has an invalid length. [ 121.275151][ T5076] ax25_connect(): syz.3.195 uses autobind, please contact jreuter@yaina.de [ 121.294698][ T5077] netlink: 'syz.2.192': attribute type 17 has an invalid length. [ 121.649643][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.779722][ T5077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.903648][ T5098] tipc: Started in network mode [ 121.928211][ T5098] tipc: Node identity ee8a3c437e6f, cluster identity 4711 [ 121.955166][ T5098] tipc: Enabled bearer , priority 0 [ 121.994462][ T5069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.100953][ T5102] device syzkaller0 entered promiscuous mode [ 122.101025][ T5069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.111585][ T5102] tipc: Resetting bearer [ 122.134378][ T5104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.224061][ T5091] tipc: Resetting bearer [ 122.277033][ T5113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.204'. [ 122.638662][ T5123] ax25_connect(): syz.4.209 uses autobind, please contact jreuter@yaina.de [ 123.010024][ T5133] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.065022][ T4257] tipc: Node number set to 2430942275 [ 124.574188][ T5091] tipc: Disabling bearer [ 124.610630][ T5137] tipc: Started in network mode [ 124.624787][ T5137] tipc: Node identity bac5371ab375, cluster identity 4711 [ 124.703994][ T5137] tipc: Enabled bearer , priority 0 [ 124.745799][ T5138] device syzkaller0 entered promiscuous mode [ 124.765768][ T5144] tipc: Resetting bearer [ 124.819758][ T5151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.216'. [ 124.829405][ T5135] tipc: Resetting bearer [ 124.859448][ T5154] loop3: detected capacity change from 0 to 1024 [ 124.883762][ T5154] EXT4-fs: Ignoring removed oldalloc option [ 124.907244][ T5154] EXT4-fs: Ignoring removed bh option [ 124.908595][ T5135] tipc: Disabling bearer [ 124.949533][ T5154] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.098164][ T5154] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 125.865731][ T5176] ax25_connect(): syz.4.220 uses autobind, please contact jreuter@yaina.de [ 126.039344][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 126.365608][ T5190] tipc: Enabled bearer , priority 0 [ 126.571142][ T5190] device syzkaller0 entered promiscuous mode [ 126.586144][ T5190] tipc: Resetting bearer [ 126.634759][ T5189] tipc: Resetting bearer [ 127.565972][ T5230] loop2: detected capacity change from 0 to 1024 [ 127.573971][ T5230] EXT4-fs: Ignoring removed oldalloc option [ 127.605048][ T5230] EXT4-fs: Ignoring removed bh option [ 127.630919][ T5230] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.649708][ T5236] ax25_connect(): syz.0.236 uses autobind, please contact jreuter@yaina.de [ 127.763786][ T5230] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 128.912250][ T5257] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 128.938388][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 130.613993][ T5189] tipc: Disabling bearer [ 130.628324][ T5211] tipc: Enabling of bearer rejected, failed to enable media [ 130.637563][ T5228] tc_dump_action: action bad kind [ 130.863244][ T5276] loop3: detected capacity change from 0 to 1024 [ 130.934120][ T5276] EXT4-fs: Ignoring removed oldalloc option [ 130.955094][ T5276] EXT4-fs: Ignoring removed bh option [ 130.965377][ T5276] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.054717][ T5276] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 131.072283][ T5281] device batadv_slave_1 entered promiscuous mode [ 131.173974][ T5291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'. [ 131.235144][ T5281] device batadv_slave_1 left promiscuous mode [ 131.277046][ T5287] device syzkaller1 entered promiscuous mode [ 132.076867][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 132.262336][ T5307] loop1: detected capacity change from 0 to 1024 [ 132.290439][ T5307] EXT4-fs: Ignoring removed oldalloc option [ 132.300360][ T5307] EXT4-fs: Ignoring removed bh option [ 132.310470][ T5309] ax25_connect(): syz.3.247 uses autobind, please contact jreuter@yaina.de [ 132.323780][ T5307] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.349259][ T5307] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 132.609435][ T5301] device syzkaller1 left promiscuous mode [ 132.790479][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.805406][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.355529][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 136.528072][ T5344] loop1: detected capacity change from 0 to 1024 [ 136.554610][ T5344] EXT4-fs: Ignoring removed oldalloc option [ 136.571422][ T5344] EXT4-fs: Ignoring removed bh option [ 136.582027][ T5344] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.654188][ T5344] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 136.893115][ T5350] ax25_connect(): syz.4.259 uses autobind, please contact jreuter@yaina.de [ 137.367577][ T5351] overlayfs: './file1' not a directory [ 137.467699][ T5357] loop4: detected capacity change from 0 to 1024 [ 137.478960][ T5357] EXT4-fs: Ignoring removed oldalloc option [ 137.504049][ T5357] EXT4-fs: Ignoring removed bh option [ 137.534518][ T5357] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.687479][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 137.694330][ T5357] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.588410][ T4281] Bluetooth: hci4: link tx timeout [ 138.607603][ T4281] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.683920][ T5376] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 138.770175][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 139.127981][ T5391] ax25_connect(): syz.1.271 uses autobind, please contact jreuter@yaina.de [ 139.291390][ T5397] loop1: detected capacity change from 0 to 1024 [ 139.299949][ T5397] EXT4-fs: Ignoring removed oldalloc option [ 139.315364][ T5397] EXT4-fs: Ignoring removed bh option [ 139.326090][ T5397] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.400608][ T5397] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 140.430313][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 140.695103][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 140.752257][ T5423] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 140.803650][ T5425] ax25_connect(): syz.1.283 uses autobind, please contact jreuter@yaina.de [ 141.238555][ T5436] wg1 speed is unknown, defaulting to 1000 [ 141.250095][ T5436] wg1 speed is unknown, defaulting to 1000 [ 141.271080][ T5436] wg1 speed is unknown, defaulting to 1000 [ 141.283903][ T5436] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 141.322945][ T5436] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 141.346828][ T5433] wg1 speed is unknown, defaulting to 1000 [ 141.397279][ T5436] wg1 speed is unknown, defaulting to 1000 [ 141.414150][ T5436] wg1 speed is unknown, defaulting to 1000 [ 141.423162][ T5436] wg1 speed is unknown, defaulting to 1000 [ 141.439897][ T5436] wg1 speed is unknown, defaulting to 1000 [ 141.452222][ T5436] wg1 speed is unknown, defaulting to 1000 [ 141.462538][ T5436] wg1 speed is unknown, defaulting to 1000 [ 141.475557][ T5438] raw_sendmsg: syz.0.288 forgot to set AF_INET. Fix it! [ 141.810702][ T5445] loop0: detected capacity change from 0 to 1024 [ 141.822566][ T5445] EXT4-fs: Ignoring removed oldalloc option [ 141.829084][ T5445] EXT4-fs: Ignoring removed bh option [ 141.839203][ T5445] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 141.874013][ T5445] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 142.202245][ T5457] overlayfs: './file1' not a directory [ 142.883964][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 194.219902][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.226336][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.415039][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 201.425039][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 201.431109][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 255.657385][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.664465][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.065264][ T28] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 278.073091][ T28] Not tainted syzkaller #0 [ 278.086760][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 278.115034][ T28] task:kworker/0:0 state:D stack:23688 pid:7 ppid:2 flags:0x00004000 [ 278.124475][ T28] Workqueue: events rfkill_global_led_trigger_worker [ 278.135346][ T28] Call Trace: [ 278.138684][ T28] [ 278.141655][ T28] __schedule+0x10ec/0x40b0 [ 278.154903][ T28] ? __sched_text_start+0x8/0x8 [ 278.160029][ T28] ? __mutex_trylock_common+0x80/0x250 [ 278.174900][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 278.180285][ T28] schedule+0xb9/0x180 [ 278.184395][ T28] schedule_preempt_disabled+0xf/0x20 [ 278.254889][ T28] __mutex_lock+0x555/0xaf0 [ 278.259587][ T28] ? __mutex_lock+0x3a5/0xaf0 [ 278.264416][ T28] ? rfkill_global_led_trigger_worker+0x23/0xc0 [ 278.300980][ T28] ? mutex_lock_nested+0x10/0x10 [ 278.307303][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 278.313372][ T28] ? read_lock_is_recursive+0x10/0x10 [ 278.318880][ T28] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 278.325014][ T28] ? _raw_spin_unlock+0x40/0x40 [ 278.330195][ T28] rfkill_global_led_trigger_worker+0x23/0xc0 [ 278.336618][ T28] ? process_one_work+0x7a1/0x1160 [ 278.341824][ T28] process_one_work+0x898/0x1160 [ 278.346897][ T28] ? worker_detach_from_pool+0x240/0x240 [ 278.352822][ T28] ? _raw_spin_lock_irq+0xab/0xe0 [ 278.358009][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 278.363583][ T28] ? kthread_data+0x4b/0xc0 [ 278.368847][ T28] worker_thread+0xaa2/0x1250 [ 278.373777][ T28] kthread+0x29d/0x330 [ 278.378012][ T28] ? worker_clr_flags+0x1a0/0x1a0 [ 278.383218][ T28] ? kthread_blkcg+0xd0/0xd0 [ 278.388047][ T28] ret_from_fork+0x1f/0x30 [ 278.392709][ T28] [ 278.395954][ T28] INFO: task kworker/0:1:14 blocked for more than 143 seconds. [ 278.403530][ T28] Not tainted syzkaller #0 [ 278.408616][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.417565][ T28] task:kworker/0:1 state:D stack:25264 pid:14 ppid:2 flags:0x00004000 [ 278.427204][ T28] Workqueue: events rfkill_sync_work [ 278.432575][ T28] Call Trace: [ 278.436276][ T28] [ 278.439254][ T28] __schedule+0x10ec/0x40b0 [ 278.443840][ T28] ? __sched_text_start+0x8/0x8 [ 278.449323][ T28] ? __mutex_trylock_common+0x80/0x250 [ 278.454923][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 278.460257][ T28] schedule+0xb9/0x180 [ 278.464390][ T28] schedule_preempt_disabled+0xf/0x20 [ 278.470176][ T28] __mutex_lock+0x555/0xaf0 [ 278.474756][ T28] ? __mutex_lock+0x3a5/0xaf0 [ 278.479534][ T28] ? nfc_rfkill_set_block+0x4c/0x2d0 [ 278.485029][ T28] ? mutex_lock_nested+0x10/0x10 [ 278.490229][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 278.495733][ T28] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 278.501677][ T28] ? _raw_spin_unlock+0x40/0x40 [ 278.506666][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 278.512702][ T28] ? nfc_unregister_device+0x290/0x290 [ 278.518310][ T28] nfc_rfkill_set_block+0x4c/0x2d0 [ 278.523489][ T28] ? nfc_unregister_device+0x290/0x290 [ 278.529073][ T28] rfkill_set_block+0x1c6/0x420 [ 278.534075][ T28] rfkill_sync_work+0x82/0xe0 [ 278.539099][ T28] ? process_one_work+0x7a1/0x1160 [ 278.544316][ T28] process_one_work+0x898/0x1160 [ 278.549459][ T28] ? worker_detach_from_pool+0x240/0x240 [ 278.555339][ T28] ? _raw_spin_lock_irq+0xab/0xe0 [ 278.560507][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 278.566135][ T28] ? kthread_data+0x4b/0xc0 [ 278.570719][ T28] worker_thread+0xaa2/0x1250 [ 278.575537][ T28] kthread+0x29d/0x330 [ 278.579657][ T28] ? worker_clr_flags+0x1a0/0x1a0 [ 278.584887][ T28] ? kthread_blkcg+0xd0/0xd0 [ 278.589546][ T28] ret_from_fork+0x1f/0x30 [ 278.594122][ T28] [ 278.597426][ T28] INFO: task syz.2.243:5278 blocked for more than 143 seconds. [ 278.605066][ T28] Not tainted syzkaller #0 [ 278.610030][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.619010][ T28] task:syz.2.243 state:D stack:25440 pid:5278 ppid:4269 flags:0x00004004 [ 278.628647][ T28] Call Trace: [ 278.631983][ T28] [ 278.635128][ T28] __schedule+0x10ec/0x40b0 [ 278.639716][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 278.645146][ T28] ? __sched_text_start+0x8/0x8 [ 278.650061][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 278.656281][ T28] schedule+0xb9/0x180 [ 278.660402][ T28] schedule_timeout+0x97/0x280 [ 278.665403][ T28] ? console_conditional_schedule+0x40/0x40 [ 278.671354][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 278.676666][ T28] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 278.682352][ T28] ? wait_for_completion+0x268/0x590 [ 278.687773][ T28] ? wait_for_completion+0x268/0x590 [ 278.693097][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 278.698923][ T28] ? wait_for_completion+0x268/0x590 [ 278.704259][ T28] wait_for_completion+0x2b9/0x590 [ 278.709459][ T28] ? io_schedule+0xd0/0xd0 [ 278.713943][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 278.719409][ T28] ? __flush_work+0xd4/0xa60 [ 278.724036][ T28] __flush_work+0x912/0xa60 [ 278.728635][ T28] ? __flush_work+0xd4/0xa60 [ 278.733269][ T28] ? flush_work+0x20/0x20 [ 278.737693][ T28] ? move_linked_works+0x230/0x230 [ 278.742846][ T28] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 278.748572][ T28] ? __cancel_work_timer+0x390/0x520 [ 278.753988][ T28] __cancel_work_timer+0x3ac/0x520 [ 278.759177][ T28] ? cancel_work_sync+0x20/0x20 [ 278.764067][ T28] ? nla_put+0x130/0x1e0 [ 278.768405][ T28] ? nfc_unregister_device+0x5f/0x290 [ 278.773819][ T28] ? mutex_lock_nested+0x10/0x10 [ 278.778942][ T28] ? nfc_genl_device_removed+0x22a/0x310 [ 278.784636][ T28] ? nfc_genl_setup_device_added+0x310/0x310 [ 278.790695][ T28] rfkill_unregister+0x8e/0x220 [ 278.795638][ T28] nfc_unregister_device+0x92/0x290 [ 278.800886][ T28] ? virtual_ncidev_open+0xc0/0xc0 [ 278.806111][ T28] virtual_ncidev_close+0x55/0x90 [ 278.811182][ T28] __fput+0x22c/0x920 [ 278.815293][ T28] task_work_run+0x1ca/0x250 [ 278.819929][ T28] ? task_work_cancel+0x230/0x230 [ 278.825033][ T28] ? __close_range+0x1c5/0x730 [ 278.829831][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 278.835380][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 278.840730][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 278.846380][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 278.851878][ T28] do_syscall_64+0x58/0xa0 [ 278.856555][ T28] ? clear_bhb_loop+0x60/0xb0 [ 278.861270][ T28] ? clear_bhb_loop+0x60/0xb0 [ 278.866045][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.871968][ T28] RIP: 0033:0x7fd2a2f8eec9 [ 278.876472][ T28] RSP: 002b:00007ffd452736b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 278.885055][ T28] RAX: 0000000000000000 RBX: 00007fd2a31e7da0 RCX: 00007fd2a2f8eec9 [ 278.893067][ T28] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 278.901151][ T28] RBP: 00007fd2a31e7da0 R08: 0000000000000204 R09: 0000001c452739af [ 278.909187][ T28] R10: 00000000003ffbd8 R11: 0000000000000246 R12: 00000000000202c4 [ 278.917251][ T28] R13: 00007fd2a31e6180 R14: ffffffffffffffff R15: 00007ffd452737d0 [ 278.925317][ T28] [ 278.928413][ T28] [ 278.928413][ T28] Showing all locks held in the system: [ 278.937335][ T28] 3 locks held by kworker/0:0/7: [ 278.942315][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 278.952791][ T28] #1: ffffc900000c7d00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 278.965835][ T28] #2: ffffffff8dffd148 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x23/0xc0 [ 278.977367][ T28] 1 lock held by rcu_tasks_kthre/12: [ 278.982685][ T28] #0: ffffffff8cb2b570 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 278.993254][ T28] 1 lock held by rcu_tasks_trace/13: [ 278.998709][ T28] #0: ffffffff8cb2bd90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 279.009793][ T28] 4 locks held by kworker/0:1/14: [ 279.014879][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 279.025391][ T28] #1: ffffc90000137d00 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 279.037240][ T28] #2: ffffffff8dffd148 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_sync_work+0x25/0xe0 [ 279.047301][ T28] #3: ffff888058d5a100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x4c/0x2d0 [ 279.057148][ T28] 1 lock held by khungtaskd/28: [ 279.062036][ T28] #0: ffffffff8cb2abe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 279.072062][ T28] 1 lock held by klogd/3626: [ 279.076811][ T28] #0: ffff8880b8f3aad8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 279.086878][ T28] 2 locks held by getty/4027: [ 279.091644][ T28] #0: ffff88802f1b4098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 279.103671][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 279.114180][ T28] 3 locks held by kworker/u4:8/4514: [ 279.119865][ T28] 1 lock held by syz.2.243/5278: [ 279.124878][ T28] #0: ffff888058d5a100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x5f/0x290 [ 279.134685][ T28] 2 locks held by syz.3.270/5386: [ 279.139852][ T28] #0: ffffffff8d29cf08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x56/0x360 [ 279.148409][ T28] #1: ffffffff8dffd148 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x12b/0x680 [ 279.158535][ T28] 1 lock held by syz.1.289/5442: [ 279.163511][ T28] #0: ffffffff8d29cf08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x56/0x360 [ 279.172036][ T28] 1 lock held by syz.1.289/5443: [ 279.177114][ T28] #0: ffffffff8d29cf08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x56/0x360 [ 279.185693][ T28] 1 lock held by syz.4.291/5448: [ 279.190666][ T28] #0: ffffffff8d29cf08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x56/0x360 [ 279.199240][ T28] 1 lock held by syz.0.293/5461: [ 279.204191][ T28] #0: ffffffff8d29cf08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x56/0x360 [ 279.212710][ T28] 1 lock held by syz-executor/5467: [ 279.217978][ T28] #0: ffffffff8d29cf08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x56/0x360 [ 279.226636][ T28] 1 lock held by syz-executor/5469: [ 279.231860][ T28] #0: ffffffff8d29cf08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x56/0x360 [ 279.240398][ T28] 1 lock held by syz-executor/5472: [ 279.245671][ T28] #0: ffffffff8d29cf08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x56/0x360 [ 279.254183][ T28] 1 lock held by syz-executor/5473: [ 279.259461][ T28] #0: ffffffff8d29cf08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x56/0x360 [ 279.268014][ T28] 1 lock held by syz-executor/5475: [ 279.273230][ T28] #0: ffffffff8d29cf08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x56/0x360 [ 279.281805][ T28] 1 lock held by syz-executor/5481: [ 279.290115][ T28] #0: ffffffff8d29cf08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x56/0x360 [ 279.298786][ T28] 1 lock held by syz-executor/5483: [ 279.304012][ T28] #0: ffffffff8d29cf08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x56/0x360 [ 279.312580][ T28] 1 lock held by syz-executor/5486: [ 279.317874][ T28] #0: ffffffff8d29cf08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x56/0x360 [ 279.326414][ T28] 1 lock held by syz-executor/5487: [ 279.331818][ T28] #0: ffffffff8d29cf08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x56/0x360 [ 279.340625][ T28] 1 lock held by syz-executor/5489: [ 279.345920][ T28] #0: ffffffff8d29cf08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x56/0x360 [ 279.354418][ T28] 1 lock held by syz-executor/5495: [ 279.359678][ T28] #0: ffffffff8d29cf08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x56/0x360 [ 279.368233][ T28] 1 lock held by syz-executor/5497: [ 279.373460][ T28] #0: ffffffff8d29cf08 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x56/0x360 [ 279.382029][ T28] [ 279.384370][ T28] ============================================= [ 279.384370][ T28] [ 279.393409][ T28] NMI backtrace for cpu 0 [ 279.397782][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 279.405019][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 279.415093][ T28] Call Trace: [ 279.418391][ T28] [ 279.421338][ T28] dump_stack_lvl+0x168/0x22e [ 279.426119][ T28] ? irq_work_queue+0xb8/0x140 [ 279.430904][ T28] ? show_regs_print_info+0x12/0x12 [ 279.436113][ T28] ? load_image+0x3b0/0x3b0 [ 279.440635][ T28] ? vprintk_emit+0x571/0x680 [ 279.445340][ T28] ? printk_sprint+0x460/0x460 [ 279.450123][ T28] nmi_cpu_backtrace+0x3f4/0x470 [ 279.455078][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 279.461240][ T28] ? _printk+0xcc/0x110 [ 279.465438][ T28] ? load_image+0x3b0/0x3b0 [ 279.469964][ T28] ? load_image+0x3b0/0x3b0 [ 279.474494][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 279.480697][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 279.486809][ T28] watchdog+0xeee/0xf30 [ 279.491025][ T28] ? watchdog+0x1ed/0xf30 [ 279.495387][ T28] kthread+0x29d/0x330 [ 279.499487][ T28] ? hungtask_pm_notify+0x40/0x40 [ 279.504545][ T28] ? kthread_blkcg+0xd0/0xd0 [ 279.509165][ T28] ret_from_fork+0x1f/0x30 [ 279.513699][ T28] [ 279.517120][ T28] Sending NMI from CPU 0 to CPUs 1: [ 279.522414][ C1] NMI backtrace for cpu 1 [ 279.522425][ C1] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 279.522441][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 279.522452][ C1] Workqueue: events_unbound toggle_allocation_gate [ 279.522474][ C1] RIP: 0010:insn_get_displacement+0x337/0xa20 [ 279.522499][ C1] Code: e0 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff df 42 0f b6 04 38 84 c0 0f 85 85 04 00 00 41 0f b6 2c 24 31 ff 89 ee e8 49 11 75 f7 <85> ed 74 75 4d 8d 66 20 4c 89 e0 48 c1 e8 03 42 0f b6 04 38 84 c0 [ 279.522519][ C1] RSP: 0018:ffffc900001077f8 EFLAGS: 00000293 [ 279.522532][ C1] RAX: ffffffff8a0bc007 RBX: 1ffff92000020f32 RCX: 0000000000000000 [ 279.522545][ C1] RDX: ffff88813fec3b80 RSI: 0000000000000001 RDI: 0000000000000000 [ 279.522555][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffc90000107960 [ 279.522567][ C1] R10: fffff52000020f37 R11: 1ffff92000020f2c R12: ffffc90000107985 [ 279.522580][ C1] R13: ffffc90000107994 R14: ffffc90000107960 R15: dffffc0000000000 [ 279.522598][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 279.522612][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.522623][ C1] CR2: 00005645ec820000 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 279.522637][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 279.522647][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 279.522657][ C1] Call Trace: [ 279.522662][ C1] [ 279.522673][ C1] insn_get_immediate+0x325/0x1290 [ 279.522694][ C1] ? insn_get_immediate+0xad2/0x1290 [ 279.522717][ C1] insn_decode+0x386/0x520 [ 279.522738][ C1] text_poke_loc_init+0xd6/0x570 [ 279.522760][ C1] ? kmem_cache_alloc+0x62/0x2f0 [ 279.522778][ C1] ? text_poke_finish+0x30/0x30 [ 279.522804][ C1] ? static_key_disable_cpuslocked+0x89/0x1a0 [ 279.522833][ C1] ? mutex_lock_nested+0x10/0x10 [ 279.522858][ C1] arch_jump_label_transform_queue+0x6a/0xd0 [ 279.522877][ C1] __jump_label_update+0x17d/0x390 [ 279.522897][ C1] static_key_disable_cpuslocked+0xc1/0x1a0 [ 279.522932][ C1] static_key_disable+0x16/0x20 [ 279.522957][ C1] toggle_allocation_gate+0x38f/0x430 [ 279.522974][ C1] ? show_object+0xa0/0xa0 [ 279.522990][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 279.523015][ C1] ? read_lock_is_recursive+0x10/0x10 [ 279.523036][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 279.523062][ C1] ? _raw_spin_unlock+0x40/0x40 [ 279.523087][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 279.523113][ C1] ? process_one_work+0x7a1/0x1160 [ 279.523130][ C1] process_one_work+0x898/0x1160 [ 279.523155][ C1] ? worker_detach_from_pool+0x240/0x240 [ 279.523176][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 279.523200][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 279.523225][ C1] ? kthread_data+0x4b/0xc0 [ 279.523250][ C1] worker_thread+0xaa2/0x1250 [ 279.523281][ C1] kthread+0x29d/0x330 [ 279.523304][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 279.523321][ C1] ? kthread_blkcg+0xd0/0xd0 [ 279.523346][ C1] ret_from_fork+0x1f/0x30 [ 279.523375][ C1] [ 279.534942][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 279.534960][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 279.534982][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 279.534997][ T28] Call Trace: [ 279.535005][ T28] [ 279.535014][ T28] dump_stack_lvl+0x168/0x22e [ 279.535045][ T28] ? memcpy+0x3c/0x60 [ 279.535082][ T28] ? show_regs_print_info+0x12/0x12 [ 279.535109][ T28] ? load_image+0x3b0/0x3b0 [ 279.535158][ T28] panic+0x2c9/0x710 [ 279.535189][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 279.535222][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 279.535252][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 279.535292][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 279.535322][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 279.535351][ T28] watchdog+0xf2d/0xf30 [ 279.535383][ T28] ? watchdog+0x1ed/0xf30 [ 279.535413][ T28] kthread+0x29d/0x330 [ 279.535446][ T28] ? hungtask_pm_notify+0x40/0x40 [ 279.535471][ T28] ? kthread_blkcg+0xd0/0xd0 [ 279.535508][ T28] ret_from_fork+0x1f/0x30 [ 279.535553][ T28] [ 279.536964][ T28] Kernel Offset: disabled [ 279.941289][ T28] Rebooting in 86400 seconds..