last executing test programs: 11.175755363s ago: executing program 3 (id=4): munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'wg1\x00', 0x40001}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x40) r4 = io_uring_setup(0x5013, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x3681, 0x0, 0x10000000}) io_uring_enter(r4, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) fcntl$notify(r3, 0x402, 0x8000003d) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000003c0)=[{&(0x7f00000000c0)="17e4f3ca3c05", 0x6}, {&(0x7f0000000200)="abc46908b3df918fe61946b2a7d8", 0xe}], 0x2, 0x8) r7 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r7, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r7, 0x0, 0x8000, 0x0) r8 = socket(0x2, 0x80805, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)={0x0, 0x0, 0x34}, 0x18) sendmmsg$inet_sctp(r8, &(0x7f00000032c0), 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$key(0xf, 0x3, 0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000301000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000549600000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 9.651042728s ago: executing program 3 (id=12): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 8.211579032s ago: executing program 3 (id=15): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) 6.803507816s ago: executing program 2 (id=18): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000780)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x591) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x408cd, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) socket(0x11, 0x3, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000000)={0xe000202b}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000600108805400078008000500000000000800050000000000080006000000000008000500000000000800050000000000080005000000000008000500000000000800050000000000080006000000000008000500000000002400078008000500000000000800060000000000080006000000000008000500000000004400078008000600000000000800"], 0x1a0}}, 0x0) 6.087713724s ago: executing program 2 (id=22): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x6281, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window, @mss, @window, @window], 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d"], 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x37}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 5.03621996s ago: executing program 1 (id=23): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x7, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.726769829s ago: executing program 1 (id=27): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x10b942, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00'}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) 4.625993578s ago: executing program 0 (id=28): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 4.410251237s ago: executing program 0 (id=29): semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x9}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @local}}, 0x2, 0x0, 0x3f, 0x0, "5909e7732e1e01bd124d7e8050b93adc9cb9750e8a2f49c5d1c23b9e3d2da68e96372b74ee2bf69384a09be4758a9bae36a3a4c787d1ed4c8d252f5cfe3dbbc953336a19efb30bb00f43bcb2f201c655"}, 0xd8) 3.326791413s ago: executing program 1 (id=30): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r4, 0x0, 0x400000, 0x0) 3.285755123s ago: executing program 0 (id=31): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x147042, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 3.285188883s ago: executing program 3 (id=32): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x2, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc4}]}, 0x0, 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x18, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r0, 0x4, 0x0, 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000202070250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) geteuid() 3.285030853s ago: executing program 4 (id=33): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) 3.088212642s ago: executing program 4 (id=34): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) recvmmsg(r4, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x40012003, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x8, 0x400204, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x4000, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}}}}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(r6, 0x7001) ioctl$RTC_UIE_ON(r6, 0x7003) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 2.930495121s ago: executing program 3 (id=35): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000440)=0xc) 1.996846588s ago: executing program 4 (id=36): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000280)=""/251) 1.912288967s ago: executing program 2 (id=37): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000010001000f00000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) shutdown(0xffffffffffffffff, 0x1) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 1.831169017s ago: executing program 0 (id=38): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000041000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20059793581dbcdc5937800"], 0x0) 1.825573717s ago: executing program 1 (id=39): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 1.644210026s ago: executing program 4 (id=40): r0 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.597820006s ago: executing program 2 (id=41): semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x9}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0x0, @local}}, 0x2, 0x0, 0x3f, 0x0, "5909e7732e1e01bd124d7e8050b93adc9cb9750e8a2f49c5d1c23b9e3d2da68e96372b74ee2bf69384a09be4758a9bae36a3a4c787d1ed4c8d252f5cfe3dbbc953336a19efb30bb00f43bcb2f201c655"}, 0xd8) 1.499907056s ago: executing program 1 (id=42): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) 1.412209695s ago: executing program 0 (id=43): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xfffffffd}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 1.342129355s ago: executing program 3 (id=44): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x448, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000180)='./file1\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.310131555s ago: executing program 4 (id=45): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70200000302000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x46, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 1.209404374s ago: executing program 2 (id=46): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) recvmmsg(r4, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x40012003, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x8, 0x400204, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x4000, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}}}}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(r6, 0x7001) ioctl$RTC_UIE_ON(r6, 0x7003) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 1.208680675s ago: executing program 1 (id=47): close(0xffffffffffffffff) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) setreuid(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1.104502474s ago: executing program 0 (id=48): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2015870, &(0x7f0000000280), 0x3, 0x4cf, &(0x7f0000000dc0)="$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") r0 = syz_clone(0x4008200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x1d, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ptrace(0x8, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, 0x0, 0x0) sendmsg$rds(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000600)={0x0, 0xffffffffffffff58, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r7, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r8], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x74, r7, {0xffe0}, {0x0, 0x8}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 35.10375ms ago: executing program 2 (id=49): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 0s ago: executing program 4 (id=50): prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x31b52000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20001000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. [ 68.248122][ T4239] cgroup: Unknown subsys name 'net' [ 68.411303][ T4239] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.990215][ T4239] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.298235][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.304838][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.533788][ T4256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.540389][ T4254] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.549374][ T4256] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.550271][ T4254] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.563729][ T4256] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.564613][ T4254] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.579634][ T4257] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.579995][ T4256] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.594788][ T4256] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.602215][ T4256] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.602544][ T4260] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.609775][ T4256] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.618620][ T4260] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.634276][ T4254] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.641757][ T4254] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.645148][ T4262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.660742][ T4262] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.668298][ T4262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.674176][ T4254] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.675715][ T4262] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.684544][ T4254] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.690836][ T4262] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.704367][ T4262] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.711647][ T4262] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.715582][ T4254] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.728137][ T4251] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.737423][ T4254] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.744802][ T4254] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.752159][ T4254] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.764273][ T4251] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.151642][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 72.216914][ T4259] chnl_net:caif_netlink_parms(): no params data found [ 72.285175][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 72.338228][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 72.442120][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.449447][ T4259] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.458711][ T4259] device bridge_slave_0 entered promiscuous mode [ 72.482519][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.489885][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.498201][ T4250] device bridge_slave_0 entered promiscuous mode [ 72.506545][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.513669][ T4259] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.522035][ T4259] device bridge_slave_1 entered promiscuous mode [ 72.543305][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.552366][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.564400][ T4250] device bridge_slave_1 entered promiscuous mode [ 72.623770][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.631086][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.639245][ T4264] device bridge_slave_0 entered promiscuous mode [ 72.658108][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.665353][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.673455][ T4249] device bridge_slave_0 entered promiscuous mode [ 72.684549][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.695775][ T4259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.705641][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.712742][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.721348][ T4264] device bridge_slave_1 entered promiscuous mode [ 72.728729][ T4258] chnl_net:caif_netlink_parms(): no params data found [ 72.738993][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.746773][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.755036][ T4249] device bridge_slave_1 entered promiscuous mode [ 72.763414][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.782349][ T4259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.861068][ T4250] team0: Port device team_slave_0 added [ 72.877615][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.888958][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.903083][ T4250] team0: Port device team_slave_1 added [ 72.911437][ T4259] team0: Port device team_slave_0 added [ 72.920416][ T4259] team0: Port device team_slave_1 added [ 72.928012][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.939405][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.015141][ T4264] team0: Port device team_slave_0 added [ 73.038233][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.045919][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.071904][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.084328][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.091298][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.117364][ T4259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.131009][ T4264] team0: Port device team_slave_1 added [ 73.149324][ T4249] team0: Port device team_slave_0 added [ 73.173206][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.180382][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.206571][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.218194][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.225203][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.251141][ T4259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.271667][ T4249] team0: Port device team_slave_1 added [ 73.277975][ T4258] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.285215][ T4258] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.293089][ T4258] device bridge_slave_0 entered promiscuous mode [ 73.309414][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.316579][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.342628][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.372727][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.379813][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.405878][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.417305][ T4258] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.424815][ T4258] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.432721][ T4258] device bridge_slave_1 entered promiscuous mode [ 73.440330][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.447563][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.473585][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.493260][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.500282][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.526362][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.581815][ T4258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.623219][ T4264] device hsr_slave_0 entered promiscuous mode [ 73.630309][ T4264] device hsr_slave_1 entered promiscuous mode [ 73.639346][ T4258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.660504][ T4250] device hsr_slave_0 entered promiscuous mode [ 73.667819][ T4250] device hsr_slave_1 entered promiscuous mode [ 73.674845][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.682687][ T4250] Cannot create hsr debugfs directory [ 73.691532][ T4259] device hsr_slave_0 entered promiscuous mode [ 73.698626][ T4259] device hsr_slave_1 entered promiscuous mode [ 73.706187][ T4259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.713769][ T4259] Cannot create hsr debugfs directory [ 73.733731][ T4258] team0: Port device team_slave_0 added [ 73.774971][ T4254] Bluetooth: hci0: command 0x0409 tx timeout [ 73.774987][ T4257] Bluetooth: hci3: command 0x0409 tx timeout [ 73.789471][ T4258] team0: Port device team_slave_1 added [ 73.810397][ T4249] device hsr_slave_0 entered promiscuous mode [ 73.818910][ T4249] device hsr_slave_1 entered promiscuous mode [ 73.825618][ T4249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.833195][ T4249] Cannot create hsr debugfs directory [ 73.854340][ T4260] Bluetooth: hci2: command 0x0409 tx timeout [ 73.860659][ T4260] Bluetooth: hci4: command 0x0409 tx timeout [ 73.866659][ T4257] Bluetooth: hci1: command 0x0409 tx timeout [ 73.926032][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.933112][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.959411][ T4258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.976901][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.983880][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.010959][ T4258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.115524][ T4258] device hsr_slave_0 entered promiscuous mode [ 74.122616][ T4258] device hsr_slave_1 entered promiscuous mode [ 74.129745][ T4258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.137433][ T4258] Cannot create hsr debugfs directory [ 74.374969][ T4250] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.387811][ T4250] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.402707][ T4250] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.412862][ T4250] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.481161][ T4249] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.506180][ T4249] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.516219][ T4249] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.539998][ T4249] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.555853][ T4264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.595395][ T4264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.605499][ T4264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.629437][ T4264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.665487][ T4258] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.697229][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.715338][ T4258] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.724741][ T4258] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.741587][ T4258] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.753063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.764947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.780338][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.826217][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.835699][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.845556][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.852785][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.863390][ T4259] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.891521][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.903078][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.912129][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.920890][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.928218][ T4297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.939248][ T4259] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.951356][ T4259] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.975918][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.986297][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.996972][ T4259] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.043723][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.053565][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.063973][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.105903][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.116306][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.127505][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.137797][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.172918][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.195612][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.206665][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.226317][ T4258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.238267][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.247703][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.265117][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.275652][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.305416][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.313897][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.322542][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.332806][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.343336][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.350538][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.372116][ T4258] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.393393][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.404693][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.422366][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.431342][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.440416][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.447704][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.456197][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.464383][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.472363][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.501035][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.510333][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.519544][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.526670][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.558278][ T4259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.568547][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.585454][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.600958][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.612443][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.631419][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.642727][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.653534][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.662603][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.671854][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.679038][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.687076][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.701963][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.710533][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.719441][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.728511][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.735661][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.743457][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.753049][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.761876][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.769016][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.777395][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.787991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.797143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.831080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.839982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.851161][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.854570][ T4254] Bluetooth: hci3: command 0x041b tx timeout [ 75.859310][ T4257] Bluetooth: hci0: command 0x041b tx timeout [ 75.872415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.880779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.889707][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.897433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.905815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.914753][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.923383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.934271][ T4257] Bluetooth: hci4: command 0x041b tx timeout [ 75.934356][ T4254] Bluetooth: hci2: command 0x041b tx timeout [ 75.944512][ T4257] Bluetooth: hci1: command 0x041b tx timeout [ 75.959472][ T4259] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.977101][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.989676][ T4249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.001211][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.015909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.023873][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.033067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.041973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.050928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.059722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.073846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.083202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.092160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.101308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.115484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.138106][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.152822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.161872][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.169036][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.178539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.187443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.195936][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.202995][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.211291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.220073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.228964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.255368][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.281270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.291170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.306572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.320603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.330723][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.347008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.356689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.365752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.391078][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.407683][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.428803][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.458538][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.488112][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.518574][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.535651][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.554827][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.569975][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.595398][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.618249][ T4250] device veth0_vlan entered promiscuous mode [ 76.643898][ T4259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.670159][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.683483][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.691817][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.707546][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.718806][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.736133][ T4250] device veth1_vlan entered promiscuous mode [ 76.792408][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.822738][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.841053][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.850792][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.865943][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.900328][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.928292][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.963554][ T4250] device veth0_macvtap entered promiscuous mode [ 77.001575][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.011252][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.035864][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.055608][ T4250] device veth1_macvtap entered promiscuous mode [ 77.068511][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.081395][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.092771][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.105813][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.113838][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.129492][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.138012][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.150284][ T4249] device veth0_vlan entered promiscuous mode [ 77.172456][ T4258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.199796][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.226065][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.233598][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.248253][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.257703][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.269935][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.280744][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.305795][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.320199][ T4259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.330937][ T4249] device veth1_vlan entered promiscuous mode [ 77.341696][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.350157][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.358880][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.368625][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.416970][ T4250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.428729][ T4250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.439262][ T4250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.448691][ T4250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.482772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.493259][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.559927][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.569959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.579215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.588405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.606987][ T4249] device veth0_macvtap entered promiscuous mode [ 77.635148][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.649130][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.658796][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.668304][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.677575][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.686864][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.696613][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.705198][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.713112][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.722021][ T4264] device veth0_vlan entered promiscuous mode [ 77.741661][ T4259] device veth0_vlan entered promiscuous mode [ 77.761296][ T4249] device veth1_macvtap entered promiscuous mode [ 77.786688][ T4264] device veth1_vlan entered promiscuous mode [ 77.818140][ T4259] device veth1_vlan entered promiscuous mode [ 77.892300][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.901052][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.910050][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.919121][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.928942][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.934904][ T4254] Bluetooth: hci3: command 0x040f tx timeout [ 77.937162][ T4257] Bluetooth: hci0: command 0x040f tx timeout [ 77.949642][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.959613][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.968793][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.977812][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.995837][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.006659][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.015108][ T4257] Bluetooth: hci2: command 0x040f tx timeout [ 78.018759][ T4254] Bluetooth: hci1: command 0x040f tx timeout [ 78.022471][ T4257] Bluetooth: hci4: command 0x040f tx timeout [ 78.036910][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.047164][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.057997][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.069494][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.086845][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.098368][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.105689][ T4259] device veth0_macvtap entered promiscuous mode [ 78.106841][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.125318][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.134915][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.143748][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.152947][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.162109][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.170828][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.181597][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.190878][ T4264] device veth0_macvtap entered promiscuous mode [ 78.202643][ T4264] device veth1_macvtap entered promiscuous mode [ 78.213845][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.222359][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.231499][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.240947][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.250864][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.260571][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.271731][ T4249] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.280677][ T4249] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.289953][ T4249] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.298993][ T4249] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.327297][ T4259] device veth1_macvtap entered promiscuous mode [ 78.348025][ T4258] device veth0_vlan entered promiscuous mode [ 78.373059][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.386454][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.397885][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.409103][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.420875][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.432535][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.454988][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.466065][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.477778][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.488623][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.500009][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.518256][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.530533][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.539590][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.548404][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.564783][ T4297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.573172][ T4297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.586293][ T4258] device veth1_vlan entered promiscuous mode [ 78.593670][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.610530][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.621754][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.633331][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.644209][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.655060][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.667544][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.679180][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.689277][ T4264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.698503][ T4264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.707862][ T4264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.716893][ T4264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.751895][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.761934][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.774553][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.786203][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.796179][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.806669][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.817284][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.827771][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.838935][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.874712][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.883993][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.897074][ T4259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.907274][ T4259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.917379][ T4259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.931419][ T4259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.948592][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.970146][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.979395][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.990719][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.019524][ T4258] device veth0_macvtap entered promiscuous mode [ 79.042100][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.057657][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.116778][ T4258] device veth1_macvtap entered promiscuous mode [ 79.188796][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.201226][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.222679][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.231609][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.249530][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.260871][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.275437][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.286579][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.296985][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.307605][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.317750][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.330374][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.341947][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.372050][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.383534][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.389423][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.404816][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.418740][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.436309][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.438245][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.444438][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.466698][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.477180][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.488000][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.498198][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.508987][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.519094][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.529878][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.541457][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.574398][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.582419][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.625935][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.638286][ T4258] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.647934][ T4258] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.657365][ T4258] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.666798][ T4258] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.698858][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.731942][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.754367][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.762621][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.795780][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.852382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.003727][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.016316][ T4257] Bluetooth: hci0: command 0x0419 tx timeout [ 80.021223][ T4254] Bluetooth: hci3: command 0x0419 tx timeout [ 80.047894][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.094335][ T4260] Bluetooth: hci1: command 0x0419 tx timeout [ 80.100415][ T4260] Bluetooth: hci2: command 0x0419 tx timeout [ 80.107097][ T4254] Bluetooth: hci4: command 0x0419 tx timeout [ 80.137897][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.204599][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.212710][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.274477][ T4351] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 80.315261][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.540489][ T4356] loop0: detected capacity change from 0 to 2048 [ 80.596063][ T4353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.076186][ T4343] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.122626][ T126] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.181948][ T4353] team0: Port device bond1 added [ 81.190614][ T126] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.246710][ T126] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.264814][ T4356] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 81.269668][ T126] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.295788][ T126] rtc rtc0: __rtc_set_alarm: err=-22 [ 81.341089][ T4353] EXT4-fs error (device loop0): __ext4_new_inode:1075: comm syz.0.7: reserved inode found cleared - inode=1 [ 81.720639][ T27] audit: type=1326 audit(1734891782.536:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ddf85d29 code=0x7ffc0000 [ 81.784454][ T4375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'. [ 81.832747][ T27] audit: type=1326 audit(1734891782.576:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ddf85d29 code=0x7ffc0000 [ 81.871884][ T4376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'. [ 81.878620][ T27] audit: type=1326 audit(1734891782.576:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff2ddf85d29 code=0x7ffc0000 [ 82.095456][ T27] audit: type=1326 audit(1734891782.576:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ddf85d29 code=0x7ffc0000 [ 82.118554][ T27] audit: type=1326 audit(1734891782.576:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ddf85d29 code=0x7ffc0000 [ 82.141211][ T27] audit: type=1326 audit(1734891782.576:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff2ddf85d29 code=0x7ffc0000 [ 82.205224][ T27] audit: type=1326 audit(1734891782.576:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ddf85d29 code=0x7ffc0000 [ 82.254874][ T4333] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.474526][ T4333] usb 1-1: device descriptor read/64, error -71 [ 83.004387][ T27] audit: type=1326 audit(1734891782.576:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ddf85d29 code=0x7ffc0000 [ 83.044478][ T4333] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 83.103412][ T27] audit: type=1326 audit(1734891782.576:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff2ddf85d29 code=0x7ffc0000 [ 83.193822][ T27] audit: type=1326 audit(1734891782.596:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4369 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ddf85d29 code=0x7ffc0000 [ 83.216772][ T4333] usb 1-1: device descriptor read/64, error -71 [ 83.341144][ T4333] usb usb1-port1: attempt power cycle [ 84.214061][ C1] sched: RT throttling activated [ 84.665880][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 84.708075][ T4395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18'. [ 84.746422][ T4395] netlink: 160 bytes leftover after parsing attributes in process `syz.2.18'. [ 84.778950][ T4395] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18'. [ 85.491323][ T4409] rtc_cmos 00:00: Alarms can be up to one day in the future [ 85.864524][ T4298] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.274328][ T4298] usb 3-1: Using ep0 maxpacket: 8 [ 86.299897][ T4413] tipc: Enabling of bearer rejected, failed to enable media [ 86.309850][ T4298] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.363583][ T4298] usb 3-1: config 0 has no interfaces? [ 86.376498][ T4298] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.391055][ T4298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.409916][ T4298] usb 3-1: config 0 descriptor?? [ 86.659492][ T7] cfg80211: failed to load regulatory.db [ 87.009261][ T4433] loop1: detected capacity change from 0 to 128 [ 87.890018][ T9] kworker/u4:0: attempt to access beyond end of device [ 87.890018][ T9] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 87.923328][ T4298] usb 3-1: USB disconnect, device number 2 [ 88.033126][ T4443] loop0: detected capacity change from 0 to 2048 [ 88.085927][ T27] kauditd_printk_skb: 60 callbacks suppressed [ 88.085944][ T27] audit: type=1326 audit(1734891788.906:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.3.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2094985d29 code=0x7ffc0000 [ 88.304307][ T27] audit: type=1326 audit(1734891788.906:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.3.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2094985d29 code=0x7ffc0000 [ 88.321271][ T4443] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 88.327087][ T27] audit: type=1326 audit(1734891788.956:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.3.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2094985d29 code=0x7ffc0000 [ 88.358592][ T27] audit: type=1326 audit(1734891788.956:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.3.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2094985d29 code=0x7ffc0000 [ 88.381546][ T27] audit: type=1326 audit(1734891788.956:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.3.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2094985d29 code=0x7ffc0000 [ 88.481994][ T4455] rtc_cmos 00:00: Alarms can be up to one day in the future [ 88.554132][ T27] audit: type=1326 audit(1734891788.956:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.3.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2094985d29 code=0x7ffc0000 [ 89.125235][ T4443] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 89.191140][ T27] audit: type=1326 audit(1734891788.956:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.3.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2094985d29 code=0x7ffc0000 [ 89.218730][ T27] audit: type=1326 audit(1734891788.956:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.3.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2094985d29 code=0x7ffc0000 [ 89.241815][ T27] audit: type=1326 audit(1734891788.956:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.3.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f2094985d29 code=0x7ffc0000 [ 89.341475][ T27] audit: type=1326 audit(1734891788.956:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.3.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2094985d29 code=0x7ffc0000 [ 89.421832][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 90.039736][ T4485] loop3: detected capacity change from 0 to 512 [ 90.068308][ T4485] ======================================================= [ 90.068308][ T4485] WARNING: The mand mount option has been deprecated and [ 90.068308][ T4485] and is ignored by this kernel. Remove the mand [ 90.068308][ T4485] option from the mount to silence this warning. [ 90.068308][ T4485] ======================================================= [ 90.200575][ T4494] loop0: detected capacity change from 0 to 512 [ 90.223350][ T4495] netlink: 'syz.4.45': attribute type 1 has an invalid length. [ 90.236943][ T4485] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.286073][ T4496] loop1: detected capacity change from 0 to 1024 [ 90.304177][ T4485] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.327953][ T4495] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.45'. [ 90.356427][ T4241] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 90.397372][ T4485] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 90.424707][ T4496] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 90.505716][ T4503] rtc_cmos 00:00: Alarms can be up to one day in the future [ 91.065868][ T4485] EXT4-fs (loop3): 1 truncate cleaned up [ 91.096602][ T4485] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 91.236994][ T4485] ================================================================== [ 91.245126][ T4485] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x8ca/0x1f30 [ 91.252916][ T4485] Read of size 18446744073709551572 at addr ffff88807bde9850 by task syz.3.44/4485 [ 91.262233][ T4485] [ 91.264607][ T4485] CPU: 0 PID: 4485 Comm: syz.3.44 Tainted: G W 6.1.121-syzkaller #0 [ 91.274016][ T4485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 91.284104][ T4485] Call Trace: [ 91.287403][ T4485] [ 91.290354][ T4485] dump_stack_lvl+0x1e3/0x2cb [ 91.295078][ T4485] ? nf_tcp_handle_invalid+0x642/0x642 [ 91.300586][ T4485] ? panic+0x764/0x764 [ 91.304683][ T4485] ? _printk+0xd1/0x111 [ 91.308876][ T4485] ? __virt_addr_valid+0x17f/0x530 [ 91.314042][ T4485] ? __virt_addr_valid+0x17f/0x530 [ 91.319203][ T4485] print_report+0x15f/0x4f0 [ 91.323741][ T4485] ? __virt_addr_valid+0x17f/0x530 [ 91.328897][ T4485] ? __virt_addr_valid+0x17f/0x530 [ 91.334042][ T4485] ? __virt_addr_valid+0x45b/0x530 [ 91.339180][ T4485] ? __phys_addr+0xb6/0x170 [ 91.343701][ T4485] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 91.349161][ T4485] kasan_report+0x136/0x160 [ 91.353666][ T4485] ? __x64_sys_unlink+0x45/0x50 [ 91.358528][ T4485] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 91.363998][ T4485] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 91.369457][ T4485] kasan_check_range+0x27f/0x290 [ 91.374399][ T4485] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 91.379861][ T4485] memmove+0x25/0x60 [ 91.383762][ T4485] ext4_xattr_set_entry+0x8ca/0x1f30 [ 91.389059][ T4485] ? ext4_xattr_inode_lookup_create+0x1ff0/0x1ff0 [ 91.395473][ T4485] ? ext4_xattr_block_set+0x884/0x3920 [ 91.400931][ T4485] ? kmemdup+0x41/0x60 [ 91.405003][ T4485] ? memcpy+0x3c/0x60 [ 91.409019][ T4485] ext4_xattr_block_set+0xa58/0x3920 [ 91.414314][ T4485] ? __getblk_gfp+0x50/0xa20 [ 91.418907][ T4485] ? _raw_spin_unlock+0x24/0x40 [ 91.423763][ T4485] ? ext4_xattr_block_find+0x510/0x510 [ 91.429226][ T4485] ? ext4_xattr_block_find+0x468/0x510 [ 91.434687][ T4485] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 91.440593][ T4485] ? ext4_xattr_set+0x3d0/0x3d0 [ 91.445441][ T4485] ? rwsem_write_trylock+0x166/0x210 [ 91.450736][ T4485] ? clear_nonspinnable+0x60/0x60 [ 91.455763][ T4485] ? ext4_reserve_inode_write+0x2b3/0x360 [ 91.461486][ T4485] ? dquot_initialize_needed+0x128/0x320 [ 91.467125][ T4485] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 91.472769][ T4485] __ext4_mark_inode_dirty+0x54f/0x920 [ 91.478237][ T4485] ? ext4_blocks_for_truncate+0x270/0x270 [ 91.483963][ T4485] ? current_time+0x1ba/0x300 [ 91.488657][ T4485] ? atime_needs_update+0x7b0/0x7b0 [ 91.493867][ T4485] __ext4_unlink+0x6ed/0xba0 [ 91.498462][ T4485] ? __ext4_read_dirblock+0x890/0x890 [ 91.503839][ T4485] ? rwsem_write_trylock+0x166/0x210 [ 91.509133][ T4485] ? inode_permission+0xf7/0x450 [ 91.514076][ T4485] ? clear_nonspinnable+0x60/0x60 [ 91.519108][ T4485] ext4_unlink+0x1d5/0x670 [ 91.523527][ T4485] vfs_unlink+0x359/0x5f0 [ 91.527867][ T4485] do_unlinkat+0x4a5/0x820 [ 91.532292][ T4485] ? fsnotify_link_count+0xf0/0xf0 [ 91.537416][ T4485] __x64_sys_unlink+0x45/0x50 [ 91.542102][ T4485] do_syscall_64+0x3b/0xb0 [ 91.546531][ T4485] ? clear_bhb_loop+0x45/0xa0 [ 91.551203][ T4485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.557104][ T4485] RIP: 0033:0x7f2094985d29 [ 91.561530][ T4485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.581231][ T4485] RSP: 002b:00007f20958a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 91.589651][ T4485] RAX: ffffffffffffffda RBX: 00007f2094b75fa0 RCX: 00007f2094985d29 [ 91.597625][ T4485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 91.605594][ T4485] RBP: 00007f2094a01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 91.613586][ T4485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.621554][ T4485] R13: 0000000000000000 R14: 00007f2094b75fa0 R15: 00007ffd0a6cc438 [ 91.629533][ T4485] [ 91.632549][ T4485] [ 91.634870][ T4485] Allocated by task 4485: [ 91.639188][ T4485] kasan_set_track+0x4b/0x70 [ 91.643790][ T4485] __kasan_kmalloc+0x97/0xb0 [ 91.648379][ T4485] __kmalloc_node_track_caller+0xb1/0x220 [ 91.654104][ T4485] kmemdup+0x26/0x60 [ 91.657998][ T4485] ext4_xattr_block_set+0x884/0x3920 [ 91.663282][ T4485] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 91.669176][ T4485] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 91.674819][ T4485] __ext4_mark_inode_dirty+0x54f/0x920 [ 91.680282][ T4485] __ext4_unlink+0x6ed/0xba0 [ 91.684872][ T4485] ext4_unlink+0x1d5/0x670 [ 91.689290][ T4485] vfs_unlink+0x359/0x5f0 [ 91.693643][ T4485] do_unlinkat+0x4a5/0x820 [ 91.698066][ T4485] __x64_sys_unlink+0x45/0x50 [ 91.702747][ T4485] do_syscall_64+0x3b/0xb0 [ 91.707185][ T4485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.713173][ T4485] [ 91.715494][ T4485] The buggy address belongs to the object at ffff88807bde9800 [ 91.715494][ T4485] which belongs to the cache kmalloc-1k of size 1024 [ 91.729632][ T4485] The buggy address is located 80 bytes inside of [ 91.729632][ T4485] 1024-byte region [ffff88807bde9800, ffff88807bde9c00) [ 91.742902][ T4485] [ 91.745222][ T4485] The buggy address belongs to the physical page: [ 91.751636][ T4485] page:ffffea0001ef7a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bde8 [ 91.761795][ T4485] head:ffffea0001ef7a00 order:3 compound_mapcount:0 compound_pincount:0 [ 91.770113][ T4485] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 91.778110][ T4485] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017c41dc0 [ 91.786776][ T4485] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 91.795375][ T4485] page dumped because: kasan: bad access detected [ 91.801813][ T4485] page_owner tracks the page as allocated [ 91.807606][ T4485] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11, tgid 11 (kworker/u4:1), ts 76032316686, free_ts 75958527601 [ 91.828010][ T4485] post_alloc_hook+0x18d/0x1b0 [ 91.832774][ T4485] get_page_from_freelist+0x3731/0x38d0 [ 91.838318][ T4485] __alloc_pages+0x28d/0x770 [ 91.842905][ T4485] alloc_slab_page+0x6a/0x150 [ 91.847589][ T4485] new_slab+0x84/0x2d0 [ 91.851664][ T4485] ___slab_alloc+0xc20/0x1270 [ 91.856344][ T4485] __kmem_cache_alloc_node+0x19f/0x260 [ 91.861805][ T4485] __kmalloc_node_track_caller+0xa0/0x220 [ 91.867611][ T4485] __alloc_skb+0x135/0x670 [ 91.872119][ T4485] inet6_rt_notify+0xdc/0x280 [ 91.876798][ T4485] fib6_add+0x1db2/0x3c80 [ 91.881131][ T4485] ip6_route_add+0x84/0x120 [ 91.885636][ T4485] addrconf_add_dev+0x350/0x500 [ 91.890492][ T4485] addrconf_init_auto_addrs+0x88e/0xe60 [ 91.896036][ T4485] addrconf_notify+0xade/0xf60 [ 91.900798][ T4485] raw_notifier_call_chain+0xd0/0x170 [ 91.906189][ T4485] page last free stack trace: [ 91.910878][ T4485] free_unref_page_prepare+0x12a6/0x15b0 [ 91.916528][ T4485] free_unref_page+0x33/0x3e0 [ 91.921209][ T4485] __unfreeze_partials+0x1b7/0x210 [ 91.926325][ T4485] put_cpu_partial+0x17b/0x250 [ 91.931094][ T4485] qlist_free_all+0x76/0xe0 [ 91.935609][ T4485] kasan_quarantine_reduce+0x156/0x170 [ 91.941069][ T4485] __kasan_slab_alloc+0x1f/0x70 [ 91.945916][ T4485] slab_post_alloc_hook+0x52/0x3a0 [ 91.951038][ T4485] kmem_cache_alloc_node+0x136/0x310 [ 91.956322][ T4485] __alloc_skb+0xde/0x670 [ 91.960657][ T4485] netlink_sendmsg+0x6f8/0xd60 [ 91.965426][ T4485] __sys_sendto+0x480/0x600 [ 91.969955][ T4485] __x64_sys_sendto+0xda/0xf0 [ 91.974664][ T4485] do_syscall_64+0x3b/0xb0 [ 91.979110][ T4485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.985016][ T4485] [ 91.987335][ T4485] Memory state around the buggy address: [ 91.992957][ T4485] ffff88807bde9700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 92.001015][ T4485] ffff88807bde9780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 92.009075][ T4485] >ffff88807bde9800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 92.017145][ T4485] ^ [ 92.023816][ T4485] ffff88807bde9880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 92.031872][ T4485] ffff88807bde9900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 92.039931][ T4485] ================================================================== [ 92.129593][ T4485] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 92.136866][ T4485] CPU: 0 PID: 4485 Comm: syz.3.44 Tainted: G W 6.1.121-syzkaller #0 [ 92.146272][ T4485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 92.156359][ T4485] Call Trace: [ 92.159668][ T4485] [ 92.162624][ T4485] dump_stack_lvl+0x1e3/0x2cb [ 92.167350][ T4485] ? nf_tcp_handle_invalid+0x642/0x642 [ 92.172863][ T4485] ? panic+0x764/0x764 [ 92.176986][ T4485] ? preempt_schedule_common+0xa6/0xd0 [ 92.182561][ T4485] ? vscnprintf+0x59/0x80 [ 92.186929][ T4485] panic+0x318/0x764 [ 92.190854][ T4485] ? check_panic_on_warn+0x1d/0xa0 [ 92.195992][ T4485] ? memcpy_page_flushcache+0xfc/0xfc [ 92.201374][ T4485] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 92.207450][ T4485] ? _raw_spin_unlock+0x40/0x40 [ 92.212308][ T4485] check_panic_on_warn+0x7e/0xa0 [ 92.217253][ T4485] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 92.222711][ T4485] end_report+0x66/0x110 [ 92.226953][ T4485] kasan_report+0x143/0x160 [ 92.231451][ T4485] ? __x64_sys_unlink+0x45/0x50 [ 92.236306][ T4485] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 92.241765][ T4485] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 92.247224][ T4485] kasan_check_range+0x27f/0x290 [ 92.252160][ T4485] ? ext4_xattr_set_entry+0x8ca/0x1f30 [ 92.257640][ T4485] memmove+0x25/0x60 [ 92.261539][ T4485] ext4_xattr_set_entry+0x8ca/0x1f30 [ 92.266837][ T4485] ? ext4_xattr_inode_lookup_create+0x1ff0/0x1ff0 [ 92.273250][ T4485] ? ext4_xattr_block_set+0x884/0x3920 [ 92.278708][ T4485] ? kmemdup+0x41/0x60 [ 92.282780][ T4485] ? memcpy+0x3c/0x60 [ 92.286864][ T4485] ext4_xattr_block_set+0xa58/0x3920 [ 92.292253][ T4485] ? __getblk_gfp+0x50/0xa20 [ 92.296860][ T4485] ? _raw_spin_unlock+0x24/0x40 [ 92.301732][ T4485] ? ext4_xattr_block_find+0x510/0x510 [ 92.307226][ T4485] ? ext4_xattr_block_find+0x468/0x510 [ 92.312691][ T4485] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 92.318602][ T4485] ? ext4_xattr_set+0x3d0/0x3d0 [ 92.323451][ T4485] ? rwsem_write_trylock+0x166/0x210 [ 92.328750][ T4485] ? clear_nonspinnable+0x60/0x60 [ 92.333809][ T4485] ? ext4_reserve_inode_write+0x2b3/0x360 [ 92.339542][ T4485] ? dquot_initialize_needed+0x128/0x320 [ 92.345185][ T4485] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 92.350836][ T4485] __ext4_mark_inode_dirty+0x54f/0x920 [ 92.356312][ T4485] ? ext4_blocks_for_truncate+0x270/0x270 [ 92.362041][ T4485] ? current_time+0x1ba/0x300 [ 92.366739][ T4485] ? atime_needs_update+0x7b0/0x7b0 [ 92.372299][ T4485] __ext4_unlink+0x6ed/0xba0 [ 92.376896][ T4485] ? __ext4_read_dirblock+0x890/0x890 [ 92.382273][ T4485] ? rwsem_write_trylock+0x166/0x210 [ 92.387614][ T4485] ? inode_permission+0xf7/0x450 [ 92.392554][ T4485] ? clear_nonspinnable+0x60/0x60 [ 92.397586][ T4485] ext4_unlink+0x1d5/0x670 [ 92.402007][ T4485] vfs_unlink+0x359/0x5f0 [ 92.406352][ T4485] do_unlinkat+0x4a5/0x820 [ 92.410778][ T4485] ? fsnotify_link_count+0xf0/0xf0 [ 92.415925][ T4485] __x64_sys_unlink+0x45/0x50 [ 92.420615][ T4485] do_syscall_64+0x3b/0xb0 [ 92.425039][ T4485] ? clear_bhb_loop+0x45/0xa0 [ 92.429725][ T4485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.435626][ T4485] RIP: 0033:0x7f2094985d29 [ 92.440047][ T4485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.459651][ T4485] RSP: 002b:00007f20958a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 92.468070][ T4485] RAX: ffffffffffffffda RBX: 00007f2094b75fa0 RCX: 00007f2094985d29 [ 92.476061][ T4485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 92.484046][ T4485] RBP: 00007f2094a01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 92.492054][ T4485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.500034][ T4485] R13: 0000000000000000 R14: 00007f2094b75fa0 R15: 00007ffd0a6cc438 [ 92.508022][ T4485] [ 92.511355][ T4485] Kernel Offset: disabled [ 92.515724][ T4485] Rebooting in 86400 seconds..