last executing test programs: 4.044709007s ago: executing program 0 (id=114): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.013891432s ago: executing program 4 (id=116): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffd, 0x8000000, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 2.865447322s ago: executing program 0 (id=119): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f6, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r1, 0x0, 0x0, 0x0, 0xd4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) utimes(&(0x7f0000000240)='./file0\x00', 0x0) 2.660266211s ago: executing program 2 (id=122): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf9100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r3, 0xc0189436, 0x1ffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x34, 0x6, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) 2.55166078s ago: executing program 0 (id=125): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x213a, 0x4) sendmmsg$inet(r0, &(0x7f0000001980), 0x0, 0x240080e4) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.39627864s ago: executing program 2 (id=127): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a41", 0x12) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) 2.39051226s ago: executing program 0 (id=128): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x1000000, 0x200101, 0x0, 'queue1\x00', 0xffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000ffa000/0x4000)=nil, 0x4) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000bc1d306c86d02363148854023d6f04f61dfccf24ed0fc2df1dcb031e57abed97fb6d4311e429efbb9e03433602809e5d44fb8535bed2bed92a61b6d373f1ebfb5b386e321068dc42a1cc5c87d36f31428214b35474162a8ae401f7bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10) r10 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r10, 0x40605346, &(0x7f0000001280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xf963}}) 2.030136628s ago: executing program 1 (id=130): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.010062798s ago: executing program 4 (id=131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x65, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 1.778255947s ago: executing program 4 (id=134): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0xc0, 0x26, 0x1, 0x0, 0x0, "", [@nested={0xb0, 0x0, 0x0, 0x1, [@generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d"]}]}, 0xc0}], 0x1}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x5, 0x17, 0x1, 0x4, 0x1, "48a3452958bb0731809e65dbaeb8f591e03aa6"}) write(r1, &(0x7f0000000000), 0x0) 1.777870627s ago: executing program 3 (id=135): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[], 0x44}}, 0xc50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fsetxattr$trusted_overlay_redirect(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) 1.777295037s ago: executing program 1 (id=136): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f6, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r1, 0x0, 0x0, 0x0, 0xd4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) utimes(&(0x7f0000000240)='./file0\x00', 0x0) 1.636984837s ago: executing program 4 (id=137): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf9100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r3, 0xc0189436, 0x1ffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x34, 0x6, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) 1.636634437s ago: executing program 3 (id=138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 1.564518576s ago: executing program 1 (id=139): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x213a, 0x4) sendmmsg$inet(r0, &(0x7f0000001980), 0x0, 0x240080e4) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.551338746s ago: executing program 4 (id=140): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f0000000000), 0x45, 0x775, &(0x7f0000001cc0)="$eJzs3d9rW2UfAPDvSdt17fa+7Qsv6LwqCFoYS+2sm4IXEy9EcDDQa7eQZmU2bUaTjrUU3BDBG0HFC0Fvdu2PeeetP271v1CQjandcOKFVE6atOmadGltEqGfD5z2+5xzkud8c87znCc5hySAA2ss/ZOJOBYR7yURI7X5SUQMVKP+iDPr691fXcmnUxJra6/+mlTXube6ko+Gx6SO1AqPRsS3b0ccz2yvt7y0PJsrFgsLtfJEZe7yRHlp+cSludxMYaYwf2pyaurk6WdOn9q/XH//Yfno7fdfevKLM3++9cjNd79L4kwcrS1rzGO/jMVY7TUZSF/CLV7c78p6LOn1BrAnadPsW2/lcSxGoq8atTDUzS0DADrlzYhYAwAOmMT5HwAOmPrnAPdWV/L1qbefSHTXnRci4vB6/vXrm+tL+mvX7A5Xr4MO30u2XBlJImJ0H+ofi4hPvnr9s3SKDl2HBGjm2vWIuDA6tr3/T7bds7BbT7WxztgDZf0fdM/X6fjn2Wbjv8zG+CeajH8Gm7TdvXh4+8/c2odqWkrHf8833Nt2vyH/mtG+Wuk/1THfQHLxUrGQ9m3/jYjxGBhMy5M71DF+96+7W2YMbIaN47/fPnjj07T+9P/mGplb/YNbn286V8n907zr7lyPeKy/Wf7Jxv5PWox/z7VZx8vPvfNxq2Vp/mm+9Wl7/p21diPiiab7f/OOtmTH+xMnqofDRP2gaOLLHz8ablV/4/5Pp7T++nuBbkj3//DO+Y8mjfdrlndfx/c3Rr5ptezh+Tc//g8lr1XjQ7V5V3OVysJkxKHkle3zT24+tl6ur5/mP/548/a/0/GfNuELbebff/uXz/eef2el+U/vav+3F/xUe3A65+b92b5W9be3/6eq0XhtTjv9X7tbutfXDQAAAAAAAAAAAAAAAAAAAAAAAAB2IxMRRyPJZDfiTCabXf8N7//HcKZYKleOXywtzk9H9beyR2MgU/+qy5GG70OdrH0ffr188oHy0xHxv4j4cHCoWs7mS8XpXicPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADVHWvz+f+rnwV5vHQDQMYd7vQEAQNc5/wPAwbO78/9Qx7YDAOge7/8B4OBx/geAg8f5HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA47d/ZsOq39sbqST8vTV5YWZ0tXTkwXyrPZucV8Nl9auJydKZVmioVsvjTX8omurf8rlkqXp2J+8epEpVCuTJSXls/PlRbnK+cvzeVmCucLA13LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADaV15ans0Vi4UFgUAg2Agae4mh3nVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9yfwcAAP//8p8oTQ==") creat(&(0x7f0000000080)='./file0\x00', 0x100) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.540350416s ago: executing program 3 (id=141): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffd, 0x8000000, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 1.415645026s ago: executing program 2 (id=142): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x8) 1.367370985s ago: executing program 0 (id=143): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x80280, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0, 0x0, 0x8000000000000001}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYBLOB], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) get_mempolicy(0x0, 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) 1.366966965s ago: executing program 1 (id=144): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'hsr0\x00'}) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x16, 0x0, 0xa9, 0x0, 0xf1, 0x1}) 1.339564185s ago: executing program 3 (id=145): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) open(0x0, 0x143862, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.252337735s ago: executing program 2 (id=146): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3}, 0x10) 1.061448454s ago: executing program 2 (id=147): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.056139764s ago: executing program 0 (id=148): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, 0x0, &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x81, 0x3, 0x8000, 0x52, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6(0xa, 0x80002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fefd, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x1318, 0x1158, 0x0, 0x148, 0x0, 0x148, 0x1280, 0x240, 0x240, 0x1280, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'bridge0\x00'}, 0x0, 0x10f8, 0x1158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1378) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xc, &(0x7f0000000580)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xff7, &(0x7f0000002e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xdc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$inet_sctp(0x2, 0x5, 0x84) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYRES16=r4, @ANYRES32], 0x38}}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 206.319991ms ago: executing program 1 (id=149): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f6, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r1, 0x0, 0x0, 0x0, 0xd4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) utimes(&(0x7f0000000240)='./file0\x00', 0x0) 205.800951ms ago: executing program 3 (id=150): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf9100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) sched_setscheduler(0x0, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r3, 0xc0189436, 0x1ffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x34, 0x6, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) 177.57901ms ago: executing program 2 (id=151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 110.23574ms ago: executing program 4 (id=152): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a41", 0x12) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) 342.04µs ago: executing program 3 (id=153): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_pgetevents(0x0, 0xfff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)='{', 0x1}], 0x1}}], 0x1, 0x0) 0s ago: executing program 1 (id=154): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts. [ 58.423335][ T4155] cgroup: Unknown subsys name 'net' [ 58.584785][ T4155] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.069546][ T4155] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.784134][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 61.888520][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.895998][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.904715][ T4176] device bridge_slave_0 entered promiscuous mode [ 61.932404][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.941269][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.949577][ T4176] device bridge_slave_1 entered promiscuous mode [ 62.024162][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 62.044990][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.071699][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.109419][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 62.138014][ T4176] team0: Port device team_slave_0 added [ 62.149168][ T4176] team0: Port device team_slave_1 added [ 62.173374][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 62.207384][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 62.222085][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.229129][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.255338][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.291680][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.298683][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.325454][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.386094][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.393795][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.402140][ T4166] device bridge_slave_0 entered promiscuous mode [ 62.437892][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.445305][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.453374][ T4166] device bridge_slave_1 entered promiscuous mode [ 62.483247][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.490523][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.498562][ T4167] device bridge_slave_0 entered promiscuous mode [ 62.512939][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.520158][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.527904][ T4168] device bridge_slave_0 entered promiscuous mode [ 62.551784][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.559218][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.567115][ T4167] device bridge_slave_1 entered promiscuous mode [ 62.582930][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.590079][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.597978][ T4168] device bridge_slave_1 entered promiscuous mode [ 62.607702][ T4176] device hsr_slave_0 entered promiscuous mode [ 62.614610][ T4176] device hsr_slave_1 entered promiscuous mode [ 62.621758][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.629139][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.636970][ T4170] device bridge_slave_0 entered promiscuous mode [ 62.654818][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.683244][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.692551][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.699835][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.707621][ T4170] device bridge_slave_1 entered promiscuous mode [ 62.723867][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.743608][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.769549][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.781684][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.813520][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.851855][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.871345][ T4166] team0: Port device team_slave_0 added [ 62.884092][ T4168] team0: Port device team_slave_0 added [ 62.899684][ T4167] team0: Port device team_slave_0 added [ 62.915737][ T4166] team0: Port device team_slave_1 added [ 62.932307][ T4168] team0: Port device team_slave_1 added [ 62.939164][ T4167] team0: Port device team_slave_1 added [ 62.947357][ T4170] team0: Port device team_slave_0 added [ 62.987745][ T4170] team0: Port device team_slave_1 added [ 63.002380][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.009523][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.035734][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.053335][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.060625][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.086693][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.107415][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.114627][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.141025][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.166841][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.174499][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.200916][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.212618][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.219868][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.246621][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.275599][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.282639][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.308707][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.328237][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.335322][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.361608][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.398169][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.405254][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.431629][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.471503][ T4167] device hsr_slave_0 entered promiscuous mode [ 63.478508][ T4167] device hsr_slave_1 entered promiscuous mode [ 63.485362][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.493405][ T4167] Cannot create hsr debugfs directory [ 63.505208][ T4166] device hsr_slave_0 entered promiscuous mode [ 63.512170][ T4166] device hsr_slave_1 entered promiscuous mode [ 63.518774][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.526318][ T4166] Cannot create hsr debugfs directory [ 63.549602][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 63.567060][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 63.573229][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 63.579350][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 63.623477][ T4168] device hsr_slave_0 entered promiscuous mode [ 63.629790][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 63.636312][ T4168] device hsr_slave_1 entered promiscuous mode [ 63.643029][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.650856][ T4168] Cannot create hsr debugfs directory [ 63.704526][ T4170] device hsr_slave_0 entered promiscuous mode [ 63.712154][ T4170] device hsr_slave_1 entered promiscuous mode [ 63.718819][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.726384][ T4170] Cannot create hsr debugfs directory [ 63.912031][ T4176] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.936747][ T4176] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.956061][ T4176] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.970736][ T4176] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.037713][ T4167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.062384][ T4167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.076416][ T4167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.085947][ T4167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.115428][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.145258][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.156051][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.167555][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.177026][ T4166] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.195852][ T4166] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.205182][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.215038][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.225526][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.232778][ T385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.243649][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.256386][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.265634][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.275351][ T385] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.282449][ T385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.293086][ T4166] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.302571][ T4166] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.335413][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.354305][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.365489][ T4168] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.399663][ T4168] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.410205][ T4168] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.420498][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.431956][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.440952][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.451435][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.460548][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.482294][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.492415][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.501747][ T4168] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.545052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.555886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.568129][ T4170] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.584406][ T4170] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.595528][ T4170] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.620929][ T4170] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.632302][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.703549][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.726945][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.779829][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.794542][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.812495][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.842810][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.850159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.858008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.867829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.876884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.887915][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.895052][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.904532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.912287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.920749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.941242][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.953376][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.975010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.984287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.997638][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.004764][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.013660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.022576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.031351][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.038468][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.048023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.056912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.065410][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.072488][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.080496][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.089591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.107850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.116380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.135338][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.159510][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.172571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.183073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.192804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.202038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.212850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.251647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.261262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.271776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.281288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.290721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.299961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.308777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.317044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.326853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.336316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.344327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.352365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.361928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.370631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.379242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.387442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.396327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.405733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.414769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.423699][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.430813][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.444174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.452270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.465489][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.481858][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.496359][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.511077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.520679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.531470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.539964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.550175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.559183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.567554][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.574654][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.584009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.592227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.602294][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.615478][ T4176] device veth0_vlan entered promiscuous mode [ 65.639178][ T4222] Bluetooth: hci1: command 0x041b tx timeout [ 65.641280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.655979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.658686][ T4222] Bluetooth: hci0: command 0x041b tx timeout [ 65.674258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.689253][ T4222] Bluetooth: hci2: command 0x041b tx timeout [ 65.692566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.695505][ T4222] Bluetooth: hci4: command 0x041b tx timeout [ 65.720104][ T4216] Bluetooth: hci3: command 0x041b tx timeout [ 65.722764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.757507][ T4176] device veth1_vlan entered promiscuous mode [ 65.784847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.794488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.809922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.824789][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.832013][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.843303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.852325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.861360][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.868475][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.876699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.885919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.895860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.914683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.923459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.933124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.971435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.981218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.990602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.001350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.010882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.020820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.029982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.037404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.045114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.054110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.062723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.074931][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.090018][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.099557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.107119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.120168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.129935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.143392][ T4176] device veth0_macvtap entered promiscuous mode [ 66.174739][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.195895][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.217198][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.225554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.236316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.245305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.255081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.263884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.297125][ T4176] device veth1_macvtap entered promiscuous mode [ 66.336338][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.360408][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.386004][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.433298][ T4167] device veth0_vlan entered promiscuous mode [ 66.456865][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.481524][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.489797][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.497296][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.507635][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.518051][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.527285][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.536367][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.544924][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.560272][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.585640][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.594329][ T4167] device veth1_vlan entered promiscuous mode [ 66.616520][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.626354][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.635419][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.645296][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.653108][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.681611][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.696336][ T4176] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.705513][ T4176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.715927][ T4176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.724955][ T4176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.735591][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.744076][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.753704][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.763263][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.772393][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.790304][ T4167] device veth0_macvtap entered promiscuous mode [ 66.800823][ T4167] device veth1_macvtap entered promiscuous mode [ 66.828135][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.837922][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.847504][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.857147][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.887266][ T4168] device veth0_vlan entered promiscuous mode [ 66.894817][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.904525][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.913361][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.923442][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.954904][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.964065][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.976221][ T4166] device veth0_vlan entered promiscuous mode [ 66.999607][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.011110][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.024381][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.032812][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.052154][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.064041][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.083211][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.114402][ T4166] device veth1_vlan entered promiscuous mode [ 67.123249][ T4168] device veth1_vlan entered promiscuous mode [ 67.130733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.140715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.150228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.159690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.168100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.177084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.185596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.197210][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.199525][ T1384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.217026][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.221771][ T1384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.232864][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.245180][ T4170] device veth0_vlan entered promiscuous mode [ 67.265110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.273808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.282178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.291653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.306931][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.318644][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.327394][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.336606][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.389786][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.399494][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.431063][ T4168] device veth0_macvtap entered promiscuous mode [ 67.450805][ T4170] device veth1_vlan entered promiscuous mode [ 67.459535][ T4221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.470379][ T4221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.501664][ T4168] device veth1_macvtap entered promiscuous mode [ 67.511454][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.519775][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.527856][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.538157][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.540369][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.555992][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.564387][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.573737][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.583449][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.594936][ T4166] device veth0_macvtap entered promiscuous mode [ 67.633358][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.648002][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.658299][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.670942][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.687923][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.698214][ T4166] device veth1_macvtap entered promiscuous mode [ 67.724907][ T4222] Bluetooth: hci2: command 0x040f tx timeout [ 67.731960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.740539][ T4222] Bluetooth: hci0: command 0x040f tx timeout [ 67.747404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.755552][ T4222] Bluetooth: hci1: command 0x040f tx timeout [ 67.763538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.774831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.784240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.793267][ T4222] Bluetooth: hci3: command 0x040f tx timeout [ 67.800194][ T4222] Bluetooth: hci4: command 0x040f tx timeout [ 67.949260][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.961756][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.972653][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.984574][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.996364][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.008825][ T1384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.015639][ T4168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.016814][ T1384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.025817][ T4168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.025852][ T4168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.025883][ T4168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.047117][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.132071][ T4249] loop2: detected capacity change from 0 to 512 [ 68.316749][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.374091][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.432483][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.482056][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.539742][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.613066][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.670254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.696688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.739283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.751682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.761040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.776217][ T4170] device veth0_macvtap entered promiscuous mode [ 68.795354][ T4249] EXT4-fs (loop2): orphan cleanup on readonly fs [ 68.811007][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.818727][ T4249] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 68.832289][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.837465][ T4249] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 68.853534][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.853558][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.853570][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.853584][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.869778][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.876884][ T4249] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz.2.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 68.891771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.899235][ T4249] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.3: couldn't read orphan inode 13 (err -117) [ 68.911666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.927886][ T4249] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.947528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.982222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.992363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.037685][ T4170] device veth1_macvtap entered promiscuous mode [ 69.050685][ T4166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.064840][ T4166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.074169][ T4166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.095335][ T4166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.134345][ T4253] loop1: detected capacity change from 0 to 512 [ 69.314077][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.327436][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.327694][ T4253] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 69.367404][ T4253] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.389043][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.399596][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.409923][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.424731][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.435241][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.446024][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.460537][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.486387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.503836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.514122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.528672][ T26] audit: type=1326 audit(1734592263.369:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4258 comm="syz.2.6" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78f181cd29 code=0x0 [ 69.574743][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.592016][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.605124][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.616194][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.626996][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.661148][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.673771][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.686947][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.700070][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.726016][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.744519][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.756354][ T1384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.766291][ T4170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.777568][ T4170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.784521][ T1384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.791087][ T4170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.794434][ T4251] Bluetooth: hci1: command 0x0419 tx timeout [ 69.810787][ T4251] Bluetooth: hci0: command 0x0419 tx timeout [ 69.819483][ T4251] Bluetooth: hci2: command 0x0419 tx timeout [ 69.827385][ T4170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.862298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.863184][ T1384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.895069][ T4251] Bluetooth: hci4: command 0x0419 tx timeout [ 69.920406][ T4251] Bluetooth: hci3: command 0x0419 tx timeout [ 69.928947][ T1384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.961472][ T26] audit: type=1326 audit(1734592263.799:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4264 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f181cd29 code=0x7ffc0000 [ 70.007905][ T26] audit: type=1326 audit(1734592263.799:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4264 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78f181cd29 code=0x7ffc0000 [ 70.045627][ T26] audit: type=1326 audit(1734592263.799:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4264 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f181cd29 code=0x7ffc0000 [ 70.067967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.114763][ T26] audit: type=1326 audit(1734592263.799:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4264 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78f181cd29 code=0x7ffc0000 [ 70.123740][ T4271] loop2: detected capacity change from 0 to 512 [ 70.141679][ T26] audit: type=1326 audit(1734592263.799:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4264 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f181cd29 code=0x7ffc0000 [ 70.171066][ T1384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.179096][ T26] audit: type=1326 audit(1734592263.799:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4264 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78f181cd29 code=0x7ffc0000 [ 70.179136][ T26] audit: type=1326 audit(1734592263.799:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4264 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f181cd29 code=0x7ffc0000 [ 70.179173][ T26] audit: type=1326 audit(1734592263.799:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4264 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78f181cd29 code=0x7ffc0000 [ 70.245587][ T1384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.262730][ T26] audit: type=1326 audit(1734592263.799:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4264 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f181cd29 code=0x7ffc0000 [ 70.263588][ T4267] netlink: 'syz.1.8': attribute type 39 has an invalid length. [ 70.305163][ T4271] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.368825][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.376988][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.381873][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.392925][ T4273] syz.2.11 uses obsolete (PF_INET,SOCK_PACKET) [ 70.397033][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.440958][ T1384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.477935][ T1384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.487641][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.511807][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.515118][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.605778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.895204][ T4288] loop2: detected capacity change from 0 to 2048 [ 70.976236][ T4288] Alternate GPT is invalid, using primary GPT. [ 70.988580][ T4288] loop2: p2 p3 p7 [ 70.999600][ T4293] serio: Serial port pts0 [ 71.079609][ T4296] nfs4: Bad value for 'source' [ 71.130959][ T4184] udevd[4184]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 71.143531][ T4158] udevd[4158]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 71.192771][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 71.232455][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.239354][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.628082][ T4317] ALSA: seq fatal error: cannot create timer (-19) [ 72.801293][ T4324] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.854335][ T4316] loop3: detected capacity change from 0 to 1024 [ 72.901150][ T4326] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.969805][ T4328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25'. [ 73.093423][ T4316] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=800ec119, mo2=0002] [ 73.191652][ T4316] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nombcache,noblock_validity,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,debug,,errors=continue. Quota mode: writeback. [ 73.341721][ T4341] netem: change failed [ 74.612839][ T4361] ALSA: seq fatal error: cannot create timer (-19) [ 74.807153][ T4370] 9pnet: Insufficient options for proto=fd [ 75.143654][ T26] kauditd_printk_skb: 69 callbacks suppressed [ 75.143672][ T26] audit: type=1326 audit(1734592268.834:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4382 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca58234d29 code=0x7ffc0000 [ 75.203147][ T4386] loop2: detected capacity change from 0 to 128 [ 75.211197][ T4381] loop4: detected capacity change from 0 to 256 [ 75.230002][ T26] audit: type=1326 audit(1734592268.834:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4382 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca58234d29 code=0x7ffc0000 [ 75.266750][ T26] audit: type=1326 audit(1734592268.946:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.3.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d42f6d29 code=0x7ffc0000 [ 75.289014][ T4386] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 75.304977][ T26] audit: type=1326 audit(1734592268.946:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.3.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d42f6d29 code=0x7ffc0000 [ 75.429488][ T1384] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 75.433354][ T26] audit: type=1326 audit(1734592268.946:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.3.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50d42f6d29 code=0x7ffc0000 [ 75.493500][ T26] audit: type=1326 audit(1734592268.946:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.3.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d42f6d29 code=0x7ffc0000 [ 75.516342][ T26] audit: type=1326 audit(1734592268.946:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.3.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d42f6d29 code=0x7ffc0000 [ 75.549893][ T26] audit: type=1326 audit(1734592268.946:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.3.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50d42f6d29 code=0x7ffc0000 [ 75.676650][ T26] audit: type=1326 audit(1734592268.946:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.3.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d42f6d29 code=0x7ffc0000 [ 75.706712][ T26] audit: type=1326 audit(1734592268.946:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.3.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d42f6d29 code=0x7ffc0000 [ 76.485267][ T4398] ALSA: seq fatal error: cannot create timer (-19) [ 76.969531][ T4424] syz.1.64[4424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.969690][ T4424] syz.1.64[4424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.034361][ T4428] loop4: detected capacity change from 0 to 512 [ 77.261425][ T4428] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.348624][ T4434] loop1: detected capacity change from 0 to 1024 [ 77.359525][ T4428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.65'. [ 77.868188][ T4434] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 78.100191][ T4436] ALSA: seq fatal error: cannot create timer (-19) [ 78.195132][ T4434] EXT4-fs (loop1): orphan cleanup on readonly fs [ 78.240246][ T4434] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 78.277951][ T4434] EXT4-fs (loop1): Remounting filesystem read-only [ 78.288742][ T4434] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #3: comm syz.1.67: mark_inode_dirty error [ 78.361073][ T4434] EXT4-fs (loop1): Remounting filesystem read-only [ 78.382775][ T4434] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.67: Invalid block bitmap block 3 in block_group 0 [ 78.422949][ T4434] EXT4-fs (loop1): Remounting filesystem read-only [ 78.465902][ T4434] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 78.521734][ T4434] EXT4-fs (loop1): Remounting filesystem read-only [ 78.528288][ T4434] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #3: comm syz.1.67: mark_inode_dirty error [ 78.578605][ T4434] EXT4-fs (loop1): Remounting filesystem read-only [ 78.604063][ T4434] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #3: block 1: comm syz.1.67: lblock 6 mapped to illegal pblock 1 (length 1) [ 78.635310][ T4458] loop0: detected capacity change from 0 to 512 [ 78.667309][ T4434] EXT4-fs (loop1): Remounting filesystem read-only [ 78.684321][ T4434] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #3: block 48: comm syz.1.67: lblock 0 mapped to illegal pblock 48 (length 1) [ 78.732732][ T4434] EXT4-fs (loop1): Remounting filesystem read-only [ 78.750660][ T4434] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.67: Failed to acquire dquot type 0 [ 78.763854][ T4458] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.74: Failed to acquire dquot type 1 [ 78.765026][ T4434] EXT4-fs (loop1): Remounting filesystem read-only [ 78.782164][ T4434] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #3: block 49: comm syz.1.67: lblock 1 mapped to illegal pblock 49 (length 1) [ 78.803637][ T4434] EXT4-fs (loop1): Remounting filesystem read-only [ 78.858650][ T4434] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.67: Failed to acquire dquot type 0 [ 78.904448][ T4434] EXT4-fs (loop1): Remounting filesystem read-only [ 78.911116][ T4434] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 78.944495][ T4458] EXT4-fs (loop0): 1 truncate cleaned up [ 78.979041][ T4458] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.005976][ T4434] EXT4-fs (loop1): Remounting filesystem read-only [ 79.038352][ T4458] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.057058][ T4434] EXT4-fs error (device loop1): ext4_evict_inode:282: inode #15: comm syz.1.67: mark_inode_dirty error [ 79.071120][ T4475] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 79.071464][ T4434] EXT4-fs (loop1): Remounting filesystem read-only [ 79.087833][ T4434] EXT4-fs warning (device loop1): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 79.099248][ T4434] EXT4-fs (loop1): 1 orphan inode deleted [ 79.105335][ T4434] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000008,data_err=abort,minixdf,errors=remount-ro,abort,noblock_validity,barrier,journal_dev=0x0000000000000f35,. Quota mode: none. [ 79.795890][ T4476] ALSA: seq fatal error: cannot create timer (-19) [ 80.000984][ T4483] loop2: detected capacity change from 0 to 512 [ 80.034608][ T4432] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 80.200152][ T4434] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #2: block 16: comm syz.1.67: lblock 0 mapped to illegal pblock 16 (length 1) [ 80.244902][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.270483][ T4497] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 80.298987][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.314297][ T4498] process 'syz.1.67' launched './file0/file0' with NULL argv: empty string added [ 80.356161][ T4498] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #2: block 16: comm syz.1.67: lblock 0 mapped to illegal pblock 16 (length 1) [ 80.384660][ T4493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.546061][ T26] kauditd_printk_skb: 239 callbacks suppressed [ 80.546077][ T26] audit: type=1326 audit(1734592273.890:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d42f6d29 code=0x7ffc0000 [ 80.662167][ T4512] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 80.771733][ T26] audit: type=1326 audit(1734592273.890:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50d42f6d29 code=0x7ffc0000 [ 80.805698][ T26] audit: type=1326 audit(1734592273.890:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d42f6d29 code=0x7ffc0000 [ 80.836866][ T4519] loop3: detected capacity change from 0 to 1024 [ 80.894322][ T26] audit: type=1326 audit(1734592273.890:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d42f6d29 code=0x7ffc0000 [ 80.918267][ T26] audit: type=1326 audit(1734592273.890:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50d42f6d29 code=0x7ffc0000 [ 80.941046][ T26] audit: type=1326 audit(1734592273.937:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d42f6d29 code=0x7ffc0000 [ 80.966979][ T26] audit: type=1326 audit(1734592273.937:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50d42f6d29 code=0x7ffc0000 [ 81.064133][ T26] audit: type=1326 audit(1734592273.937:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d42f6d29 code=0x7ffc0000 [ 81.238213][ T4519] EXT4-fs (loop3): Ignoring removed orlov option [ 81.611301][ T26] audit: type=1326 audit(1734592273.937:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f50d42f6d29 code=0x7ffc0000 [ 81.634637][ T26] audit: type=1326 audit(1734592273.937:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4507 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d42f6d29 code=0x7ffc0000 [ 81.657873][ T4522] ALSA: seq fatal error: cannot create timer (-19) [ 81.760236][ T4528] Zero length message leads to an empty skb [ 81.923219][ T4535] loop0: detected capacity change from 0 to 2048 [ 82.068604][ T21] cfg80211: failed to load regulatory.db [ 82.158801][ T4535] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.751605][ T4510] loop2: detected capacity change from 0 to 512 [ 82.896951][ T4510] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.977750][ T4510] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.999224][ T4510] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.95: bad orphan inode 16 [ 83.273248][ T4510] ext4_test_bit(bit=15, block=4) = 0 [ 83.279527][ T4510] EXT4-fs (loop2): 1 orphan inode deleted [ 83.435475][ T4510] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,nodelalloc,bsdgroups,inode_readahead_blks=0x0000000002000000,block_validity,quota,,errors=continue. Quota mode: writeback. [ 83.802793][ T4572] ALSA: seq fatal error: cannot create timer (-19) [ 84.478530][ T4600] loop1: detected capacity change from 0 to 2048 [ 84.778183][ T4600] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.838185][ T4613] ALSA: seq fatal error: cannot create timer (-19) [ 84.988305][ T4621] netlink: 5 bytes leftover after parsing attributes in process `syz.4.131'. [ 85.511302][ T4641] loop4: detected capacity change from 0 to 2048 [ 85.897363][ T26] kauditd_printk_skb: 147 callbacks suppressed [ 85.897402][ T26] audit: type=1326 audit(1734592278.900:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca58234d29 code=0x7ffc0000 [ 86.380585][ T4641] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.816062][ T26] audit: type=1326 audit(1734592279.761:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4664 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca58234d29 code=0x7ffc0000 [ 86.882203][ T26] audit: type=1326 audit(1734592279.761:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4664 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca58234d29 code=0x7ffc0000 [ 86.995694][ T26] audit: type=1326 audit(1734592279.770:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4664 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca58234d29 code=0x7ffc0000 [ 87.033586][ T4670] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 87.043281][ T4670] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 4670, name: syz.0.148 [ 87.052205][ T4670] 2 locks held by syz.0.148/4670: [ 87.057211][ T4670] #0: ffff88801a198a68 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x130/0xb20 [ 87.067744][ T4670] #1: ffffffff8cb456d8 (css_set_lock){....}-{2:2}, at: cgroup_get_from_path+0x24/0x2e0 [ 87.077495][ T4670] irq event stamp: 696 [ 87.081542][ T4670] hardirqs last enabled at (695): [] queue_delayed_work_on+0x171/0x250 [ 87.091433][ T4670] hardirqs last disabled at (696): [] _raw_spin_lock_irq+0xa9/0x110 [ 87.100965][ T4670] softirqs last enabled at (600): [] __irq_exit_rcu+0x157/0x240 [ 87.110233][ T4670] softirqs last disabled at (505): [] __irq_exit_rcu+0x157/0x240 [ 87.119508][ T4670] Preemption disabled at: [ 87.119515][ T4670] [<0000000000000000>] 0x0 [ 87.128213][ T4670] CPU: 1 PID: 4670 Comm: syz.0.148 Not tainted 5.15.174-syzkaller #0 [ 87.136262][ T4670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 87.146301][ T4670] Call Trace: [ 87.149565][ T4670] [ 87.152484][ T4670] dump_stack_lvl+0x1e3/0x2d0 [ 87.157160][ T4670] ? __irq_exit_rcu+0x157/0x240 [ 87.162034][ T4670] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 87.167674][ T4670] ? panic+0x860/0x860 [ 87.171757][ T4670] ___might_sleep+0x547/0x6a0 [ 87.176436][ T4670] ? __might_sleep+0xc0/0xc0 [ 87.181042][ T4670] down_read+0x21/0x2e0 [ 87.185189][ T4670] ? kernfs_walk_and_get_ns+0x72/0x2b0 [ 87.190664][ T4670] kernfs_walk_and_get_ns+0x7e/0x2b0 [ 87.195961][ T4670] ? kernfs_find_ns+0x500/0x500 [ 87.200816][ T4670] ? current_cgns_cgroup_from_root+0x2a3/0x2f0 [ 87.206980][ T4670] cgroup_get_from_path+0x5c/0x2e0 [ 87.212082][ T4670] cgroup_mt_check_v1+0x1a0/0x2b0 [ 87.217099][ T4670] xt_check_match+0x363/0xa30 [ 87.221766][ T4670] ? xt_find_match+0x6d/0x200 [ 87.226430][ T4670] ? mutex_unlock+0x10/0x10 [ 87.230921][ T4670] ? xt_check_proc_name+0x110/0x110 [ 87.236112][ T4670] ? pcpu_alloc+0x10c9/0x17c0 [ 87.240782][ T4670] ? xt_find_match+0x1cf/0x200 [ 87.245537][ T4670] translate_table+0x15bd/0x2250 [ 87.250504][ T4670] ? ipt_register_table+0x7a0/0x7a0 [ 87.255700][ T4670] ? __might_fault+0xb8/0x110 [ 87.260383][ T4670] ? __lock_acquire+0x1ff0/0x1ff0 [ 87.265403][ T4670] ? _copy_from_user+0x10f/0x170 [ 87.270331][ T4670] ? copy_from_sockptr_offset+0x6b/0xa0 [ 87.275867][ T4670] do_ipt_set_ctl+0xdbc/0x1200 [ 87.280623][ T4670] ? rcu_lock_release+0x20/0x20 [ 87.285478][ T4670] ? ipt_unregister_table_exit+0x1e0/0x1e0 [ 87.291272][ T4670] ? __lock_acquire+0x1ff0/0x1ff0 [ 87.296307][ T4670] ? __mutex_unlock_slowpath+0x218/0x750 [ 87.301935][ T4670] ? nf_setsockopt+0x38/0x2b0 [ 87.306601][ T4670] ? print_irqtrace_events+0x210/0x210 [ 87.312050][ T4670] ? mutex_unlock+0x10/0x10 [ 87.316541][ T4670] ? lockdep_hardirqs_on+0x94/0x130 [ 87.321727][ T4670] ? __local_bh_enable_ip+0x164/0x1f0 [ 87.327091][ T4670] nf_setsockopt+0x28a/0x2b0 [ 87.331674][ T4670] ip_setsockopt+0x2732/0x3fb0 [ 87.336434][ T4670] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 87.341797][ T4670] ? read_lock_is_recursive+0x10/0x10 [ 87.347159][ T4670] ? __mutex_trylock_common+0x17e/0x2e0 [ 87.352711][ T4670] ? __might_sleep+0xc0/0xc0 [ 87.357304][ T4670] ? rcu_lock_release+0x20/0x20 [ 87.362161][ T4670] tcp_setsockopt+0x23f/0x3680 [ 87.366932][ T4670] ? tcp_set_window_clamp+0x1b0/0x1b0 [ 87.372302][ T4670] ? __might_sleep+0xc0/0xc0 [ 87.376914][ T4670] ? smc_setsockopt+0x130/0xb20 [ 87.381760][ T4670] ? mutex_lock_io_nested+0x60/0x60 [ 87.386952][ T4670] ? __lock_acquire+0x1ff0/0x1ff0 [ 87.391964][ T4670] ? aa_sk_perm+0x8fc/0xa30 [ 87.396467][ T4670] ? sock_common_setsockopt+0x33/0xc0 [ 87.401840][ T4670] ? sock_common_recvmsg+0x240/0x240 [ 87.407111][ T4670] smc_setsockopt+0x1e5/0xb20 [ 87.411796][ T4670] ? smc_shutdown+0x5f0/0x5f0 [ 87.416462][ T4670] ? aa_sock_opt_perm+0x79/0x110 [ 87.421389][ T4670] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 87.426920][ T4670] ? security_socket_setsockopt+0x7d/0xa0 [ 87.432630][ T4670] ? smc_shutdown+0x5f0/0x5f0 [ 87.437294][ T4670] __sys_setsockopt+0x57e/0x990 [ 87.442146][ T4670] ? __ia32_sys_recv+0xb0/0xb0 [ 87.446910][ T4670] ? syscall_enter_from_user_mode+0x2e/0x240 [ 87.452884][ T4670] __x64_sys_setsockopt+0xb1/0xc0 [ 87.457897][ T4670] do_syscall_64+0x3b/0xb0 [ 87.462303][ T4670] ? clear_bhb_loop+0x15/0x70 [ 87.466967][ T4670] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.472849][ T4670] RIP: 0033:0x7fa68296bd29 [ 87.477272][ T4670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.496876][ T4670] RSP: 002b:00007fa6807bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 87.505279][ T4670] RAX: ffffffffffffffda RBX: 00007fa682b5c080 RCX: 00007fa68296bd29 [ 87.513238][ T4670] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 000000000000000d [ 87.521200][ T4670] RBP: 00007fa6829e7a20 R08: 0000000000001378 R09: 0000000000000000 [ 87.529173][ T4670] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000000 [ 87.537136][ T4670] R13: 0000000000000000 R14: 00007fa682b5c080 R15: 00007fff09be90e8 [ 87.545107][ T4670] [ 87.548111][ T4670] [ 87.550416][ T4670] ============================= [ 87.555239][ T4670] [ BUG: Invalid wait context ] [ 87.560063][ T4670] 5.15.174-syzkaller #0 Tainted: G W [ 87.566641][ T4670] ----------------------------- [ 87.571463][ T4670] syz.0.148/4670 is trying to lock: [ 87.576636][ T4670] ffffffff8cc523f0 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x7e/0x2b0 [ 87.586100][ T4670] other info that might help us debug this: [ 87.591967][ T4670] context-{4:4} [ 87.595406][ T4670] 2 locks held by syz.0.148/4670: [ 87.600491][ T4670] #0: ffff88801a198a68 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x130/0xb20 [ 87.611008][ T4670] #1: ffffffff8cb456d8 (css_set_lock){....}-{2:2}, at: cgroup_get_from_path+0x24/0x2e0 [ 87.620745][ T4670] stack backtrace: [ 87.624442][ T4670] CPU: 1 PID: 4670 Comm: syz.0.148 Tainted: G W 5.15.174-syzkaller #0 [ 87.633894][ T4670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 87.644028][ T4670] Call Trace: [ 87.647292][ T4670] [ 87.650231][ T4670] dump_stack_lvl+0x1e3/0x2d0 [ 87.654914][ T4670] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 87.660550][ T4670] ? panic+0x860/0x860 [ 87.664610][ T4670] __lock_acquire+0x14f5/0x1ff0 [ 87.669456][ T4670] lock_acquire+0x1db/0x4f0 [ 87.673957][ T4670] ? kernfs_walk_and_get_ns+0x7e/0x2b0 [ 87.679414][ T4670] ? read_lock_is_recursive+0x10/0x10 [ 87.684770][ T4670] ? __might_sleep+0xc0/0xc0 [ 87.689347][ T4670] down_read+0x45/0x2e0 [ 87.693495][ T4670] ? kernfs_walk_and_get_ns+0x7e/0x2b0 [ 87.698937][ T4670] ? kernfs_walk_and_get_ns+0x72/0x2b0 [ 87.704379][ T4670] kernfs_walk_and_get_ns+0x7e/0x2b0 [ 87.709736][ T4670] ? kernfs_find_ns+0x500/0x500 [ 87.714574][ T4670] ? current_cgns_cgroup_from_root+0x2a3/0x2f0 [ 87.720711][ T4670] cgroup_get_from_path+0x5c/0x2e0 [ 87.725808][ T4670] cgroup_mt_check_v1+0x1a0/0x2b0 [ 87.730835][ T4670] xt_check_match+0x363/0xa30 [ 87.735498][ T4670] ? xt_find_match+0x6d/0x200 [ 87.740159][ T4670] ? mutex_unlock+0x10/0x10 [ 87.744645][ T4670] ? xt_check_proc_name+0x110/0x110 [ 87.749844][ T4670] ? pcpu_alloc+0x10c9/0x17c0 [ 87.754518][ T4670] ? xt_find_match+0x1cf/0x200 [ 87.759284][ T4670] translate_table+0x15bd/0x2250 [ 87.764219][ T4670] ? ipt_register_table+0x7a0/0x7a0 [ 87.769418][ T4670] ? __might_fault+0xb8/0x110 [ 87.774080][ T4670] ? __lock_acquire+0x1ff0/0x1ff0 [ 87.779092][ T4670] ? _copy_from_user+0x10f/0x170 [ 87.784014][ T4670] ? copy_from_sockptr_offset+0x6b/0xa0 [ 87.789548][ T4670] do_ipt_set_ctl+0xdbc/0x1200 [ 87.794300][ T4670] ? rcu_lock_release+0x20/0x20 [ 87.799158][ T4670] ? ipt_unregister_table_exit+0x1e0/0x1e0 [ 87.804963][ T4670] ? __lock_acquire+0x1ff0/0x1ff0 [ 87.809978][ T4670] ? __mutex_unlock_slowpath+0x218/0x750 [ 87.815611][ T4670] ? nf_setsockopt+0x38/0x2b0 [ 87.820283][ T4670] ? print_irqtrace_events+0x210/0x210 [ 87.825727][ T4670] ? mutex_unlock+0x10/0x10 [ 87.830214][ T4670] ? lockdep_hardirqs_on+0x94/0x130 [ 87.835397][ T4670] ? __local_bh_enable_ip+0x164/0x1f0 [ 87.840764][ T4670] nf_setsockopt+0x28a/0x2b0 [ 87.845341][ T4670] ip_setsockopt+0x2732/0x3fb0 [ 87.850092][ T4670] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 87.855450][ T4670] ? read_lock_is_recursive+0x10/0x10 [ 87.860804][ T4670] ? __mutex_trylock_common+0x17e/0x2e0 [ 87.866334][ T4670] ? __might_sleep+0xc0/0xc0 [ 87.870909][ T4670] ? rcu_lock_release+0x20/0x20 [ 87.875746][ T4670] tcp_setsockopt+0x23f/0x3680 [ 87.880504][ T4670] ? tcp_set_window_clamp+0x1b0/0x1b0 [ 87.885878][ T4670] ? __might_sleep+0xc0/0xc0 [ 87.890455][ T4670] ? smc_setsockopt+0x130/0xb20 [ 87.895292][ T4670] ? mutex_lock_io_nested+0x60/0x60 [ 87.900476][ T4670] ? __lock_acquire+0x1ff0/0x1ff0 [ 87.905487][ T4670] ? aa_sk_perm+0x8fc/0xa30 [ 87.909987][ T4670] ? sock_common_setsockopt+0x33/0xc0 [ 87.915352][ T4670] ? sock_common_recvmsg+0x240/0x240 [ 87.920620][ T4670] smc_setsockopt+0x1e5/0xb20 [ 87.925284][ T4670] ? smc_shutdown+0x5f0/0x5f0 [ 87.929946][ T4670] ? aa_sock_opt_perm+0x79/0x110 [ 87.934886][ T4670] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 87.940418][ T4670] ? security_socket_setsockopt+0x7d/0xa0 [ 87.946124][ T4670] ? smc_shutdown+0x5f0/0x5f0 [ 87.950795][ T4670] __sys_setsockopt+0x57e/0x990 [ 87.955634][ T4670] ? __ia32_sys_recv+0xb0/0xb0 [ 87.960386][ T4670] ? syscall_enter_from_user_mode+0x2e/0x240 [ 87.966350][ T4670] __x64_sys_setsockopt+0xb1/0xc0 [ 87.971380][ T4670] do_syscall_64+0x3b/0xb0 [ 87.975778][ T4670] ? clear_bhb_loop+0x15/0x70 [ 87.980443][ T4670] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.986321][ T4670] RIP: 0033:0x7fa68296bd29 [ 87.990718][ T4670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.010304][ T4670] RSP: 002b:00007fa6807bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 88.018698][ T4670] RAX: ffffffffffffffda RBX: 00007fa682b5c080 RCX: 00007fa68296bd29 [ 88.026652][ T4670] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 000000000000000d [ 88.034620][ T4670] RBP: 00007fa6829e7a20 R08: 0000000000001378 R09: 0000000000000000 [ 88.042658][ T4670] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000000 [ 88.050613][ T4670] R13: 0000000000000000 R14: 00007fa682b5c080 R15: 00007fff09be90e8 [ 88.058587][ T4670] [ 88.061872][ C1] ------------[ cut here ]------------ [ 88.067338][ C1] WARNING: CPU: 1 PID: 4670 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 88.076613][ C1] Modules linked in: [ 88.080503][ C1] CPU: 1 PID: 4670 Comm: syz.0.148 Tainted: G W 5.15.174-syzkaller #0 [ 88.089952][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 88.100009][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 88.106151][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 7b c5 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 64 c5 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 88.125755][ C1] RSP: 0018:ffffc90000dd08e8 EFLAGS: 00010246 [ 88.131905][ C1] RAX: ffffffff81aabf7c RBX: 0000000000000000 RCX: ffff888029e08000 [ 88.139863][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.147831][ C1] RBP: dffffc0000000000 R08: ffffffff81aabe8d R09: fffffbfff1c14c06 [ 88.155814][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffa3000000 [ 88.163789][ C1] R13: 0000000000000008 R14: ffffffffa3000000 R15: ffffc90000dd0948 [ 88.171746][ C1] FS: 00007fa6807bb6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 88.180670][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.187249][ C1] CR2: 000000110c3fe399 CR3: 000000005fac7000 CR4: 00000000003506e0 [ 88.195213][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.203177][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.211141][ C1] Call Trace: [ 88.214403][ C1] [ 88.217245][ C1] ? __warn+0x15b/0x300 [ 88.221388][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 88.226924][ C1] ? report_bug+0x1b7/0x2e0 [ 88.231440][ C1] ? handle_bug+0x3d/0x70 [ 88.235755][ C1] ? exc_invalid_op+0x16/0x40 [ 88.240425][ C1] ? asm_exc_invalid_op+0x16/0x20 [ 88.245459][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 88.250932][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 88.256462][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 88.262003][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 88.267551][ C1] bpf_probe_read_user+0x26/0x70 [ 88.272493][ C1] bpf_prog_b01026b2908340f4+0x3d/0xe90 [ 88.278020][ C1] bpf_trace_run2+0x19e/0x340 [ 88.282693][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 88.287699][ C1] ? bpf_trace_run1+0x2f0/0x2f0 [ 88.292561][ C1] ? skb_release_data+0x73a/0x8a0 [ 88.297571][ C1] ? skb_release_data+0x73a/0x8a0 [ 88.302592][ C1] __bpf_trace_kfree+0x6e/0x90 [ 88.307362][ C1] ? skb_release_data+0x73a/0x8a0 [ 88.312376][ C1] kfree+0x22f/0x270 [ 88.316292][ C1] skb_release_data+0x73a/0x8a0 [ 88.321131][ C1] consume_skb+0xa3/0x140 [ 88.325464][ C1] mac80211_hwsim_beacon_tx+0x48f/0x8a0 [ 88.331016][ C1] __iterate_interfaces+0x21e/0x4b0 [ 88.336244][ C1] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 88.342492][ C1] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 88.348758][ C1] ieee80211_iterate_active_interfaces_atomic+0xaf/0x140 [ 88.355794][ C1] mac80211_hwsim_beacon+0xa7/0x180 [ 88.360986][ C1] ? hw_scan_work+0xe70/0xe70 [ 88.365655][ C1] __hrtimer_run_queues+0x598/0xcf0 [ 88.370864][ C1] ? hrtimer_interrupt+0x980/0x980 [ 88.375961][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 88.382038][ C1] hrtimer_run_softirq+0x196/0x2c0 [ 88.387137][ C1] handle_softirqs+0x3a7/0x930 [ 88.391904][ C1] ? __irq_exit_rcu+0x157/0x240 [ 88.396744][ C1] ? do_softirq+0x240/0x240 [ 88.401246][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 88.406446][ C1] __irq_exit_rcu+0x157/0x240 [ 88.411148][ C1] ? irq_exit_rcu+0x20/0x20 [ 88.415665][ C1] irq_exit_rcu+0x5/0x20 [ 88.419921][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 88.425547][ C1] [ 88.428466][ C1] [ 88.431422][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 88.437399][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 88.443214][ C1] Code: 31 61 f6 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 6e 65 1a f7 48 89 df e8 c6 b9 1b f7 e8 71 75 3e f7 fb bf 01 00 00 00 e6 fe 0e f7 65 8b 05 f7 e1 b9 75 85 c0 74 02 5b c3 e8 c4 fe b7 [ 88.462817][ C1] RSP: 0018:ffffc9000324f150 EFLAGS: 00000282 [ 88.468877][ C1] RAX: 04bd30cc87dfc900 RBX: ffffffff8cc524a0 RCX: 0000000000080000 [ 88.476844][ C1] RDX: dffffc0000000000 RSI: 000000000007ffff RDI: 0000000000000001 [ 88.484812][ C1] RBP: ffffc9000324f220 R08: ffffffff81870360 R09: fffffbfff198a495 [ 88.492872][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 88.500845][ C1] R13: dffffc0000000000 R14: 1ffff92000649e30 R15: ffffc9000324f1a0 [ 88.508844][ C1] ? trace_hardirqs_on+0x30/0x80 [ 88.513808][ C1] kernfs_walk_and_get_ns+0x1ba/0x2b0 [ 88.519184][ C1] ? kernfs_find_ns+0x500/0x500 [ 88.524022][ C1] ? current_cgns_cgroup_from_root+0x2a3/0x2f0 [ 88.530169][ C1] cgroup_get_from_path+0x5c/0x2e0 [ 88.535282][ C1] cgroup_mt_check_v1+0x1a0/0x2b0 [ 88.540309][ C1] xt_check_match+0x363/0xa30 [ 88.544967][ C1] ? xt_find_match+0x6d/0x200 [ 88.549650][ C1] ? mutex_unlock+0x10/0x10 [ 88.554139][ C1] ? xt_check_proc_name+0x110/0x110 [ 88.559332][ C1] ? pcpu_alloc+0x10c9/0x17c0 [ 88.563995][ C1] ? xt_find_match+0x1cf/0x200 [ 88.568747][ C1] translate_table+0x15bd/0x2250 [ 88.573702][ C1] ? ipt_register_table+0x7a0/0x7a0 [ 88.578897][ C1] ? __might_fault+0xb8/0x110 [ 88.583572][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 88.588584][ C1] ? _copy_from_user+0x10f/0x170 [ 88.593513][ C1] ? copy_from_sockptr_offset+0x6b/0xa0 [ 88.599041][ C1] do_ipt_set_ctl+0xdbc/0x1200 [ 88.603803][ C1] ? rcu_lock_release+0x20/0x20 [ 88.608649][ C1] ? ipt_unregister_table_exit+0x1e0/0x1e0 [ 88.614468][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 88.619482][ C1] ? __mutex_unlock_slowpath+0x218/0x750 [ 88.625113][ C1] ? nf_setsockopt+0x38/0x2b0 [ 88.629776][ C1] ? print_irqtrace_events+0x210/0x210 [ 88.635258][ C1] ? mutex_unlock+0x10/0x10 [ 88.639752][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 88.644951][ C1] ? __local_bh_enable_ip+0x164/0x1f0 [ 88.650446][ C1] nf_setsockopt+0x28a/0x2b0 [ 88.655085][ C1] ip_setsockopt+0x2732/0x3fb0 [ 88.659849][ C1] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 88.665216][ C1] ? read_lock_is_recursive+0x10/0x10 [ 88.670594][ C1] ? __mutex_trylock_common+0x17e/0x2e0 [ 88.676158][ C1] ? __might_sleep+0xc0/0xc0 [ 88.680735][ C1] ? rcu_lock_release+0x20/0x20 [ 88.685572][ C1] tcp_setsockopt+0x23f/0x3680 [ 88.690359][ C1] ? tcp_set_window_clamp+0x1b0/0x1b0 [ 88.695736][ C1] ? __might_sleep+0xc0/0xc0 [ 88.700328][ C1] ? smc_setsockopt+0x130/0xb20 [ 88.705166][ C1] ? mutex_lock_io_nested+0x60/0x60 [ 88.710369][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 88.715378][ C1] ? aa_sk_perm+0x8fc/0xa30 [ 88.719879][ C1] ? sock_common_setsockopt+0x33/0xc0 [ 88.725235][ C1] ? sock_common_recvmsg+0x240/0x240 [ 88.730517][ C1] smc_setsockopt+0x1e5/0xb20 [ 88.735186][ C1] ? smc_shutdown+0x5f0/0x5f0 [ 88.739852][ C1] ? aa_sock_opt_perm+0x79/0x110 [ 88.744787][ C1] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 88.750331][ C1] ? security_socket_setsockopt+0x7d/0xa0 [ 88.756049][ C1] ? smc_shutdown+0x5f0/0x5f0 [ 88.760714][ C1] __sys_setsockopt+0x57e/0x990 [ 88.765570][ C1] ? __ia32_sys_recv+0xb0/0xb0 [ 88.770322][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 88.776301][ C1] __x64_sys_setsockopt+0xb1/0xc0 [ 88.781310][ C1] do_syscall_64+0x3b/0xb0 [ 88.785738][ C1] ? clear_bhb_loop+0x15/0x70 [ 88.790401][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.796295][ C1] RIP: 0033:0x7fa68296bd29 [ 88.800695][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.820296][ C1] RSP: 002b:00007fa6807bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 88.828712][ C1] RAX: ffffffffffffffda RBX: 00007fa682b5c080 RCX: 00007fa68296bd29 [ 88.836677][ C1] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 000000000000000d [ 88.844629][ C1] RBP: 00007fa6829e7a20 R08: 0000000000001378 R09: 0000000000000000 [ 88.852596][ C1] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000000 [ 88.860648][ C1] R13: 0000000000000000 R14: 00007fa682b5c080 R15: 00007fff09be90e8 [ 88.868621][ C1] [ 88.871635][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.878892][ C1] CPU: 1 PID: 4670 Comm: syz.0.148 Tainted: G W 5.15.174-syzkaller #0 [ 88.888435][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 88.898476][ C1] Call Trace: [ 88.901768][ C1] [ 88.904599][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 88.909349][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 88.914964][ C1] ? panic+0x860/0x860 [ 88.919018][ C1] ? panic+0x860/0x860 [ 88.923071][ C1] ? copy_from_user_nofault+0xe0/0x1c0 [ 88.928513][ C1] ? copy_from_user_nofault+0xe0/0x1c0 [ 88.933967][ C1] panic+0x318/0x860 [ 88.937850][ C1] ? __warn+0x16a/0x300 [ 88.942000][ C1] ? fb_is_primary_device+0xd0/0xd0 [ 88.947189][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 88.952716][ C1] __warn+0x2b2/0x300 [ 88.956684][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 88.962226][ C1] report_bug+0x1b7/0x2e0 [ 88.966544][ C1] handle_bug+0x3d/0x70 [ 88.970683][ C1] exc_invalid_op+0x16/0x40 [ 88.975306][ C1] asm_exc_invalid_op+0x16/0x20 [ 88.980158][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 88.986322][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 7b c5 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 64 c5 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 89.005928][ C1] RSP: 0018:ffffc90000dd08e8 EFLAGS: 00010246 [ 89.012013][ C1] RAX: ffffffff81aabf7c RBX: 0000000000000000 RCX: ffff888029e08000 [ 89.019989][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.027946][ C1] RBP: dffffc0000000000 R08: ffffffff81aabe8d R09: fffffbfff1c14c06 [ 89.035904][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffa3000000 [ 89.044031][ C1] R13: 0000000000000008 R14: ffffffffa3000000 R15: ffffc90000dd0948 [ 89.051992][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 89.057452][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 89.062980][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 89.068517][ C1] bpf_probe_read_user+0x26/0x70 [ 89.073443][ C1] bpf_prog_b01026b2908340f4+0x3d/0xe90 [ 89.078970][ C1] bpf_trace_run2+0x19e/0x340 [ 89.083631][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 89.088653][ C1] ? bpf_trace_run1+0x2f0/0x2f0 [ 89.093485][ C1] ? skb_release_data+0x73a/0x8a0 [ 89.098497][ C1] ? skb_release_data+0x73a/0x8a0 [ 89.103506][ C1] __bpf_trace_kfree+0x6e/0x90 [ 89.108252][ C1] ? skb_release_data+0x73a/0x8a0 [ 89.113258][ C1] kfree+0x22f/0x270 [ 89.117139][ C1] skb_release_data+0x73a/0x8a0 [ 89.121985][ C1] consume_skb+0xa3/0x140 [ 89.126295][ C1] mac80211_hwsim_beacon_tx+0x48f/0x8a0 [ 89.131913][ C1] __iterate_interfaces+0x21e/0x4b0 [ 89.137123][ C1] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 89.143368][ C1] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 89.149804][ C1] ieee80211_iterate_active_interfaces_atomic+0xaf/0x140 [ 89.156830][ C1] mac80211_hwsim_beacon+0xa7/0x180 [ 89.162044][ C1] ? hw_scan_work+0xe70/0xe70 [ 89.166718][ C1] __hrtimer_run_queues+0x598/0xcf0 [ 89.171911][ C1] ? hrtimer_interrupt+0x980/0x980 [ 89.177010][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 89.183086][ C1] hrtimer_run_softirq+0x196/0x2c0 [ 89.188190][ C1] handle_softirqs+0x3a7/0x930 [ 89.192944][ C1] ? __irq_exit_rcu+0x157/0x240 [ 89.197781][ C1] ? do_softirq+0x240/0x240 [ 89.202279][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 89.207474][ C1] __irq_exit_rcu+0x157/0x240 [ 89.212141][ C1] ? irq_exit_rcu+0x20/0x20 [ 89.216633][ C1] irq_exit_rcu+0x5/0x20 [ 89.221008][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 89.226822][ C1] [ 89.229746][ C1] [ 89.232661][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 89.238631][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 89.244425][ C1] Code: 31 61 f6 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 6e 65 1a f7 48 89 df e8 c6 b9 1b f7 e8 71 75 3e f7 fb bf 01 00 00 00 e6 fe 0e f7 65 8b 05 f7 e1 b9 75 85 c0 74 02 5b c3 e8 c4 fe b7 [ 89.264015][ C1] RSP: 0018:ffffc9000324f150 EFLAGS: 00000282 [ 89.270068][ C1] RAX: 04bd30cc87dfc900 RBX: ffffffff8cc524a0 RCX: 0000000000080000 [ 89.278020][ C1] RDX: dffffc0000000000 RSI: 000000000007ffff RDI: 0000000000000001 [ 89.285970][ C1] RBP: ffffc9000324f220 R08: ffffffff81870360 R09: fffffbfff198a495 [ 89.293926][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 89.302054][ C1] R13: dffffc0000000000 R14: 1ffff92000649e30 R15: ffffc9000324f1a0 [ 89.310028][ C1] ? trace_hardirqs_on+0x30/0x80 [ 89.314961][ C1] kernfs_walk_and_get_ns+0x1ba/0x2b0 [ 89.320340][ C1] ? kernfs_find_ns+0x500/0x500 [ 89.325176][ C1] ? current_cgns_cgroup_from_root+0x2a3/0x2f0 [ 89.331317][ C1] cgroup_get_from_path+0x5c/0x2e0 [ 89.336411][ C1] cgroup_mt_check_v1+0x1a0/0x2b0 [ 89.341417][ C1] xt_check_match+0x363/0xa30 [ 89.346074][ C1] ? xt_find_match+0x6d/0x200 [ 89.350736][ C1] ? mutex_unlock+0x10/0x10 [ 89.355222][ C1] ? xt_check_proc_name+0x110/0x110 [ 89.360401][ C1] ? pcpu_alloc+0x10c9/0x17c0 [ 89.365063][ C1] ? xt_find_match+0x1cf/0x200 [ 89.369813][ C1] translate_table+0x15bd/0x2250 [ 89.374743][ C1] ? ipt_register_table+0x7a0/0x7a0 [ 89.379922][ C1] ? __might_fault+0xb8/0x110 [ 89.384585][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 89.389596][ C1] ? _copy_from_user+0x10f/0x170 [ 89.394517][ C1] ? copy_from_sockptr_offset+0x6b/0xa0 [ 89.400062][ C1] do_ipt_set_ctl+0xdbc/0x1200 [ 89.404828][ C1] ? rcu_lock_release+0x20/0x20 [ 89.409664][ C1] ? ipt_unregister_table_exit+0x1e0/0x1e0 [ 89.415455][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 89.420562][ C1] ? __mutex_unlock_slowpath+0x218/0x750 [ 89.426205][ C1] ? nf_setsockopt+0x38/0x2b0 [ 89.430864][ C1] ? print_irqtrace_events+0x210/0x210 [ 89.436304][ C1] ? mutex_unlock+0x10/0x10 [ 89.440808][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 89.445990][ C1] ? __local_bh_enable_ip+0x164/0x1f0 [ 89.451346][ C1] nf_setsockopt+0x28a/0x2b0 [ 89.455923][ C1] ip_setsockopt+0x2732/0x3fb0 [ 89.460672][ C1] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 89.466044][ C1] ? read_lock_is_recursive+0x10/0x10 [ 89.471413][ C1] ? __mutex_trylock_common+0x17e/0x2e0 [ 89.476942][ C1] ? __might_sleep+0xc0/0xc0 [ 89.481517][ C1] ? rcu_lock_release+0x20/0x20 [ 89.486353][ C1] tcp_setsockopt+0x23f/0x3680 [ 89.491117][ C1] ? tcp_set_window_clamp+0x1b0/0x1b0 [ 89.496477][ C1] ? __might_sleep+0xc0/0xc0 [ 89.501051][ C1] ? smc_setsockopt+0x130/0xb20 [ 89.505902][ C1] ? mutex_lock_io_nested+0x60/0x60 [ 89.511105][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 89.516112][ C1] ? aa_sk_perm+0x8fc/0xa30 [ 89.520610][ C1] ? sock_common_setsockopt+0x33/0xc0 [ 89.525962][ C1] ? sock_common_recvmsg+0x240/0x240 [ 89.531244][ C1] smc_setsockopt+0x1e5/0xb20 [ 89.535912][ C1] ? smc_shutdown+0x5f0/0x5f0 [ 89.540571][ C1] ? aa_sock_opt_perm+0x79/0x110 [ 89.545508][ C1] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 89.551034][ C1] ? security_socket_setsockopt+0x7d/0xa0 [ 89.556764][ C1] ? smc_shutdown+0x5f0/0x5f0 [ 89.561430][ C1] __sys_setsockopt+0x57e/0x990 [ 89.566266][ C1] ? __ia32_sys_recv+0xb0/0xb0 [ 89.571023][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 89.576988][ C1] __x64_sys_setsockopt+0xb1/0xc0 [ 89.582016][ C1] do_syscall_64+0x3b/0xb0 [ 89.586413][ C1] ? clear_bhb_loop+0x15/0x70 [ 89.591071][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.596949][ C1] RIP: 0033:0x7fa68296bd29 [ 89.601349][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.620936][ C1] RSP: 002b:00007fa6807bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 89.629331][ C1] RAX: ffffffffffffffda RBX: 00007fa682b5c080 RCX: 00007fa68296bd29 [ 89.637284][ C1] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 000000000000000d [ 89.645235][ C1] RBP: 00007fa6829e7a20 R08: 0000000000001378 R09: 0000000000000000 [ 89.653189][ C1] R10: 0000000020000640 R11: 0000000000000246 R12: 0000000000000000 [ 89.661160][ C1] R13: 0000000000000000 R14: 00007fa682b5c080 R15: 00007fff09be90e8 [ 89.669135][ C1] [ 90.778377][ C1] Shutting down cpus with NMI [ 90.783446][ C1] Kernel Offset: disabled [ 90.787775][ C1] Rebooting in 86400 seconds..