last executing test programs: 8.790770453s ago: executing program 2 (id=20): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvfrom(r0, &(0x7f0000000640)=""/170, 0xaa, 0x10140, 0x0, 0x0) 8.668812757s ago: executing program 2 (id=22): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000}, 0x50) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000014007f3727bd70"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x1, 0x5, 0x9, 0x10008, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0xffffffff, 0x2, 0x6, 0x7, 0x81, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x95, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x7, 0xf1, 0x4, 0x1, 0xffff, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x4, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.759224269s ago: executing program 3 (id=32): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2004805, &(0x7f0000000240)=ANY=[], 0xff, 0x253, &(0x7f0000001540)="$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") fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed6, 0x10001}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffa) 6.712096191s ago: executing program 2 (id=33): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff5644d, 0x70bd2c, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x2}}}]}, 0x3c}}, 0x200000c0) sendto$packet(r4, &(0x7f0000000240), 0x0, 0x22008001, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xda, 0x6, @multicast}, 0x14) 5.420626353s ago: executing program 2 (id=40): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x79) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5.23496887s ago: executing program 2 (id=43): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214717a70700000000430600000000000000000000721d5874f72c000000000000000feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x3e42, 0x407ff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/power/pm_wakeup_irq', 0x8840, 0xc0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b018000000109021b0001000001000904f7000176246700090582020002"], 0x0) pread64(r3, &(0x7f00000027c0)=""/108, 0x6c, 0xff) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x6, 0xc1, 0x20, 0x9, 0x40, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x20, 0x8, 0x85}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000480)={0xb8, r4, 0x10, 0xa, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008001) r6 = landlock_create_ruleset(&(0x7f0000000000)={0xc300, 0x0, 0x2}, 0x18, 0x4) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r8, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) landlock_restrict_self(r6, 0x0) ptrace(0x10, r2) 5.034556716s ago: executing program 1 (id=45): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 4.708565227s ago: executing program 4 (id=46): socket$can_j1939(0x1d, 0x2, 0x7) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000891}, 0x0) getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8840) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r4, 0x89e1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x10002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, 0x0) socket$kcm(0x23, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a547ae412132", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x16, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x20008844) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 4.105842026s ago: executing program 4 (id=50): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff5644d, 0x70bd2c, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x2}}}]}, 0x3c}}, 0x200000c0) sendto$packet(r4, &(0x7f0000000240), 0x0, 0x22008001, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xda, 0x6, @multicast}, 0x14) 4.094037786s ago: executing program 1 (id=51): syz_mount_image$fuse(0x0, 0x0, 0x322020, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x12040d0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@inlinecrypt}]}, 0x1, 0x241, &(0x7f0000000540)="$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") recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) 4.050688808s ago: executing program 0 (id=52): unshare(0x2010480) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) socket(0x11, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141f42, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = io_uring_setup(0x612, &(0x7f0000000000)={0x0, 0x599e, 0x2, 0x1, 0x27c}) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) keyctl$session_to_parent(0x12) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000004850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.98177144s ago: executing program 0 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r3, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000280)=0x420a, 0x4) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000005c0), 0x6a, 0x12141, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r4, 0x400, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r5, 0x1) 3.35900454s ago: executing program 4 (id=54): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r1) dup3(r0, r3, 0x0) 3.134740588s ago: executing program 3 (id=55): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x8, &(0x7f0000000000)=ANY=[], 0x5, 0x1e2, &(0x7f0000000080)="$eJzslb+qE0EUxr+ZTXaTW1nbWHjBa+Fmd6+CzYVrY2Uh+CdYCAaTSHRDJNnCBCT4BPZ2Fj6GEFsfQqIgCqKN2gkj82d3h7gbzRKJ4PnBzn4zczhzZga+AUEQ/y3v3n5fim9HHxoAmtiHZ8Y/OpkEt+LfNL48fnXlcvvp7RevvaW3km2l/0MI8Zv15bqLSw6Skvl9878Onukb4DhrdBsMvtF3wHHT6B4Ybhl939IjGe/7/UHc8++O4q4UQX9QRyhVJJtDe/0agM9PGLqmL4QQzJqfTGcPOnHcG28qxHxdzAl7pPhkFp+y+hrAkVWffV8+dLWBdX4hOEKjD8FwzeiL8NKzCWQTWvs/WcvzO2v376LiiaTiPYB8pF85zx8IVy61MrX3y0iRAFj1u/93hAMl0hvdeT1bF6htLaHwgF1vp0S8PNb3l5U61/3N8hyXTLkb5jEnn/mneM5wxvInbSXP1GPRSoYPW5Pp7Nxg2LnnmqDgfBBciFrKiHRbbIEqf1P5016ev1kW6zIXjzpJMg51m/Uj3RY5Llf+x3FwGnXZl26qyqznMV/V26lh5uPqL9WBU1o8SkslCIL465wCU56sfDkV5jXJJoSIru64ToIgCIIgCIIgCIIgqvMzAAD//7paW3I=") setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x1) 3.050299661s ago: executing program 0 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_getattr(0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2010042, &(0x7f0000000300)={[{@subsystem='cpuacct'}, {@xattr}, {@none}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@measure}, {@smackfsdef}, {@appraise}]}) mount(0x0, 0x0, 0x0, 0x40078, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.955597323s ago: executing program 1 (id=57): add_key$user(&(0x7f0000000b80), &(0x7f0000000bc0)={'syz', 0x3}, &(0x7f0000000c00)="cd9a01", 0x3, 0xfffffffffffffffc) 2.955173214s ago: executing program 4 (id=58): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b405000000000000611004000000000063012c0000000000950000000000713a29fccda91842e3b1512a77ef652c1c2b64299f614f20d875615ed59b2ef5be5d06d040a47cb35b6030ed080f2f8db1e8fd7f04ab29595ca0576b40fb6970891db38f0949bddc7315ededa9c0c4bbd1d5784b1cdd125de34b9211dc30e20c074e282298953a46751d07912a41a6b0e51e97a98a597efb5e73b00f81062c46cf42852ca0bc0795e0827b0ea51c3a260fb82d7c4ab0e78505f0ef232d4828a111ebdbf6969edc4751881fad407582a011d6fe18b95522b8e38be8ea0db8071b54b39d1f8afa93af68e6d5ac9324233ed548dc0cddf18fa3b45e979ceb94"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x200, 0x800) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004dd000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 2.102429442s ago: executing program 3 (id=59): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x40009}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2.088116692s ago: executing program 4 (id=60): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = open(0x0, 0x101080, 0x0) getdents(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="e802000000000000290000000400"], 0x2e8}}], 0x2, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) 2.070002363s ago: executing program 0 (id=61): socket$can_j1939(0x1d, 0x2, 0x7) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000891}, 0x0) getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8840) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r4, 0x89e1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x10002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, 0x0) socket$kcm(0x23, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x20008844) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 2.002646445s ago: executing program 1 (id=62): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CAP_MEMORY_FAULT_INFO(0xffffffffffffffff, 0x4068aea3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x460202}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r6}) 1.964721316s ago: executing program 1 (id=63): unshare(0x2010480) socket(0x11, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141f42, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = io_uring_setup(0x612, &(0x7f0000000000)={0x0, 0x599e, 0x2, 0x1, 0x27c}) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) keyctl$session_to_parent(0x12) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000004850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.944704897s ago: executing program 3 (id=64): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, 0x0, 0x0) 1.873106029s ago: executing program 0 (id=65): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0xf0}}], 0x1, 0x24004c41) close(0x3) 899.686821ms ago: executing program 1 (id=66): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 122.449086ms ago: executing program 0 (id=67): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x41100}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x5, 0x9}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000013c0)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f00000041c0)={@local, @link_local, @void, {@llc_tr={0x11, {@llc={0x0, 0x0, "e0"}}}}}, 0x0) 121.317666ms ago: executing program 4 (id=68): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x2}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x1, 0x2, 0x1, 0x7}}, 0xe8) sendmmsg(r0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5d99, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 120.592016ms ago: executing program 2 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x8b101a, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000140)='./file0/../file0\x00', 0x2) 120.161106ms ago: executing program 3 (id=70): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0xce22, @empty}, 0x10) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 0s ago: executing program 3 (id=71): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x3a4b6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000004) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x62000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10a) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) socket$inet(0x2, 0x4, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaa0900000000000088a800008100000086dd60ea8fff00080000fe8000000000000000000000000000bbfe80000000"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. [ 48.032965][ T4171] cgroup: Unknown subsys name 'net' [ 48.189429][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.453382][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.313114][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 51.334235][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 51.350223][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 51.380956][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 51.468005][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 51.541050][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.548842][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.557453][ T4187] device bridge_slave_0 entered promiscuous mode [ 51.566396][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.573550][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.581484][ T4184] device bridge_slave_0 entered promiscuous mode [ 51.592470][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.600014][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.608032][ T4184] device bridge_slave_1 entered promiscuous mode [ 51.628319][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.636501][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.644191][ T4193] device bridge_slave_0 entered promiscuous mode [ 51.652499][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.659943][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.668373][ T4187] device bridge_slave_1 entered promiscuous mode [ 51.689691][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.696858][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.705222][ T4191] device bridge_slave_0 entered promiscuous mode [ 51.713758][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.723577][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.731416][ T4193] device bridge_slave_1 entered promiscuous mode [ 51.748703][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.758018][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.765215][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.772845][ T4191] device bridge_slave_1 entered promiscuous mode [ 51.798205][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.833234][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.856480][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.867458][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.878070][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.893411][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.900743][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.908829][ T4183] device bridge_slave_0 entered promiscuous mode [ 51.918440][ T4184] team0: Port device team_slave_0 added [ 51.926261][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.943389][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.958964][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.966334][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.973976][ T4183] device bridge_slave_1 entered promiscuous mode [ 51.982119][ T4184] team0: Port device team_slave_1 added [ 52.001844][ T4193] team0: Port device team_slave_0 added [ 52.009733][ T4187] team0: Port device team_slave_0 added [ 52.018324][ T4187] team0: Port device team_slave_1 added [ 52.035476][ T4193] team0: Port device team_slave_1 added [ 52.069409][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.076425][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.102659][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.116153][ T4191] team0: Port device team_slave_0 added [ 52.122382][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.129655][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.156121][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.178982][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.196881][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.207550][ T4191] team0: Port device team_slave_1 added [ 52.226720][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.233669][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.259838][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.271199][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.278247][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.304376][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.329045][ T4183] team0: Port device team_slave_0 added [ 52.336925][ T4183] team0: Port device team_slave_1 added [ 52.343052][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.350066][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.376257][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.395002][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.401955][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.427952][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.445973][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.452928][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.478963][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.527939][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.535037][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.561423][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.586121][ T4184] device hsr_slave_0 entered promiscuous mode [ 52.592736][ T4184] device hsr_slave_1 entered promiscuous mode [ 52.602955][ T4193] device hsr_slave_0 entered promiscuous mode [ 52.610588][ T4193] device hsr_slave_1 entered promiscuous mode [ 52.617398][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.625453][ T4193] Cannot create hsr debugfs directory [ 52.634992][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.641931][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.668472][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.680961][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.687974][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.713999][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.729461][ T4187] device hsr_slave_0 entered promiscuous mode [ 52.736618][ T4187] device hsr_slave_1 entered promiscuous mode [ 52.743029][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.750702][ T4187] Cannot create hsr debugfs directory [ 52.812096][ T4191] device hsr_slave_0 entered promiscuous mode [ 52.819071][ T4191] device hsr_slave_1 entered promiscuous mode [ 52.825629][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.833250][ T4191] Cannot create hsr debugfs directory [ 52.895428][ T4183] device hsr_slave_0 entered promiscuous mode [ 52.902092][ T4183] device hsr_slave_1 entered promiscuous mode [ 52.909087][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.916683][ T4183] Cannot create hsr debugfs directory [ 53.005209][ T3545] Bluetooth: hci2: command 0x0409 tx timeout [ 53.005209][ T4195] Bluetooth: hci1: command 0x0409 tx timeout [ 53.005817][ T3545] Bluetooth: hci3: command 0x0409 tx timeout [ 53.011381][ T4195] Bluetooth: hci4: command 0x0409 tx timeout [ 53.023036][ T3545] Bluetooth: hci0: command 0x0409 tx timeout [ 53.175990][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.187607][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.197517][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.206431][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.270825][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.288341][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.300830][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.320093][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.341899][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.359844][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.369802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.380577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.389902][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.404815][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.413417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.422428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.431641][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.438831][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.447579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.466665][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.480575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.491382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.500427][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.507528][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.521640][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.547163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.555990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.578241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.587598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.598284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.607610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.629691][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.640360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.648435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.657010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.669732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.678909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.707668][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.717950][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.736456][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.754007][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.770098][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.779950][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.808191][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.825144][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.845982][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.893068][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.906350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.914116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.941157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.953131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.965390][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.972468][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.987107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.000328][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.010102][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.019008][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.028745][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.035834][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.083297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.091879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.100030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.108847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.118557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.127853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.137011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.146437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.155355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.163826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.173270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.182235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.190879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.202356][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.221102][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.232311][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.240273][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.258800][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.272573][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.283224][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.298660][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.305845][ T1225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.319340][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.331807][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.347000][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.355005][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.363271][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.382979][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.409853][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.421008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.429922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.438853][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.446034][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.455717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.463391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.473631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.487072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.497435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.506247][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.513501][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.559995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.568225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.577542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.587063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.596571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.607151][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.614183][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.622616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.631514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.640341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.648925][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.655999][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.663944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.673022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.682865][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.690057][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.698428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.707118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.716300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.725142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.733562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.741485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.749231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.758356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.767748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.777863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.786857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.801024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.809522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.817634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.840872][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.852403][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.869091][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.878597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.887779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.897785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.907139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.916537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.925999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.934439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.942717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.951577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.960589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.968730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.987202][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.996264][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.004762][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.013171][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.024149][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.032581][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.048833][ T4187] device veth0_vlan entered promiscuous mode [ 55.063868][ T4187] device veth1_vlan entered promiscuous mode [ 55.085291][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 55.091888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.105948][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 55.112763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.123086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.126399][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 55.131698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.136837][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 55.150954][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 55.152439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.170134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.178815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.191803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.200130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.211663][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.221426][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.259863][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.270285][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.284492][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.315550][ T4187] device veth0_macvtap entered promiscuous mode [ 55.335674][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.344298][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.356749][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.370101][ T4184] device veth0_vlan entered promiscuous mode [ 55.398050][ T4187] device veth1_macvtap entered promiscuous mode [ 55.416449][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.431036][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.449158][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.463064][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.471169][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.485518][ T4184] device veth1_vlan entered promiscuous mode [ 55.497547][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.515979][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.536250][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.546749][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.555987][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.563856][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.572973][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.589095][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.597117][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.608749][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.616552][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.638775][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.649244][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.658562][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.670797][ T4184] device veth0_macvtap entered promiscuous mode [ 55.686027][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.701753][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.710166][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.722488][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.749277][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.758473][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.767520][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.776489][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.791225][ T4184] device veth1_macvtap entered promiscuous mode [ 55.823857][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.838047][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.850635][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.860627][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.870047][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.919260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.928669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.940379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.950450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.959189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.967418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.975774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.983460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.001121][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.018256][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.027375][ T4193] device veth0_vlan entered promiscuous mode [ 56.036896][ T4191] device veth0_vlan entered promiscuous mode [ 56.050065][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.061621][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.072912][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.088211][ T4191] device veth1_vlan entered promiscuous mode [ 56.097704][ T4193] device veth1_vlan entered promiscuous mode [ 56.106024][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.114126][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.122272][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.131516][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.161389][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.172101][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.183444][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.212180][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.220774][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.229780][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.238826][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.248185][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.260013][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.269806][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.278945][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.288385][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.309560][ T4183] device veth0_vlan entered promiscuous mode [ 56.318326][ T4191] device veth0_macvtap entered promiscuous mode [ 56.329343][ T4191] device veth1_macvtap entered promiscuous mode [ 56.342610][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.351231][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.359384][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.368099][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.378991][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.392309][ T4183] device veth1_vlan entered promiscuous mode [ 56.401166][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.414391][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.422291][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.430692][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.436218][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.448146][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.478808][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.488599][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.502964][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.514025][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.524157][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.524200][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.529847][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.571084][ T4183] device veth0_macvtap entered promiscuous mode [ 56.586193][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.594990][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.603653][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.617085][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.628998][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.640042][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.650713][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.661227][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.672026][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.683744][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.697813][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.710485][ T4193] device veth0_macvtap entered promiscuous mode [ 56.724024][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.728916][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.734467][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.750156][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.759126][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.770785][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.780428][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.789723][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.798579][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.811241][ T4183] device veth1_macvtap entered promiscuous mode [ 56.814706][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.831006][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.849183][ T4193] device veth1_macvtap entered promiscuous mode [ 56.885779][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.898159][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.908322][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.919144][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.930027][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.941199][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.952908][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.960539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.968982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.977396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.985571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.994205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.067821][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.083109][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.094641][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.105366][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.115290][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.125801][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.137600][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.150428][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.164767][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 57.171785][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.183740][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.184657][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 57.198530][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.212130][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 57.215269][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.218511][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 57.234105][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.234695][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 57.249988][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.261792][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.278887][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.297015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.308098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.318070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.328851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.343711][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.370000][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.382206][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.394206][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.418298][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.438692][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.453073][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.469523][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.481162][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.504372][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.514212][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.529328][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.545201][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.574667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.583313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.605035][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.613743][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.622702][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.637088][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.638170][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.662160][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.711125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.731844][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.740714][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.752729][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.946877][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.964033][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.979501][ T1225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.989041][ T4278] loop0: detected capacity change from 0 to 4096 [ 57.992911][ T1225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.010767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.022034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.057671][ T4228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.073720][ T4228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.133763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.172406][ T1225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.185570][ T4278] EXT4-fs (loop0): Test dummy encryption mode enabled [ 58.196959][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.200629][ T1225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.213754][ T4278] EXT4-fs (loop0): Ignoring removed orlov option [ 58.218311][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.228220][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.242266][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.275935][ T4288] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.292384][ T4278] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 58.315212][ T4274] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 58.421873][ T26] audit: type=1800 audit(1775160158.852:2): pid=4278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 58.443526][ T4278] fs-verity: sha256 using implementation "sha256-avx2" [ 58.601788][ T26] audit: type=1800 audit(1775160159.032:3): pid=4298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 58.652224][ T4296] Zero length message leads to an empty skb [ 58.725495][ T4274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.815725][ T4274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.842829][ T4296] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 58.927966][ T4274] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 59.039092][ T4274] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 59.094791][ T4274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.212136][ T4274] usb 2-1: config 0 descriptor?? [ 59.278745][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 59.285736][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 59.292317][ T4230] Bluetooth: hci1: command 0x0419 tx timeout [ 59.298439][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 59.326662][ T3545] Bluetooth: hci4: command 0x0419 tx timeout [ 59.589937][ T4316] capability: warning: `syz.3.15' uses deprecated v2 capabilities in a way that may be insecure [ 60.273908][ T4274] plantronics 0003:047F:FFFF.0001: unbalanced delimiter at end of report description [ 60.291191][ T4274] plantronics 0003:047F:FFFF.0001: parse failed [ 60.299156][ T4274] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22 [ 60.432534][ T4274] usb 2-1: USB disconnect, device number 2 [ 60.514793][ T4329] device syzkaller0 entered promiscuous mode [ 61.912561][ T4370] loop3: detected capacity change from 0 to 128 [ 62.009339][ T4370] FAT-fs (loop3): bogus number of reserved sectors [ 62.016129][ T4370] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 62.025741][ T4370] FAT-fs (loop3): Can't find a valid FAT filesystem [ 62.579998][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 62.598715][ T4376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.31'. [ 62.610983][ T4376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.31'. [ 62.682276][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 62.801394][ T4375] loop3: detected capacity change from 0 to 16 [ 62.848509][ T4378] device syzkaller0 entered promiscuous mode [ 62.905473][ T4375] erofs: (device loop3): mounted with root inode @ nid 36. [ 63.033949][ T4384] device syzkaller0 entered promiscuous mode [ 63.932990][ T4399] process 'syz.2.40' launched '/dev/fd/4' with NULL argv: empty string added [ 64.927076][ T4413] device syzkaller0 entered promiscuous mode [ 65.094612][ T4274] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.233487][ T4428] loop1: detected capacity change from 0 to 128 [ 65.291281][ T4427] device syzkaller0 entered promiscuous mode [ 65.315099][ T4428] ======================================================= [ 65.315099][ T4428] WARNING: The mand mount option has been deprecated and [ 65.315099][ T4428] and is ignored by this kernel. Remove the mand [ 65.315099][ T4428] option from the mount to silence this warning. [ 65.315099][ T4428] ======================================================= [ 65.384423][ T4274] usb 3-1: Using ep0 maxpacket: 32 [ 65.406094][ T4428] EXT4-fs (loop1): Test dummy encryption mode enabled [ 65.526455][ T4428] EXT4-fs (loop1): inline encryption not supported [ 65.747637][ T4428] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none. [ 66.074862][ T4428] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.160597][ T4274] usb 3-1: config 0 has an invalid interface number: 247 but max is 0 [ 66.185265][ T4274] usb 3-1: config 0 has no interface number 0 [ 66.238027][ T4443] loop3: detected capacity change from 0 to 16 [ 66.268027][ T4443] erofs: (device loop3): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 66.324654][ T4274] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.9b [ 66.351792][ T4274] usb 3-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 66.374576][ T4274] usb 3-1: Manufacturer: syz [ 66.403689][ T4274] usb 3-1: config 0 descriptor?? [ 67.232675][ T4274] usb 3-1: USB disconnect, device number 2 [ 69.109357][ T4481] xt_hashlimit: size too large, truncated to 1048576 [ 69.170315][ T26] audit: type=1326 audit(1775160169.602:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4480 comm="syz.0.67" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3422f9819 code=0x0 [ 69.224066][ T4483] ================================================================== [ 69.232342][ T4483] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 69.241924][ T4483] Read of size 1 at addr ffff8880284c1608 by task syz.4.68/4483 [ 69.249652][ T4483] [ 69.252002][ T4483] CPU: 1 PID: 4483 Comm: syz.4.68 Not tainted syzkaller #0 [ 69.259206][ T4483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 69.269373][ T4483] Call Trace: [ 69.272661][ T4483] [ 69.275599][ T4483] dump_stack_lvl+0x188/0x250 [ 69.280296][ T4483] ? show_regs_print_info+0x20/0x20 [ 69.285684][ T4483] ? load_image+0x400/0x400 [ 69.290181][ T4483] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 69.295688][ T4483] print_address_description+0x60/0x2d0 [ 69.301313][ T4483] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 69.307800][ T4483] kasan_report+0xdf/0x130 [ 69.312207][ T4483] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 69.318716][ T4483] xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 69.325041][ T4483] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 69.331193][ T4483] xfrm_policy_inexact_alloc_chain+0x7ce/0xea0 [ 69.337343][ T4483] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 69.343248][ T4483] xfrm_policy_inexact_insert+0xe0/0x1460 [ 69.348979][ T4483] ? do_raw_spin_lock+0x128/0x2f0 [ 69.354010][ T4483] ? __rwlock_init+0x140/0x140 [ 69.358764][ T4483] ? policy_hash_bysel+0x135/0x7b0 [ 69.363875][ T4483] xfrm_policy_insert+0x112/0x930 [ 69.368913][ T4483] xfrm_add_policy+0x4f2/0x880 [ 69.373772][ T4483] ? xfrm_dump_sa_done+0xc0/0xc0 [ 69.378702][ T4483] ? apparmor_capable+0x12c/0x190 [ 69.383810][ T4483] ? __nla_parse+0x3c/0x50 [ 69.388224][ T4483] xfrm_user_rcv_msg+0x5e5/0x910 [ 69.393155][ T4483] ? xfrm_netlink_rcv+0x90/0x90 [ 69.398016][ T4483] ? xfrm_netlink_rcv+0x66/0x90 [ 69.402875][ T4483] ? __mutex_lock_common+0x465/0x2400 [ 69.408261][ T4483] ? __skb_clone+0x480/0x790 [ 69.412857][ T4483] netlink_rcv_skb+0x1f5/0x440 [ 69.417636][ T4483] ? xfrm_netlink_rcv+0x90/0x90 [ 69.422487][ T4483] ? netlink_ack+0xb50/0xb50 [ 69.427159][ T4483] ? __lock_acquire+0x7d10/0x7d10 [ 69.432199][ T4483] xfrm_netlink_rcv+0x75/0x90 [ 69.436881][ T4483] netlink_unicast+0x774/0x920 [ 69.441654][ T4483] netlink_sendmsg+0x8ba/0xbe0 [ 69.446416][ T4483] ? netlink_getsockopt+0x570/0x570 [ 69.451733][ T4483] ? aa_sock_msg_perm+0x94/0x150 [ 69.456749][ T4483] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 69.462028][ T4483] ? security_socket_sendmsg+0x7c/0xa0 [ 69.467571][ T4483] ? netlink_getsockopt+0x570/0x570 [ 69.472751][ T4483] ____sys_sendmsg+0x5b7/0x8f0 [ 69.477507][ T4483] ? __sys_sendmsg_sock+0x30/0x30 [ 69.482520][ T4483] ? import_iovec+0x6f/0xa0 [ 69.487099][ T4483] ___sys_sendmsg+0x236/0x2e0 [ 69.491768][ T4483] ? __sys_sendmsg+0x2a0/0x2a0 [ 69.496524][ T4483] ? percpu_counter_add_batch+0x13b/0x160 [ 69.502248][ T4483] __se_sys_sendmsg+0x1af/0x290 [ 69.507088][ T4483] ? __x64_sys_sendmsg+0x80/0x80 [ 69.512010][ T4483] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 69.517985][ T4483] ? lockdep_hardirqs_on+0x94/0x140 [ 69.523188][ T4483] do_syscall_64+0x4c/0xa0 [ 69.527589][ T4483] ? clear_bhb_loop+0x30/0x80 [ 69.532337][ T4483] ? clear_bhb_loop+0x30/0x80 [ 69.536996][ T4483] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.542887][ T4483] RIP: 0033:0x7f0ff6121819 [ 69.547308][ T4483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.567015][ T4483] RSP: 002b:00007f0ff437b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.575425][ T4483] RAX: ffffffffffffffda RBX: 00007f0ff639afa0 RCX: 00007f0ff6121819 [ 69.583481][ T4483] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 69.591452][ T4483] RBP: 00007f0ff61b7c91 R08: 0000000000000000 R09: 0000000000000000 [ 69.599416][ T4483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.607376][ T4483] R13: 00007f0ff639b038 R14: 00007f0ff639afa0 R15: 00007ffd3b5ba1b8 [ 69.615350][ T4483] [ 69.618352][ T4483] [ 69.620653][ T4483] Allocated by task 4483: [ 69.624960][ T4483] __kasan_kmalloc+0xb5/0xf0 [ 69.629543][ T4483] sk_prot_alloc+0xe7/0x210 [ 69.634031][ T4483] sk_alloc+0x2f/0x310 [ 69.638078][ T4483] pfkey_create+0xd8/0x560 [ 69.642481][ T4483] __sock_create+0x47b/0x900 [ 69.647054][ T4483] __sys_socket+0xe2/0x170 [ 69.651462][ T4483] __x64_sys_socket+0x76/0x80 [ 69.656117][ T4483] do_syscall_64+0x4c/0xa0 [ 69.660514][ T4483] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.666657][ T4483] [ 69.668958][ T4483] The buggy address belongs to the object at ffff8880284c1000 [ 69.668958][ T4483] which belongs to the cache kmalloc-2k of size 2048 [ 69.682992][ T4483] The buggy address is located 1544 bytes inside of [ 69.682992][ T4483] 2048-byte region [ffff8880284c1000, ffff8880284c1800) [ 69.696423][ T4483] The buggy address belongs to the page: [ 69.702043][ T4483] page:ffffea0000a13000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x284c0 [ 69.712177][ T4483] head:ffffea0000a13000 order:3 compound_mapcount:0 compound_pincount:0 [ 69.720481][ T4483] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 69.728454][ T4483] raw: 00fff00000010200 ffffea0000919800 0000000200000002 ffff888016c42000 [ 69.737015][ T4483] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 69.745605][ T4483] page dumped because: kasan: bad access detected [ 69.752010][ T4483] page_owner tracks the page as allocated [ 69.757698][ T4483] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4229, ts 56125146310, free_ts 56095262299 [ 69.776777][ T4483] get_page_from_freelist+0x1bbd/0x1ca0 [ 69.782328][ T4483] __alloc_pages+0x1ee/0x480 [ 69.786901][ T4483] new_slab+0xc0/0x4b0 [ 69.790952][ T4483] ___slab_alloc+0x80a/0xdd0 [ 69.795537][ T4483] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 69.801324][ T4483] __alloc_skb+0x22c/0x750 [ 69.805722][ T4483] mld_newpack+0x12f/0xb90 [ 69.810123][ T4483] add_grhead+0x5a/0x240 [ 69.814344][ T4483] add_grec+0x1341/0x15d0 [ 69.818671][ T4483] mld_send_initial_cr+0xed/0x240 [ 69.823686][ T4483] mld_dad_work+0x41/0x270 [ 69.828102][ T4483] process_one_work+0x85f/0x1010 [ 69.833032][ T4483] worker_thread+0xaa6/0x1290 [ 69.837701][ T4483] kthread+0x436/0x520 [ 69.841755][ T4483] ret_from_fork+0x1f/0x30 [ 69.846178][ T4483] page last free stack trace: [ 69.850829][ T4483] free_unref_page_prepare+0x637/0x6c0 [ 69.856301][ T4483] free_unref_page+0x8f/0x2a0 [ 69.860960][ T4483] qlist_free_all+0x35/0x90 [ 69.865440][ T4483] kasan_quarantine_reduce+0x150/0x160 [ 69.870878][ T4483] __kasan_slab_alloc+0x2f/0xd0 [ 69.875709][ T4483] slab_post_alloc_hook+0x4c/0x380 [ 69.880800][ T4483] __kmalloc+0x127/0x330 [ 69.885052][ T4483] fib_create_info+0xabc/0x24f0 [ 69.889885][ T4483] fib_table_insert+0xe4/0x1bb0 [ 69.894715][ T4483] fib_magic+0x2e1/0x3c0 [ 69.898948][ T4483] fib_add_ifaddr+0x389/0x5e0 [ 69.903605][ T4483] fib_netdev_event+0x35c/0x480 [ 69.908434][ T4483] raw_notifier_call_chain+0xcb/0x160 [ 69.913786][ T4483] __dev_notify_flags+0x194/0x300 [ 69.918793][ T4483] dev_change_flags+0xe3/0x1a0 [ 69.923539][ T4483] do_setlink+0xcdb/0x3d60 [ 69.927942][ T4483] [ 69.930255][ T4483] Memory state around the buggy address: [ 69.935860][ T4483] ffff8880284c1500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.943999][ T4483] ffff8880284c1580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 69.952063][ T4483] >ffff8880284c1600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 69.960185][ T4483] ^ [ 69.964488][ T4483] ffff8880284c1680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 69.972631][ T4483] ffff8880284c1700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 69.980680][ T4483] ================================================================== [ 69.988722][ T4483] Disabling lock debugging due to kernel taint [ 69.994962][ T4483] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 70.002143][ T4483] CPU: 1 PID: 4483 Comm: syz.4.68 Tainted: G B syzkaller #0 [ 70.010737][ T4483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 70.020797][ T4483] Call Trace: [ 70.024080][ T4483] [ 70.027004][ T4483] dump_stack_lvl+0x188/0x250 [ 70.031681][ T4483] ? show_regs_print_info+0x20/0x20 [ 70.036891][ T4483] ? load_image+0x400/0x400 [ 70.041396][ T4483] panic+0x2e5/0x810 [ 70.045294][ T4483] ? bpf_jit_dump+0xd0/0xd0 [ 70.049801][ T4483] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 70.055715][ T4483] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 70.061611][ T4483] ? _raw_spin_unlock+0x40/0x40 [ 70.066462][ T4483] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 70.072967][ T4483] check_panic_on_warn+0x80/0xa0 [ 70.077920][ T4483] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 70.084519][ T4483] end_report+0x6d/0xf0 [ 70.088686][ T4483] kasan_report+0x102/0x130 [ 70.093196][ T4483] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 70.099707][ T4483] xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 70.106059][ T4483] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 70.112230][ T4483] xfrm_policy_inexact_alloc_chain+0x7ce/0xea0 [ 70.118397][ T4483] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 70.124302][ T4483] xfrm_policy_inexact_insert+0xe0/0x1460 [ 70.130031][ T4483] ? do_raw_spin_lock+0x128/0x2f0 [ 70.135062][ T4483] ? __rwlock_init+0x140/0x140 [ 70.139828][ T4483] ? policy_hash_bysel+0x135/0x7b0 [ 70.144945][ T4483] xfrm_policy_insert+0x112/0x930 [ 70.149979][ T4483] xfrm_add_policy+0x4f2/0x880 [ 70.154747][ T4483] ? xfrm_dump_sa_done+0xc0/0xc0 [ 70.159690][ T4483] ? apparmor_capable+0x12c/0x190 [ 70.164722][ T4483] ? __nla_parse+0x3c/0x50 [ 70.169142][ T4483] xfrm_user_rcv_msg+0x5e5/0x910 [ 70.174084][ T4483] ? xfrm_netlink_rcv+0x90/0x90 [ 70.178934][ T4483] ? xfrm_netlink_rcv+0x66/0x90 [ 70.183767][ T4483] ? __mutex_lock_common+0x465/0x2400 [ 70.189124][ T4483] ? __skb_clone+0x480/0x790 [ 70.193699][ T4483] netlink_rcv_skb+0x1f5/0x440 [ 70.198442][ T4483] ? xfrm_netlink_rcv+0x90/0x90 [ 70.203278][ T4483] ? netlink_ack+0xb50/0xb50 [ 70.207935][ T4483] ? __lock_acquire+0x7d10/0x7d10 [ 70.212943][ T4483] xfrm_netlink_rcv+0x75/0x90 [ 70.217597][ T4483] netlink_unicast+0x774/0x920 [ 70.222350][ T4483] netlink_sendmsg+0x8ba/0xbe0 [ 70.227096][ T4483] ? netlink_getsockopt+0x570/0x570 [ 70.232274][ T4483] ? aa_sock_msg_perm+0x94/0x150 [ 70.237194][ T4483] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 70.242458][ T4483] ? security_socket_sendmsg+0x7c/0xa0 [ 70.247901][ T4483] ? netlink_getsockopt+0x570/0x570 [ 70.253076][ T4483] ____sys_sendmsg+0x5b7/0x8f0 [ 70.257912][ T4483] ? __sys_sendmsg_sock+0x30/0x30 [ 70.263099][ T4483] ? import_iovec+0x6f/0xa0 [ 70.267591][ T4483] ___sys_sendmsg+0x236/0x2e0 [ 70.272260][ T4483] ? __sys_sendmsg+0x2a0/0x2a0 [ 70.277006][ T4483] ? percpu_counter_add_batch+0x13b/0x160 [ 70.282715][ T4483] __se_sys_sendmsg+0x1af/0x290 [ 70.287554][ T4483] ? __x64_sys_sendmsg+0x80/0x80 [ 70.292474][ T4483] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 70.298443][ T4483] ? lockdep_hardirqs_on+0x94/0x140 [ 70.303632][ T4483] do_syscall_64+0x4c/0xa0 [ 70.308046][ T4483] ? clear_bhb_loop+0x30/0x80 [ 70.312707][ T4483] ? clear_bhb_loop+0x30/0x80 [ 70.317375][ T4483] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.323363][ T4483] RIP: 0033:0x7f0ff6121819 [ 70.327776][ T4483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.347363][ T4483] RSP: 002b:00007f0ff437b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.355760][ T4483] RAX: ffffffffffffffda RBX: 00007f0ff639afa0 RCX: 00007f0ff6121819 [ 70.363730][ T4483] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 70.371684][ T4483] RBP: 00007f0ff61b7c91 R08: 0000000000000000 R09: 0000000000000000 [ 70.379635][ T4483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.387584][ T4483] R13: 00007f0ff639b038 R14: 00007f0ff639afa0 R15: 00007ffd3b5ba1b8 [ 70.395546][ T4483] [ 70.398846][ T4483] Kernel Offset: disabled [ 70.403156][ T4483] Rebooting in 86400 seconds..