last executing test programs: 2.861464476s ago: executing program 4 (id=62): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setgid(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.686455411s ago: executing program 4 (id=64): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000240)=0x10) 2.206525932s ago: executing program 2 (id=74): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8ca9cdeba2e007c4a93603b4f524791af92a9b96e4"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc30, @void, @value}, 0x94) iopl(0x3) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) sendfile(r2, r2, 0x0, 0x80000000) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) 1.885956199s ago: executing program 1 (id=78): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffff1f}, 0x20}}, 0x0) r1 = io_uring_setup(0x1694, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.776495658s ago: executing program 4 (id=79): setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x9, &(0x7f0000006680)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.582217595s ago: executing program 2 (id=80): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sched_getaffinity(0x0, 0x8, &(0x7f0000000340)) 1.573268806s ago: executing program 4 (id=81): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f00001ce000/0x1000)=nil, 0x1000, 0x9) 1.40815427s ago: executing program 1 (id=82): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x87}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000001480)=[{0x200000000006, 0x54, 0x0, 0x7ffc1ffb}]}) msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 1.298379369s ago: executing program 2 (id=84): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1.277107871s ago: executing program 1 (id=85): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000440)='K', 0x1}], 0x1) 1.190409078s ago: executing program 4 (id=87): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={0x0, r0}, 0x18) 1.189988298s ago: executing program 0 (id=88): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000f00)={r0, 0x0, &(0x7f0000000f40)=""/68}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffed0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x1000}, 0x18) ioperm(0x0, 0x3, 0x2) syz_io_uring_setup(0x1002b65, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) io_uring_setup(0x1de1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) close(r2) 1.189262178s ago: executing program 2 (id=89): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x50}}, 0x20000000) semget(0x1, 0x3, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="979600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000500)=0x9) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000240)=0x10) 1.120756744s ago: executing program 1 (id=90): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x201}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x4000) 1.077872978s ago: executing program 0 (id=91): setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x9, &(0x7f0000006680)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 972.461827ms ago: executing program 4 (id=92): r0 = socket$kcm(0x10, 0x2, 0x0) socket(0x11, 0x80a, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r2}, 0x38) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00fffd10008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 972.183797ms ago: executing program 1 (id=93): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$eJzs3U1vFVUcB+D/md6Wl4ItxkSRhU1IhERtacFojIkQcefCFxJXJta2EMIFGloTQYyQ4DfQD2Dizo1xSYwh6satOxM/gCESA924q5nbmXKBe0tfbhnsPE9y6Zw5nZwzvflxZs6dmRtAbY3k/2QReyNiNkUMtdU1oqgcWfq9O7cvTy3cvjyVYnHx/X9SpGJd+fup+DlYbLw9In7/OcWTfQ+2O3fx0pnJZnPmQlEemz87OzZ38dJLp89Onpo5NXNuYvyV8ZePHJ44cqgn+7k7In4dPd64dvLNfd9Pfbvnix+/u57iaOwq6tv3o1dGYmT5b9Iu/7u+2uvGKtJX7E/7W5waFXaINSnfv/6IeDqGoi/uvnlD8eW7lXYO2FSLKWIRqKkk/1BT5XFAfv5bvqo9IgEelVvHliYA7qSlub2F5fw3luYGY3trbmDnQor2aZ0UEb2YmcvbmH0+DeWv2KR5OKCzK1cj4plO439qZXO4NYuf5z+7J/9ZRLxT/MzXv7fO9kfuK8s/PDobyf9Hbfn/eJ3tyz8AAAAAAAD0zo1jEfFip8//suXrf6LD9T+DEXG0B+0//PO/7GYPmgE6uHUs4vWIKK/9W2jLf2G4ryjtbl0P0J9Onm7OHIqIJyLiYPRvy8vjK7Qxsu+3/q51bdf/5a+8/fJawKIfNxvb7t1menJ+ciP7DCy5dTXi2Uan/Kfl8T91GP/zsX92lW0sHn/jl251D88/sFkWv4k40HH8v/vkirTy8znGWscDY+VRwYM++/D6D93al3+oTj7+71w5/8Op/Xk9c2tv4/O//9xA/jsf/w+kE61HzgwU6z6dnJ+/MB4xkN5+cP3E2vsMW1GZhzIvef4P7u98/r/S8f+OiLiyyjZP/PTWtW51xn+oTp7/6TWN/2tf2P/B1/92a3914/+R1ph+sFhj/g9WttqAVt1PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg/yiJiV6RsdHk5y0ZHIwYj4qnYmTXPz82/cPL8J+em87rW9/9n5Tf9Di2VU/n9/8Nt5Yn7yocjYk9EfNW3o1UenTrfnK565wEAAAAAAAAAAAAAAAAAAOAxMdjl/v/cX31V9w7YdI2qOwBURv6hvuQf6kv+ob7kH+pL/qG+5B/qS/6hvuQf6kv+AQAAAABgS9nz3I0/UkRceW1H65UbKOr6K+0ZsNmOVt0BoDIe8QP15dIfqC/n+EB6SP32dW8JAAAAAAAAAAAAAPTKgb3u/4e6yqruAFCZ7vf/ezIAbHXu/4f6co4PuP8fAAAAAAAAAAAAAB5/cxcvnZlsNmcurHdh28Y2t2ChPguRepC4R7RQ9f9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA6b8AAAD//29y9rY=") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mp']) 930.722981ms ago: executing program 3 (id=94): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) ioperm(0x0, 0x7fff, 0x15f9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) arch_prctl$ARCH_GET_CPUID(0x1011) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) 867.713246ms ago: executing program 0 (id=95): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) open(0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000391000/0x1000)=nil, 0x1000, 0x88769ce0732b8dfe) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendfile(r0, r1, 0x0, 0x100) 806.271471ms ago: executing program 3 (id=96): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200de00ba8d7061966c86dd60bc426000082c00fc000000000000000000000000000000ff0200000000000000000000000000013b000001"], 0x0) 760.396985ms ago: executing program 3 (id=97): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x101282, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xbe, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000fffffffb000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000d000000b7020000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000001200)='signal_generate\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 732.279597ms ago: executing program 0 (id=98): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x1) 294.255135ms ago: executing program 3 (id=99): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xbe, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000fffffffb000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000d000000b7020000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000001200)='signal_generate\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007665746830"], 0xfc}, 0x1, 0x0, 0x0, 0x4040040}, 0x880) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) 293.883315ms ago: executing program 0 (id=100): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000440)='K', 0x1}], 0x1) 229.64966ms ago: executing program 2 (id=101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000480)) 205.306452ms ago: executing program 3 (id=102): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fchmodat(r2, &(0x7f0000000000)='./file0\x00', 0x0) 141.619548ms ago: executing program 0 (id=103): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') preadv(r1, &(0x7f0000000840)=[{&(0x7f0000001dc0)=""/4088, 0xff8}], 0x1, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 30.153077ms ago: executing program 2 (id=104): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x4, 0xa}, @printk={@x, {0x3, 0x0}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 29.783467ms ago: executing program 3 (id=105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d616376746170000000140035006772653000"/178], 0xe8}}, 0x0) close(r0) 0s ago: executing program 1 (id=106): setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x9, &(0x7f0000006680)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. syzkaller login: [ 38.489736][ T3553] cgroup: Unknown subsys name 'net' [ 38.589821][ T3553] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 39.755289][ T3553] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 41.063530][ T3568] chnl_net:caif_netlink_parms(): no params data found [ 41.129562][ T3567] chnl_net:caif_netlink_parms(): no params data found [ 41.243281][ T3566] chnl_net:caif_netlink_parms(): no params data found [ 41.264772][ T3570] chnl_net:caif_netlink_parms(): no params data found [ 41.279867][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.287911][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.296411][ T3568] device bridge_slave_0 entered promiscuous mode [ 41.316084][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.323179][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.331063][ T3567] device bridge_slave_0 entered promiscuous mode [ 41.343735][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.350803][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.359623][ T3568] device bridge_slave_1 entered promiscuous mode [ 41.378908][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.386022][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.393887][ T3567] device bridge_slave_1 entered promiscuous mode [ 41.435965][ T3567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.447158][ T3567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.462861][ T3568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.472143][ T3569] chnl_net:caif_netlink_parms(): no params data found [ 41.494993][ T3568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.541809][ T3568] team0: Port device team_slave_0 added [ 41.549563][ T3567] team0: Port device team_slave_0 added [ 41.571281][ T3568] team0: Port device team_slave_1 added [ 41.585872][ T3567] team0: Port device team_slave_1 added [ 41.595896][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.603725][ T3566] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.611324][ T3566] device bridge_slave_0 entered promiscuous mode [ 41.647921][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.655148][ T3566] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.663597][ T3566] device bridge_slave_1 entered promiscuous mode [ 41.670783][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.677990][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.685788][ T3570] device bridge_slave_0 entered promiscuous mode [ 41.723694][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.730748][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.739464][ T3570] device bridge_slave_1 entered promiscuous mode [ 41.747117][ T3568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.754339][ T3568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.780369][ T3568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.793133][ T3567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.800071][ T3567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.826215][ T3567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.837751][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.845164][ T3569] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.852997][ T3569] device bridge_slave_0 entered promiscuous mode [ 41.874072][ T3568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.881033][ T3568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.907413][ T3568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.919088][ T3567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.926287][ T3567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.952349][ T3567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.963791][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.970846][ T3569] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.979645][ T3569] device bridge_slave_1 entered promiscuous mode [ 41.989314][ T3566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.024189][ T3566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.035000][ T3570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.047560][ T3570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.110237][ T3569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.138554][ T3568] device hsr_slave_0 entered promiscuous mode [ 42.145578][ T3568] device hsr_slave_1 entered promiscuous mode [ 42.155192][ T3567] device hsr_slave_0 entered promiscuous mode [ 42.161731][ T3567] device hsr_slave_1 entered promiscuous mode [ 42.169088][ T3567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.177024][ T3567] Cannot create hsr debugfs directory [ 42.185529][ T3570] team0: Port device team_slave_0 added [ 42.193176][ T3569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.212345][ T3566] team0: Port device team_slave_0 added [ 42.219492][ T3570] team0: Port device team_slave_1 added [ 42.241589][ T3566] team0: Port device team_slave_1 added [ 42.270546][ T3569] team0: Port device team_slave_0 added [ 42.295444][ T3570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.302520][ T3570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.329024][ T3570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.344228][ T3569] team0: Port device team_slave_1 added [ 42.364560][ T3566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.371507][ T3566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.397529][ T3566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.408941][ T3570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.416195][ T3570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.442097][ T3570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.470395][ T3566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.477528][ T3566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.504716][ T3566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.528215][ T3569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.535297][ T3569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.561238][ T3569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.580099][ T3569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.587145][ T3569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.614288][ T3569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.675884][ T3566] device hsr_slave_0 entered promiscuous mode [ 42.682758][ T3566] device hsr_slave_1 entered promiscuous mode [ 42.689228][ T3566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.696903][ T3566] Cannot create hsr debugfs directory [ 42.726824][ T3569] device hsr_slave_0 entered promiscuous mode [ 42.733967][ T3569] device hsr_slave_1 entered promiscuous mode [ 42.740421][ T3569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.748124][ T3569] Cannot create hsr debugfs directory [ 42.763636][ T3570] device hsr_slave_0 entered promiscuous mode [ 42.770257][ T3570] device hsr_slave_1 entered promiscuous mode [ 42.777083][ T3570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.784922][ T3570] Cannot create hsr debugfs directory [ 42.853101][ T3573] Bluetooth: hci4: command 0x0409 tx timeout [ 42.859659][ T3573] Bluetooth: hci3: command 0x0409 tx timeout [ 42.859802][ T3591] Bluetooth: hci0: command 0x0409 tx timeout [ 42.872231][ T3591] Bluetooth: hci1: command 0x0409 tx timeout [ 42.882107][ T3573] Bluetooth: hci2: command 0x0409 tx timeout [ 43.037166][ T3568] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 43.049581][ T3568] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 43.059369][ T3568] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 43.075482][ T3568] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 43.127224][ T3567] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 43.138792][ T3567] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 43.161724][ T3567] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 43.170152][ T3567] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 43.205589][ T3570] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 43.228771][ T3570] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 43.240609][ T3570] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 43.261657][ T3570] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 43.311650][ T3566] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 43.324672][ T3566] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 43.342983][ T3568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.362364][ T3566] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 43.373687][ T3566] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 43.420811][ T3567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.429442][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.441143][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.451898][ T3568] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.464057][ T3569] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 43.477273][ T3569] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 43.487537][ T3569] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 43.503313][ T3569] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 43.527212][ T3567] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.542439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.551162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.562130][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.569330][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.577759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.586697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.595328][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.602436][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.610386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.618276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.626295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.635016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.646207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.655357][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.662461][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.679615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.688029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.716409][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.727737][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.736569][ T3612] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.743670][ T3612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.753180][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.762342][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.770793][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.779497][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.787996][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.797134][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.816687][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.826034][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.855624][ T3568] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.866401][ T3568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.878358][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.888025][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.896746][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.905293][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.914252][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.924044][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.933824][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.942647][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.976270][ T3570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.986118][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.004232][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.017165][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.025705][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.036532][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.045071][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.060835][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.101303][ T3570] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.121672][ T3566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.138241][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.146883][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.167496][ T3569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.178713][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.190980][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.203377][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.210447][ T3612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.223442][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.231939][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.243543][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.263416][ T3569] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.277998][ T3566] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.292330][ T3568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.299445][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.309006][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.318159][ T3612] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.325246][ T3612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.333616][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.341310][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.350119][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.358977][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.367017][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.377402][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.394903][ T3567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.412868][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.420324][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.428249][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.437252][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.446327][ T610] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.453416][ T610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.461257][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.470171][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.480413][ T610] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.487494][ T610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.495576][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.504908][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.513452][ T610] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.520612][ T610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.528379][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.537353][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.546418][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.555471][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.564417][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.572791][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.589868][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.600736][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.609498][ T610] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.616556][ T610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.627643][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.636808][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.645855][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.655438][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.672354][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.680415][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.689122][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.698106][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.710057][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.738294][ T3570] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.748981][ T3570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.767878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.778025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.786712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.795487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.804453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.812853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.821002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.829432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.838142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.846907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.856040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.864471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.873311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.881839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.890531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.899200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.914312][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.932376][ T3615] Bluetooth: hci3: command 0x041b tx timeout [ 44.934839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.938414][ T3615] Bluetooth: hci0: command 0x041b tx timeout [ 44.947048][ T1078] Bluetooth: hci2: command 0x041b tx timeout [ 44.959625][ T1078] Bluetooth: hci1: command 0x041b tx timeout [ 44.966429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.978201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.980570][ T3615] Bluetooth: hci4: command 0x041b tx timeout [ 45.001370][ T3569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.014645][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.036747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.048871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.069164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.078986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.126201][ T3568] device veth0_vlan entered promiscuous mode [ 45.153051][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.161316][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.170881][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.180083][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.188754][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.197772][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.207713][ T3567] device veth0_vlan entered promiscuous mode [ 45.231198][ T3568] device veth1_vlan entered promiscuous mode [ 45.248990][ T3570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.262792][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.270707][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.288440][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.301250][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.316746][ T3567] device veth1_vlan entered promiscuous mode [ 45.363483][ T3566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.376167][ T3568] device veth0_macvtap entered promiscuous mode [ 45.393654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.401138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.409459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.418472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.429093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.450502][ T3568] device veth1_macvtap entered promiscuous mode [ 45.477113][ T3567] device veth0_macvtap entered promiscuous mode [ 45.490489][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.503605][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.512425][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.521384][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.530313][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.539248][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.547001][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.558071][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.568128][ T3569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.579943][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.589117][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.609652][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.619463][ T3566] device veth0_vlan entered promiscuous mode [ 45.626809][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.636594][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.644559][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.654356][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.668565][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.677805][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.689542][ T3567] device veth1_macvtap entered promiscuous mode [ 45.709444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.717828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.726994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.739707][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.750962][ T3568] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.760205][ T3568] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.769433][ T3568] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.778362][ T3568] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.791297][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.805287][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.817014][ T3567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.829861][ T3566] device veth1_vlan entered promiscuous mode [ 45.837424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.845888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.854971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.864161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.873233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.899681][ T3567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.910481][ T3567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.924108][ T3567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.944922][ T3569] device veth0_vlan entered promiscuous mode [ 45.957334][ T3570] device veth0_vlan entered promiscuous mode [ 45.968455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.979112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.990362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.999940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.008561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.016957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.025362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.036182][ T3567] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.044989][ T3567] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.055027][ T3567] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.064052][ T3567] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.079601][ T3569] device veth1_vlan entered promiscuous mode [ 46.095944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.107112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.118056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.126473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.136939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.159877][ T3570] device veth1_vlan entered promiscuous mode [ 46.175504][ T3566] device veth0_macvtap entered promiscuous mode [ 46.183455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.191608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.200369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.209216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.227118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.257631][ T3566] device veth1_macvtap entered promiscuous mode [ 46.298780][ T3570] device veth0_macvtap entered promiscuous mode [ 46.306395][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.316419][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.325106][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.333677][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.343000][ T3569] device veth0_macvtap entered promiscuous mode [ 46.354531][ T3569] device veth1_macvtap entered promiscuous mode [ 46.365999][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.373394][ T610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.381477][ T610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.383914][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.401546][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.409788][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.436379][ T3570] device veth1_macvtap entered promiscuous mode [ 46.484846][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.497854][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.508072][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.519134][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.530695][ T3566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.544625][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.571813][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.579669][ T610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.588135][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.599334][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.599371][ T610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.608678][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.624835][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.633367][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.641609][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.652954][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.662877][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.673551][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.683596][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.694342][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.707741][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.730015][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.738998][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.749324][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.760125][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.770739][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.781488][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.791669][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.802913][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.813293][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.824006][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.835594][ T3570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.861289][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.878575][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.889603][ T3566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.905808][ T3566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.917744][ T3566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.926187][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.937599][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.946710][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.958316][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.967383][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.978054][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.988048][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.998675][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.008808][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.020528][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.023252][ T3613] Bluetooth: hci0: command 0x040f tx timeout [ 47.033385][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.043716][ T3613] Bluetooth: hci1: command 0x040f tx timeout [ 47.050644][ T3613] Bluetooth: hci2: command 0x040f tx timeout [ 47.052962][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.056846][ T3613] Bluetooth: hci3: command 0x040f tx timeout [ 47.073531][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.074433][ T3566] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.096264][ T3566] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.105815][ T3613] Bluetooth: hci4: command 0x040f tx timeout [ 47.113879][ T3566] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.128221][ T3566] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.146792][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.162640][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.171511][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.181108][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.191893][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.202551][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.213202][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.224622][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.235079][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.245085][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.256224][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.267776][ T3570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.276559][ T3569] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.285868][ T3569] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.294880][ T3569] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.304002][ T3569] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.327861][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.337999][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.367135][ T3570] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.382863][ T3570] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.391582][ T3570] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.418155][ T3570] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.590640][ T3652] Zero length message leads to an empty skb [ 47.618967][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.641674][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.656398][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.665466][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.674651][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.691229][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.720266][ T3612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.740748][ T3612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.758230][ T610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.830339][ T26] audit: type=1326 audit(1728981374.917:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3659 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd058d06ff9 code=0x7ffc0000 [ 47.866619][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.868314][ T610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.880585][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.905257][ T610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.923260][ T26] audit: type=1326 audit(1728981374.917:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3659 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fd058d06ff9 code=0x7ffc0000 [ 47.960794][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.968167][ T26] audit: type=1326 audit(1728981374.917:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3659 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd058d06ff9 code=0x7ffc0000 [ 47.978732][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.992659][ T26] audit: type=1326 audit(1728981374.947:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3659 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd058d06ff9 code=0x7ffc0000 [ 48.044799][ T610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.102817][ T610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.112743][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.466317][ T3668] loop3: detected capacity change from 0 to 8192 [ 48.671203][ T3687] device pim6reg1 entered promiscuous mode [ 48.813237][ T3689] Falling back ldisc for ttyS3. [ 48.890470][ T26] audit: type=1326 audit(1728981375.977:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3691 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee748fff9 code=0x7ffc0000 [ 48.919485][ T26] audit: type=1326 audit(1728981376.007:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3691 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee748fff9 code=0x7ffc0000 [ 48.945423][ T26] audit: type=1326 audit(1728981376.017:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3691 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ee748fff9 code=0x7ffc0000 [ 48.994959][ T26] audit: type=1326 audit(1728981376.017:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3691 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee748fff9 code=0x7ffc0000 [ 49.058405][ T26] audit: type=1326 audit(1728981376.017:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3691 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ee748fff9 code=0x7ffc0000 [ 49.099324][ T3613] Bluetooth: hci2: command 0x0419 tx timeout [ 49.109570][ T3613] Bluetooth: hci1: command 0x0419 tx timeout [ 49.132409][ T3613] Bluetooth: hci0: command 0x0419 tx timeout [ 49.164404][ T26] audit: type=1326 audit(1728981376.017:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3691 comm="syz.1.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee748fff9 code=0x7ffc0000 [ 49.192821][ T3613] Bluetooth: hci4: command 0x0419 tx timeout [ 49.209571][ T3613] Bluetooth: hci3: command 0x0419 tx timeout [ 49.347133][ T3711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 49.420736][ T3713] loop2: detected capacity change from 0 to 256 [ 49.518397][ T3713] syz.2.28[3713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.518495][ T3713] syz.2.28[3713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.694823][ T3722] syz.2.28 uses obsolete (PF_INET,SOCK_PACKET) [ 49.722610][ T3721] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 49.856908][ T3729] netlink: 'syz.1.34': attribute type 10 has an invalid length. [ 49.920127][ T3729] team0: Device veth0_macvtap failed to register rx_handler [ 49.987052][ T3731] netlink: 'syz.0.33': attribute type 4 has an invalid length. [ 50.046399][ T3729] syz.1.34 (3729) used greatest stack depth: 19792 bytes left [ 50.435705][ T3747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.41'. [ 50.500071][ T3743] loop3: detected capacity change from 0 to 1024 [ 50.552117][ T3743] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 50.574272][ T3743] EXT4-fs (loop3): invalid journal inode [ 50.883498][ T3758] Falling back ldisc for ttyS3. [ 51.061004][ T3768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'. [ 51.084578][ T3769] syz.2.46[3769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.084672][ T3769] syz.2.46[3769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.303998][ T3751] usb usb8: usbfs: process 3751 (syz.1.42) did not claim interface 0 before use [ 51.628197][ T3794] loop2: detected capacity change from 0 to 512 [ 51.737527][ T3796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 51.770038][ T3794] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.53: inode #1: comm syz.2.53: iget: illegal inode # [ 51.890683][ T3794] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.53: error while reading EA inode 1 err=-117 [ 51.927619][ T3794] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 51.956628][ T3794] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.53: inode #1: comm syz.2.53: iget: illegal inode # [ 52.018714][ T3794] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.53: error while reading EA inode 1 err=-117 [ 52.063006][ T3794] EXT4-fs (loop2): 1 orphan inode deleted [ 52.068972][ T3794] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 52.090791][ T3814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.59'. [ 52.152970][ T3814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.59'. [ 52.450247][ T3833] IPVS: Error joining to the multicast group [ 52.616556][ T3841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.68'. [ 52.627057][ C0] hrtimer: interrupt took 1427316 ns [ 52.682914][ T3846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 53.002701][ T3855] loop2: detected capacity change from 0 to 4096 [ 53.116908][ T3864] loop3: detected capacity change from 0 to 1024 [ 53.129020][ T3855] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 53.219138][ T3864] EXT4-fs (loop3): INFO: recovery required on readonly filesystem [ 53.237959][ T3864] EXT4-fs (loop3): write access will be enabled during recovery [ 53.254710][ T3864] EXT4-fs (loop3): barriers disabled [ 53.308662][ T3864] JBD2: no valid journal superblock found [ 53.332406][ T3864] EXT4-fs (loop3): error loading journal [ 53.513490][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 53.513504][ T26] audit: type=1326 audit(1728981380.607:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3871 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd058d06ff9 code=0x7ffc0000 [ 53.548771][ T3874] loop4: detected capacity change from 0 to 128 [ 53.627601][ T26] audit: type=1326 audit(1728981380.647:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3871 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fd058d06ff9 code=0x7ffc0000 [ 53.736627][ T7] cfg80211: failed to load regulatory.db [ 53.800648][ T26] audit: type=1326 audit(1728981380.647:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3871 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd058d06ff9 code=0x7ffc0000 [ 53.866206][ T3884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 53.896168][ T26] audit: type=1326 audit(1728981380.707:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3876 comm="syz.1.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee748fff9 code=0x7ffc0000 [ 54.014620][ T26] audit: type=1326 audit(1728981380.707:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3876 comm="syz.1.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f2ee748fff9 code=0x7ffc0000 [ 54.070385][ T26] audit: type=1326 audit(1728981380.707:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3876 comm="syz.1.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee748fff9 code=0x7ffc0000 [ 54.101876][ T3900] loop1: detected capacity change from 0 to 1024 [ 54.157980][ T26] audit: type=1326 audit(1728981380.707:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3876 comm="syz.1.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee748fff9 code=0x7ffc0000 [ 54.221791][ T26] audit: type=1326 audit(1728981380.707:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3876 comm="syz.1.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f2ee748fff9 code=0x7ffc0000 [ 54.260879][ T3908] netlink: 'syz.3.97': attribute type 39 has an invalid length. [ 54.278253][ T3911] syz.0.98[3911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.278432][ T3911] syz.0.98[3911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.298534][ T3900] Quota error (device loop1): find_tree_dqentry: Getting block too big (64 >= 6) [ 54.323203][ T26] audit: type=1326 audit(1728981380.707:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3876 comm="syz.1.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee748fff9 code=0x7ffc0000 [ 54.348192][ T3908] device veth0_macvtap left promiscuous mode [ 54.372337][ T3591] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.403793][ T3900] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.93: Failed to acquire dquot type 0 [ 54.429196][ T3900] EXT4-fs error (device loop1): mb_free_blocks:1865: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 54.468118][ T3900] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #13: comm syz.1.93: corrupted inode contents [ 54.488906][ T3900] EXT4-fs error (device loop1): ext4_dirty_inode:6007: inode #13: comm syz.1.93: mark_inode_dirty error [ 54.506548][ T3900] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #13: comm syz.1.93: corrupted inode contents [ 54.524967][ T3900] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #13: comm syz.1.93: mark_inode_dirty error [ 54.565546][ T3900] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #13: comm syz.1.93: corrupted inode contents [ 54.589646][ T3900] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 54.601782][ T3900] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #13: comm syz.1.93: corrupted inode contents [ 54.616075][ T3900] EXT4-fs error (device loop1): ext4_truncate:4272: inode #13: comm syz.1.93: mark_inode_dirty error [ 54.641197][ T3900] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 54.680152][ T3900] EXT4-fs (loop1): 1 truncate cleaned up [ 54.687962][ T3900] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 54.782319][ T3591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.809306][ T3591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.809646][ T3900] tmpfs: Unknown parameter 'mp' [ 54.853575][ T3591] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 54.887755][ T3591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.954695][ T3591] usb 5-1: config 0 descriptor?? [ 54.974371][ T3926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 54.986352][ T3922] ------------[ cut here ]------------ [ 54.992207][ T3922] WARNING: CPU: 1 PID: 3922 at kernel/cgroup/cgroup.c:1424 cset_cgroup_from_root+0x1c7/0x230 [ 55.002393][ T3922] Modules linked in: [ 55.006303][ T3922] CPU: 1 PID: 3922 Comm: syz.0.103 Not tainted 5.15.167-syzkaller #0 [ 55.014363][ T3922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 55.024411][ T3922] RIP: 0010:cset_cgroup_from_root+0x1c7/0x230 [ 55.030487][ T3922] Code: 78 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 5d b2 52 00 4d 8b 27 4d 85 e4 75 c7 e8 30 e8 08 00 0f 0b e8 29 e8 08 00 <0f> 0b e9 a4 fe ff ff e8 1d e8 08 00 0f 0b e9 f9 fe ff ff 48 c7 c1 [ 55.050176][ T3922] RSP: 0018:ffffc90002e67958 EFLAGS: 00010087 [ 55.056261][ T3922] RAX: ffffffff81777247 RBX: 0000000000000000 RCX: 0000000000040000 [ 55.064230][ T3922] RDX: ffffc9000381b000 RSI: 0000000000000546 RDI: 0000000000000547 [ 55.072196][ T3922] RBP: dffffc0000000000 R08: ffffffff817770e5 R09: 0000000000000003 [ 55.080160][ T3922] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff888074a80000 [ 55.088132][ T3922] R13: dffffc0000000000 R14: ffff88802a0bc000 R15: ffffffff8c948000 [ 55.096100][ T3922] FS: 00007f7be2e566c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 55.105024][ T3922] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.111603][ T3922] CR2: 0000001b32b1fffc CR3: 0000000072b08000 CR4: 00000000003506e0 [ 55.119569][ T3922] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.127531][ T3922] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.135496][ T3922] Call Trace: [ 55.138771][ T3922] [ 55.141704][ T3922] ? __warn+0x15b/0x300 [ 55.145865][ T3922] ? cset_cgroup_from_root+0x1c7/0x230 [ 55.151407][ T3922] ? report_bug+0x1b7/0x2e0 [ 55.155950][ T3922] ? handle_bug+0x3d/0x70 [ 55.160325][ T3922] ? exc_invalid_op+0x16/0x40 [ 55.164999][ T3922] ? asm_exc_invalid_op+0x16/0x20 [ 55.170024][ T3922] ? cset_cgroup_from_root+0x65/0x230 [ 55.175390][ T3922] ? cset_cgroup_from_root+0x1c7/0x230 [ 55.180846][ T3922] ? cset_cgroup_from_root+0x1c7/0x230 [ 55.186298][ T3922] ? cset_cgroup_from_root+0x1c7/0x230 [ 55.191756][ T3922] cgroup_path_ns_locked+0x6c/0xd0 [ 55.196865][ T3922] proc_cpuset_show+0x27d/0x3f0 [ 55.201715][ T3922] proc_single_show+0xf6/0x180 [ 55.206474][ T3922] seq_read_iter+0x43a/0xd10 [ 55.211086][ T3922] seq_read+0x452/0x5c0 [ 55.215244][ T3922] ? seq_open+0x140/0x140 [ 55.219579][ T3922] ? _copy_from_user+0x10f/0x170 [ 55.224519][ T3922] ? common_file_perm+0x17d/0x1d0 [ 55.229541][ T3922] ? fsnotify_perm+0x442/0x590 [ 55.234329][ T3922] do_iter_read+0x4c6/0x760 [ 55.238836][ T3922] do_preadv+0x211/0x350 [ 55.243085][ T3922] ? do_writev+0x470/0x470 [ 55.247503][ T3922] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 55.253481][ T3922] ? vtime_user_exit+0x2d1/0x400 [ 55.258422][ T3922] ? syscall_enter_from_user_mode+0x2e/0x240 [ 55.264400][ T3922] ? lockdep_hardirqs_on+0x94/0x130 [ 55.269599][ T3922] ? syscall_enter_from_user_mode+0x2e/0x240 [ 55.275578][ T3922] do_syscall_64+0x3b/0xb0 [ 55.279984][ T3922] ? clear_bhb_loop+0x15/0x70 [ 55.284653][ T3922] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.290543][ T3922] RIP: 0033:0x7f7be49ddff9 [ 55.294959][ T3922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.314561][ T3922] RSP: 002b:00007f7be2e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 55.322974][ T3922] RAX: ffffffffffffffda RBX: 00007f7be4b95f80 RCX: 00007f7be49ddff9 [ 55.330941][ T3922] RDX: 0000000000000001 RSI: 0000000020000840 RDI: 0000000000000005 [ 55.338907][ T3922] RBP: 00007f7be4a50296 R08: 0000000000000000 R09: 0000000000000000 [ 55.346871][ T3922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.354837][ T3922] R13: 0000000000000000 R14: 00007f7be4b95f80 R15: 00007ffec5b8fd68 [ 55.362902][ T3922] [ 55.365913][ T3922] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 55.373186][ T3922] CPU: 1 PID: 3922 Comm: syz.0.103 Not tainted 5.15.167-syzkaller #0 [ 55.381244][ T3922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 55.391292][ T3922] Call Trace: [ 55.394567][ T3922] [ 55.397495][ T3922] dump_stack_lvl+0x1e3/0x2d0 [ 55.402180][ T3922] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 55.407811][ T3922] ? panic+0x860/0x860 [ 55.411878][ T3922] ? cset_cgroup_from_root+0x180/0x230 [ 55.417331][ T3922] ? cset_cgroup_from_root+0x180/0x230 [ 55.422787][ T3922] panic+0x318/0x860 [ 55.426686][ T3922] ? __warn+0x16a/0x300 [ 55.430862][ T3922] ? fb_is_primary_device+0xd0/0xd0 [ 55.436078][ T3922] ? cset_cgroup_from_root+0x1c7/0x230 [ 55.441548][ T3922] __warn+0x2b2/0x300 [ 55.445536][ T3922] ? cset_cgroup_from_root+0x1c7/0x230 [ 55.450993][ T3922] report_bug+0x1b7/0x2e0 [ 55.455323][ T3922] handle_bug+0x3d/0x70 [ 55.459473][ T3922] exc_invalid_op+0x16/0x40 [ 55.463974][ T3922] asm_exc_invalid_op+0x16/0x20 [ 55.468816][ T3922] RIP: 0010:cset_cgroup_from_root+0x1c7/0x230 [ 55.474882][ T3922] Code: 78 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 5d b2 52 00 4d 8b 27 4d 85 e4 75 c7 e8 30 e8 08 00 0f 0b e8 29 e8 08 00 <0f> 0b e9 a4 fe ff ff e8 1d e8 08 00 0f 0b e9 f9 fe ff ff 48 c7 c1 [ 55.494487][ T3922] RSP: 0018:ffffc90002e67958 EFLAGS: 00010087 [ 55.500558][ T3922] RAX: ffffffff81777247 RBX: 0000000000000000 RCX: 0000000000040000 [ 55.508523][ T3922] RDX: ffffc9000381b000 RSI: 0000000000000546 RDI: 0000000000000547 [ 55.516487][ T3922] RBP: dffffc0000000000 R08: ffffffff817770e5 R09: 0000000000000003 [ 55.524540][ T3922] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff888074a80000 [ 55.532509][ T3922] R13: dffffc0000000000 R14: ffff88802a0bc000 R15: ffffffff8c948000 [ 55.540630][ T3922] ? cset_cgroup_from_root+0x65/0x230 [ 55.546004][ T3922] ? cset_cgroup_from_root+0x1c7/0x230 [ 55.551467][ T3922] ? cset_cgroup_from_root+0x1c7/0x230 [ 55.556966][ T3922] cgroup_path_ns_locked+0x6c/0xd0 [ 55.562100][ T3922] proc_cpuset_show+0x27d/0x3f0 [ 55.566977][ T3922] proc_single_show+0xf6/0x180 [ 55.571762][ T3922] seq_read_iter+0x43a/0xd10 [ 55.576370][ T3922] seq_read+0x452/0x5c0 [ 55.580544][ T3922] ? seq_open+0x140/0x140 [ 55.584896][ T3922] ? _copy_from_user+0x10f/0x170 [ 55.589834][ T3922] ? common_file_perm+0x17d/0x1d0 [ 55.594854][ T3922] ? fsnotify_perm+0x442/0x590 [ 55.599624][ T3922] do_iter_read+0x4c6/0x760 [ 55.604130][ T3922] do_preadv+0x211/0x350 [ 55.608380][ T3922] ? do_writev+0x470/0x470 [ 55.612801][ T3922] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 55.618783][ T3922] ? vtime_user_exit+0x2d1/0x400 [ 55.623819][ T3922] ? syscall_enter_from_user_mode+0x2e/0x240 [ 55.629794][ T3922] ? lockdep_hardirqs_on+0x94/0x130 [ 55.634996][ T3922] ? syscall_enter_from_user_mode+0x2e/0x240 [ 55.640975][ T3922] do_syscall_64+0x3b/0xb0 [ 55.645393][ T3922] ? clear_bhb_loop+0x15/0x70 [ 55.650070][ T3922] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.655960][ T3922] RIP: 0033:0x7f7be49ddff9 [ 55.660372][ T3922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.679974][ T3922] RSP: 002b:00007f7be2e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 55.688387][ T3922] RAX: ffffffffffffffda RBX: 00007f7be4b95f80 RCX: 00007f7be49ddff9 [ 55.696361][ T3922] RDX: 0000000000000001 RSI: 0000000020000840 RDI: 0000000000000005 [ 55.704390][ T3922] RBP: 00007f7be4a50296 R08: 0000000000000000 R09: 0000000000000000 [ 55.712382][ T3922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.720353][ T3922] R13: 0000000000000000 R14: 00007f7be4b95f80 R15: 00007ffec5b8fd68 [ 55.728341][ T3922] [ 55.731451][ T3922] Kernel Offset: disabled [ 55.735960][ T3922] Rebooting in 86400 seconds..