last executing test programs: 2.1225901s ago: executing program 4 (id=99): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@delchain={0x34, 0x2c, 0xe31, 0x40000, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0x6, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 2.079908743s ago: executing program 4 (id=101): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x3, 0x0, 0x83}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 1.974878521s ago: executing program 4 (id=102): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff09, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 1.974494781s ago: executing program 4 (id=103): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x20000000) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1.11874972s ago: executing program 4 (id=123): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.11846402s ago: executing program 4 (id=124): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') unshare(0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000540)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@grpquota}, {@data_err_ignore}, {@grpjquota, 0x22}, {@nodiscard}, {@errors_remount}, {@nodelalloc}, {@sysvgroups}, {@norecovery}]}, 0x1, 0x455, &(0x7f0000000d80)="$eJzs3M1PXFUbAPBnZhha2vLCW2u12CpajcQPKPTDLtzUaOJCExNd1LhCoA12WkzBxDZE0QUuTRP3xqWJf4Eb68aoKxO3ujcmxLCxuhpzZ+6FKcwAAwNTnd8vue05cy4557n3nplnzp2ZADrWYPJPLuJQRPwSEX3V6t07DFb/u7M8P/HX8vxELsrl1//IVfb7c3l+Its1+7uD1Uq5vEG/i29FjJdKU9fT+sjc1XdHZm/cfHb66vjlqctT18bOnz9z+kT3ubGzLYmzNxnrwAczx4+9/OatVycu3nr7h6+S8R5K22vjaJXB6tGt64lWd9ZmvTXlXFcbB0JTChGRnK5iZf73RSF6Vtr64qWP2zo4YFeVy/nyvsbNC2XgPyxJ1IFOlL3QJ+9/s22PUo97wtKFWFnHuJNu1ZauyKf7FNP3SLthMCIuLvz9ebLFLq1DAADUun0hIp6pl//l4+j+1f3+l94b6o+I/0fE4Yi4LyKORMT9EXE0Ih6IiAeb7H/tHZL1+U+5b3uRbU2S/z2f3tu6O//Lsr/oL6S13kr8xdyl6dLUqfSYDEVxX1If3aCPb1/8+dNGbbX5X7Il/We5YDqO37vWLNBNjs+N7yTmWksfRQx01Ys/t5LzJvnxsYgY2GYf0099ebxR2+bxb6AFSXn5i4gnq+d/IdbEn8k1vD85+ty5sbMj+6M0dWokuyrW+/Gnxdca9b+j+Ftg6XY5DtS9/lfi78/tj5i9cfNK5X7tbPN9LP76ScP3NNu9/rtzb1TK3elj74/PzV0fjejOvbL+8bHVv83q2f7J9T90sv78PxyrR+KhiEgu4hMR8XBEPJKO/dGIeCwiTm4Q//cvPP5O8/FvsCrfQkn8k5ud/6g9/80XCle++7r5+DPJ+T9TKQ2lj2zl+W+rA9zJsQMAAIB/i3zlM/C5/PBKOZ8fHq5+hv9IHMiXZmbnnr408961yepn5fujmM9Wuvpq1kNH07XhrD62pn46XTf+rNBTqQ9PzJQm2x08dLiDDeZ/4rdCu0cH7Drf14LOZf5D5zL/oXOZ/9C5zH/oXPXm/4dtGAew9zZ5/e/Zq3EAe0/+D53L/IfOZf5DR2r43fj8jr7yr9CmwjfdO/uthq0XIn+PhLzrhWJE7EVfxajb1LXlH7PYZmFf3aZ2PzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0xj8BAAD//37l4X0=") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000600)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) unshare(0x6040400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) io_uring_setup(0x31fa, &(0x7f00000001c0)={0x0, 0x6a93, 0x40, 0x2, 0xd1}) socket(0xa, 0x3, 0x3a) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f0000002b40)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_ts_info}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 854.389731ms ago: executing program 0 (id=130): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x66, &(0x7f0000000c40)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xc}}}}}}}}, 0x0) 728.129551ms ago: executing program 0 (id=135): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x108000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r2, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000000)) 646.548648ms ago: executing program 0 (id=138): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@delchain={0x34, 0x2c, 0xe31, 0x40000, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0x6, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 608.262111ms ago: executing program 0 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x9, 0x1}}, 0x40) 557.595045ms ago: executing program 0 (id=142): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) 502.48868ms ago: executing program 3 (id=146): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f00000002c0)="$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") sendfile(r1, r0, 0x0, 0x80000000) 470.041352ms ago: executing program 0 (id=147): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) io_uring_setup(0x1de0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) prctl$PR_SET_IO_FLUSHER(0x4a, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010006000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4) 447.429794ms ago: executing program 3 (id=148): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) 325.076363ms ago: executing program 3 (id=152): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@delchain={0x34, 0x2c, 0xe31, 0x40000, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0x6, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 276.821447ms ago: executing program 3 (id=153): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000002f80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 229.932961ms ago: executing program 2 (id=154): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x4}, 0x94) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800000075000000", @ANYRES64=r0], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x8010) 229.543631ms ago: executing program 3 (id=155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) getrlimit(0xe, &(0x7f0000000180)) 229.336051ms ago: executing program 1 (id=156): r0 = socket$inet(0x2, 0x2, 0x1) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x1) 228.897751ms ago: executing program 3 (id=157): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001100)=ANY=[@ANYBLOB="14000000100001000000000000000004000000000a00000508000b40000000040900010073797a310000000014000000112d0000000000000000000100000a00"/77], 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x87db6bd2de3a556}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x2020}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc845}, 0x0) r3 = epoll_create1(0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="003615756642b7dc820225bd7000fddbdf25100000000c009900"], 0x20}, 0x1, 0x0, 0x0, 0x4810}, 0x4000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kfree\x00', r5, 0x0, 0x10000000}, 0x18) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x12, 0x0, {0x0, 0x11}, {0xc, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x4000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) unshare(0x60600) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) socket$can_raw(0x1d, 0x3, 0x1) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2040) read(r7, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40a85323, &(0x7f0000000480)={{0x9, 0x1}, 'port0\x00', 0x6, 0x812, 0x0, 0x9, 0xc, 0x8, 0xddb4, 0x0, 0x1, 0xb}) tkill(r6, 0x7) 228.536531ms ago: executing program 2 (id=158): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 166.909217ms ago: executing program 1 (id=159): tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x7) 166.506296ms ago: executing program 1 (id=160): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) 166.188736ms ago: executing program 2 (id=161): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x98}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000fe00000000e00000020000000000000000000000000000000000000000000000000000000000000000fffd00000a00200000"], 0xb8}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 145.878718ms ago: executing program 1 (id=162): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") 115.452761ms ago: executing program 2 (id=163): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x200000, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x1, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x7f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 76.284003ms ago: executing program 2 (id=164): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@delchain={0x34, 0x2c, 0xe31, 0x40000, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0x6, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 75.602444ms ago: executing program 2 (id=165): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c00000e0000000400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc14"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xc}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.920959ms ago: executing program 1 (id=166): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 0s ago: executing program 1 (id=167): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) r2 = dup(r0) inotify_rm_watch(r2, r1) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts. [ 32.726185][ T4034] cgroup: Unknown subsys name 'net' [ 33.000412][ T4034] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.276259][ T4034] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 34.627398][ T4050] chnl_net:caif_netlink_parms(): no params data found [ 34.664427][ T4050] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.665662][ T4050] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.667259][ T4050] device bridge_slave_0 entered promiscuous mode [ 34.673744][ T4045] chnl_net:caif_netlink_parms(): no params data found [ 34.681068][ T4050] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.682166][ T4050] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.683728][ T4050] device bridge_slave_1 entered promiscuous mode [ 34.702051][ T4050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.703540][ T4054] chnl_net:caif_netlink_parms(): no params data found [ 34.706076][ T4050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.734148][ T4050] team0: Port device team_slave_0 added [ 34.737284][ T4050] team0: Port device team_slave_1 added [ 34.739401][ T4045] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.740560][ T4045] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.741961][ T4045] device bridge_slave_0 entered promiscuous mode [ 34.744479][ T4045] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.745621][ T4045] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.747102][ T4045] device bridge_slave_1 entered promiscuous mode [ 34.754073][ T4052] chnl_net:caif_netlink_parms(): no params data found [ 34.775616][ T4054] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.776781][ T4054] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.778633][ T4054] device bridge_slave_0 entered promiscuous mode [ 34.780420][ T4050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.781459][ T4050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.785214][ T4050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.788305][ T4044] chnl_net:caif_netlink_parms(): no params data found [ 34.792249][ T4045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.794661][ T4045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.796283][ T4050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.797470][ T4050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.804062][ T4050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.805966][ T4054] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.807152][ T4054] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.808775][ T4054] device bridge_slave_1 entered promiscuous mode [ 34.830078][ T4045] team0: Port device team_slave_0 added [ 34.835554][ T4054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.837054][ T4052] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.838568][ T4052] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.840061][ T4052] device bridge_slave_0 entered promiscuous mode [ 34.842114][ T4045] team0: Port device team_slave_1 added [ 34.845413][ T4054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.848331][ T4052] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.849424][ T4052] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.850901][ T4052] device bridge_slave_1 entered promiscuous mode [ 34.872168][ T4045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.873230][ T4045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.877107][ T4045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.948842][ T4050] device hsr_slave_0 entered promiscuous mode [ 34.987904][ T4050] device hsr_slave_1 entered promiscuous mode [ 35.030560][ T4045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.031604][ T4045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.035618][ T4045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.038611][ T4052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.041187][ T4054] team0: Port device team_slave_0 added [ 35.042292][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.043442][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.044923][ T4044] device bridge_slave_0 entered promiscuous mode [ 35.046820][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.048234][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.049712][ T4044] device bridge_slave_1 entered promiscuous mode [ 35.051769][ T4052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.055266][ T4054] team0: Port device team_slave_1 added [ 35.070246][ T4044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.075161][ T4052] team0: Port device team_slave_0 added [ 35.079422][ T4054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.080545][ T4054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.084563][ T4054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.089025][ T4044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.091177][ T4052] team0: Port device team_slave_1 added [ 35.094748][ T4054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.095760][ T4054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.099974][ T4054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.158682][ T4045] device hsr_slave_0 entered promiscuous mode [ 35.197975][ T4045] device hsr_slave_1 entered promiscuous mode [ 35.237767][ T4045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.239018][ T4045] Cannot create hsr debugfs directory [ 35.244138][ T4052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.245247][ T4052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.249483][ T4052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.252290][ T4044] team0: Port device team_slave_0 added [ 35.254428][ T4044] team0: Port device team_slave_1 added [ 35.257143][ T4052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.258293][ T4052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.262241][ T4052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.318843][ T4054] device hsr_slave_0 entered promiscuous mode [ 35.377891][ T4054] device hsr_slave_1 entered promiscuous mode [ 35.427763][ T4054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.428974][ T4054] Cannot create hsr debugfs directory [ 35.430187][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.431260][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.435368][ T4044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.446717][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.448079][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.452091][ T4044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.518591][ T4052] device hsr_slave_0 entered promiscuous mode [ 35.577835][ T4052] device hsr_slave_1 entered promiscuous mode [ 35.617821][ T4052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.619069][ T4052] Cannot create hsr debugfs directory [ 35.698870][ T4044] device hsr_slave_0 entered promiscuous mode [ 35.757872][ T4044] device hsr_slave_1 entered promiscuous mode [ 35.797765][ T4044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.798969][ T4044] Cannot create hsr debugfs directory [ 35.844834][ T4050] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.871675][ T4050] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.909716][ T4050] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.968798][ T4050] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.039907][ T4045] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.069227][ T4045] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.102710][ T4054] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.148517][ T4045] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.188723][ T4045] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.248861][ T4054] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.288675][ T4054] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.351629][ T4054] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.420995][ T4052] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.440534][ T4052] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.488714][ T4052] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.535252][ T4050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.538443][ T4052] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.567996][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 36.568024][ T4099] Bluetooth: hci3: command 0x0409 tx timeout [ 36.569047][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 36.569977][ T4099] Bluetooth: hci4: command 0x0409 tx timeout [ 36.571721][ T4099] Bluetooth: hci0: command 0x0409 tx timeout [ 36.584087][ T4044] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.632345][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.634040][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.635930][ T4044] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.673856][ T4050] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.675116][ T4044] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.713684][ T4044] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.751576][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.753206][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.755003][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.756102][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.763671][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.777458][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.779081][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.780482][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.781661][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.786201][ T4045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.788883][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.801500][ T4054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.802958][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.804597][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.805942][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.809532][ T4045] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.814070][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.815748][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.817201][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.818376][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.820123][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.821695][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.823398][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.824809][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.833452][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.835009][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.836421][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.837449][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.841575][ T4054] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.844576][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.846025][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.849859][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.851562][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.857060][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.859769][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.861296][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.862445][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.863895][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.865462][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.866938][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.868796][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.875674][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.877248][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.879902][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.881136][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.882432][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.883868][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.885390][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.888656][ T4050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.895685][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.897426][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.902821][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.904717][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.906240][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.908477][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.910119][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.911618][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.919795][ T4044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.922114][ T4052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.925913][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.927517][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.933775][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.935481][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.937060][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.941050][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.943396][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.944940][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.950065][ T4052] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.951486][ T4054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.953158][ T4054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.956207][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.957996][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.959828][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.961308][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.965674][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.967259][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.969296][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.972359][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.973594][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.976529][ T4045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.979550][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.982408][ T4044] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.986089][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.987592][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.989196][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.990694][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.992110][ T264] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.993276][ T264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.994682][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.998612][ T4050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.009162][ T4050] device veth0_vlan entered promiscuous mode [ 37.013334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.014895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.016328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.018260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.020189][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.021671][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.025112][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.026694][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.031646][ T264] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.032767][ T264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.035749][ T4050] device veth1_vlan entered promiscuous mode [ 37.038915][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.040502][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.042075][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.043507][ T264] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.044633][ T264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.046123][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.049680][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.058536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.060059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.061619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.063020][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.064189][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.065610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.074573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.075903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.083033][ T4054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.085765][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.087507][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.090870][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.092440][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.093984][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.102017][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.103735][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.105222][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.106653][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.109523][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.111389][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.114119][ T4050] device veth0_macvtap entered promiscuous mode [ 37.115558][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.116963][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.120478][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.122059][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.127310][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.129370][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.130822][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.132741][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.136797][ T4050] device veth1_macvtap entered promiscuous mode [ 37.142874][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.144438][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.145681][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.150572][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.152184][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.155552][ T4045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.160897][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.162962][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.164615][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.166136][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.168815][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.170390][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.171915][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.173480][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.174863][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.178424][ T4044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.180437][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.184394][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.185801][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.190714][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.196827][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.198745][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.202257][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.209489][ T4054] device veth0_vlan entered promiscuous mode [ 37.211990][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.213538][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.216713][ T4050] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.218832][ T4050] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.220253][ T4050] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.221559][ T4050] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.225491][ T4054] device veth1_vlan entered promiscuous mode [ 37.235539][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.237047][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.238722][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.240113][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.242141][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.243435][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.256851][ T4045] device veth0_vlan entered promiscuous mode [ 37.262490][ T4045] device veth1_vlan entered promiscuous mode [ 37.263890][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.265292][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.266908][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.269897][ T4054] device veth0_macvtap entered promiscuous mode [ 37.275231][ T4054] device veth1_macvtap entered promiscuous mode [ 37.282644][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.286190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.288048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.289487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.290900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.292115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.308976][ T4052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.314995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.316237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.322086][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.323718][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.325847][ T4054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.327601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.329642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.344318][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.345876][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.347482][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.349784][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.356276][ T4045] device veth0_macvtap entered promiscuous mode [ 37.363603][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.365271][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.367349][ T4054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.371644][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.373115][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.374660][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.376176][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.378506][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.383774][ T4045] device veth1_macvtap entered promiscuous mode [ 37.386215][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.387526][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.393233][ T4054] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.394781][ T4054] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.396106][ T4054] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.397480][ T4054] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.401153][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.402622][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.404031][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.405459][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.409737][ T4052] device veth0_vlan entered promiscuous mode [ 37.411202][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.412644][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.421990][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.423487][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.425134][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.426394][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.432099][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.433302][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.433812][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.436264][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.440495][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.442178][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.444316][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.445573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.447070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.449171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.451953][ T4052] device veth1_vlan entered promiscuous mode [ 37.454137][ T4044] device veth0_vlan entered promiscuous mode [ 37.457390][ T4044] device veth1_vlan entered promiscuous mode [ 37.482061][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.483803][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.485324][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.486910][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.490197][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.491360][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.493022][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.494445][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.495873][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.497451][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.499587][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.505438][ T360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.506735][ T360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.508944][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.514791][ T4052] device veth0_macvtap entered promiscuous mode [ 37.517250][ T4052] device veth1_macvtap entered promiscuous mode [ 37.526326][ T4155] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1'. [ 37.529261][ T4155] device hsr_slave_0 left promiscuous mode [ 37.568277][ T4155] device hsr_slave_1 left promiscuous mode [ 37.694252][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.695641][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.697175][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.699014][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.700527][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.702053][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.703432][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.707221][ T4045] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.709524][ T4045] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.710895][ T4045] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.712258][ T4045] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.716282][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.717851][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.721864][ T4044] device veth0_macvtap entered promiscuous mode [ 37.724886][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.726554][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.729994][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.731664][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.733269][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.734999][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.737251][ T4052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.741100][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.742634][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.744199][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.752028][ T4044] device veth1_macvtap entered promiscuous mode [ 37.806514][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.813601][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.817562][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.821322][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.823080][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.824811][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.826351][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.830853][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.833367][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.837330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.839157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.840616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.843784][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.845434][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.846960][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.849313][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.850919][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.852608][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.854746][ T4052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.865255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.866842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.873190][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.875387][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.877039][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.881738][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.883620][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.885476][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.887129][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.889370][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.893180][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.901878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.903499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.906615][ T4052] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.908550][ T4052] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.910141][ T4052] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.911805][ T4052] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.924452][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.925666][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.927138][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.929078][ T4044] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.931955][ T4044] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.934141][ T4044] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.935763][ T4044] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.961207][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.962521][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.967077][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.005559][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.006819][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.012851][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.062533][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.063725][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.065082][ T264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.066279][ T264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.067619][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.070387][ T264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.109502][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.111235][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.113661][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.323699][ T4186] loop1: detected capacity change from 0 to 128 [ 38.425191][ T4188] loop2: detected capacity change from 0 to 1024 [ 38.480264][ T4188] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,noauto_da_alloc,jqfmt=vfsold,stripe=0x0000000000000003,noauto_da_alloc,auto_da_alloc=0x0000000000000005,resuid=0x0000000000000000,dioread_lock,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 38.519790][ T4186] loop1: detected capacity change from 0 to 8192 [ 38.596392][ T4186] loop1: p2 p3 [ 38.597373][ T4186] loop1: p2 size 2147483392 extends beyond EOD, truncated [ 38.599384][ T4186] loop1: p3 start 117440512 is beyond EOD, truncated [ 38.648031][ T4113] Bluetooth: hci0: command 0x041b tx timeout [ 38.649160][ T4113] Bluetooth: hci4: command 0x041b tx timeout [ 38.650154][ T4113] Bluetooth: hci1: command 0x041b tx timeout [ 38.651183][ T4113] Bluetooth: hci3: command 0x041b tx timeout [ 38.652274][ T4113] Bluetooth: hci2: command 0x041b tx timeout [ 38.708633][ T4059] udevd[4059]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 39.308399][ T4232] loop3: detected capacity change from 0 to 8192 [ 39.331285][ T4232] loop3: p1 p2 p3 p4 [ 39.332486][ T4232] loop3: partition table partially beyond EOD, truncated [ 39.337493][ T4232] loop3: p2 start 151000334 is beyond EOD, truncated [ 39.339112][ T4232] loop3: p3 start 331777 is beyond EOD, truncated [ 39.340511][ T4232] loop3: p4 size 263168 extends beyond EOD, truncated [ 39.427217][ T4059] udevd[4059]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 39.430481][ T4061] udevd[4061]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 39.511346][ T4241] loop3: detected capacity change from 0 to 2048 [ 39.562406][ T4243] loop0: detected capacity change from 0 to 128 [ 39.655344][ T4248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'. [ 39.656908][ T4250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.32'. [ 39.657581][ T4248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'. [ 39.691891][ T4253] loop3: detected capacity change from 0 to 1024 [ 39.703497][ T4253] ======================================================= [ 39.703497][ T4253] WARNING: The mand mount option has been deprecated and [ 39.703497][ T4253] and is ignored by this kernel. Remove the mand [ 39.703497][ T4253] option from the mount to silence this warning. [ 39.703497][ T4253] ======================================================= [ 39.772831][ T4253] EXT4-fs (loop3): inline encryption not supported [ 39.773957][ T4253] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 39.809902][ T4253] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 40.129642][ T4268] sch_fq: defrate 4294967295 ignored. [ 40.163303][ T4272] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 40.220160][ T4276] loop3: detected capacity change from 0 to 1024 [ 40.232042][ T4278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.45'. [ 40.244760][ T4276] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 40.326989][ T4286] loop4: detected capacity change from 0 to 512 [ 40.366911][ T4286] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 40.413238][ T4286] Quota error (device loop4): v2_read_file_info: Free block number too big (58381 >= 6). [ 40.415356][ T4286] EXT4-fs warning (device loop4): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 40.425486][ T4243] syz.0.30 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 40.430348][ T4243] CPU: 1 PID: 4243 Comm: syz.0.30 Not tainted 5.15.189-syzkaller #0 [ 40.431593][ T4243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 40.433199][ T4243] Call trace: [ 40.433791][ T4243] dump_backtrace+0x0/0x43c [ 40.434636][ T4243] show_stack+0x2c/0x3c [ 40.435313][ T4243] __dump_stack+0x30/0x40 [ 40.436014][ T4243] dump_stack_lvl+0xf8/0x160 [ 40.436756][ T4243] dump_stack+0x1c/0x5c [ 40.437423][ T4243] dump_header+0xbc/0x6b0 [ 40.438109][ T4243] oom_kill_process+0x218/0x518 [ 40.438951][ T4243] out_of_memory+0xbc4/0xf0c [ 40.439777][ T4243] mem_cgroup_out_of_memory+0x210/0x2c8 [ 40.440763][ T4243] try_charge_memcg+0xdb0/0x11bc [ 40.441670][ T4243] obj_cgroup_charge_pages+0x8c/0x1a0 [ 40.442627][ T4243] __memcg_kmem_charge_page+0x3c0/0x59c [ 40.443556][ T4243] __alloc_pages+0x1d0/0x470 [ 40.444324][ T4243] alloc_pages+0x34c/0x5c0 [ 40.445066][ T4243] __vmalloc_node_range+0x514/0x8d8 [ 40.445867][ T4243] __vmalloc_node+0x98/0xd8 [ 40.446558][ T4243] kvmalloc_node+0x184/0x200 [ 40.447296][ T4243] ip_set_alloc+0x2c/0x3c [ 40.448002][ T4243] hash_netiface_create+0x2c4/0xcb8 [ 40.448904][ T4243] ip_set_create+0x440/0xfb0 [ 40.449747][ T4243] nfnetlink_rcv_msg+0x9d4/0xed8 [ 40.450578][ T4243] netlink_rcv_skb+0x208/0x3c4 [ 40.451299][ T4243] nfnetlink_rcv+0x1f4/0x1af4 [ 40.451990][ T4243] netlink_unicast+0x624/0x8b0 [ 40.452822][ T4243] netlink_sendmsg+0x6e8/0x9cc [ 40.453602][ T4243] ____sys_sendmsg+0x61c/0x920 [ 40.454404][ T4243] ___sys_sendmsg+0x1d0/0x240 [ 40.455159][ T4243] __arm64_sys_sendmsg+0x1a8/0x254 [ 40.456023][ T4243] invoke_syscall+0x98/0x2b8 [ 40.456694][ T4243] el0_svc_common+0x138/0x258 [ 40.457438][ T4243] do_el0_svc+0x58/0x14c [ 40.458047][ T4243] el0_svc+0x78/0x1e0 [ 40.458646][ T4243] el0t_64_sync_handler+0xcc/0xe4 [ 40.459547][ T4243] el0t_64_sync+0x1a0/0x1a4 [ 40.462545][ T4243] memory: usage 307200kB, limit 307200kB, failcnt 176 [ 40.463819][ T4243] memory+swap: usage 307464kB, limit 9007199254740988kB, failcnt 0 [ 40.465166][ T4243] kmem: usage 307120kB, limit 9007199254740988kB, failcnt 0 [ 40.466610][ T4243] Memory cgroup stats for /syz0: [ 40.466845][ T4243] anon 0 [ 40.466845][ T4243] file 81920 [ 40.466845][ T4243] kernel_stack 98304 [ 40.466845][ T4243] pagetables 122880 [ 40.466845][ T4243] percpu 0 [ 40.466845][ T4243] sock 0 [ 40.466845][ T4243] shmem 0 [ 40.466845][ T4243] file_mapped 0 [ 40.466845][ T4243] file_dirty 81920 [ 40.466845][ T4243] file_writeback 0 [ 40.466845][ T4243] swapcached 311296 [ 40.466845][ T4243] anon_thp 0 [ 40.466845][ T4243] file_thp 0 [ 40.466845][ T4243] shmem_thp 0 [ 40.466845][ T4243] inactive_anon 0 [ 40.466845][ T4243] active_anon 0 [ 40.466845][ T4243] inactive_file 45056 [ 40.466845][ T4243] active_file 36864 [ 40.466845][ T4243] unevictable 0 [ 40.466845][ T4243] slab_reclaimable 73728 [ 40.466845][ T4243] slab_unreclaimable 181536 [ 40.466845][ T4243] slab 255264 [ 40.466845][ T4243] workingset_refault_anon 10 [ 40.466845][ T4243] workingset_refault_file 31 [ 40.466845][ T4243] workingset_activate_anon 3 [ 40.481539][ T4243] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.30,pid=4242,uid=0 [ 40.484391][ T4243] Memory cgroup out of memory: Killed process 4242 (syz.0.30) total-vm:101788kB, anon-rss:904kB, file-rss:21888kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 40.635364][ T4295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.51'. [ 40.662138][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 40.663368][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.665036][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.666303][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.674910][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.676067][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.677202][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.678860][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.680027][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.681250][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.682429][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.683539][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.684646][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.687712][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.696140][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.697372][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.698759][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.700049][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.701204][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.702388][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.703537][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.704774][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.705823][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.707166][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.708454][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.709600][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.710926][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.712073][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.713209][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.714339][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.715496][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.716706][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.717990][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.719232][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.720459][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.721657][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.722879][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.724120][ T4092] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.727644][ T4092] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 40.728039][ T4113] Bluetooth: hci2: command 0x040f tx timeout [ 40.740461][ T4113] Bluetooth: hci3: command 0x040f tx timeout [ 40.741501][ T4113] Bluetooth: hci1: command 0x040f tx timeout [ 40.742418][ T4113] Bluetooth: hci4: command 0x040f tx timeout [ 40.746894][ T4113] Bluetooth: hci0: command 0x040f tx timeout [ 40.776354][ T4298] fido_id[4298]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.840411][ T26] audit: type=1326 audit(40.820:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4305 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa08160a8 code=0x7ffc0000 [ 40.843915][ T26] audit: type=1326 audit(40.820:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4305 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffffa08160a8 code=0x7ffc0000 [ 40.851801][ T26] audit: type=1326 audit(40.820:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4305 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa08160a8 code=0x7ffc0000 [ 40.863049][ T26] audit: type=1326 audit(40.820:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4305 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffa08160a8 code=0x7ffc0000 [ 40.873873][ T4310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.58'. [ 40.874540][ T26] audit: type=1326 audit(40.820:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4305 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa08160a8 code=0x7ffc0000 [ 40.882555][ T26] audit: type=1326 audit(40.820:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4305 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=43 compat=0 ip=0xffffa08160a8 code=0x7ffc0000 [ 40.885814][ T26] audit: type=1326 audit(40.820:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4305 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa08160a8 code=0x7ffc0000 [ 40.889952][ T26] audit: type=1326 audit(40.830:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa08160a8 code=0x7ffc0000 [ 40.893495][ T26] audit: type=1326 audit(40.830:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4307 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa08160a8 code=0x7ffc0000 [ 41.041207][ T4325] netlink: 88 bytes leftover after parsing attributes in process `syz.4.65'. [ 41.099202][ T4333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.70'. [ 41.155853][ T4339] vhci_hcd: invalid port number 23 [ 41.176213][ T4341] loop2: detected capacity change from 0 to 2048 [ 41.208726][ T4341] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.347167][ T4364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.82'. [ 41.440646][ T4378] loop3: detected capacity change from 0 to 2048 [ 41.493142][ T4388] loop4: detected capacity change from 0 to 128 [ 41.500299][ T4378] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 41.543238][ T4388] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,,errors=continue. Quota mode: none. [ 41.623554][ T4398] netlink: 'syz.3.98': attribute type 10 has an invalid length. [ 41.641087][ T4398] team0: Port device dummy0 added [ 41.643996][ T4398] netlink: 'syz.3.98': attribute type 10 has an invalid length. [ 41.645714][ T4398] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 41.653758][ T4398] team0: Failed to send options change via netlink (err -105) [ 41.655062][ T4398] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 41.657048][ T4398] team0: Port device dummy0 removed [ 41.660277][ T4398] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 41.698445][ T4404] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 41.699997][ T4404] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0/file1 [ 41.773926][ T4408] IPVS: Error joining to the multicast group [ 42.381072][ T4432] loop1: detected capacity change from 0 to 512 [ 42.416003][ T4432] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.425102][ T4432] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.438926][ T4432] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.453695][ T4432] EXT4-fs (loop1): 1 truncate cleaned up [ 42.454633][ T4432] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x000000000000000e,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 42.605207][ T4445] loop2: detected capacity change from 0 to 512 [ 42.646616][ T4450] mmap: syz.0.117 (4450) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 42.682313][ T4453] loop4: detected capacity change from 0 to 512 [ 42.691074][ T4445] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 42.698579][ T4458] __nla_validate_parse: 6 callbacks suppressed [ 42.698587][ T4458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.125'. [ 42.702074][ T4455] netlink: 104 bytes leftover after parsing attributes in process `syz.1.121'. [ 42.741775][ T4453] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 42.743125][ T4453] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 42.750977][ T4453] EXT4-fs (loop4): 1 truncate cleaned up [ 42.751870][ T4453] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,grpquota,data_err=ignore,grpjquota="nodiscard,errors=remount-ro,nodelalloc,sysvgroups,norecovery,. Quota mode: writeback. [ 42.794204][ T4464] syz.2.126 uses obsolete (PF_INET,SOCK_PACKET) [ 42.804022][ T4455] loop1: detected capacity change from 0 to 8192 [ 42.808534][ T3626] Bluetooth: hci0: command 0x0419 tx timeout [ 42.809552][ T3626] Bluetooth: hci4: command 0x0419 tx timeout [ 42.810555][ T3626] Bluetooth: hci1: command 0x0419 tx timeout [ 42.811598][ T3626] Bluetooth: hci3: command 0x0419 tx timeout [ 42.812856][ T3626] Bluetooth: hci2: command 0x0419 tx timeout [ 43.000854][ T4478] loop3: detected capacity change from 0 to 1024 [ 43.073674][ T4478] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 43.077063][ T4486] vhci_hcd: invalid port number 96 [ 43.077891][ T4486] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 43.281063][ T4507] loop3: detected capacity change from 0 to 1764 [ 43.285383][ T4502] loop2: detected capacity change from 0 to 512 [ 43.355991][ T4502] EXT4-fs (loop2): Ignoring removed oldalloc option [ 43.357143][ T4502] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.384271][ T4502] EXT4-fs (loop2): 1 truncate cleaned up [ 43.385177][ T4502] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,oldalloc,user_xattr,noquota,init_itable,,errors=continue. Quota mode: none. [ 43.602788][ T4536] device gretap1 entered promiscuous mode [ 43.646073][ T4543] netlink: 104 bytes leftover after parsing attributes in process `syz.2.161'. [ 43.653909][ T4545] loop1: detected capacity change from 0 to 512 [ 43.680105][ T4548] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 43.692945][ T4545] EXT4-fs (loop1): Ignoring removed bh option [ 43.708551][ T4545] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 43.713173][ T4545] EXT4-fs (loop1): 1 truncate cleaned up [ 43.714126][ T4545] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 43.727565][ T4554] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.729225][ T4554] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.730560][ T4554] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.731888][ T4554] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.743267][ T4554] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.744738][ T4554] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.746139][ T4554] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.747529][ T4554] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.830693][ T4559] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 43.831897][ T4559] Modules linked in: [ 43.832461][ T4559] CPU: 1 PID: 4559 Comm: syz.1.167 Not tainted 5.15.189-syzkaller #0 [ 43.833643][ T4559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 43.835152][ T4559] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 43.836353][ T4559] pc : inotify_ioctl+0x270/0x304 [ 43.837166][ T4559] lr : inotify_ioctl+0x254/0x304 [ 43.837971][ T4559] sp : ffff80001fcc79b0 [ 43.838659][ T4559] x29: ffff80001fcc79b0 x28: dfff800000000000 x27: ffff700003f98f48 [ 43.839883][ T4559] x26: 1fffe0001a6c8000 x25: 0000000000000010 x24: dfff800000000000 [ 43.841123][ T4559] x23: 0000000000000000 x22: 0000000000400040 x21: 0000000000000000 [ 43.842473][ T4559] x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000000 [ 43.843791][ T4559] x17: 0000000000000002 x16: ffff8000089edb8c x15: 0000000040044900 [ 43.845078][ T4559] x14: 0000000000ff0100 x13: 1ffff0000282e06b x12: 0000000000080000 [ 43.846333][ T4559] x11: 0000000000000000 x10: 0000ffffffffffff x9 : 0000000000000000 [ 43.847574][ T4559] x8 : 00000000fffffff2 x7 : ffff800008750ed4 x6 : 0000000000000000 [ 43.848752][ T4559] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 43.849886][ T4559] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 [ 43.851238][ T4559] Call trace: [ 43.851732][ T4559] inotify_ioctl+0x270/0x304 [ 43.852511][ T4559] do_vfs_ioctl+0xbe0/0x2370 [ 43.853298][ T4559] __arm64_sys_ioctl+0xe4/0x1c8 [ 43.854079][ T4559] invoke_syscall+0x98/0x2b8 [ 43.854789][ T4559] el0_svc_common+0x138/0x258 [ 43.855574][ T4559] do_el0_svc+0x58/0x14c [ 43.856292][ T4559] el0_svc+0x78/0x1e0 [ 43.856890][ T4559] el0t_64_sync_handler+0xcc/0xe4 [ 43.857643][ T4559] el0t_64_sync+0x1a0/0x1a4 [ 43.858343][ T4559] Code: 9a9f026b d503229f 2a1f03e8 b8000979 (93407d00) [ 43.859440][ T4559] ---[ end trace 152ad7e53eb9fe9a ]--- [ 44.098125][ T4559] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 44.099297][ T4559] SMP: stopping secondary CPUs [ 44.100005][ T4559] Kernel Offset: disabled [ 44.100672][ T4559] CPU features: 0x8,000003c1,7d33ffd9 [ 44.101497][ T4559] Memory Limit: none [ 44.344520][ T4559] Rebooting in 86400 seconds..