last executing test programs: 4.162746285s ago: executing program 4 (id=17): creat(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000060000000ef03969e6a7e39829bdba", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000680)="b2", 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f00000028c0)='\v', 0x1}, {&(0x7f0000000400)="8b", 0x1}, {&(0x7f0000002b40)='-', 0x1}, {&(0x7f0000000440)="9f", 0x1}, {&(0x7f00000004c0)="bb0f51", 0x3}], 0x7}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90", 0x2}, {&(0x7f00000002c0)="fbb2", 0x2}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000180)="d2", 0x1}], 0x6}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)='N', 0x1}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x5, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={r2, 0x8e59, 0x5, 0x4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) sendto$inet(r7, &(0x7f0000000040)="a6", 0x100b20, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 2.85273711s ago: executing program 1 (id=23): r0 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r0, &(0x7f0000002480)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.8294849s ago: executing program 4 (id=24): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 2.413164988s ago: executing program 4 (id=30): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)={0x14, r2, 0x1, 0x70bd2c, 0x4, {0x5}}, 0x14}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r4, 0x0, 0x6}, 0x18) getrlimit(0xb, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r6, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1.998501117s ago: executing program 2 (id=34): syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd000000000000aa810090780000000000000000000001000000060000000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000d18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="2152708200000000009800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0xe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000974ac814000000000000000018110000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x53, &(0x7f0000000180)=""/83, 0x41100, 0x4, '\x00', r5, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)=[r2, r2, r2], &(0x7f0000000480)=[{0x2, 0x2, 0xb, 0x7}, {0x0, 0x1, 0x4, 0x2}, {0x5, 0x4, 0xb, 0x4}, {0x0, 0x4, 0x8, 0x3}, {0x0, 0x1, 0xf}, {0x1, 0x4, 0x2}, {0x4, 0x5, 0x8}], 0x10, 0xffffff81, @void, @value}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) sendto$inet(r8, &(0x7f0000000040)="a6", 0x100b20, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.997945867s ago: executing program 4 (id=35): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="08000000020000000b"], 0xa000) 1.459530385s ago: executing program 0 (id=39): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) 1.184367464s ago: executing program 0 (id=41): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) ustat(0x6, &(0x7f00000000c0)) 975.603533ms ago: executing program 2 (id=43): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'geneve1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff64000200475400f6a13bb1000000080086dd4803", 0x10000, 0x100000000000000, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 975.265984ms ago: executing program 4 (id=44): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x660}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 975.037433ms ago: executing program 0 (id=45): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x18) io_getevents(0x0, 0x9, 0x0, 0x0, 0x0) 934.750343ms ago: executing program 3 (id=46): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)={0x14, r2, 0x1, 0x70bd2c, 0x4, {0x5}}, 0x14}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r4, 0x0, 0x6}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r6, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 862.532233ms ago: executing program 2 (id=47): ioperm(0x4, 0x3, 0x2) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) 780.264003ms ago: executing program 0 (id=48): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$eJzs3T1sG+UbAPDnzvG/X/mTIoEEqEMFSEWq6iT9gMLUrohKlTogsUDkuFEVJ47iBJooQ7pXiA4IUJeywcAIYmBALIysLCBmpIpGIDUdwMhfaZo4wSl1XHK/n3T2vfee/bzvnZ/XvtOdHEBmHa0/pBHPRsTFJGJoXd1AtCqPNtdbXVkq3ltZKiZRq136LYkkIu6uLBXb6yet50MRsRwRz0TEd/mI4+nmuNWFxcmxcrk02yoPz03NDFcXFk9cmRqbKE2Upk+98uqZs6fPjJ4cXf+ye7X1pfzO+nr95xvvX//h9Vs3Pv/iyHLxw7EkzsVgq259Px6l5jbJx7kNy0/3IlgfJf1uAA8l18rzeio9HUORa2V9J7WhXW0a0GO1fRE1IKMS+Q8Z1f4dUD/+bU+7+fvj9vnmAUg97mpratYMNM9NxP7GscnB35MHjkzqx5uHd7Oh7EnL1yJiZGBg8+c/aX3+Ht7Io2ggPfXt+eaO2rz/07XxJzqMP4Ptc6f/Unv8W900/t2Pn9ti/LvYZYw/3/rlky3jX4t4rmP8ZC1+0iF+GhHvdBn/5ptfn92qrvZpxLHoHL8t2f788PDlK+XSSPOxY4xvjh15bbv+H9wifvOc7f7G10yn7T/TZf+/+v7L55e3if/SC9vv/07b/0BEfNBl/CfvfvbGVnW3ryV36r8Cdrr/68tudRn/5XNHf+pyVQAAAAAAAAAAYAfSxrVsSVpYm0/TQqF5D+9TcTAtV6pzxy9X5qfHm9e8HY582r7SaqhZTurl0db1uO3yyQ3lU7lWwNyBRrlQrJTH+9x3AAAAAAAAAAAAAAAAAAAAeFwc2nD//x+5xv3/G/+uGtirtv7Lb2Cvk/+QXQ/mf9K3dgC7z/c/ZFZN/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv8AAAAAAAAAAAAAAAAAAAAAAAAAANATFy9cqE+1eytLxXp5fGBhfrLy7onxUnWyMDVfLBQrszOFiUplolwqFCtT//R+SaUyMxLT81eH50rVueHqwuLbU5X56fZ/ipbyPe8RAAAAAAAAAAAAAAAAAAAA/PcMNqYkLURE2phP00Ih4v8RcTjyyeUr5dJIRDwRET/m8vvq5dF+NxoAAAAAAAAAAAAAAAAAAAD2mOrC4uRYuVyazcjMwE5WjojlR9uM+jvu+FX51r56XLahmSzM9HlgAgAAAAAAAAAAAAAAAACADLp/02+3r/irtw0CAAAAAAAAAAAAAAAAAACATEp/TSKiPh0benFwY+3/ktVc4zki3rt56aOrY3Nzs6P15XfWls993Fp+sh/tB7rVztN2HgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3VRcWJ8fK5dJsD2f63UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh/F3AAAA///pCdd8") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0xfbb0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x10) fallocate(r1, 0x10, 0xfff, 0x3) 779.961853ms ago: executing program 1 (id=49): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0xff, 0x0, 0xfffffffc}) 736.089963ms ago: executing program 2 (id=50): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000007102100000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800800034000000001040001800c00074000000000000000000900010073797a3000000000c4200380c81200800800034000000001"], 0x219c}}, 0x0) 683.915992ms ago: executing program 3 (id=51): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200e2f7ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)={'trans=tcp,', {'port', 0x3d, 0x20000004e23}}) 620.193242ms ago: executing program 1 (id=52): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000140)=0x400008, 0x4) 609.900462ms ago: executing program 3 (id=53): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x1}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) 553.609752ms ago: executing program 2 (id=54): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 432.084041ms ago: executing program 3 (id=55): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) 411.502392ms ago: executing program 4 (id=56): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 399.227541ms ago: executing program 1 (id=57): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x77) 256.072491ms ago: executing program 0 (id=58): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setuid(0x0) 255.45337ms ago: executing program 3 (id=59): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010700000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001c40)={&(0x7f0000001cc0)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011460012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) 255.112411ms ago: executing program 1 (id=60): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r3 = syz_io_uring_setup(0x3bc1, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x0, 0x285}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r2, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) io_uring_enter(r3, 0x567, 0x72, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 139.44676ms ago: executing program 3 (id=61): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)={0x14, r2, 0x1, 0x70bd2c, 0x4, {0x5}}, 0x14}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r4, 0x0, 0x6}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r6, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 54.16085ms ago: executing program 0 (id=62): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) setgroups(0xffffffffffffff2c, 0x0) 276.99µs ago: executing program 1 (id=63): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000003d80)=[{{0xfffffffffffffffe, 0x0, 0x0}, 0xf1e1}], 0x1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 0s ago: executing program 2 (id=64): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x814) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. [ 57.007905][ T4156] cgroup: Unknown subsys name 'net' [ 57.116079][ T4156] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.590590][ T4156] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.557719][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 60.582511][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 60.649174][ T4174] chnl_net:caif_netlink_parms(): no params data found [ 60.678730][ T4177] chnl_net:caif_netlink_parms(): no params data found [ 60.711510][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.718787][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.727217][ T4167] device bridge_slave_0 entered promiscuous mode [ 60.740372][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.747555][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.756112][ T4167] device bridge_slave_1 entered promiscuous mode [ 60.838036][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.869752][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.887656][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 60.901369][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.908647][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.916836][ T4166] device bridge_slave_0 entered promiscuous mode [ 60.955034][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.962483][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.970624][ T4166] device bridge_slave_1 entered promiscuous mode [ 60.988798][ T4167] team0: Port device team_slave_0 added [ 61.000469][ T4167] team0: Port device team_slave_1 added [ 61.014625][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.022090][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.031381][ T4177] device bridge_slave_0 entered promiscuous mode [ 61.079558][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.086796][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.094713][ T4177] device bridge_slave_1 entered promiscuous mode [ 61.104630][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.114238][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.121554][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.129428][ T4174] device bridge_slave_0 entered promiscuous mode [ 61.140923][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.147963][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.174001][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.186869][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.193829][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.220435][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.242379][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.251824][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.259081][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.267892][ T4174] device bridge_slave_1 entered promiscuous mode [ 61.317450][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.329590][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.362621][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.369874][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.378623][ T4168] device bridge_slave_0 entered promiscuous mode [ 61.395097][ T4166] team0: Port device team_slave_0 added [ 61.403165][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.421206][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.428514][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.436831][ T4168] device bridge_slave_1 entered promiscuous mode [ 61.452451][ T4166] team0: Port device team_slave_1 added [ 61.460623][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.481426][ T4167] device hsr_slave_0 entered promiscuous mode [ 61.488963][ T4167] device hsr_slave_1 entered promiscuous mode [ 61.508972][ T4177] team0: Port device team_slave_0 added [ 61.545845][ T4177] team0: Port device team_slave_1 added [ 61.553298][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.595628][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.605354][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.612342][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.638463][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.653934][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.661638][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.693812][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.707255][ T4174] team0: Port device team_slave_0 added [ 61.741022][ T4174] team0: Port device team_slave_1 added [ 61.757686][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.764649][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.790919][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.816576][ T4168] team0: Port device team_slave_0 added [ 61.840829][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.848276][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.874670][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.895023][ T4168] team0: Port device team_slave_1 added [ 61.912885][ T4166] device hsr_slave_0 entered promiscuous mode [ 61.919717][ T4166] device hsr_slave_1 entered promiscuous mode [ 61.926883][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.934646][ T4166] Cannot create hsr debugfs directory [ 61.967649][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.974614][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.000908][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.013057][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.020137][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.046908][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.068445][ T4177] device hsr_slave_0 entered promiscuous mode [ 62.075976][ T4177] device hsr_slave_1 entered promiscuous mode [ 62.082617][ T4177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.090289][ T4177] Cannot create hsr debugfs directory [ 62.144942][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.152167][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.178684][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.193741][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.201024][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.227343][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 62.228121][ T2238] Bluetooth: hci4: command 0x0409 tx timeout [ 62.233946][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 62.246255][ T2238] Bluetooth: hci3: command 0x0409 tx timeout [ 62.246391][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.252346][ T2238] Bluetooth: hci2: command 0x0409 tx timeout [ 62.332997][ T4174] device hsr_slave_0 entered promiscuous mode [ 62.340179][ T4174] device hsr_slave_1 entered promiscuous mode [ 62.347276][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.355077][ T4174] Cannot create hsr debugfs directory [ 62.434351][ T4168] device hsr_slave_0 entered promiscuous mode [ 62.441530][ T4168] device hsr_slave_1 entered promiscuous mode [ 62.448370][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.456282][ T4168] Cannot create hsr debugfs directory [ 62.652350][ T4167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.686210][ T4167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.696084][ T4167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.711602][ T4167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.747502][ T4177] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.768581][ T4177] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.791553][ T4177] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.803959][ T4166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.817031][ T4177] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.826248][ T4166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.838679][ T4166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.859647][ T4166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.956016][ T4174] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.987036][ T4174] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.997155][ T4174] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.012207][ T4174] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.054959][ T4168] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.072086][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.094591][ T4168] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.103566][ T4168] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.128874][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.136892][ T4168] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.147822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.157266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.171389][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.207962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.217994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.232367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.241887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.252101][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.259377][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.272564][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.306705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.314871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.324462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.334133][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.341328][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.350209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.359775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.370282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.379848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.389144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.404529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.413488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.422901][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.430023][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.438123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.448315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.459132][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.484060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.492751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.501536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.512772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.523212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.531461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.540100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.548873][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.556004][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.585583][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.596204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.604799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.614487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.626618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.635007][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.642106][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.650471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.660949][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.681728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.733393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.743351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.754078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.763071][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.770202][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.780165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.789191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.798779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.808095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.816986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.827587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.836440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.844932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.857951][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.883184][ T4177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.894590][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.903731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.914748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.924678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.933821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.952776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.962010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.971785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.980637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.998954][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.019825][ T4166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.032530][ T4166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.050949][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.061353][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.071713][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.082367][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.092081][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.103129][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.110981][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.137038][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.145369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.153132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.170093][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.202001][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.219885][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.231050][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.238232][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.260922][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.288166][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.297344][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.305348][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.306056][ T4214] Bluetooth: hci2: command 0x041b tx timeout [ 64.313984][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.327210][ T4214] Bluetooth: hci0: command 0x041b tx timeout [ 64.330513][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.343527][ T4214] Bluetooth: hci3: command 0x041b tx timeout [ 64.352544][ T4214] Bluetooth: hci4: command 0x041b tx timeout [ 64.355872][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.363040][ T4214] Bluetooth: hci1: command 0x041b tx timeout [ 64.365663][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.377241][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.388596][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.397612][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.407034][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.416419][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.425706][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.441927][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.462693][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.470527][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.478574][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.488551][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.497940][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.505020][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.513078][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.522104][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.531101][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.538218][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.549606][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.557977][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.567541][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.582204][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.590427][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.607092][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.640784][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.654868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.664022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.679501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.692735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.702288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.711748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.720944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.729911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.740250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.749068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.766110][ T4167] device veth0_vlan entered promiscuous mode [ 64.784004][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.794069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.814178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.823514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.839858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.850075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.858946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.868546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.883413][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.894754][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.908640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.923529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.937346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.966513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.988634][ T4167] device veth1_vlan entered promiscuous mode [ 65.032712][ T4166] device veth0_vlan entered promiscuous mode [ 65.055431][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.064274][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.083017][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.093128][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.102369][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.111169][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.120223][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.128794][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.152312][ T4166] device veth1_vlan entered promiscuous mode [ 65.173754][ T4177] device veth0_vlan entered promiscuous mode [ 65.204357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.215998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.235944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.245172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.253754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.277884][ T4177] device veth1_vlan entered promiscuous mode [ 65.298152][ T4167] device veth0_macvtap entered promiscuous mode [ 65.306840][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.316078][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.324137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.333413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.343150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.362300][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.370691][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.382095][ T4167] device veth1_macvtap entered promiscuous mode [ 65.403674][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.411801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.422410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.431357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.440215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.458278][ T4166] device veth0_macvtap entered promiscuous mode [ 65.467803][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.475054][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.485925][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.500327][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.517493][ T4166] device veth1_macvtap entered promiscuous mode [ 65.533409][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.543449][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.552664][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.584889][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.595764][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.607937][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.620323][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.631963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.643132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.652793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.662148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.672764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.682011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.695090][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.709755][ T4177] device veth0_macvtap entered promiscuous mode [ 65.727016][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.738243][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.751709][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.760914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.769934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.779194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.787995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.797146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.806721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.818341][ T4166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.834235][ T4166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.844489][ T4166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.853361][ T4166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.874776][ T4174] device veth0_vlan entered promiscuous mode [ 65.886934][ T4177] device veth1_macvtap entered promiscuous mode [ 65.903065][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.912710][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.921268][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.930683][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.939712][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.947767][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.955984][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.964038][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.984588][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.996776][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.007275][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.017810][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.030207][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.042221][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.053505][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.082894][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.093855][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.105999][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.115958][ T4168] device veth0_vlan entered promiscuous mode [ 66.137207][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.146923][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.156277][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.164940][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.174670][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.185716][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.194431][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.203511][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.233020][ T4174] device veth1_vlan entered promiscuous mode [ 66.248854][ T4168] device veth1_vlan entered promiscuous mode [ 66.273583][ T4177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.297238][ T4177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.306909][ T4177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.316376][ T4177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.385884][ T4214] Bluetooth: hci1: command 0x040f tx timeout [ 66.407630][ T4214] Bluetooth: hci4: command 0x040f tx timeout [ 66.424487][ T4168] device veth0_macvtap entered promiscuous mode [ 66.425885][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.431403][ T4214] Bluetooth: hci3: command 0x040f tx timeout [ 66.445479][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.447112][ T4214] Bluetooth: hci0: command 0x040f tx timeout [ 66.459794][ T4214] Bluetooth: hci2: command 0x040f tx timeout [ 66.482152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.490669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.499849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.509202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.517989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.527204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.536725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.545339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.554046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.565136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.594391][ T4168] device veth1_macvtap entered promiscuous mode [ 66.604963][ T4174] device veth0_macvtap entered promiscuous mode [ 66.615962][ T4174] device veth1_macvtap entered promiscuous mode [ 66.638719][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.648385][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.663025][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.673656][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.683844][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.694828][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.706443][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.717305][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.729819][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.739755][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.748406][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.757004][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.765044][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.773388][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.783780][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.808901][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.823974][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.834470][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.845766][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.855641][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.866995][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.879956][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.903698][ T4168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.918447][ T4168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.928208][ T4168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.937491][ T4168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.949003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.958675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.978090][ T466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.981637][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.986200][ T466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.005086][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.015000][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.025916][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.036570][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.047053][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.056995][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.067619][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.079226][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.094599][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.105769][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.114684][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.130304][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.139320][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.141315][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.161180][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.164354][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.179711][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.190187][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.200754][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.211930][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.222406][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.235802][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.262563][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.276580][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.292713][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.305046][ T4174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.316167][ T4174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.324884][ T4174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.333763][ T4174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.368686][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.386185][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.431524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.513382][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.550639][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.585160][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.605729][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.613981][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.693732][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.709708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.738367][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.748215][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.783941][ T4257] loop1: detected capacity change from 0 to 512 [ 67.793482][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.818240][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.833117][ T4257] ======================================================= [ 67.833117][ T4257] WARNING: The mand mount option has been deprecated and [ 67.833117][ T4257] and is ignored by this kernel. Remove the mand [ 67.833117][ T4257] option from the mount to silence this warning. [ 67.833117][ T4257] ======================================================= [ 67.847154][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.954775][ T4257] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,min_batch_time=0x000000000000002f,dioread_lock,,errors=continue. Quota mode: writeback. [ 67.977370][ T4257] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.124923][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.137813][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.149333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.223861][ T4269] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 68.658711][ T4257] Process accounting resumed [ 69.009256][ T4214] Bluetooth: hci0: command 0x0419 tx timeout [ 69.015580][ T4214] Bluetooth: hci3: command 0x0419 tx timeout [ 69.021649][ T4214] Bluetooth: hci4: command 0x0419 tx timeout [ 69.030032][ T4214] Bluetooth: hci1: command 0x0419 tx timeout [ 69.090132][ T4268] loop3: detected capacity change from 0 to 512 [ 69.129791][ T4248] Bluetooth: hci2: command 0x0419 tx timeout [ 69.199965][ T4257] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 69.230190][ T4273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 69.278395][ T4272] loop4: detected capacity change from 0 to 2048 [ 69.289058][ T4268] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 69.299466][ T4268] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 69.319760][ T26] audit: type=1326 audit(1738044498.592:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4277 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b54594d29 code=0x7ffc0000 [ 69.331520][ T4268] EXT4-fs (loop3): mount failed [ 69.386690][ T26] audit: type=1326 audit(1738044498.622:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4277 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b54594d29 code=0x7ffc0000 [ 69.386689][ T4272] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.442362][ T26] audit: type=1326 audit(1738044498.622:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4277 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f4b54594d29 code=0x7ffc0000 [ 69.444705][ T4282] loop0: detected capacity change from 0 to 512 [ 69.465776][ T26] audit: type=1326 audit(1738044498.622:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4277 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b54594d29 code=0x7ffc0000 [ 69.533304][ T26] audit: type=1326 audit(1738044498.622:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4277 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b54594d29 code=0x7ffc0000 [ 69.561344][ T26] audit: type=1326 audit(1738044498.622:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4277 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f4b54594d29 code=0x7ffc0000 [ 69.619014][ T4282] EXT4-fs (loop0): Ignoring removed orlov option [ 69.625828][ T26] audit: type=1326 audit(1738044498.622:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4277 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b54594d29 code=0x7ffc0000 [ 69.651220][ T26] audit: type=1326 audit(1738044498.622:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4277 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b54594d29 code=0x7ffc0000 [ 69.675982][ T26] audit: type=1326 audit(1738044498.622:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4277 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b54594d29 code=0x7ffc0000 [ 69.707900][ T4282] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.8: casefold flag without casefold feature [ 69.724880][ T4282] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.8: couldn't read orphan inode 15 (err -117) [ 69.743650][ T4282] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue. Quota mode: writeback. [ 69.797332][ T4293] loop3: detected capacity change from 0 to 512 [ 69.897144][ T4297] loop1: detected capacity change from 0 to 256 [ 69.918343][ T4303] loop2: detected capacity change from 0 to 256 [ 69.918850][ T4293] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,bsddf,max_dir_size_kb=0x0000000000000005,nobarrier,,errors=continue. Quota mode: writeback. [ 69.961682][ T4293] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.175718][ T4309] netlink: 'syz.1.16': attribute type 7 has an invalid length. [ 70.210472][ T4309] netlink: 'syz.1.16': attribute type 8 has an invalid length. [ 70.312838][ T4313] team0: No ports can be present during mode change [ 71.270259][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.278444][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.404928][ T4323] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 71.519036][ T4331] xt_hashlimit: max too large, truncated to 1048576 [ 71.778480][ T4338] loop3: detected capacity change from 0 to 8192 [ 71.953105][ T4346] team0: No ports can be present during mode change [ 71.981167][ T4338] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 72.028669][ T4338] FAT-fs (loop3): Filesystem has been set read-only [ 72.443288][ T4359] loop4: detected capacity change from 0 to 512 [ 72.551433][ T4364] device vlan2 entered promiscuous mode [ 72.570362][ T4364] device bond0 entered promiscuous mode [ 72.582950][ T4364] device bond_slave_0 entered promiscuous mode [ 72.596460][ T4364] device bond_slave_1 entered promiscuous mode [ 72.611272][ T4359] EXT4-fs (loop4): Ignoring removed oldalloc option [ 72.619433][ T4364] device bond0 left promiscuous mode [ 72.626052][ T4364] device bond_slave_0 left promiscuous mode [ 72.632450][ T4359] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 72.648325][ T4364] device bond_slave_1 left promiscuous mode [ 72.693604][ T4366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.38'. [ 72.702812][ T4359] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.797504][ T4359] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 72.916754][ T4370] syz.0.39[4370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.916885][ T4370] syz.0.39[4370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.942781][ T4359] EXT4-fs (loop4): 1 truncate cleaned up [ 72.994019][ T4359] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 73.377698][ T4382] team0: No ports can be present during mode change [ 73.468624][ T4388] loop0: detected capacity change from 0 to 1024 [ 73.546480][ T4392] netlink: 4796 bytes leftover after parsing attributes in process `syz.2.50'. [ 73.611797][ T4394] syz.1.52 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 73.683950][ T4388] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.701645][ T4388] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.181411][ T4417] team0: No ports can be present during mode change [ 74.245444][ C1] ------------[ cut here ]------------ [ 74.251313][ C1] WARNING: CPU: 1 PID: 4419 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 74.260717][ C1] Modules linked in: [ 74.264632][ C1] CPU: 1 PID: 4419 Comm: syz.0.62 Not tainted 5.15.177-syzkaller #0 [ 74.272672][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 74.282802][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 74.289142][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 ab ba d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 94 ba d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 74.309381][ C1] RSP: 0018:ffffc90000dd09b0 EFLAGS: 00010246 [ 74.315543][ C1] RAX: ffffffff81aacafc RBX: 0000000000000000 RCX: ffff88802bd15940 [ 74.323546][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.331612][ C1] RBP: dffffc0000000000 R08: ffffffff81aaca0d R09: ffffed10057a2b29 [ 74.339673][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 74.347749][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90000dd0a28 [ 74.355792][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 74.364804][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.371590][ C1] CR2: 00007f4b547afbac CR3: 0000000064666000 CR4: 00000000003506e0 [ 74.379644][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.387701][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.395757][ C1] Call Trace: [ 74.399057][ C1] [ 74.401923][ C1] ? __warn+0x15b/0x300 [ 74.406158][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 74.411734][ C1] ? report_bug+0x1b7/0x2e0 [ 74.416315][ C1] ? handle_bug+0x3d/0x70 [ 74.420679][ C1] ? exc_invalid_op+0x16/0x40 [ 74.425449][ C1] ? asm_exc_invalid_op+0x16/0x20 [ 74.430513][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 74.436056][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 74.441738][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 74.447525][ C1] bpf_probe_read_compat+0xe4/0x180 [ 74.452861][ C1] bpf_prog_3d2613b5dfc7747f+0x32/0xae0 [ 74.458693][ C1] bpf_trace_run3+0x1d1/0x380 [ 74.463406][ C1] ? bpf_trace_run2+0x340/0x340 [ 74.468353][ C1] ? rcu_core+0xa15/0x1650 [ 74.472894][ C1] ? kasan_quarantine_put+0xd4/0x220 [ 74.478272][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 74.483503][ C1] ? rcu_core+0xa15/0x1650 [ 74.487995][ C1] __bpf_trace_kmem_cache_free+0x99/0xc0 [ 74.493663][ C1] ? rcu_core+0xa15/0x1650 [ 74.498147][ C1] __traceiter_kmem_cache_free+0x2e/0x50 [ 74.503809][ C1] ? rcu_core+0xa15/0x1650 [ 74.508287][ C1] kmem_cache_free+0x1ce/0x1f0 [ 74.513171][ C1] ? read_cred_subscribers+0x50/0x50 [ 74.518755][ C1] rcu_core+0xa15/0x1650 [ 74.523039][ C1] ? local_bh_disable+0x20/0x20 [ 74.527977][ C1] ? memset+0x1f/0x40 [ 74.531982][ C1] ? __run_timers+0x814/0x890 [ 74.537110][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 74.543129][ C1] ? detach_timer+0x2f0/0x2f0 [ 74.547907][ C1] handle_softirqs+0x3a7/0x930 [ 74.552700][ C1] ? __irq_exit_rcu+0x157/0x240 [ 74.557649][ C1] ? do_softirq+0x240/0x240 [ 74.562199][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 74.567491][ C1] __irq_exit_rcu+0x157/0x240 [ 74.572283][ C1] ? irq_exit_rcu+0x20/0x20 [ 74.576884][ C1] irq_exit_rcu+0x5/0x20 [ 74.581156][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 74.586965][ C1] [ 74.589917][ C1] [ 74.592868][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 74.598950][ C1] RIP: 0010:release_pages+0x194/0x1f40 [ 74.604456][ C1] Code: 00 00 00 00 45 31 ed 48 8b 44 24 58 48 89 5c 24 60 48 8d 3c 18 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 05 e8 c5 2e 1d 00 48 8b 44 24 58 48 8b 4c 24 60 4c 8b 3c 08 4d [ 74.624255][ C1] RSP: 0018:ffffc9000122f2a0 EFLAGS: 00000246 [ 74.630402][ C1] RAX: 1ffff1100eb6b28c RBX: 0000000000000450 RCX: dffffc0000000000 [ 74.638554][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888075b59460 [ 74.646689][ C1] RBP: ffffc9000122f3d0 R08: ffffffff81ad4138 R09: fffff940003250df [ 74.654701][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 74.662971][ C1] R13: 0000000000000000 R14: ffffea00019286c0 R15: ffffea0001928600 [ 74.671029][ C1] ? release_pages+0x3a8/0x1f40 [ 74.675988][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 74.681060][ C1] ? lru_cache_disable+0x30/0x30 [ 74.686088][ C1] ? free_swap_cache+0x15a/0x2d0 [ 74.691076][ C1] tlb_flush_mmu+0xc8/0x170 [ 74.695673][ C1] unmap_page_range+0x214d/0x2630 [ 74.700771][ C1] ? mmu_notifier_invalidate_range_end+0xf0/0xf0 [ 74.707278][ C1] ? __pagevec_lru_add+0x1584/0x18d0 [ 74.712602][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 74.717813][ C1] ? uprobe_munmap+0x17a/0x400 [ 74.722617][ C1] ? unmap_single_vma+0x1a1/0x2d0 [ 74.727948][ C1] unmap_vmas+0x1f8/0x390 [ 74.732317][ C1] ? unmap_page_range+0x2630/0x2630 [ 74.737957][ C1] ? tlb_gather_mmu_fullmm+0x159/0x200 [ 74.743452][ C1] exit_mmap+0x3b6/0x620 [ 74.747898][ C1] ? vm_brk+0x20/0x20 [ 74.752100][ C1] ? uprobe_clear_state+0x304/0x460 [ 74.757402][ C1] __mmput+0x112/0x3b0 [ 74.759331][ T4425] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.761533][ C1] exit_mm+0x688/0x7f0 [ 74.761575][ C1] ? _raw_spin_unlock+0x40/0x40 [ 74.789063][ C1] ? do_exit+0x2480/0x2480 [ 74.793542][ C1] ? taskstats_exit+0x491/0xa10 [ 74.798492][ C1] ? tty_audit_exit+0x150/0x1f0 [ 74.803462][ C1] do_exit+0x626/0x2480 [ 74.807730][ C1] ? put_task_struct+0x80/0x80 [ 74.812519][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 74.818604][ C1] do_group_exit+0x144/0x310 [ 74.823236][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 74.828538][ C1] get_signal+0xc66/0x14e0 [ 74.833015][ C1] arch_do_signal_or_restart+0xc3/0x1890 [ 74.838744][ C1] ? futex_exit_release+0x1e0/0x1e0 [ 74.844007][ C1] ? read_lock_is_recursive+0x10/0x10 [ 74.849452][ C1] ? get_sigframe_size+0x10/0x10 [ 74.854429][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 74.859543][ C1] ? exit_to_user_mode_loop+0x39/0x130 [ 74.865033][ C1] exit_to_user_mode_loop+0x97/0x130 [ 74.870386][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 74.876001][ C1] syscall_exit_to_user_mode+0x5d/0x240 [ 74.881669][ C1] do_syscall_64+0x47/0xb0 [ 74.886159][ C1] ? clear_bhb_loop+0x15/0x70 [ 74.890863][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.896828][ C1] RIP: 0033:0x7fa7a8f5cd29 [ 74.901274][ C1] Code: Unable to access opcode bytes at RIP 0x7fa7a8f5ccff. [ 74.908703][ C1] RSP: 002b:00007fa7a6dc60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 74.917185][ C1] RAX: fffffffffffffe00 RBX: 00007fa7a9175fa8 RCX: 00007fa7a8f5cd29 [ 74.925228][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa7a9175fa8 [ 74.933220][ C1] RBP: 00007fa7a9175fa0 R08: 0000000000000000 R09: 0000000000000000 [ 74.941257][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa7a9175fac [ 74.949303][ C1] R13: 0000000000000000 R14: 00007ffcf4cd0550 R15: 00007ffcf4cd0638 [ 74.957362][ C1] [ 74.960411][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.967709][ C1] CPU: 1 PID: 4419 Comm: syz.0.62 Not tainted 5.15.177-syzkaller #0 [ 74.975707][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 74.985784][ C1] Call Trace: [ 74.989121][ C1] [ 74.992028][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 74.996749][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 75.002434][ C1] ? panic+0x860/0x860 [ 75.006539][ C1] ? copy_from_user_nofault+0x60/0x1c0 [ 75.012040][ C1] ? copy_from_user_nofault+0x60/0x1c0 [ 75.017543][ C1] panic+0x318/0x860 [ 75.021469][ C1] ? __warn+0x16a/0x300 [ 75.025650][ C1] ? fb_is_primary_device+0xd0/0xd0 [ 75.030902][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 75.036487][ C1] __warn+0x2b2/0x300 [ 75.040499][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 75.046242][ C1] report_bug+0x1b7/0x2e0 [ 75.050610][ C1] handle_bug+0x3d/0x70 [ 75.054809][ C1] exc_invalid_op+0x16/0x40 [ 75.059343][ C1] asm_exc_invalid_op+0x16/0x20 [ 75.064223][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 75.070412][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 ab ba d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 94 ba d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 75.090129][ C1] RSP: 0018:ffffc90000dd09b0 EFLAGS: 00010246 [ 75.096238][ C1] RAX: ffffffff81aacafc RBX: 0000000000000000 RCX: ffff88802bd15940 [ 75.104240][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.112234][ C1] RBP: dffffc0000000000 R08: ffffffff81aaca0d R09: ffffed10057a2b29 [ 75.120233][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 75.128314][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90000dd0a28 [ 75.136314][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 75.141804][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 75.147393][ C1] bpf_probe_read_compat+0xe4/0x180 [ 75.152625][ C1] bpf_prog_3d2613b5dfc7747f+0x32/0xae0 [ 75.158217][ C1] bpf_trace_run3+0x1d1/0x380 [ 75.162929][ C1] ? bpf_trace_run2+0x340/0x340 [ 75.167834][ C1] ? rcu_core+0xa15/0x1650 [ 75.172500][ C1] ? kasan_quarantine_put+0xd4/0x220 [ 75.177812][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 75.183037][ C1] ? rcu_core+0xa15/0x1650 [ 75.187473][ C1] __bpf_trace_kmem_cache_free+0x99/0xc0 [ 75.193120][ C1] ? rcu_core+0xa15/0x1650 [ 75.197548][ C1] __traceiter_kmem_cache_free+0x2e/0x50 [ 75.203205][ C1] ? rcu_core+0xa15/0x1650 [ 75.207817][ C1] kmem_cache_free+0x1ce/0x1f0 [ 75.212614][ C1] ? read_cred_subscribers+0x50/0x50 [ 75.217937][ C1] rcu_core+0xa15/0x1650 [ 75.222389][ C1] ? local_bh_disable+0x20/0x20 [ 75.227260][ C1] ? memset+0x1f/0x40 [ 75.231270][ C1] ? __run_timers+0x814/0x890 [ 75.236078][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 75.242085][ C1] ? detach_timer+0x2f0/0x2f0 [ 75.246809][ C1] handle_softirqs+0x3a7/0x930 [ 75.251608][ C1] ? __irq_exit_rcu+0x157/0x240 [ 75.256502][ C1] ? do_softirq+0x240/0x240 [ 75.261031][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 75.266259][ C1] __irq_exit_rcu+0x157/0x240 [ 75.270959][ C1] ? irq_exit_rcu+0x20/0x20 [ 75.275498][ C1] irq_exit_rcu+0x5/0x20 [ 75.279769][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 75.285438][ C1] [ 75.288388][ C1] [ 75.291369][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 75.297381][ C1] RIP: 0010:release_pages+0x194/0x1f40 [ 75.302880][ C1] Code: 00 00 00 00 45 31 ed 48 8b 44 24 58 48 89 5c 24 60 48 8d 3c 18 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 05 e8 c5 2e 1d 00 48 8b 44 24 58 48 8b 4c 24 60 4c 8b 3c 08 4d [ 75.322515][ C1] RSP: 0018:ffffc9000122f2a0 EFLAGS: 00000246 [ 75.328628][ C1] RAX: 1ffff1100eb6b28c RBX: 0000000000000450 RCX: dffffc0000000000 [ 75.336723][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888075b59460 [ 75.344724][ C1] RBP: ffffc9000122f3d0 R08: ffffffff81ad4138 R09: fffff940003250df [ 75.346267][ T4427] netlink: 132 bytes leftover after parsing attributes in process `syz.2.65'. [ 75.352726][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 75.352748][ C1] R13: 0000000000000000 R14: ffffea00019286c0 R15: ffffea0001928600 [ 75.352772][ C1] ? release_pages+0x3a8/0x1f40 [ 75.352811][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 75.387695][ C1] ? lru_cache_disable+0x30/0x30 [ 75.392671][ C1] ? free_swap_cache+0x15a/0x2d0 [ 75.394452][ T4427] netlink: 'syz.2.65': attribute type 10 has an invalid length. [ 75.397643][ C1] tlb_flush_mmu+0xc8/0x170 [ 75.397675][ C1] unmap_page_range+0x214d/0x2630 [ 75.414890][ C1] ? mmu_notifier_invalidate_range_end+0xf0/0xf0 [ 75.421253][ C1] ? __pagevec_lru_add+0x1584/0x18d0 [ 75.426571][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 75.431618][ C1] ? uprobe_munmap+0x17a/0x400 [ 75.436429][ C1] ? unmap_single_vma+0x1a1/0x2d0 [ 75.441517][ C1] unmap_vmas+0x1f8/0x390 [ 75.445895][ C1] ? unmap_page_range+0x2630/0x2630 [ 75.451132][ C1] ? tlb_gather_mmu_fullmm+0x159/0x200 [ 75.456628][ C1] exit_mmap+0x3b6/0x620 [ 75.460909][ C1] ? vm_brk+0x20/0x20 [ 75.464937][ C1] ? uprobe_clear_state+0x304/0x460 [ 75.470393][ C1] __mmput+0x112/0x3b0 [ 75.474500][ C1] exit_mm+0x688/0x7f0 [ 75.478601][ C1] ? _raw_spin_unlock+0x40/0x40 [ 75.483491][ C1] ? do_exit+0x2480/0x2480 [ 75.487941][ C1] ? taskstats_exit+0x491/0xa10 [ 75.492900][ C1] ? tty_audit_exit+0x150/0x1f0 [ 75.497790][ C1] do_exit+0x626/0x2480 [ 75.501979][ C1] ? put_task_struct+0x80/0x80 [ 75.506772][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 75.512791][ C1] do_group_exit+0x144/0x310 [ 75.517408][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 75.522632][ C1] get_signal+0xc66/0x14e0 [ 75.527081][ C1] arch_do_signal_or_restart+0xc3/0x1890 [ 75.532753][ C1] ? futex_exit_release+0x1e0/0x1e0 [ 75.538001][ C1] ? read_lock_is_recursive+0x10/0x10 [ 75.543406][ C1] ? get_sigframe_size+0x10/0x10 [ 75.548469][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 75.553553][ C1] ? exit_to_user_mode_loop+0x39/0x130 [ 75.559044][ C1] exit_to_user_mode_loop+0x97/0x130 [ 75.564356][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 75.569943][ C1] syscall_exit_to_user_mode+0x5d/0x240 [ 75.575532][ C1] do_syscall_64+0x47/0xb0 [ 75.579976][ C1] ? clear_bhb_loop+0x15/0x70 [ 75.584679][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.590623][ C1] RIP: 0033:0x7fa7a8f5cd29 [ 75.595062][ C1] Code: Unable to access opcode bytes at RIP 0x7fa7a8f5ccff. [ 75.602444][ C1] RSP: 002b:00007fa7a6dc60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 75.611231][ C1] RAX: fffffffffffffe00 RBX: 00007fa7a9175fa8 RCX: 00007fa7a8f5cd29 [ 75.619228][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa7a9175fa8 [ 75.627312][ C1] RBP: 00007fa7a9175fa0 R08: 0000000000000000 R09: 0000000000000000 [ 75.635437][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa7a9175fac [ 75.643432][ C1] R13: 0000000000000000 R14: 00007ffcf4cd0550 R15: 00007ffcf4cd0638 [ 75.651621][ C1] [ 75.655033][ C1] Kernel Offset: disabled [ 75.659592][ C1] Rebooting in 86400 seconds..