last executing test programs: 5.427426145s ago: executing program 3 (id=4): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x1, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(0x0, r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 5.425945195s ago: executing program 4 (id=5): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 5.125664361s ago: executing program 3 (id=6): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x800002, &(0x7f0000000700)=ANY=[], 0x5, 0x57b, &(0x7f0000000140)="$eJzs3V9v29YZx/EfHRsx1CEYtiEIgjQ9TTbAAVKFkhsFQq846khmK5ECSRX2VRE0dmFEboe4AxbfdLnJNmB7D+vtXsRewq53v+tiL2DDNJCUHMm2LMeurCT4foSWFPXwnIeUwgcn4R8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5fsN1K47aQdjbNNP5jTjqnPL5qL17E5Mj/rn/ql/Jyf7T6qpuFItu/OJV5PXsf3d0q3h3S6vZZFUH713/6Sc/X14arX9KQpdi//nB08f9/vazRSeyIC0bBkkUdLyWNUESmXqt5j7YaCbSDdlk67t/2I7xY+ulUWzW/HumUq+vG1veinphq+G17Wjho4+qrlszn5a71ouTKHzwaTnxN4J2OwhbeUz2cRbzKPshfhakJrVex5id3f72+qwks6DKWYKqs4KqbrVaqVSrldrD+sNHrrt8bIE76aqORSz+R4vFmsdhHDiXpWH9V1uBQvW0KXPiy1dDsSJ1pnw+NKr/v3pQ1Oxpxuv/qMrfePXxTeX1/3bx7va0+j8ll8t77eu5DvRUj9VXX9t6djzmcDecp/2/XmDdOb0Gg7F3LVmFCpQoUqCOvHyJGS4xqqummlx9oQ01lcioqUBtWSXaUqJUNv9F+Ypl5SlVpFhGa/J1T0YV1VXXuoysytpSpJ5CtdSQl7eyo918v6+fkvFhUOUsQdWpIVeG38Vr1H+X+v/OWx79ET2rix+0gR/JYFT/JS0vOhkAAAAAADAXTv6379n4f0Xv53PNoG3dqdEAAAAAAODtk4/ob2WTlWzufTmnjf8BAAAAAMDbyMmvsXMklfSBpMHg8Eool3/wBwAAAADg3ZAP8G9nk1I294GcifE/AAAAAAB4B/xx1j32V5PuVefv/9YVrTgvupu/dPa8LM7bG94O9crRFtPmzff+M8gt523VlodN+vaW85Mi6PAmmD8MJzuz8nDi+OwJONeGa08moD/rwyLmwyfF9Mnok6KXUjNo27IftT+pyPOuLaV2M/3t17u/k7Le/xR2rjna2e1vl7/8pv8kz+VF1sqLveF5EsdOlzgll2/z+y3k11ycuMUr+YUYw35LRb/u+PYvFasvvUafL3WniLlTKqalye1fzfqslKdt/TCLygW3/KXuFjF31+4WkxOyqM7Kojqexbn2xRmyWJ+VxfoFswCARdmZXoX+VxTxwdG6e46j3OVU95dak/Qvae1mfmBdvnnCEd2ddUR3L1jd/nbsGUjTamzW71+OVNXvsxW+n9pv0q462S688u3eb3R9//nBR7t7j7/a/mr762p1veZ+7LoPq1rJN2M4OZ7pKrUHAHDSM3ZGNbd4xs7Mp/A4H88YVf/s8JSCsr7UN+rrie7nVxvkZxyc2Gpp7DSE+zNGraWxJ7zcnzGqK4096OXssetz/hYAALhcd2bU4bPU//ujceqUcfdkLT99dDxeywEAwHzY+AenlP7BieOg+0WlXq946YY1ceR/ZuKg0bImCFMb+xte2LKmG0dp5EftbObzoGETk/S63ShOTTOKTTdKgk3TDNrWJFtJajsmsR0vTAM/6batN/hOisLU81PTCBLfdHu/bgfJho3zlZOu9YNm4HtpEIUmiXqxb8vGJNaOBQYNG6ZBM8hmQ9ONg44Xb5nPo3avY03DJn4cdNOoaNAf9hWEzSju5M2WF72zAQB4Q+w/P3j6uN/ffjbHmUVvIwAAmESVBgAAAAAAAAAAAAAAAAAAAADgzXcZ1/9NzFydY6fO7y/WzpImlzj/HQxeu53BnHbd6H69l/x9jc+saJ5dvAEbeO6Zq/rRW16StMjtWuBBCcCl+H8AAAD//5JXWjA=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) getdents64(r0, &(0x7f0000000140)=""/244, 0xf4) 5.015108313s ago: executing program 2 (id=3): fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[], 0xfe44, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 4.804422857s ago: executing program 3 (id=8): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) 4.734596468s ago: executing program 1 (id=9): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f00000000c0)) 4.732714198s ago: executing program 4 (id=10): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8086, &(0x7f0000000480)={[{@grpquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa2a4}}]}, 0x1, 0x4a9, &(0x7f0000001040)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="00000000e8"], 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000200)={0x100, r5}, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x100, r6}, 0x0) close(r4) 4.523046023s ago: executing program 3 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r0, 0x0, 0x0) r1 = getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@nodelalloc}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000280)=ANY=[@ANYBLOB="0d1200000000002a7672199d0335c3710005800000000000000100000001000071076359a9a7c00cad716b40affb6322ff02eb03aca433279eef21bd6d8dd78242acfea54f8694b143d5f826566f82aab6e603da8b4d7c05d90a129930ee1e7a36f69eefb172714dc5de067c3012"]) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) r3 = openat(0xffffffffffffff9c, 0x0, 0x101400, 0xc) mkdirat(r3, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000100)={{&(0x7f00006c3000/0x1000)=nil, 0x1000}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x40010) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r7}) 4.492205733s ago: executing program 2 (id=12): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 4.386698785s ago: executing program 1 (id=13): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3d) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) 3.405173524s ago: executing program 3 (id=15): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4092}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r4, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) 3.404598575s ago: executing program 0 (id=16): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x0, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) 3.266688337s ago: executing program 0 (id=17): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r2, r2, 0x0) 3.182555469s ago: executing program 0 (id=18): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) creat(0x0, 0x2) acct(0x0) acct(0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) pause() fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 3.130877899s ago: executing program 3 (id=19): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) tkill(0x0, 0x11) socket$inet6(0xa, 0x3, 0xff) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x8080000001}, 0x18) sync() socket$can_j1939(0x1d, 0x2, 0x7) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 3.059368311s ago: executing program 2 (id=20): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x28ac41, 0x16c) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x48, 0x40) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x24, 0x0, "43cad7244bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = semget$private(0x0, 0x4, 0x0) semop(r6, &(0x7f0000000040), 0x0) semget$private(0x0, 0x1, 0x209) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000340)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303030332c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d312c636865636b3d7374726963742c73686f72746e616d653d77696e39352c757466383d302c6572726f72733d636f6e74696e75652c666c7573682c646f733178666c6f7070792c726f6469722c636865636b3d72656c617865642c00f644111bec75d1acf37737b55a893f3948e6ba60b6ccd281faa215f94fe2aa36fbe1ac6d9a18e0977d1c6cb9e043ed3b0fbc55872d7c1284a59fc2cc25b9fdd1567f71c07db04f7f712e3c557a3cc5bcb722e1b5a0045ce5aff46a09b39058b220b4f0a3ee9eb38ff4d00acdb165b599fb974ee5"], 0x7, 0x2c7, &(0x7f00000004c0)="$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") 3.058963741s ago: executing program 1 (id=21): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000040)=0x5, 0x4) 2.802586216s ago: executing program 1 (id=22): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x28ac41, 0x16c) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x24, 0x0, "43cad7244bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = semget$private(0x0, 0x4, 0x0) semop(r6, &(0x7f0000000040), 0x0) semget$private(0x0, 0x1, 0x209) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x7, 0x2c7, &(0x7f00000004c0)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) 1.930882543s ago: executing program 2 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="00000000e8"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet6_tcp(0xa, 0x1, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000200)={0x100, r5}, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x100}, 0x0) close(r4) 1.899616624s ago: executing program 0 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x100) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="88000000000201040000000000000000020000052400028014000180080001000000000008000a00ac1e00010c00028005000100880000002400038014000180080001000000000008000200ac1414000c00028005000100000000002c000180"], 0x88}}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x5, 0xd, 0x0, 0xfe, @time, {}, {0x0, 0x11}, @result}], 0x1c) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x270, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@mcast1, @local, [0xffffffff, 0xffffffff], [], 'vlan1\x00', 'bridge_slave_1\x00'}, 0x0, 0x228, 0x270, 0x700, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@loopback, [0xffffff00, 0xff, 0xff, 0xff000000], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffff00], 0x4d5, 0x0, 0x16, 0x0, 0xb, 0x14}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2d}, [0x80ffff7f, 0x0, 0xffffff00, 0xff], @ipv6=@remote, [0xff, 0xffffffff, 0xffffff00], 0x4d3, 0x3506, 0x87, 0x1, 0xc, 0x15}, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xff], @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff000000, 0xff000000, 0xffffffff], 0x4d5, 0x3503, 0x0, 0x0, 0x6}, {@ipv6=@remote, [0xff000000, 0x0, 0xffffffff, 0xffffff00], @ipv4=@loopback, [0xffffffff, 0x0, 0xff], 0x4d3, 0x34ff, 0x2b, 0x0, 0x9, 0x19}], 0xe, 0x1}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xff000000, 0xff000000, 0xff000000, 0xff000000], [0xff, 0x0, 0x53461e33d3c3dc20, 0xffffff00], 'macvlan0\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x29, 0x8, 0x4, 0x60}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x4, 0x0, [0x0, 0x3, 0x4, 0x6, 0x5, 0x8, 0x3ff, 0x8001, 0x200, 0x1, 0xc, 0x7ff, 0xfff, 0x108, 0x81, 0x7], 0xf}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) syz_io_uring_setup(0x2af8, 0x0, &(0x7f0000000340), &(0x7f0000000080)) io_submit(0x0, 0x0, &(0x7f00000008c0)) 1.621882009s ago: executing program 1 (id=25): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) connect$inet6(r0, 0x0, 0x0) r1 = getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@nodelalloc}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000280)=ANY=[@ANYBLOB="0d1200000000002a7672199d0335c3710005800000000000000100000001000071076359a9a7c00cad716b40affb6322ff02eb03aca433279eef21bd6d8dd78242acfea54f8694b143d5f826566f82aab6e603da8b4d7c05d90a129930ee1e7a36f69eefb172714dc5de067c3012"]) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) r3 = openat(0xffffffffffffff9c, 0x0, 0x101400, 0xc) mkdirat(r3, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000100)={{&(0x7f00006c3000/0x1000)=nil, 0x1000}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40010) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r7}) 1.478941842s ago: executing program 4 (id=26): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) unshare(0x28000600) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 773.722746ms ago: executing program 0 (id=27): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x0) 686.614047ms ago: executing program 2 (id=28): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e25, 0x8}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r4, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac"], 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc811}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1b) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) getrandom(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x36, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r6}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r8, &(0x7f00000001c0), 0x0}, 0x20) 545.00554ms ago: executing program 0 (id=29): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000001300)=@gcm_128={{0x303}, "10fa3a84c8658b2e", "f8548357a5703eee115730acd32ed64d", "d4b45045", "14abe87af28c3530"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d03a", "29a78ab9b0a4e8ae"}, 0x38) 633.861µs ago: executing program 2 (id=30): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f7ffffff000000ac1414bb00000000000000000000000000000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 0s ago: executing program 1 (id=31): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000006000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000645e82be68234c6347bb7a57428eb41c38c31b923d2e8a9b6c6f0c0c6468c5974db4745a25f981ac19233b5580d44054755ddea4dc113fa494b6f6e0ffa0f4318bbc62962f581b59db56d1f001d1c79ed78f321d9b6c38a1ac82e895c11fb821afff52a4e0f0c7538ef3927ceacb3f6c6fa85678411873bfe10e3d6ae9998f3b01b29cc0ddcb1e03ec0d4f0f97d13d99c5f4ce", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r3, 0x2, &(0x7f0000000600)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r2, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) shutdown(r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x4000054) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) pipe2$9p(&(0x7f0000001900), 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) unshare(0x22020600) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x78, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x34, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="5bb4"]}]}}]}]}]}}]}, 0x78}}, 0x20040054) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.249' (ED25519) to the list of known hosts. [ 45.962936][ T4171] cgroup: Unknown subsys name 'net' [ 46.093963][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 47.285805][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 48.547419][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 48.635132][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 48.645723][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 48.673370][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 48.737279][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 48.770971][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.778042][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.786978][ T4183] device bridge_slave_0 entered promiscuous mode [ 48.826382][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.833884][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.841707][ T4183] device bridge_slave_1 entered promiscuous mode [ 48.867824][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.875139][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.883333][ T4184] device bridge_slave_0 entered promiscuous mode [ 48.900293][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.907343][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.915075][ T4181] device bridge_slave_0 entered promiscuous mode [ 48.928743][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.935989][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.944020][ T4184] device bridge_slave_1 entered promiscuous mode [ 48.958779][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.966142][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.973838][ T4181] device bridge_slave_1 entered promiscuous mode [ 48.981089][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.988137][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.995932][ T4182] device bridge_slave_0 entered promiscuous mode [ 49.012211][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.023475][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.048540][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.055880][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.064791][ T4182] device bridge_slave_1 entered promiscuous mode [ 49.089145][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.100092][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.131341][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.150032][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.168753][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.180502][ T4183] team0: Port device team_slave_0 added [ 49.188519][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.197810][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.205595][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.213354][ T4185] device bridge_slave_0 entered promiscuous mode [ 49.241366][ T4183] team0: Port device team_slave_1 added [ 49.252805][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.260081][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.267987][ T4185] device bridge_slave_1 entered promiscuous mode [ 49.277139][ T4181] team0: Port device team_slave_0 added [ 49.299336][ T4182] team0: Port device team_slave_0 added [ 49.311705][ T4181] team0: Port device team_slave_1 added [ 49.326823][ T4184] team0: Port device team_slave_0 added [ 49.341460][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.348412][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.374406][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.387080][ T4182] team0: Port device team_slave_1 added [ 49.400526][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.411773][ T4184] team0: Port device team_slave_1 added [ 49.419487][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.429144][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.436076][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.462015][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.510173][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.517137][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.543141][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.555086][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.562322][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.588379][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.600594][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.607538][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.633549][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.650844][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.657796][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.683858][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.711314][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.718271][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.744217][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.758474][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.765506][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.791743][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.808290][ T4185] team0: Port device team_slave_0 added [ 49.820407][ T4185] team0: Port device team_slave_1 added [ 49.872703][ T4183] device hsr_slave_0 entered promiscuous mode [ 49.879628][ T4183] device hsr_slave_1 entered promiscuous mode [ 49.899502][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.906454][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.932408][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.951761][ T4184] device hsr_slave_0 entered promiscuous mode [ 49.958251][ T4184] device hsr_slave_1 entered promiscuous mode [ 49.965170][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.972979][ T4184] Cannot create hsr debugfs directory [ 49.981390][ T4182] device hsr_slave_0 entered promiscuous mode [ 49.990854][ T4182] device hsr_slave_1 entered promiscuous mode [ 49.997210][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.005085][ T4182] Cannot create hsr debugfs directory [ 50.013236][ T4181] device hsr_slave_0 entered promiscuous mode [ 50.020143][ T4181] device hsr_slave_1 entered promiscuous mode [ 50.026744][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.034376][ T4181] Cannot create hsr debugfs directory [ 50.040295][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.047231][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.073123][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.174457][ T4185] device hsr_slave_0 entered promiscuous mode [ 50.181875][ T4185] device hsr_slave_1 entered promiscuous mode [ 50.188554][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.196303][ T4185] Cannot create hsr debugfs directory [ 50.249823][ T1324] Bluetooth: hci3: command 0x0409 tx timeout [ 50.259280][ T2239] Bluetooth: hci4: command 0x0409 tx timeout [ 50.262105][ T1324] Bluetooth: hci1: command 0x0409 tx timeout [ 50.265859][ T2239] Bluetooth: hci0: command 0x0409 tx timeout [ 50.273732][ T1324] Bluetooth: hci2: command 0x0409 tx timeout [ 50.465887][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.483929][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.493348][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.505242][ T4181] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 50.516505][ T4181] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 50.525185][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.538808][ T4181] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 50.555198][ T4181] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 50.585882][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.601023][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.620275][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.650703][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.695228][ T4182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.704255][ T4182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.714335][ T4182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.725441][ T4182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.765223][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.815286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.824886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.835565][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.864944][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.884789][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.895911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.905702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.915150][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.922393][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.933639][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.944284][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.953556][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.963378][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.973637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.984187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.992722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.014738][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.025790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.034911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.044771][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.051904][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.061436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.071123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.079820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.088086][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.095141][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.114607][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.130716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.138634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.148236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.156527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.165133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.173757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.182483][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.189568][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.197159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.205924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.215043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.223614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.232078][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.244583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.276588][ T4181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.287665][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.313127][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.320814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.330019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.338548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.347439][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.354506][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.362612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.371228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.379669][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.386695][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.394344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.402919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.412789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.421345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.429928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.438311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.446842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.455906][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.463897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.471750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.488976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.503010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.544368][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.556643][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.568832][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.581008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.593202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.604950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.617915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.627095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.635925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.643790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.652180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.661066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.670251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.678427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.686828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.695051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.719360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.727746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.736984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.748436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.759446][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.766764][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.784778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.804954][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.819566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.827038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.835850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.844360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.858451][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.872393][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.895121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.909998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.936714][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.943848][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.955130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.969479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.985116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.001811][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.018420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.042760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.057294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.066471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.097857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.108239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.117754][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.124853][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.133653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.142513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.151298][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.158347][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.166148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.173971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.181757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.191558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.199976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.208160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.216418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.225158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.236948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.245403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.261193][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.272547][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.301498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.316089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.327740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.336192][ T4241] Bluetooth: hci2: command 0x041b tx timeout [ 52.339227][ T4262] Bluetooth: hci3: command 0x041b tx timeout [ 52.347528][ T4241] Bluetooth: hci0: command 0x041b tx timeout [ 52.354902][ T4241] Bluetooth: hci1: command 0x041b tx timeout [ 52.369266][ T4241] Bluetooth: hci4: command 0x041b tx timeout [ 52.381882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.395960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.405270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.413908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.423755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.432438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.439907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.447278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.455808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.464463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.472985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.491531][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.503414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.521563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.553680][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.573027][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.589204][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.598323][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.613461][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.631439][ T4184] device veth0_vlan entered promiscuous mode [ 52.643751][ T4184] device veth1_vlan entered promiscuous mode [ 52.679787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.688471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.699517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.707786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.718033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.727610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.737644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.745366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.764269][ T4181] device veth0_vlan entered promiscuous mode [ 52.778863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.786690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.794580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.804396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.816382][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.831219][ T4184] device veth0_macvtap entered promiscuous mode [ 52.843732][ T4184] device veth1_macvtap entered promiscuous mode [ 52.853148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.861610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.872387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.880769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.891577][ T4181] device veth1_vlan entered promiscuous mode [ 52.905885][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.917161][ T4183] device veth0_vlan entered promiscuous mode [ 52.924048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.931740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.965576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.974487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.983480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.994730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.005769][ T4181] device veth0_macvtap entered promiscuous mode [ 53.016451][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.030106][ T4181] device veth1_macvtap entered promiscuous mode [ 53.038397][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.045868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.054637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.063372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.072244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.081007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.089891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.105811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.114177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.144313][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.154792][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.164395][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.174006][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.186599][ T4182] device veth0_vlan entered promiscuous mode [ 53.194546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.202563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.210683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.219664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.234689][ T4183] device veth1_vlan entered promiscuous mode [ 53.258605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.268396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.277045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.285570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.307077][ T4185] device veth0_vlan entered promiscuous mode [ 53.317566][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.329210][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.342537][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.351303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.359342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.366973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.377765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.395160][ T4183] device veth0_macvtap entered promiscuous mode [ 53.411911][ T4185] device veth1_vlan entered promiscuous mode [ 53.421081][ T4182] device veth1_vlan entered promiscuous mode [ 53.433821][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.444742][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.456376][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.465079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.473327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.481328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.489300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.497652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.506379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.517155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.525913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.553693][ T4183] device veth1_macvtap entered promiscuous mode [ 53.575940][ T4181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.585307][ T4181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.594519][ T4181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.604690][ T4181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.627304][ T4185] device veth0_macvtap entered promiscuous mode [ 53.644586][ T4185] device veth1_macvtap entered promiscuous mode [ 53.654079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.662543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.671566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.681112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.690178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.698549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.722647][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.724355][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.744994][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.746055][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.754941][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.754957][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.756278][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.805919][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.820137][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.829986][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.840410][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.860952][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.868367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.876595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.885310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.894676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.903326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.912308][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.923285][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.934545][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.945021][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.955321][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.966674][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.977760][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.005836][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.020073][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.030247][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.040928][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.050973][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.061651][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.072665][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.080465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.089302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.097792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.106984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.120848][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.129736][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.138434][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.147521][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.170697][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.185669][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.194680][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.203598][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.230497][ T4182] device veth0_macvtap entered promiscuous mode [ 54.237488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.247365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.280153][ T4182] device veth1_macvtap entered promiscuous mode [ 54.296651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.305353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.345254][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.356802][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.372026][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.383179][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.393269][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.403731][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.409415][ T4255] Bluetooth: hci4: command 0x040f tx timeout [ 54.414648][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 54.426022][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.429290][ T4255] Bluetooth: hci1: command 0x040f tx timeout [ 54.436635][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.446688][ T4255] Bluetooth: hci0: command 0x040f tx timeout [ 54.452261][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.458461][ T4255] Bluetooth: hci2: command 0x040f tx timeout [ 54.473955][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.487155][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.505096][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.510245][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.520981][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.525448][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.537722][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.546638][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.561640][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.585532][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.595626][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.606309][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.616772][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.627337][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.637158][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.647598][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.663160][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.683531][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.694832][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.728079][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.737815][ T4182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.758158][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.767836][ T4182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.792126][ T4182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.802292][ T4182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.835186][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.881198][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.882810][ T4294] loop1: detected capacity change from 0 to 1024 [ 54.899721][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.913001][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.923025][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.940540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.953595][ T4294] ======================================================= [ 54.953595][ T4294] WARNING: The mand mount option has been deprecated and [ 54.953595][ T4294] and is ignored by this kernel. Remove the mand [ 54.953595][ T4294] option from the mount to silence this warning. [ 54.953595][ T4294] ======================================================= [ 55.028235][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.030185][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.068347][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.086049][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.104959][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.114841][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.137926][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.149168][ T4294] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 55.162953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.188431][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.214825][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.220695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.238450][ T4294] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.255172][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.296984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.492211][ T4307] loop3: detected capacity change from 0 to 164 [ 55.586595][ T4312] loop2: detected capacity change from 0 to 512 [ 55.740695][ T4312] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 55.755385][ T4312] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.872140][ T4317] loop0: detected capacity change from 0 to 256 [ 55.913047][ T4322] syz.3.8[4322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.913181][ T4322] syz.3.8[4322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.938631][ T4324] loop4: detected capacity change from 0 to 512 [ 55.972834][ T4317] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.027586][ T4317] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.058857][ T4324] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 56.084171][ T25] audit: type=1800 audit(1757498555.117:2): pid=4317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7" name="bus" dev="loop0" ino=1048590 res=0 errno=0 [ 56.104583][ T4324] EXT4-fs (loop4): mount failed [ 56.116736][ T25] audit: type=1804 audit(1757498555.117:3): pid=4317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.7" name="/newroot/1/file0/bus" dev="loop0" ino=1048590 res=1 errno=0 [ 56.143895][ T4328] loop3: detected capacity change from 0 to 1024 [ 56.191867][ T4328] EXT4-fs (loop3): Ignoring removed orlov option [ 56.198244][ T4328] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 56.267249][ T4328] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,nodelalloc,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 56.490708][ T26] Bluetooth: hci2: command 0x0419 tx timeout [ 56.496856][ T26] Bluetooth: hci0: command 0x0419 tx timeout [ 56.800924][ T26] Bluetooth: hci1: command 0x0419 tx timeout [ 56.931377][ T26] Bluetooth: hci4: command 0x0419 tx timeout [ 57.004112][ T26] Bluetooth: hci3: command 0x0419 tx timeout [ 57.512151][ T4363] loop3: detected capacity change from 0 to 512 [ 57.616582][ T4363] EXT4-fs (loop3): Ignoring removed nobh option [ 57.639486][ T4363] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 57.748415][ T4363] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #3: comm syz.3.19: corrupted inode contents [ 57.766641][ T4368] loop2: detected capacity change from 0 to 256 [ 57.783710][ T4363] EXT4-fs error (device loop3): ext4_dirty_inode:6040: inode #3: comm syz.3.19: mark_inode_dirty error [ 57.799939][ T4363] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #3: comm syz.3.19: corrupted inode contents [ 57.891194][ T4363] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.19: mark_inode_dirty error [ 57.974567][ T4363] Quota error (device loop3): write_blk: dquota write failed [ 57.982350][ T4363] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 57.994321][ T4363] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.19: Failed to acquire dquot type 0 [ 58.091427][ T4374] loop1: detected capacity change from 0 to 256 [ 58.619833][ T4363] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #16: comm syz.3.19: corrupted inode contents [ 58.633526][ T4363] EXT4-fs error (device loop3): ext4_dirty_inode:6040: inode #16: comm syz.3.19: mark_inode_dirty error [ 58.661088][ T4363] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #16: comm syz.3.19: corrupted inode contents [ 58.730143][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 58.739505][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 58.750461][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 58.759414][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 58.768950][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 58.777892][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 58.786841][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 58.795786][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 58.804735][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 58.813684][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 58.861083][ T4363] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.19: mark_inode_dirty error [ 58.893139][ T4363] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #16: comm syz.3.19: corrupted inode contents [ 58.907148][ T4379] xt_policy: output policy not valid in PREROUTING and INPUT [ 59.070509][ T4363] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 59.119222][ T4363] EXT4-fs error (device loop3): ext4_do_update_inode:5204: inode #16: comm syz.3.19: corrupted inode contents [ 59.371357][ T4363] EXT4-fs error (device loop3): ext4_truncate:4273: inode #16: comm syz.3.19: mark_inode_dirty error [ 59.393818][ T4386] loop1: detected capacity change from 0 to 1024 [ 59.404755][ T4386] EXT4-fs (loop1): Ignoring removed orlov option [ 59.411204][ T4386] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 59.486100][ T4383] loop4: detected capacity change from 0 to 512 [ 59.717723][ T4363] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 59.745090][ T4386] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,nodelalloc,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 59.780815][ T4363] EXT4-fs (loop3): 1 truncate cleaned up [ 59.786570][ T4363] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nobh,,errors=continue. Quota mode: writeback. [ 59.884599][ T4363] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.966218][ T25] audit: type=1326 audit(1757498558.997:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9a56cba9 code=0x7ffc0000 [ 60.010980][ T25] audit: type=1326 audit(1757498559.047:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9a56cba9 code=0x7ffc0000 [ 60.046167][ T25] audit: type=1326 audit(1757498559.067:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdb9a56cba9 code=0x7ffc0000 [ 60.055516][ T4383] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 60.120640][ T25] audit: type=1326 audit(1757498559.067:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9a56cba9 code=0x7ffc0000 [ 60.177051][ T25] audit: type=1326 audit(1757498559.067:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb9a56cba9 code=0x7ffc0000 [ 60.220283][ T4394] netlink: 24 bytes leftover after parsing attributes in process `syz.2.28'. [ 60.391974][ T25] audit: type=1326 audit(1757498559.067:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.2.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb9a56cba9 code=0x7ffc0000 [ 60.415626][ T4383] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.559815][ T4405] ================================================================== [ 60.569796][ T4405] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 60.579014][ T4405] Read of size 1 at addr ffff88807c9af600 by task syz.2.30/4405 [ 60.586644][ T4405] [ 60.588973][ T4405] CPU: 0 PID: 4405 Comm: syz.2.30 Not tainted syzkaller #0 [ 60.596172][ T4405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.606246][ T4405] Call Trace: [ 60.609531][ T4405] [ 60.612465][ T4405] dump_stack_lvl+0x168/0x230 [ 60.617157][ T4405] ? show_regs_print_info+0x20/0x20 [ 60.622369][ T4405] ? load_image+0x3b0/0x3b0 [ 60.626882][ T4405] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 60.632273][ T4405] ? xfrm_pol_bin_obj+0x140/0x140 [ 60.637312][ T4405] print_address_description+0x60/0x2d0 [ 60.642873][ T4405] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 60.649381][ T4405] kasan_report+0xdf/0x130 [ 60.653806][ T4405] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 60.660347][ T4405] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 60.666672][ T4405] xfrm_policy_inexact_insert_node+0x599/0xb60 [ 60.672821][ T4405] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 60.678969][ T4405] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 60.684851][ T4405] xfrm_policy_inexact_insert+0xe0/0x1460 [ 60.690560][ T4405] ? __get_hash_thresh+0x105/0x410 [ 60.695657][ T4405] ? policy_hash_bysel+0x10a/0x570 [ 60.700757][ T4405] xfrm_policy_insert+0x112/0x930 [ 60.705772][ T4405] xfrm_add_policy+0x4d6/0x860 [ 60.710524][ T4405] ? xfrm_dump_sa_done+0xc0/0xc0 [ 60.715445][ T4405] ? apparmor_capable+0x12c/0x190 [ 60.720459][ T4405] ? __nla_parse+0x3c/0x50 [ 60.724872][ T4405] xfrm_user_rcv_msg+0x58d/0x860 [ 60.729806][ T4405] ? xfrm_netlink_rcv+0x90/0x90 [ 60.734697][ T4405] ? xfrm_netlink_rcv+0x66/0x90 [ 60.739529][ T4405] ? xfrm_netlink_rcv+0x66/0x90 [ 60.744362][ T4405] ? xfrm_netlink_rcv+0x66/0x90 [ 60.749193][ T4405] ? __mutex_lock_common+0x431/0x2390 [ 60.754547][ T4405] ? __copy_skb_header+0x417/0x5a0 [ 60.759647][ T4405] ? __skb_clone+0x480/0x790 [ 60.764229][ T4405] netlink_rcv_skb+0x1e0/0x430 [ 60.768984][ T4405] ? xfrm_netlink_rcv+0x90/0x90 [ 60.773828][ T4405] ? netlink_ack+0xb60/0xb60 [ 60.778403][ T4405] ? __lock_acquire+0x7c60/0x7c60 [ 60.783419][ T4405] xfrm_netlink_rcv+0x75/0x90 [ 60.788084][ T4405] netlink_unicast+0x774/0x920 [ 60.792835][ T4405] netlink_sendmsg+0x8ab/0xbc0 [ 60.797587][ T4405] ? netlink_getsockopt+0x560/0x560 [ 60.802767][ T4405] ? aa_sock_msg_perm+0x94/0x150 [ 60.807688][ T4405] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 60.812956][ T4405] ? security_socket_sendmsg+0x7c/0xa0 [ 60.818393][ T4405] ? netlink_getsockopt+0x560/0x560 [ 60.823575][ T4405] ____sys_sendmsg+0x5a2/0x8c0 [ 60.828325][ T4405] ? memset+0x1e/0x40 [ 60.832289][ T4405] ? __sys_sendmsg_sock+0x30/0x30 [ 60.837301][ T4405] ? import_iovec+0x6f/0xa0 [ 60.841856][ T4405] ___sys_sendmsg+0x1f0/0x260 [ 60.846547][ T4405] ? __sys_sendmsg+0x250/0x250 [ 60.851313][ T4405] ? sock_setsockopt+0x1502/0x2270 [ 60.856428][ T4405] ? __fdget+0x18b/0x210 [ 60.860660][ T4405] __se_sys_sendmsg+0x190/0x250 [ 60.865502][ T4405] ? __x64_sys_sendmsg+0x80/0x80 [ 60.870876][ T4405] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 60.876855][ T4405] ? lockdep_hardirqs_on+0x94/0x140 [ 60.882039][ T4405] do_syscall_64+0x4c/0xa0 [ 60.886440][ T4405] ? clear_bhb_loop+0x30/0x80 [ 60.891098][ T4405] ? clear_bhb_loop+0x30/0x80 [ 60.895756][ T4405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.901669][ T4405] RIP: 0033:0x7fdb9a56cba9 [ 60.906081][ T4405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.925667][ T4405] RSP: 002b:00007fdb987d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.934070][ T4405] RAX: ffffffffffffffda RBX: 00007fdb9a7b3fa0 RCX: 00007fdb9a56cba9 [ 60.942021][ T4405] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 60.949974][ T4405] RBP: 00007fdb9a5efe19 R08: 0000000000000000 R09: 0000000000000000 [ 60.957925][ T4405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.965874][ T4405] R13: 00007fdb9a7b4038 R14: 00007fdb9a7b3fa0 R15: 00007ffc551cb138 [ 60.973859][ T4405] [ 60.976859][ T4405] [ 60.979164][ T4405] Allocated by task 4405: [ 60.983468][ T4405] __kasan_kmalloc+0xb5/0xf0 [ 60.988039][ T4405] sk_prot_alloc+0xe7/0x210 [ 60.992519][ T4405] sk_alloc+0x2f/0x310 [ 60.996565][ T4405] pfkey_create+0xd8/0x560 [ 61.000961][ T4405] __sock_create+0x47b/0x900 [ 61.005545][ T4405] __sys_socket+0xe2/0x170 [ 61.009941][ T4405] __x64_sys_socket+0x76/0x80 [ 61.014598][ T4405] do_syscall_64+0x4c/0xa0 [ 61.019012][ T4405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.024884][ T4405] [ 61.027187][ T4405] The buggy address belongs to the object at ffff88807c9af000 [ 61.027187][ T4405] which belongs to the cache kmalloc-2k of size 2048 [ 61.041227][ T4405] The buggy address is located 1536 bytes inside of [ 61.041227][ T4405] 2048-byte region [ffff88807c9af000, ffff88807c9af800) [ 61.054666][ T4405] The buggy address belongs to the page: [ 61.060288][ T4405] page:ffffea0001f26a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c9a8 [ 61.070419][ T4405] head:ffffea0001f26a00 order:3 compound_mapcount:0 compound_pincount:0 [ 61.078723][ T4405] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 61.086697][ T4405] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016842000 [ 61.095262][ T4405] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 61.103817][ T4405] page dumped because: kasan: bad access detected [ 61.110222][ T4405] page_owner tracks the page as allocated [ 61.115913][ T4405] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4183, ts 48370316617, free_ts 48349344750 [ 61.135942][ T4405] get_page_from_freelist+0x1b77/0x1c60 [ 61.141475][ T4405] __alloc_pages+0x1e1/0x470 [ 61.146047][ T4405] new_slab+0xc0/0x4b0 [ 61.150095][ T4405] ___slab_alloc+0x81e/0xdf0 [ 61.154660][ T4405] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 61.160445][ T4405] pskb_expand_head+0x127/0x10f0 [ 61.165365][ T4405] netlink_trim+0x180/0x220 [ 61.169847][ T4405] netlink_broadcast_filtered+0x7c/0x1170 [ 61.175546][ T4405] nlmsg_notify+0xec/0x1a0 [ 61.179940][ T4405] register_netdevice+0x1370/0x16b0 [ 61.185136][ T4405] register_netdev+0x37/0x50 [ 61.189702][ T4405] ip6gre_init_net+0x21f/0x2f0 [ 61.194444][ T4405] ops_init+0x357/0x600 [ 61.198576][ T4405] setup_net+0x38d/0x9f0 [ 61.202796][ T4405] copy_net_ns+0x348/0x5b0 [ 61.207188][ T4405] create_new_namespaces+0x3d3/0x6f0 [ 61.212450][ T4405] page last free stack trace: [ 61.217096][ T4405] free_unref_page_prepare+0x637/0x6c0 [ 61.222537][ T4405] free_unref_page+0x94/0x280 [ 61.227190][ T4405] qlist_free_all+0x35/0x90 [ 61.231672][ T4405] kasan_quarantine_reduce+0x150/0x160 [ 61.237110][ T4405] __kasan_slab_alloc+0x2f/0xd0 [ 61.241941][ T4405] slab_post_alloc_hook+0x4c/0x380 [ 61.247031][ T4405] kmem_cache_alloc_trace+0x103/0x2a0 [ 61.252391][ T4405] kset_create_and_add+0x56/0x160 [ 61.257411][ T4405] netdev_register_kobject+0x1a0/0x310 [ 61.262863][ T4405] register_netdevice+0x1019/0x16b0 [ 61.268052][ T4405] register_netdev+0x37/0x50 [ 61.272627][ T4405] ip6gre_init_net+0x21f/0x2f0 [ 61.277373][ T4405] ops_init+0x357/0x600 [ 61.281506][ T4405] setup_net+0x38d/0x9f0 [ 61.285727][ T4405] copy_net_ns+0x348/0x5b0 [ 61.290139][ T4405] create_new_namespaces+0x3d3/0x6f0 [ 61.295424][ T4405] [ 61.297733][ T4405] Memory state around the buggy address: [ 61.303346][ T4405] ffff88807c9af500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 61.311392][ T4405] ffff88807c9af580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 61.319438][ T4405] >ffff88807c9af600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 61.327475][ T4405] ^ [ 61.331522][ T4405] ffff88807c9af680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 61.339566][ T4405] ffff88807c9af700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 61.347605][ T4405] ================================================================== [ 61.355643][ T4405] Disabling lock debugging due to kernel taint [ 61.361938][ T4405] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 61.369218][ T4405] CPU: 0 PID: 4405 Comm: syz.2.30 Tainted: G B syzkaller #0 [ 61.377887][ T4405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 61.387945][ T4405] Call Trace: [ 61.388087][ T4363] syz.3.19 (4363) used greatest stack depth: 20096 bytes left [ 61.391215][ T4405] [ 61.391222][ T4405] dump_stack_lvl+0x168/0x230 [ 61.391245][ T4405] ? show_regs_print_info+0x20/0x20 [ 61.391260][ T4405] ? load_image+0x3b0/0x3b0 [ 61.415929][ T4405] panic+0x2c9/0x7f0 [ 61.419828][ T4405] ? bpf_jit_dump+0xd0/0xd0 [ 61.424369][ T4405] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 61.430266][ T4405] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 61.436164][ T4405] ? _raw_spin_unlock+0x40/0x40 [ 61.441017][ T4405] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 61.447517][ T4405] check_panic_on_warn+0x80/0xa0 [ 61.452504][ T4405] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 61.459008][ T4405] end_report+0x6d/0xf0 [ 61.463163][ T4405] kasan_report+0x102/0x130 [ 61.467671][ T4405] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 61.474169][ T4405] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 61.480499][ T4405] xfrm_policy_inexact_insert_node+0x599/0xb60 [ 61.486655][ T4405] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 61.492811][ T4405] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 61.498708][ T4405] xfrm_policy_inexact_insert+0xe0/0x1460 [ 61.504431][ T4405] ? __get_hash_thresh+0x105/0x410 [ 61.509547][ T4405] ? policy_hash_bysel+0x10a/0x570 [ 61.514660][ T4405] xfrm_policy_insert+0x112/0x930 [ 61.519678][ T4405] xfrm_add_policy+0x4d6/0x860 [ 61.524431][ T4405] ? xfrm_dump_sa_done+0xc0/0xc0 [ 61.529350][ T4405] ? apparmor_capable+0x12c/0x190 [ 61.534357][ T4405] ? __nla_parse+0x3c/0x50 [ 61.538754][ T4405] xfrm_user_rcv_msg+0x58d/0x860 [ 61.543676][ T4405] ? xfrm_netlink_rcv+0x90/0x90 [ 61.548513][ T4405] ? xfrm_netlink_rcv+0x66/0x90 [ 61.553343][ T4405] ? xfrm_netlink_rcv+0x66/0x90 [ 61.558173][ T4405] ? xfrm_netlink_rcv+0x66/0x90 [ 61.563000][ T4405] ? __mutex_lock_common+0x431/0x2390 [ 61.568353][ T4405] ? __copy_skb_header+0x417/0x5a0 [ 61.573460][ T4405] ? __skb_clone+0x480/0x790 [ 61.578118][ T4405] netlink_rcv_skb+0x1e0/0x430 [ 61.582866][ T4405] ? xfrm_netlink_rcv+0x90/0x90 [ 61.587703][ T4405] ? netlink_ack+0xb60/0xb60 [ 61.592272][ T4405] ? __lock_acquire+0x7c60/0x7c60 [ 61.597281][ T4405] xfrm_netlink_rcv+0x75/0x90 [ 61.601963][ T4405] netlink_unicast+0x774/0x920 [ 61.606710][ T4405] netlink_sendmsg+0x8ab/0xbc0 [ 61.611455][ T4405] ? netlink_getsockopt+0x560/0x560 [ 61.616633][ T4405] ? aa_sock_msg_perm+0x94/0x150 [ 61.621549][ T4405] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 61.626813][ T4405] ? security_socket_sendmsg+0x7c/0xa0 [ 61.632249][ T4405] ? netlink_getsockopt+0x560/0x560 [ 61.637425][ T4405] ____sys_sendmsg+0x5a2/0x8c0 [ 61.642186][ T4405] ? memset+0x1e/0x40 [ 61.646149][ T4405] ? __sys_sendmsg_sock+0x30/0x30 [ 61.651154][ T4405] ? import_iovec+0x6f/0xa0 [ 61.655637][ T4405] ___sys_sendmsg+0x1f0/0x260 [ 61.660293][ T4405] ? __sys_sendmsg+0x250/0x250 [ 61.665039][ T4405] ? sock_setsockopt+0x1502/0x2270 [ 61.670130][ T4405] ? __fdget+0x18b/0x210 [ 61.674351][ T4405] __se_sys_sendmsg+0x190/0x250 [ 61.679180][ T4405] ? __x64_sys_sendmsg+0x80/0x80 [ 61.684092][ T4405] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 61.690056][ T4405] ? lockdep_hardirqs_on+0x94/0x140 [ 61.695232][ T4405] do_syscall_64+0x4c/0xa0 [ 61.699664][ T4405] ? clear_bhb_loop+0x30/0x80 [ 61.704322][ T4405] ? clear_bhb_loop+0x30/0x80 [ 61.708984][ T4405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.714887][ T4405] RIP: 0033:0x7fdb9a56cba9 [ 61.719283][ T4405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.738865][ T4405] RSP: 002b:00007fdb987d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.747259][ T4405] RAX: ffffffffffffffda RBX: 00007fdb9a7b3fa0 RCX: 00007fdb9a56cba9 [ 61.755211][ T4405] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 61.763160][ T4405] RBP: 00007fdb9a5efe19 R08: 0000000000000000 R09: 0000000000000000 [ 61.771107][ T4405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.779055][ T4405] R13: 00007fdb9a7b4038 R14: 00007fdb9a7b3fa0 R15: 00007ffc551cb138 [ 61.787009][ T4405] [ 61.790214][ T4405] Kernel Offset: disabled [ 61.794526][ T4405] Rebooting in 86400 seconds..