last executing test programs: 1.121829819s ago: executing program 1 (id=181): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) 1.052768155s ago: executing program 0 (id=184): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@errors_remount}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf5", 0x2) sendfile(r1, r0, 0x0, 0x3ffff) 1.052516975s ago: executing program 1 (id=185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x1008}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 1.024651587s ago: executing program 1 (id=189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="280000001c0001"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 973.594331ms ago: executing program 4 (id=190): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 972.548551ms ago: executing program 4 (id=193): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000003000000000000000000050018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r5}, 0x18) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffe, r6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000006c0)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r10}]}, 0x40}}, 0x4000000) 965.034092ms ago: executing program 4 (id=194): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) 934.759245ms ago: executing program 0 (id=195): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000480)=0x74d, 0x4) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000140)=0x3, 0x20) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="05000000010000000900000002"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d58bbeb4b205046db3e16c598c6104821a64f85", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) connect$tipc(r1, &(0x7f0000000000)=@id={0x1e, 0x2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESDEC=r4], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0xfffffffffffff001}, 0x18) socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r10, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="000202"], 0x18) getsockopt$inet_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000040)=""/41, &(0x7f00000000c0)=0x29) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x41, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 889.203498ms ago: executing program 4 (id=197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x200000, 0x0, 0x57b2}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x78}}, 0x0) 888.966058ms ago: executing program 1 (id=198): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0xfd}]}}}}}}}, 0x0) 843.116282ms ago: executing program 4 (id=199): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xc9a}], 0x2, 0x0, 0x0) 823.060504ms ago: executing program 4 (id=200): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) sysinfo(&(0x7f0000000540)=""/145) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000f8308c000000000005000400000000000080000000f60000000006bd50132b5fa2690039d973dac42ef1055d333b507d21ca6f916505993cf5cb542492ed21813c"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x16, 0x0, 0x4, 0x10000001, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}}, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=l']) 588.478633ms ago: executing program 3 (id=209): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, 0x0, 0x0) r4 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c4, 0x8, 0x0, 0x1000168}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) 533.975687ms ago: executing program 3 (id=211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 285.894687ms ago: executing program 3 (id=213): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000380)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) 213.519733ms ago: executing program 3 (id=215): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000230000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r4}, 0x18) 213.315513ms ago: executing program 2 (id=216): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) 213.078573ms ago: executing program 2 (id=217): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) open(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x802, 0xa) 212.772453ms ago: executing program 2 (id=218): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000003000000000000000000050018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r5}, 0x18) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffe, r6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000006c0)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r10}]}, 0x40}}, 0x4000000) 204.268054ms ago: executing program 3 (id=219): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 180.428676ms ago: executing program 2 (id=220): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000014c0)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 113.623831ms ago: executing program 2 (id=221): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000cc0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd147, 0x0, 0x0, 0x288}, &(0x7f0000000800)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x30}}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) 113.174761ms ago: executing program 0 (id=222): r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0)) add_key$keyring(&(0x7f00000002c0), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, r0) 110.033011ms ago: executing program 0 (id=223): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000040008500000007"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010024bd7000fedbdf2501000000050002000a00000014000700fe"], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) 94.429073ms ago: executing program 0 (id=224): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) unshare(0x2040400) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, 0x0) 74.512064ms ago: executing program 2 (id=225): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x20000, 0x0, [0x2, 0x5, 0x1, 0x6, 0x2571], [0x2, 0x53c3, 0x643, 0xd8d3, 0x6ed, 0x5, 0x618bcadd, 0x6, 0x9ff, 0xffffffffffff7c64, 0x8d13, 0x5, 0x5, 0xfff, 0x7, 0x1, 0x1, 0x3, 0x7, 0x296f, 0x2, 0x7fffffffffffffff, 0x9, 0x4fe, 0x5, 0x10001, 0x9, 0x101, 0x2, 0x10001, 0x100000000, 0x5, 0x0, 0x8, 0x0, 0x3c, 0x3adc, 0x1f8835cb, 0x1, 0x5, 0xffffffffffffffff, 0x3, 0x0, 0xa, 0x2, 0x3, 0x4, 0x5, 0x2, 0x9e, 0xf, 0xfffffffffffffff8, 0x3ff, 0x6, 0xffffffffffffff72, 0xf, 0x8, 0x0, 0x0, 0x6, 0xee, 0x8, 0x370f0236, 0x7ff, 0x6, 0xffffffffffffffff, 0x401, 0x3, 0x0, 0x4, 0x0, 0x1, 0x4, 0x8b5, 0x81, 0x4, 0x60000000000, 0x3, 0x0, 0x8, 0xc, 0x6, 0x7, 0x6, 0xa8e, 0x4, 0x7, 0x4, 0x221a, 0x5, 0x225, 0x5, 0x5, 0xfffffffffffffffa, 0xfffffffffffffffd, 0x81, 0x81, 0x100000000, 0x4, 0x200, 0x5, 0x2, 0x5, 0xff, 0xa, 0x7, 0x2, 0x0, 0x80000001, 0x8, 0x9, 0x4, 0xffffffffffffffff, 0x5, 0x81, 0xffffffffffffffff, 0x7, 0x7, 0xb, 0x92f, 0x100000000]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) semtimedop(0x0, 0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000180)=[{0x2, 0x2, 0x800}, {0x3, 0x5, 0x3000}], 0x2) semop(0x0, &(0x7f00000002c0)=[{0x1, 0xce95, 0x800}, {0x1, 0x5}], 0x2) 17.661499ms ago: executing program 1 (id=226): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x819, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000200)="b6aa898e0a6365893864240a5db0d2419abe41a5759a427d5c8006c2f80b96b7a3b439d3c2", 0x25, 0x805, 0x0, 0x0) 17.385599ms ago: executing program 0 (id=227): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r2, &(0x7f00000019c0)=""/4097, 0x1001) 17.079529ms ago: executing program 3 (id=228): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) set_robust_list(&(0x7f00000003c0)={0x0, 0xfffffffffffffff7}, 0x18) 0s ago: executing program 1 (id=229): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x10000e0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}}}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. [ 31.591715][ T4033] cgroup: Unknown subsys name 'net' [ 31.829560][ T4033] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.088155][ T4033] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 33.450931][ T4050] chnl_net:caif_netlink_parms(): no params data found [ 33.495762][ T4044] chnl_net:caif_netlink_parms(): no params data found [ 33.500995][ T4047] chnl_net:caif_netlink_parms(): no params data found [ 33.511197][ T4051] chnl_net:caif_netlink_parms(): no params data found [ 33.527628][ T4043] chnl_net:caif_netlink_parms(): no params data found [ 33.543527][ T4050] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.544728][ T4050] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.546773][ T4050] device bridge_slave_0 entered promiscuous mode [ 33.549086][ T4050] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.550250][ T4050] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.551837][ T4050] device bridge_slave_1 entered promiscuous mode [ 33.565916][ T4047] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.569473][ T4047] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.570953][ T4047] device bridge_slave_0 entered promiscuous mode [ 33.583093][ T4047] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.584195][ T4047] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.585614][ T4047] device bridge_slave_1 entered promiscuous mode [ 33.603731][ T4050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.612949][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.614033][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.615554][ T4044] device bridge_slave_0 entered promiscuous mode [ 33.620943][ T4050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.625677][ T4051] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.630114][ T4051] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.631730][ T4051] device bridge_slave_0 entered promiscuous mode [ 33.633388][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.634608][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.636191][ T4044] device bridge_slave_1 entered promiscuous mode [ 33.638994][ T4047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.646450][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.647674][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.649231][ T4043] device bridge_slave_0 entered promiscuous mode [ 33.650955][ T4051] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.652066][ T4051] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.653654][ T4051] device bridge_slave_1 entered promiscuous mode [ 33.658644][ T4047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.661341][ T4050] team0: Port device team_slave_0 added [ 33.663129][ T4050] team0: Port device team_slave_1 added [ 33.664169][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.665283][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.667044][ T4043] device bridge_slave_1 entered promiscuous mode [ 33.689628][ T4044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.692272][ T4051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.699876][ T4050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.700971][ T4050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.704825][ T4050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.710822][ T4044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.713153][ T4051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.715451][ T4047] team0: Port device team_slave_0 added [ 33.720460][ T4043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.722131][ T4050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.723242][ T4050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.730500][ T4050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.735639][ T4047] team0: Port device team_slave_1 added [ 33.740759][ T4051] team0: Port device team_slave_0 added [ 33.742611][ T4043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.749934][ T4044] team0: Port device team_slave_0 added [ 33.754713][ T4051] team0: Port device team_slave_1 added [ 33.760064][ T4044] team0: Port device team_slave_1 added [ 33.781521][ T4043] team0: Port device team_slave_0 added [ 33.782743][ T4047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.783930][ T4047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.788431][ T4047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.790653][ T4051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.791769][ T4051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.795823][ T4051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.798442][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.799526][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.803619][ T4044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.805791][ T4051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.807006][ T4051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.811344][ T4051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.817310][ T4043] team0: Port device team_slave_1 added [ 33.818479][ T4047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.819533][ T4047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.823638][ T4047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.829036][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.830160][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.834230][ T4044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.897607][ T4050] device hsr_slave_0 entered promiscuous mode [ 33.946505][ T4050] device hsr_slave_1 entered promiscuous mode [ 33.992406][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.993587][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.998049][ T4043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.000593][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.001662][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.005985][ T4043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.087342][ T4051] device hsr_slave_0 entered promiscuous mode [ 34.136650][ T4051] device hsr_slave_1 entered promiscuous mode [ 34.176419][ T4051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.177701][ T4051] Cannot create hsr debugfs directory [ 34.217395][ T4044] device hsr_slave_0 entered promiscuous mode [ 34.246515][ T4044] device hsr_slave_1 entered promiscuous mode [ 34.286445][ T4044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.287785][ T4044] Cannot create hsr debugfs directory [ 34.347389][ T4047] device hsr_slave_0 entered promiscuous mode [ 34.386546][ T4047] device hsr_slave_1 entered promiscuous mode [ 34.426416][ T4047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.427714][ T4047] Cannot create hsr debugfs directory [ 34.490206][ T4043] device hsr_slave_0 entered promiscuous mode [ 34.526575][ T4043] device hsr_slave_1 entered promiscuous mode [ 34.566360][ T4043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.567573][ T4043] Cannot create hsr debugfs directory [ 34.685528][ T4050] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.747720][ T4050] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.789467][ T4050] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.838028][ T4050] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.911538][ T4051] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.947375][ T4051] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.001897][ T4051] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.037422][ T4051] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.105264][ T4044] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.146098][ T4044] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.188652][ T4050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.192816][ T4043] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.227576][ T4044] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.269373][ T4044] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.307609][ T4043] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.352263][ T4043] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.356673][ T4091] Bluetooth: hci2: command 0x0409 tx timeout [ 35.357726][ T4091] Bluetooth: hci1: command 0x0409 tx timeout [ 35.358700][ T4091] Bluetooth: hci0: command 0x0409 tx timeout [ 35.359723][ T4091] Bluetooth: hci3: command 0x0409 tx timeout [ 35.360705][ T4091] Bluetooth: hci4: command 0x0409 tx timeout [ 35.395991][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.398008][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.400100][ T4050] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.402980][ T4043] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.431805][ T4047] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.479786][ T4047] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.527724][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.529382][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.531068][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.532252][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.533856][ T4047] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.567369][ T4047] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.621539][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.625319][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.627056][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.628487][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.629618][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.658380][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.665416][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.672397][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.674214][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.675782][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.677942][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.679587][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.691862][ T4044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.696076][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.698197][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.701377][ T4051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.706058][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.707878][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.713183][ T4050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.721757][ T4043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.723492][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.725059][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.730960][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.732376][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.734841][ T4051] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.740954][ T4044] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.745884][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.747732][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.749209][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.750243][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.751543][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.755778][ T4043] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.760597][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.762322][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.763803][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.764854][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.768125][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.769686][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.771105][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.772657][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.774222][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.775421][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.783993][ T4050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.792347][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.793737][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.795196][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.798500][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.799728][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.801195][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.802738][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.804454][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.805768][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.807575][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.809205][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.810763][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.812253][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.813879][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.815367][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.819450][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.820949][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.822589][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.824092][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.825234][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.830757][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.834855][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.837089][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.838601][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.843533][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.845039][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.846958][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.848068][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.849571][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.859969][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.861826][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.863463][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.865124][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.867626][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.869373][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.871587][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.874241][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.875821][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.882845][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.890588][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.892392][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.893958][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.895757][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.901220][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.910144][ T4051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.912240][ T4051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.921645][ T4047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.923188][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.924734][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.926262][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.928535][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.930209][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.931650][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.933345][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.935296][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.939618][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.941077][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.948338][ T4050] device veth0_vlan entered promiscuous mode [ 35.951975][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.953617][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.960486][ T4050] device veth1_vlan entered promiscuous mode [ 35.963323][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.979346][ T4050] device veth0_macvtap entered promiscuous mode [ 35.980843][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.982279][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.983702][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.985377][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.988023][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.989685][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.991123][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.993792][ T4047] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.999953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.001609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.003057][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.004121][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.016045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.017913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.019479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.020839][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.021929][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.023409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.024620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.027304][ T4050] device veth1_macvtap entered promiscuous mode [ 36.031464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.032943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.038187][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.044223][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.059927][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.061188][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.062883][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.070143][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.071990][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.073559][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.074828][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.076144][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.083864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.085650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.088879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.090358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.094034][ T4051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.097943][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.099218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.100812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.102399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.103806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.111985][ T4043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.114893][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.118763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.120386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.121906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.123064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.133041][ T4050] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.134596][ T4050] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.135972][ T4050] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.138437][ T4050] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.145525][ T4044] device veth0_vlan entered promiscuous mode [ 36.149451][ T4044] device veth1_vlan entered promiscuous mode [ 36.153422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.154960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.162088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.163632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.165037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.202122][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.203777][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.205325][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.213039][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.214561][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.224742][ T4044] device veth0_macvtap entered promiscuous mode [ 36.228909][ T4044] device veth1_macvtap entered promiscuous mode [ 36.245119][ T348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.247204][ T348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.252602][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.254155][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.255607][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.257405][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.258911][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.260531][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.261994][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.271582][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.273184][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.275088][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.277743][ T4051] device veth0_vlan entered promiscuous mode [ 36.278986][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.280531][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.282083][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.283609][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.297521][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.298792][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.300071][ T416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.301255][ T416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.301816][ T4051] device veth1_vlan entered promiscuous mode [ 36.304355][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.305970][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.308864][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.310102][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.311612][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.313008][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.314613][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.322420][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.323916][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.325324][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.328230][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.329551][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.331055][ T4043] device veth0_vlan entered promiscuous mode [ 36.334906][ T4047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.338982][ T4043] device veth1_vlan entered promiscuous mode [ 36.341290][ T4044] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.342508][ T4044] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.343818][ T4044] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.345102][ T4044] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.382345][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.383910][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.385371][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.388208][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.393168][ T4051] device veth0_macvtap entered promiscuous mode [ 36.398980][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.400572][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.402017][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.421960][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.423578][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.433748][ T4051] device veth1_macvtap entered promiscuous mode [ 36.447055][ T4043] device veth0_macvtap entered promiscuous mode [ 36.450521][ T4159] loop2: detected capacity change from 0 to 512 [ 36.453197][ T4043] device veth1_macvtap entered promiscuous mode [ 36.460615][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.462394][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.463893][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.465318][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.468111][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.469000][ T4159] ======================================================= [ 36.469000][ T4159] WARNING: The mand mount option has been deprecated and [ 36.469000][ T4159] and is ignored by this kernel. Remove the mand [ 36.469000][ T4159] option from the mount to silence this warning. [ 36.469000][ T4159] ======================================================= [ 36.478156][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.479677][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.487984][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.489685][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.491369][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.492062][ T4159] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.7: iget: bad extended attribute block 1 [ 36.493064][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.495946][ T4159] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.7: couldn't read orphan inode 15 (err -117) [ 36.500606][ T4051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.502123][ T4047] device veth0_vlan entered promiscuous mode [ 36.505722][ T4159] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000008,nodiscard,,errors=continue. Quota mode: none. [ 36.509822][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.511496][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.515474][ T348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.516846][ T348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.518837][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.525091][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.527653][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.529301][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.532429][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.534016][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.535707][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.539918][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.541191][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.542726][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.545509][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.547719][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.549308][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.550971][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.552984][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.560700][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.562354][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.563993][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.565510][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.567468][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.569130][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.571261][ T4051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.573152][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.574837][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.585571][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.587436][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.592583][ T4043] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.593999][ T4043] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.595439][ T4043] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.601204][ T4043] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.607321][ T4047] device veth1_vlan entered promiscuous mode [ 36.622975][ T416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.624284][ T416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.636198][ T4051] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.638075][ T4051] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.639441][ T4051] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.640936][ T4051] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.643796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.645396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.650123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.653613][ T4166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9'. [ 36.655028][ T4166] netlink: 196 bytes leftover after parsing attributes in process `syz.2.9'. [ 36.658092][ T4166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9'. [ 36.659571][ T4166] netlink: 196 bytes leftover after parsing attributes in process `syz.2.9'. [ 36.684353][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.686132][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.693868][ T4047] device veth0_macvtap entered promiscuous mode [ 36.708659][ T4047] device veth1_macvtap entered promiscuous mode [ 36.734414][ T1607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.735824][ T1607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.741074][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.742778][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.749938][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.751757][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.753441][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.755212][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.758259][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.759895][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.762134][ T4047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.764896][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.767250][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.768916][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.770322][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.771950][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.785022][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.790588][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.792390][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.794095][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.795633][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.800214][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.801655][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.803254][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.805404][ T4047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.810381][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.812046][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.815020][ T1607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.816201][ T1607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.835485][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.884357][ T4047] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.885843][ T4047] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.888305][ T4047] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.890498][ T4047] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.894393][ T4184] netlink: 'syz.1.16': attribute type 7 has an invalid length. [ 36.901116][ T1607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.902398][ T1607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.903874][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.947981][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.953120][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.971863][ T1607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.975491][ T4190] netlink: 14 bytes leftover after parsing attributes in process `syz.1.19'. [ 36.983020][ T4190] device hsr_slave_0 left promiscuous mode [ 37.017148][ T4190] device hsr_slave_1 left promiscuous mode [ 37.196916][ T416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.198246][ T416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.219966][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.222527][ T416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.223951][ T416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.225894][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.299899][ T26] audit: type=1326 audit(37.290:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4217 comm="syz.4.29" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac0a60a8 code=0x0 [ 37.307412][ T26] audit: type=1326 audit(37.300:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4218 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa38870a8 code=0x7ffc0000 [ 37.312747][ T26] audit: type=1326 audit(37.300:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4218 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=48 compat=0 ip=0xffffa38870a8 code=0x7ffc0000 [ 37.322193][ T26] audit: type=1326 audit(37.300:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4218 comm="syz.3.28" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa38870a8 code=0x7ffc0000 [ 37.355006][ T4227] loop3: detected capacity change from 0 to 512 [ 37.421807][ T4227] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.32: bg 0: block 248: padding at end of block bitmap is not set [ 37.425707][ T4227] Quota error (device loop3): write_blk: dquota write failed [ 37.439002][ T4227] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 37.441835][ T4227] EXT4-fs error (device loop3): ext4_acquire_dquot:6207: comm syz.3.32: Failed to acquire dquot type 1 [ 37.449095][ T4108] Bluetooth: hci4: command 0x041b tx timeout [ 37.449635][ T4227] EXT4-fs (loop3): 1 truncate cleaned up [ 37.450464][ T4108] Bluetooth: hci3: command 0x041b tx timeout [ 37.451270][ T4227] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 37.452252][ T4108] Bluetooth: hci0: command 0x041b tx timeout [ 37.455143][ T4108] Bluetooth: hci1: command 0x041b tx timeout [ 37.456229][ T4108] Bluetooth: hci2: command 0x041b tx timeout [ 37.628389][ T26] audit: type=1326 audit(37.620:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4245 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa38870a8 code=0x7ffc0000 [ 37.634195][ T26] audit: type=1326 audit(37.620:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4245 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=228 compat=0 ip=0xffffa38870a8 code=0x7ffc0000 [ 37.669047][ T26] audit: type=1326 audit(37.660:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4245 comm="syz.3.39" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa38870a8 code=0x7ffc0000 [ 37.726815][ T4250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.41'. [ 37.728327][ T4250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.41'. [ 37.846579][ T4256] loop3: detected capacity change from 0 to 1024 [ 37.906138][ T4256] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.081695][ T4278] tipc: Started in network mode [ 38.082628][ T4278] tipc: Node identity 2a7d82644d1d, cluster identity 4711 [ 38.083847][ T4278] tipc: Enabled bearer , priority 0 [ 38.089314][ T4278] tipc: Disabling bearer [ 38.840384][ T4308] tmpfs: Bad value for 'mpol' [ 38.843094][ T4306] loop0: detected capacity change from 0 to 512 [ 38.850094][ T4306] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.855341][ T4306] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.889528][ T4306] EXT4-fs (loop0): 1 truncate cleaned up [ 38.890482][ T4306] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 38.894643][ T4306] EXT4-fs error (device loop0): ext4_ext_precache:608: inode #15: comm syz.0.64: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 38.903387][ T26] audit: type=1326 audit(38.890:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4315 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa38870a8 code=0x7ffc0000 [ 38.975672][ T4327] loop2: detected capacity change from 0 to 512 [ 39.046564][ T4327] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.75: inode #1: comm syz.2.75: iget: illegal inode # [ 39.052235][ T4327] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.75: error while reading EA inode 1 err=-117 [ 39.054593][ T4327] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.057236][ T4327] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.75: inode #1: comm syz.2.75: iget: illegal inode # [ 39.059772][ T4327] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.75: error while reading EA inode 1 err=-117 [ 39.062065][ T4327] EXT4-fs (loop2): 1 orphan inode deleted [ 39.062994][ T4327] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 39.101002][ T4340] loop0: detected capacity change from 0 to 764 [ 39.218973][ T4352] loop2: detected capacity change from 0 to 512 [ 39.290182][ T4352] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 39.518309][ T4379] process 'syz.3.96' launched './file0' with NULL argv: empty string added [ 39.530267][ T4105] Bluetooth: hci2: command 0x040f tx timeout [ 39.531678][ T4105] Bluetooth: hci1: command 0x040f tx timeout [ 39.533117][ T4105] Bluetooth: hci0: command 0x040f tx timeout [ 39.535086][ T4105] Bluetooth: hci3: command 0x040f tx timeout [ 39.536704][ T4105] Bluetooth: hci4: command 0x040f tx timeout [ 39.542792][ T4378] loop4: detected capacity change from 0 to 512 [ 39.553884][ T4382] loop3: detected capacity change from 0 to 2048 [ 39.585811][ T4378] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.95: corrupted in-inode xattr [ 39.595565][ T4196] loop3: p2 p3 p7 [ 39.595947][ T4378] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.95: couldn't read orphan inode 15 (err -117) [ 39.603670][ T4378] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 39.623824][ T4382] loop3: p2 p3 p7 [ 39.686011][ T4196] udevd[4196]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 39.690591][ T4037] udevd[4037]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 39.690742][ T4035] udevd[4035]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 39.710079][ T4196] udevd[4196]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 39.713616][ T4037] udevd[4037]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 39.718154][ T4035] udevd[4035]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 39.833101][ T4396] loop3: detected capacity change from 0 to 512 [ 39.891523][ T4396] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.104: bg 0: block 248: padding at end of block bitmap is not set [ 39.895302][ T4396] EXT4-fs error (device loop3): ext4_acquire_dquot:6207: comm syz.3.104: Failed to acquire dquot type 1 [ 39.910103][ T4396] EXT4-fs (loop3): 1 truncate cleaned up [ 39.917561][ T4396] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 39.951971][ T4406] netlink: 'syz.4.106': attribute type 4 has an invalid length. [ 40.121337][ T4415] loop4: detected capacity change from 0 to 512 [ 40.153675][ T4419] hub 6-0:1.0: USB hub found [ 40.154820][ T4419] hub 6-0:1.0: 8 ports detected [ 40.189497][ T4415] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 40.257943][ T4426] netlink: 60 bytes leftover after parsing attributes in process `syz.3.115'. [ 40.350940][ T4426] loop3: detected capacity change from 0 to 2048 [ 40.378696][ T4035] Alternate GPT is invalid, using primary GPT. [ 40.379778][ T4035] loop3: p1 p2 p3 [ 40.389067][ T4426] Alternate GPT is invalid, using primary GPT. [ 40.390211][ T4426] loop3: p1 p2 p3 [ 40.456564][ T4442] Zero length message leads to an empty skb [ 40.461076][ T4196] udevd[4196]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 40.461620][ T4035] udevd[4035]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 40.475233][ T4037] udevd[4037]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 40.515862][ T4196] udevd[4196]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 40.541488][ T4449] loop3: detected capacity change from 0 to 512 [ 40.544687][ T4449] EXT4-fs (loop3): Ignoring removed orlov option [ 40.545845][ T4449] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.559232][ T4449] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 40.564712][ T4449] EXT4-fs (loop3): 1 orphan inode deleted [ 40.574340][ T4449] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,noinit_itable,debug_want_extra_isize=0x0000000000000052,stripe=0x0000000000000008,orlov,grpid,,errors=continue. Quota mode: none. [ 40.642906][ T4462] 9pnet: Insufficient options for proto=fd [ 40.659027][ T4464] netlink: 14 bytes leftover after parsing attributes in process `syz.4.131'. [ 40.681590][ T4464] device hsr_slave_0 left promiscuous mode [ 40.706698][ T4464] device hsr_slave_1 left promiscuous mode [ 40.882829][ T4485] loop1: detected capacity change from 0 to 1024 [ 40.910899][ T4485] EXT4-fs (loop1): Ignoring removed nobh option [ 40.912231][ T4485] EXT4-fs (loop1): Ignoring removed bh option [ 40.913529][ T4485] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.920285][ T4493] loop2: detected capacity change from 0 to 164 [ 40.937259][ T4485] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 41.101885][ T4518] netlink: 'syz.0.155': attribute type 7 has an invalid length. [ 41.103124][ T4518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 41.231505][ T4483] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.140: Allocating blocks 497-513 which overlap fs metadata [ 41.236074][ T4483] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.140: Allocating blocks 497-513 which overlap fs metadata [ 41.392700][ T4544] loop2: detected capacity change from 0 to 512 [ 41.442936][ T4546] hub 9-0:1.0: USB hub found [ 41.444011][ T4546] hub 9-0:1.0: 8 ports detected [ 41.458694][ T4544] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,barrier=0x0000000000001003,errors=remount-ro,noauto_da_alloc,dioread_lock,. Quota mode: writeback. [ 41.471280][ T4544] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 41.596813][ T4265] Bluetooth: hci4: command 0x0419 tx timeout [ 41.598371][ T4265] Bluetooth: hci3: command 0x0419 tx timeout [ 41.599386][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 41.602180][ T4265] Bluetooth: hci2: command 0x0419 tx timeout [ 41.621107][ T4582] loop0: detected capacity change from 0 to 512 [ 41.689856][ T4582] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 41.691072][ T4582] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.703013][ T4591] __nla_validate_parse: 2 callbacks suppressed [ 41.703022][ T4591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'. [ 41.711335][ T4582] EXT4-fs (loop0): 1 truncate cleaned up [ 41.712253][ T4582] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nombcache,debug_want_extra_isize=0x0000000000000004,mblk_io_submit,resuid=0x0000000000000000,norecovery,. Quota mode: none. [ 41.745790][ T4603] netlink: 'syz.3.191': attribute type 10 has an invalid length. [ 41.773429][ T4603] team0: Device hsr_slave_0 failed to register rx_handler [ 41.874597][ T4611] device vlan2 entered promiscuous mode [ 41.883971][ T4611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'. [ 41.907128][ T4618] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received [ 41.941758][ T4621] tmpfs: Bad value for 'mpol' [ 42.009101][ T4623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 42.010560][ T4623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.202'. [ 42.012151][ T4623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 42.014047][ T4623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.202'. [ 42.015542][ T4623] netlink: 'syz.3.202': attribute type 6 has an invalid length. [ 42.184356][ T4640] loop2: detected capacity change from 0 to 512 [ 42.206088][ T4640] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.231660][ T4640] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.210: invalid indirect mapped block 4294967295 (level 0) [ 42.234687][ T4640] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.210: invalid indirect mapped block 4294967295 (level 1) [ 42.241397][ T4640] EXT4-fs (loop2): 1 orphan inode deleted [ 42.244710][ T4640] EXT4-fs (loop2): 1 truncate cleaned up [ 42.245643][ T4640] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.501841][ T4659] IPv4: Oversized IP packet from 127.202.26.0 [ 42.563882][ T4663] loop2: detected capacity change from 0 to 256 [ 42.680831][ T26] kauditd_printk_skb: 104 callbacks suppressed [ 42.680839][ T26] audit: type=1326 audit(42.670:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa38870a8 code=0x7ffc0000 [ 42.687749][ T26] audit: type=1326 audit(42.680:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=99 compat=0 ip=0xffffa38870a8 code=0x7ffc0000 [ 42.692641][ T4677] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 42.693878][ T4677] Modules linked in: [ 42.694510][ T4677] CPU: 1 PID: 4677 Comm: syz.3.228 Not tainted 5.15.189-syzkaller #0 [ 42.695868][ T4677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 42.697585][ T4677] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 42.698903][ T4677] pc : exit_robust_list+0x414/0x5f0 [ 42.699818][ T4677] lr : exit_robust_list+0x3f0/0x5f0 [ 42.700718][ T4677] sp : ffff80001ff27750 [ 42.701398][ T4677] x29: ffff80001ff27790 x28: dfff800000000000 x27: 00000000fffffff2 [ 42.702724][ T4677] x26: 0000000000000000 x25: 1fffe0001a2986d4 x24: 00000000200003c0 [ 42.704107][ T4677] x23: 0000000000000000 x22: 0000000000000000 x21: ffff0000d14c36a4 [ 42.705501][ T4677] x20: ffff0000d14c3680 x19: ffff0000d14c3680 x18: 0000000000000000 [ 42.706943][ T4677] x17: 0000000000000002 x16: ffff8000083c52c8 x15: 00000000fffffe00 [ 42.708334][ T4677] x14: 0000000000ff0100 x13: 1ffff0000282e06b x12: 0000000000ff0100 [ 42.709700][ T4677] x11: 0000000000000000 x10: 0000ffffffffffff x9 : 0000000000000000 [ 42.711096][ T4677] x8 : 0000000000000000 x7 : ffff800008750ed4 x6 : 0000000000000000 [ 42.712506][ T4677] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 42.713862][ T4677] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 [ 42.715247][ T4677] Call trace: [ 42.715829][ T4677] exit_robust_list+0x414/0x5f0 [ 42.716650][ T4677] futex_exit_release+0x124/0x1ac [ 42.717478][ T4677] exit_mm_release+0x24/0x40 [ 42.718240][ T4677] exit_mm+0xa4/0x684 [ 42.718926][ T4677] do_exit+0x4ec/0x1f58 [ 42.719641][ T4677] do_group_exit+0x100/0x268 [ 42.720439][ T4677] get_signal+0x73c/0x1340 [ 42.721145][ T4677] do_notify_resume+0x35c/0x3128 [ 42.721946][ T4677] el0_svc+0xf0/0x1e0 [ 42.722604][ T4677] el0t_64_sync_handler+0xcc/0xe4 [ 42.723392][ T4677] el0t_64_sync+0x1a0/0x1a4 [ 42.724138][ T4677] Code: d503229f 2a1703fb 2a1703e0 f840093a (2a1b03e1) [ 42.725156][ T4677] ---[ end trace 361040ce8a30ec4d ]--- [ 42.749473][ T26] audit: type=1326 audit(42.680:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa38870a8 code=0x7ffc0000 [ 42.777744][ T4614] syz.4.200 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 42.784293][ T4614] CPU: 0 PID: 4614 Comm: syz.4.200 Tainted: G D 5.15.189-syzkaller #0 [ 42.785737][ T4614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 42.787501][ T4614] Call trace: [ 42.788090][ T4614] dump_backtrace+0x0/0x43c [ 42.788890][ T4614] show_stack+0x2c/0x3c [ 42.789553][ T4614] __dump_stack+0x30/0x40 [ 42.790240][ T4614] dump_stack_lvl+0xf8/0x160 [ 42.790986][ T4614] dump_stack+0x1c/0x5c [ 42.791670][ T4614] dump_header+0xbc/0x6b0 [ 42.792384][ T4614] oom_kill_process+0x218/0x518 [ 42.793183][ T4614] out_of_memory+0xbc4/0xf0c [ 42.793900][ T4614] mem_cgroup_out_of_memory+0x210/0x2c8 [ 42.794791][ T4614] try_charge_memcg+0xdb0/0x11bc [ 42.795649][ T4614] charge_memcg+0xac/0x220 [ 42.796424][ T4614] __mem_cgroup_charge+0x38/0xb0 [ 42.797246][ T4614] wp_page_copy+0x24c/0x11ec [ 42.798043][ T4614] do_wp_page+0x6c0/0x994 [ 42.798756][ T4614] handle_mm_fault+0x1770/0x2950 [ 42.799603][ T4614] do_page_fault+0x694/0xad4 [ 42.800304][ T4614] do_mem_abort+0x6c/0x1ac [ 42.801074][ T4614] el0_da+0x90/0x1fc [ 42.801762][ T4614] el0t_64_sync_handler+0xd8/0xe4 [ 42.802595][ T4614] el0t_64_sync+0x1a0/0x1a4 [ 42.828024][ T4614] memory: usage 307200kB, limit 307200kB, failcnt 381 [ 42.830271][ T4614] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 42.833759][ T4614] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 42.836168][ T4614] Memory cgroup stats for /syz4: [ 42.836619][ T4614] anon 0 [ 42.836619][ T4614] file 28672 [ 42.836619][ T4614] kernel_stack 98304 [ 42.836619][ T4614] pagetables 131072 [ 42.836619][ T4614] percpu 72 [ 42.836619][ T4614] sock 0 [ 42.836619][ T4614] shmem 0 [ 42.836619][ T4614] file_mapped 0 [ 42.836619][ T4614] file_dirty 28672 [ 42.836619][ T4614] file_writeback 0 [ 42.836619][ T4614] swapcached 409600 [ 42.836619][ T4614] anon_thp 0 [ 42.836619][ T4614] file_thp 0 [ 42.836619][ T4614] shmem_thp 0 [ 42.836619][ T4614] inactive_anon 4096 [ 42.836619][ T4614] active_anon 0 [ 42.836619][ T4614] inactive_file 12288 [ 42.836619][ T4614] active_file 16384 [ 42.836619][ T4614] unevictable 0 [ 42.836619][ T4614] slab_reclaimable 324864 [ 42.836619][ T4614] slab_unreclaimable 1147096 [ 42.836619][ T4614] slab 1471960 [ 42.836619][ T4614] workingset_refault_anon 52 [ 42.836619][ T4614] workingset_refault_file 44 [ 42.836619][ T4614] workingset_activate_anon 2 [ 42.868236][ T4614] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.200,pid=4614,uid=0 [ 42.872979][ T4614] Memory cgroup out of memory: Killed process 4614 (syz.4.200) total-vm:101860kB, anon-rss:900kB, file-rss:22644kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 42.945247][ T4677] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 42.946298][ T4677] SMP: stopping secondary CPUs [ 42.946961][ T4677] Kernel Offset: disabled [ 42.947661][ T4677] CPU features: 0x8,000003c1,7d33ffd9 [ 42.948487][ T4677] Memory Limit: none [ 43.164085][ T4677] Rebooting in 86400 seconds..