last executing test programs: 1.503696427s ago: executing program 0 (id=6): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x10e, &(0x7f0000001cc0)={0x0, 0xf07d, 0x400, 0x40000, 0x101}, &(0x7f0000000400)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010ef5ef7e0ecc36f570000000500000a44000000090a016608b343d5467f5c5ebaca203a562632641a06b8e40400000000000000000a0000040900010073797a31020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a0101882258cd5474f7bb0a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001000000"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) setresuid(0xee00, 0xee00, 0x0) r6 = syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4000000000]}, 0x8, 0x0) sched_getscheduler(r6) 1.427998483s ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b000000050000000400000032a9000009"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 1.33229646s ago: executing program 0 (id=8): unshare(0x20060400) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.217113309s ago: executing program 0 (id=11): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) 1.194458321s ago: executing program 1 (id=13): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1e4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) setreuid(0x0, 0xee00) 1.089083428s ago: executing program 1 (id=15): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x7ff, 0x3a, '/dev/vcsa\x00', 0x3a, 'queue0\x00', 0x3a, './file0'}, 0x38) 1.079325489s ago: executing program 1 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x480, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file2\x00', &(0x7f0000000140), &(0x7f0000000280)=ANY=[], 0xfe37, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.074604899s ago: executing program 0 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2, 0x0, 0x3}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400251}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x33, 0x4000, @fd_index=0x1, 0x5, 0x0, 0x0, 0x2, 0x1, {0x2}}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[], 0x90) 989.115946ms ago: executing program 2 (id=18): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) setresuid(0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x441, 0x0) syz_open_pts(r2, 0x0) 988.891746ms ago: executing program 0 (id=19): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000240)={0x0, 0x0, 0x83, 0x7}) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 975.360457ms ago: executing program 2 (id=20): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000180), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8000002) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) 925.05954ms ago: executing program 2 (id=21): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095", @ANYRESHEX, @ANYRES64, @ANYRESDEC=r0, @ANYRES8=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) request_key(0x0, 0x0, 0x0, 0x0) syz_clone(0x38000, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300), 0xfc, 0x580, &(0x7f0000000f80)="$eJzs3UtrXFUcAPD/nUzS9KFJoRR1IYEurNROmsRHBRd1KVos6L4OyTSUTDolMylNLNgu7MaNFEHEgujOhXuXxS/gpyhooUgJunATuZM76bSZaV4zmdT5/eC259xzZ/7nzL3nzLmPIQH0rbH0n1zEyxHxdRIx0lSWj6xwbG27lUc3ptMlidXVT/5KIsnWNbZPsv8PZ5mXIuK3LyNO5TbGrS4tzxXL5dJClh+vzV8dry4tn748X5wtzZauTE5NnX1ravLdd97uWFtfv/DPdx/f++DsVydWvv3lwdE7SZyLI1lZczt24WZzZizGss9kMM49teFEB4LtJ0mvK8CODGT9fDDSMWAkBtZzLayO7HX1gC76Iu3WQJ9K9H/oU415QOPcvkPnwc+Nh++vnQBtbH9+7dpIDNfPhg6tJNn1kDXp+e5oB+KnMX798+6ddInOXYcA2NTNWxFxJp/fOP4l2fi3c2e2sM3TMbL4bS5AAZ10L53/vNFq/pNbn/9Ei/nP4RZ9dyfa9P8muQcdCNNWOv97r+X8d/2m1ehAlnuhPucbTC5dLpfSse3FiDgZgwfS/DPu53yWW7m/2q6wef6XLmn8xlwwq8eD/IEnXzNTrBV31egmD29FvNJy/pus7/+kxf5PP48LW4xxvHT31XZlm7d/XVduMa3+GPFay/2fPBH4Gfcnx+vHw3jjqNjo79vHf28Xfxvt74qHP2eJ9u0fTZrv11a3H+OH4X9L7cp2evwPJZ/W00PZuuvFWm1hImIo+Wjj+snHr23kG9unx//JE88e/1od/wfTjr3F9t8+drt50+Httb+70vbPtD/+Bzbu/+0n7n/4+fft4m9t/79ZT53M1mxl/NtqBXf7+QEAAAAAAMB+kouII5HkCuvpXK5QWHu+41gcypUr1dqpS5XFKzNR/63saAzmGne6R5qeh5jInodt5Cefyk9FxNGI+GbgYD1fmK6UZ3rdeAAAAAAAAAAAAAAAAAAAANgnDkcMt/r9f+qPgV7XDui6fK8rAPRM+/6flXTiLz0B+9KOv/+HO1sPYO+Z/0P/0v+hf+n/0L/0f+hf+j/0r+b+P9TDegB7bzvf/z+d72JFAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/hwvnz6bK68ujGdJqfuba0OFe5dnqmVJ0rzC9OF6YrC1cLs5XKbLlUmK7Mb/Z+5Url6sRkLF4fr5WqtfHq0vLF+crildrFy/PF2dLF0uCetAoAAAAAAAAAAAAAAAAAAACeL9Wl5bliuVxakJDYUSK/P6oh0ZwY2v379HpkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDH/gsAAP//3Kw5xQ==") listxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x100000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRES8=r4, @ANYBLOB="77efc5df4a331b7f393a46879e04edb058fed153bd15b3c20a9f165c3e536351ba20321880a8fdebc6cbe41bcae8ac9140ecf5de99f7490df5ad762dfc664b7ec19bba9c9864cd2e71d61b4c94c7c300572da3d5f46cf4b20ff21933842c84f88e08794ab8864e680867bbc74fc975ac0ec96cca6e7e1b5fa9c472866709f2bb450f5f18828a2e8898126c2e8d7992f46d9a2c1447", @ANYRES32=r3, @ANYRES64=r3, @ANYRESHEX=0x0, @ANYBLOB="4da54f61c8aec4c32fbbc16cb5d3bd477cd2a938aee2f0b39889b58a57259957", @ANYRES64=r4], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='xprtrdma_inline_thresh\x00', r5, 0x0, 0xffffbffffffffffc}, 0x9) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r6, &(0x7f0000000140)='./file0\x00', r6, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8400000010000304465f51bf525f2ce93eb2c653", @ANYRES32=0x0, @ANYBLOB="00030000000000005c0012800b00010062726964676500004c0002800c001f0001000000000000000500160001000000060027000e0000000500290000000000080004"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 873.095975ms ago: executing program 0 (id=22): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) socket$inet_tcp(0x2, 0x1, 0x0) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$isdn(0x22, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 872.859484ms ago: executing program 1 (id=23): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000300)={'batadv0\x00', &(0x7f00000002c0)=@ethtool_sset_info={0x37, 0xe701, 0x1ffffff7f}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0xffffff81, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TCSBRKP(r4, 0x5425, 0x5) syz_emit_ethernet(0x56, &(0x7f0000000440)=ANY=[@ANYRES64=r5], 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$inet6(r6, &(0x7f0000000400)={&(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty, 0x80}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000200)="2c76b1a42139e20de2ff292957270141c49c006afef4dd82cdf95f8aa13eb55ada300082748267c15951a0d9315de71cf29e9e79", 0x34}], 0x1, &(0x7f00000003c0)=[@tclass={{0x14, 0x29, 0x43, 0xe89}}], 0x18}, 0x8000) vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r7, &(0x7f0000000140)='./file0\x00', r7, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 825.032218ms ago: executing program 2 (id=24): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) listen(0xffffffffffffffff, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) 786.268931ms ago: executing program 2 (id=25): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 124.952091ms ago: executing program 4 (id=5): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x7ff4, 0x1000, 0x2, 0x3a2}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 115.518511ms ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004002c4e2d"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 45.031607ms ago: executing program 4 (id=26): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 44.770776ms ago: executing program 4 (id=27): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b000000000600147379"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) 44.654936ms ago: executing program 3 (id=28): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$rfkill(r0, 0x0, 0x0) 24.351008ms ago: executing program 4 (id=29): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x3, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlockall(0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3a42438, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES32, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}}, 0x0) 157.03µs ago: executing program 2 (id=30): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") 0s ago: executing program 1 (id=31): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @loopback}, 0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x8, 0x3}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts. [ 30.603423][ T4308] cgroup: Unknown subsys name 'net' [ 30.851767][ T4308] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.118288][ T4308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 31.825189][ T4322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.829503][ T4325] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.831266][ T4325] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.832831][ T4325] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.834078][ T4325] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.835662][ T4325] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.836847][ T4325] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.838753][ T4330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.840173][ T4330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.841444][ T4331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.843343][ T4330] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.843591][ T4331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.845231][ T4330] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.846268][ T4331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 31.847360][ T4333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.848625][ T4331] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.849077][ T4333] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 31.850037][ T4331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.851725][ T4333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.853556][ T4331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.853580][ T4333] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 31.858159][ T4333] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.860461][ T4333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.872584][ T4333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.874616][ T4322] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 31.875812][ T4322] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.877278][ T4333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.882806][ T4327] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.885527][ T4327] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 31.895822][ T4327] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.997304][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 32.011864][ T4323] chnl_net:caif_netlink_parms(): no params data found [ 32.016162][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 32.024456][ T4318] chnl_net:caif_netlink_parms(): no params data found [ 32.087055][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.088340][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.090000][ T4326] device bridge_slave_0 entered promiscuous mode [ 32.091915][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.093017][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.094518][ T4323] device bridge_slave_0 entered promiscuous mode [ 32.096001][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.097218][ T4318] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.098723][ T4318] device bridge_slave_0 entered promiscuous mode [ 32.102685][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.103824][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.105329][ T4319] device bridge_slave_0 entered promiscuous mode [ 32.107076][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.108138][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.109715][ T4319] device bridge_slave_1 entered promiscuous mode [ 32.111252][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.112344][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.113782][ T4326] device bridge_slave_1 entered promiscuous mode [ 32.115051][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.116203][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.117631][ T4323] device bridge_slave_1 entered promiscuous mode [ 32.119069][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.120360][ T4318] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.121744][ T4318] device bridge_slave_1 entered promiscuous mode [ 32.140957][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.143562][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.148873][ T4318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.151433][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.156567][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.158848][ T4323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.161265][ T4323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.163553][ T4318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.165165][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 32.184792][ T4319] team0: Port device team_slave_0 added [ 32.192576][ T4318] team0: Port device team_slave_0 added [ 32.194043][ T4319] team0: Port device team_slave_1 added [ 32.195855][ T4326] team0: Port device team_slave_0 added [ 32.197492][ T4323] team0: Port device team_slave_0 added [ 32.202371][ T4318] team0: Port device team_slave_1 added [ 32.207673][ T4323] team0: Port device team_slave_1 added [ 32.209244][ T4326] team0: Port device team_slave_1 added [ 32.228657][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.230058][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.233973][ T4323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.236396][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.237555][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.242874][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.247653][ T4318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.248757][ T4318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.253139][ T4318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.255140][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.256326][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.257759][ T4332] device bridge_slave_0 entered promiscuous mode [ 32.261432][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.262471][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.266407][ T4323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.268255][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.270053][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.271484][ T4332] device bridge_slave_1 entered promiscuous mode [ 32.272883][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.274008][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.277811][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.281532][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.282683][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.286689][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.288856][ T4318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.290160][ T4318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.294122][ T4318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.305028][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.306174][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.310514][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.350667][ T4323] device hsr_slave_0 entered promiscuous mode [ 32.389601][ T4323] device hsr_slave_1 entered promiscuous mode [ 32.437721][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.490513][ T4318] device hsr_slave_0 entered promiscuous mode [ 32.549552][ T4318] device hsr_slave_1 entered promiscuous mode [ 32.599445][ T4318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.600774][ T4318] Cannot create hsr debugfs directory [ 32.640337][ T4319] device hsr_slave_0 entered promiscuous mode [ 32.679582][ T4319] device hsr_slave_1 entered promiscuous mode [ 32.719382][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.720574][ T4319] Cannot create hsr debugfs directory [ 32.722195][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.737642][ T4332] team0: Port device team_slave_0 added [ 32.780383][ T4326] device hsr_slave_0 entered promiscuous mode [ 32.819639][ T4326] device hsr_slave_1 entered promiscuous mode [ 32.869445][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.870664][ T4326] Cannot create hsr debugfs directory [ 32.877849][ T4332] team0: Port device team_slave_1 added [ 32.904005][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.905209][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.909073][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.915499][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.916652][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.920639][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.020313][ T4332] device hsr_slave_0 entered promiscuous mode [ 33.079595][ T4332] device hsr_slave_1 entered promiscuous mode [ 33.129382][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.130673][ T4332] Cannot create hsr debugfs directory [ 33.186907][ T4323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.233059][ T4323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.263548][ T4323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.300507][ T4323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.365177][ T4326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.424775][ T4326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.461391][ T4319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.503166][ T4326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.551173][ T4326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.592435][ T4319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.630817][ T4319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.684102][ T4319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.734509][ T4318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.787120][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.788741][ T4318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.823956][ T4332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.860391][ T4318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.914387][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.917113][ T4332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.929915][ T4325] Bluetooth: hci3: command 0x0409 tx timeout [ 33.930869][ T4325] Bluetooth: hci4: command 0x0409 tx timeout [ 33.931816][ T4325] Bluetooth: hci2: command 0x0409 tx timeout [ 33.932468][ T4327] Bluetooth: hci0: command 0x0409 tx timeout [ 33.932744][ T4322] Bluetooth: hci1: command 0x0409 tx timeout [ 33.951206][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.953042][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.956197][ T4318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.992760][ T4332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.031057][ T4332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.070883][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.072476][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.074021][ T434] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.075224][ T434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.076928][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.083969][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.085761][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.087190][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.088263][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.098916][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.103425][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.105242][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.107080][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.114546][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.124053][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.125752][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.138591][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.146753][ T4323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.152307][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.153916][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.182575][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.185753][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.195464][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.196816][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.200363][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.204537][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.206078][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.207552][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.208774][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.211486][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.217328][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.218784][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.221379][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.222972][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.224620][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.225715][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.231189][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.237668][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.239275][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.242429][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.243669][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.244961][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.247688][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.252454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.253996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.255448][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.256555][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.266265][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.267999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.275755][ T4319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.277385][ T4319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.282263][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.285415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.287370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.288852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.290981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.292570][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.294014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.295832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.297482][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.298951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.303062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.305350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.313404][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.314660][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.318472][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.326412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.328073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.331793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.333408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.334938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.336519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.338003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.340315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.343022][ T4326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.344891][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.350496][ T4318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.354411][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.355634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.357102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.358532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.363937][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.365689][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.367099][ T434] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.368181][ T434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.370030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.381431][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.383087][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.384519][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.385548][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.386851][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.388417][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.400104][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.407456][ T4323] device veth0_vlan entered promiscuous mode [ 34.414739][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.416794][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.418229][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.419825][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.421735][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.423410][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.424872][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.428906][ T4318] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.437183][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.438991][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.441793][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.443391][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.444828][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.445930][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.447297][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.448755][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.451460][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.452633][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.453973][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.455201][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.457328][ T4323] device veth1_vlan entered promiscuous mode [ 34.462498][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.464001][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.465507][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.467065][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.468711][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.472023][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.475130][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.482897][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.484496][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.486064][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.491900][ T4332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.493902][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.496964][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.498497][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.500817][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.506291][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.512567][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.513800][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.515119][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.517114][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.518744][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.523956][ T4323] device veth0_macvtap entered promiscuous mode [ 34.535782][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.537501][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.538996][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.540976][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.543516][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.547438][ T4323] device veth1_macvtap entered promiscuous mode [ 34.551110][ T4319] device veth0_vlan entered promiscuous mode [ 34.552796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.554269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.555862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.557921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.559243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.561889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.563531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.570380][ T4319] device veth1_vlan entered promiscuous mode [ 34.576145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.577642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.579183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.582191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.591899][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.594394][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.600850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.602472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.604120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.605739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.611100][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.612745][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.614239][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.615642][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.618022][ T4323] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.620009][ T4323] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.621392][ T4323] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.622684][ T4323] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.627004][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.628533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.633485][ T4319] device veth0_macvtap entered promiscuous mode [ 34.635648][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.637038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.638477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.642857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.644451][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.645766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.654486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.655818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.659438][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.662968][ T4326] device veth0_vlan entered promiscuous mode [ 34.666139][ T4326] device veth1_vlan entered promiscuous mode [ 34.668704][ T4319] device veth1_macvtap entered promiscuous mode [ 34.702141][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.703811][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.706174][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.708374][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.710291][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.711681][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.713084][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.714606][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.716072][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.718132][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.726195][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.727884][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.742401][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.745989][ T4326] device veth0_macvtap entered promiscuous mode [ 34.748578][ T4326] device veth1_macvtap entered promiscuous mode [ 34.754030][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.755465][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.756870][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.758446][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.772367][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.774005][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.775549][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.777164][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.779264][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.782867][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.784512][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.786040][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.787520][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.790272][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.793083][ T4319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.794477][ T4319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.795899][ T4319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.797301][ T4319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.801614][ T4426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.802676][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.802912][ T4426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.804534][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.806823][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.808439][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.812136][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.814964][ T4326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.816348][ T4326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.817769][ T4326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.819143][ T4326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.837603][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.838976][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.842640][ T4318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.850387][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.851765][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.852582][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.854446][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.855935][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.884401][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.885964][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.887691][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.889100][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.902706][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.904465][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.913943][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.915255][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.916818][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.918986][ T4332] device veth0_vlan entered promiscuous mode [ 34.922778][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.924085][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.924928][ T4332] device veth1_vlan entered promiscuous mode [ 34.927108][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.930047][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.935883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.937482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.939036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.940709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.942579][ T4318] device veth0_vlan entered promiscuous mode [ 34.970784][ T4318] device veth1_vlan entered promiscuous mode [ 34.976910][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.978171][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.987480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.989045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.993788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.995256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.999876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.007189][ T4434] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6'. [ 35.009077][ T293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.010685][ T4332] device veth0_macvtap entered promiscuous mode [ 35.011849][ T293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.020382][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.021984][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.023472][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.025966][ T4332] device veth1_macvtap entered promiscuous mode [ 35.038972][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.041678][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.043247][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.047159][ T4318] device veth0_macvtap entered promiscuous mode [ 35.076566][ T4318] device veth1_macvtap entered promiscuous mode [ 35.102630][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.104358][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.105960][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.107560][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.109090][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.123468][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.126289][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.141987][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.143459][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.144826][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.146319][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.154623][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.156419][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.158958][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.161402][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.163120][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.164706][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.166364][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.168894][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.171916][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.175740][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.177381][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.190525][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.192433][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.193870][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.194841][ T4449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'. [ 35.195419][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.196985][ T4449] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 35.198249][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.201749][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.204235][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.207393][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.209039][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.219637][ T4332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.221101][ T4332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.222569][ T4332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.228658][ T4332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.232208][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.239965][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.243168][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.245528][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.247256][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.250451][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.252168][ T4452] netlink: 'syz.2.10': attribute type 11 has an invalid length. [ 35.253544][ T4452] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10'. [ 35.255159][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.260168][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.265310][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.271942][ T4318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.290606][ T4318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.292056][ T4318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.293385][ T4318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.316266][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.318025][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.324987][ T27] audit: type=1326 audit(35.310:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8035b9e8 code=0x7ffc0000 [ 35.328254][ T27] audit: type=1326 audit(35.310:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8035b9e8 code=0x7ffc0000 [ 35.357519][ T27] audit: type=1326 audit(35.320:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8035b9e8 code=0x7ffc0000 [ 35.371880][ T27] audit: type=1326 audit(35.320:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8035b9e8 code=0x7ffc0000 [ 35.375592][ T27] audit: type=1326 audit(35.320:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8035b9e8 code=0x7ffc0000 [ 35.380082][ T27] audit: type=1326 audit(35.320:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8035b9e8 code=0x7ffc0000 [ 35.383859][ T27] audit: type=1326 audit(35.320:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8035b9e8 code=0x7ffc0000 [ 35.387221][ T27] audit: type=1326 audit(35.320:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8035b9e8 code=0x7ffc0000 [ 35.409728][ T27] audit: type=1326 audit(35.320:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8035b9e8 code=0x7ffc0000 [ 35.415752][ T27] audit: type=1326 audit(35.320:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4458 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8035b9e8 code=0x7ffc0000 [ 35.462550][ T4467] loop1: detected capacity change from 0 to 2048 [ 35.477188][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.478539][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.485296][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.486922][ T434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.488164][ T434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.493529][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.508207][ T4426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.510163][ T4426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.512433][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.553334][ T4467] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 35.558266][ T4426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.560700][ T4426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.562585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.606482][ T4479] loop2: detected capacity change from 0 to 1024 [ 35.610349][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 35.639411][ T4479] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.655952][ T4479] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 35.677131][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 36.010364][ T4325] Bluetooth: hci1: command 0x041b tx timeout [ 36.011062][ T4333] Bluetooth: hci2: command 0x041b tx timeout [ 36.011478][ T4325] Bluetooth: hci0: command 0x041b tx timeout [ 36.012460][ T4333] Bluetooth: hci4: command 0x041b tx timeout [ 36.013350][ T4325] Bluetooth: hci3: command 0x041b tx timeout [ 36.289879][ T4481] team0 (unregistering): Port device team_slave_0 removed [ 36.295864][ T4481] team0 (unregistering): Port device team_slave_1 removed [ 36.434170][ T4499] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 36.521071][ T4507] ------------[ cut here ]------------ [ 36.522031][ T4507] WARNING: CPU: 0 PID: 4507 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x13c/0x16c [ 36.523652][ T4507] Modules linked in: [ 36.524299][ T4507] CPU: 0 PID: 4507 Comm: syz.4.29 Not tainted syzkaller #0 [ 36.525483][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 36.526986][ T4507] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 36.528237][ T4507] pc : taprio_get_start_time+0x13c/0x16c [ 36.529107][ T4507] lr : taprio_get_start_time+0x13c/0x16c [ 36.529950][ T4507] sp : ffff800020f76ba0 [ 36.530618][ T4507] x29: ffff800020f76ba0 x28: 0000000000000000 x27: ffff7000041eed94 [ 36.531785][ T4507] x26: ffff0000d325de00 x25: ffff0000df3be000 x24: dfff800000000000 [ 36.533103][ T4507] x23: 0000000000000001 x22: 000000088041d8b8 x21: 0000000000000000 [ 36.534366][ T4507] x20: 0000000000000000 x19: ffff800020f76c98 x18: ffff800011a5bd40 [ 36.535588][ T4507] x17: ffff800018184000 x16: ffff8000082d3a08 x15: ffff800017c65000 [ 36.536807][ T4507] x14: ffff0000df138a98 x13: 1ffff00002a0a0b1 x12: 0000000000080000 [ 36.537986][ T4507] x11: 00000000000059ba x10: ffff80002b996000 x9 : ffff80000ff8e2e4 [ 36.539214][ T4507] x8 : 00000000000059bb x7 : ffff80000ff8e23c x6 : 0000000000000000 [ 36.540381][ T4507] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 36.541568][ T4507] x2 : 0000000000000002 x1 : 0000000000000000 x0 : 0000000000000000 [ 36.542735][ T4507] Call trace: [ 36.543245][ T4507] taprio_get_start_time+0x13c/0x16c [ 36.544001][ T4507] taprio_change+0x3670/0x4ca0 [ 36.544728][ T4507] taprio_init+0x498/0x520 [ 36.545382][ T4507] qdisc_create+0x6f0/0xe20 [ 36.546114][ T4507] tc_modify_qdisc+0x950/0x178c [ 36.546922][ T4507] rtnetlink_rcv_msg+0x734/0xce4 [ 36.547701][ T4509] loop2: detected capacity change from 0 to 2048 [ 36.547739][ T4507] netlink_rcv_skb+0x208/0x3c4 [ 36.549481][ T4507] rtnetlink_rcv+0x28/0x38 [ 36.550157][ T4507] netlink_unicast+0x60c/0x824 [ 36.551003][ T4507] netlink_sendmsg+0x6e8/0x9b0 [ 36.551772][ T4507] ____sys_sendmsg+0x5b8/0x918 [ 36.552558][ T4507] __sys_sendmsg+0x25c/0x320 [ 36.553321][ T4507] __arm64_sys_sendmsg+0x80/0x94 [ 36.554108][ T4507] invoke_syscall+0x98/0x2bc [ 36.554892][ T4507] el0_svc_common+0x138/0x258 [ 36.555643][ T4507] do_el0_svc+0x58/0x13c [ 36.556278][ T4507] el0_svc+0x58/0x138 [ 36.556893][ T4507] el0t_64_sync_handler+0x84/0xf0 [ 36.557657][ T4507] el0t_64_sync+0x18c/0x190 [ 36.558346][ T4507] irq event stamp: 2049 [ 36.558961][ T4507] hardirqs last enabled at (2048): [] ktime_mono_to_any+0x14c/0x22c [ 36.560477][ T4507] hardirqs last disabled at (2049): [] el1_dbg+0x24/0x80 [ 36.561696][ T4507] softirqs last enabled at (1994): [] handle_softirqs+0xaf8/0xc6c [ 36.563064][ T4507] softirqs last disabled at (2040): [] taprio_change+0x3500/0x4ca0 [ 36.564483][ T4507] ---[ end trace 0000000000000000 ]--- [ 36.603241][ T4509] Alternate GPT is invalid, using primary GPT. [ 36.604616][ T4509] loop2: p1 p2 p3 [ 36.605187][ T4509] loop2: partition table partially beyond EOD, truncated [ 36.675235][ T4483] udevd[4483]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 36.675710][ T4477] udevd[4477]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 36.684501][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 37.270214][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 38.089615][ T4325] Bluetooth: hci3: command 0x040f tx timeout [ 38.099547][ T4325] Bluetooth: hci4: command 0x040f tx timeout [ 38.100498][ T4322] Bluetooth: hci0: command 0x040f tx timeout [ 38.100528][ T4325] Bluetooth: hci2: command 0x040f tx timeout [ 38.101504][ T4322] Bluetooth: hci1: command 0x040f tx timeout [ 40.169664][ T4333] Bluetooth: hci1: command 0x0419 tx timeout [ 40.170773][ T4333] Bluetooth: hci2: command 0x0419 tx timeout [ 40.170863][ T4322] Bluetooth: hci0: command 0x0419 tx timeout [ 40.171654][ T4333] Bluetooth: hci4: command 0x0419 tx timeout [ 40.172589][ T4322] Bluetooth: hci3: command 0x0419 tx timeout