last executing test programs: 9.050053399s ago: executing program 4 (id=5): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = open(&(0x7f0000000040)='./file0\x00', 0xb171ee3cf630acd0, 0x1f) getdents(r1, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x56, 0x400, 0x9, {0x4}, {0x6, 0x1}, @ramp={0x3c, 0x7a2, {0x8, 0x2, 0x5, 0x1}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r6}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r7 = gettid() ptrace$cont(0x9, r7, 0x10000, 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 8.481504923s ago: executing program 1 (id=2): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c232000, 0x3, 0x2}) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6.852991823s ago: executing program 4 (id=6): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 6.788886596s ago: executing program 1 (id=7): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000005840)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) syz_io_uring_setup(0x42ea, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0x2, 0x400252}, &(0x7f0000000640), &(0x7f0000000340)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r2, 0x0) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) syz_emit_ethernet(0x86, &(0x7f0000000d00)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa030490780100000047000000000000000011000064010100ffffffff440c9001ac1414bb4e210000443c0001e0000001000000000000000000000000ac1414000000000000000000000000000000000000000000ac1e000100000000ffffffff0000000010e4c929967af3d2faa7687140e06bdb8cec2bd991e78481e4b253d5dd9789f71cceb5ebde98c47d08e6bc1576fd4c7244ec0989f69078416ad22f9f72745be3f087e04d507dccbbb1fcdb59a5ddf3ccd40b39af35ad6a94645fb091c6d500000000"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x9d}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000000), 0xfd, 0x477, &(0x7f0000000880)="$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") bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r8, 0x0, 0xffff}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0x30, r4, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x37}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x30}}, 0x40000) 6.619381024s ago: executing program 2 (id=3): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x64, 0x6, 0x6f8, 0xf8, 0x220, 0x450, 0xf8, 0x450, 0x628, 0x628, 0x628, 0x628, 0x628, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0xffffffff], 'bond_slave_0\x00', 'bond_slave_1\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@rt={{0x138}, {0x6, [0x5, 0xb9], 0x4, 0x8, 0x5, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @ipv4={'\x00', '\xff\xff', @loopback}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x25}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private0, @loopback, @mcast2, @mcast2, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x24}, @dev={0xfe, 0x80, '\x00', 0x2f}], 0xa}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xf8}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, [], [0x0, 0x0, 0x0, 0xff000000], 'pim6reg1\x00', 'vlan1\x00', {}, {}, 0x3c}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "b3735369274c086ba4774c94815e4281dda03cdd71707f666f56af320601"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@multicast1, 0x1c, 0x40, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x758) 6.558010526s ago: executing program 2 (id=8): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7, 0x5}}, './file1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x40084) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000800)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x63af, &(0x7f0000001940)={0x0, 0xf3f0, 0x10000, 0x10, 0x378}, &(0x7f0000010080), &(0x7f0000000400)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000080)=[{&(0x7f0000002100)=""/4083, 0xff3}], 0x1) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff34000480050003000100000005000300020000000500030005000000050003000500000005000300050000008a55049d4983a6200800020002"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mknodat$loop(r0, 0x0, 0x40, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@usrjquota}, {@orlov}, {@norecovery}, {@barrier}, {@data_journal}]}, 0x66, 0x50a, &(0x7f0000000200)="$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") r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 1.258411516s ago: executing program 4 (id=9): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000400000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000240)=ANY=[], 0x40000) recvfrom$unix(0xffffffffffffffff, &(0x7f00000008c0)=""/239, 0x40000, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x10}, {0xfff3}}}, 0x24}}, 0x0) 1.183342669s ago: executing program 1 (id=10): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = syz_io_uring_setup(0x4073, 0x0, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) close(r0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x3f, 0x0, 0x68, 0x0, 0x0, 0x33, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x9b0fbba3637d1823, &(0x7f0000000880)={@local, 0x0}, &(0x7f00000008c0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)={0x0, @initdev, @loopback}, &(0x7f0000000940)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x9, 0x1, {{0x27, 0x4, 0x2, 0x2, 0x9c, 0x68, 0x0, 0xe5, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x11}, {[@rr={0x7, 0x1b, 0xd4, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast2, @private=0xa010100, @rand_addr=0x64010102]}, @lsrr={0x83, 0xf, 0x58, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @end, @generic={0x89, 0x11, "87d7ebec2764f15d9f49bf59a43f73"}, @timestamp={0x44, 0x14, 0xd8, 0x0, 0xb, [0x7ff, 0x400, 0x6, 0x1]}, @cipso={0x86, 0x18, 0x0, [{0x5, 0x12, "489169033cbcef86d3b2c0895cdd2be6"}]}, @timestamp_addr={0x44, 0x14, 0x3e, 0x1, 0x4, [{@multicast1, 0x47a}, {@multicast2, 0x677e}]}, @timestamp_addr={0x44, 0xc, 0x18, 0x1, 0xb, [{@multicast1, 0x5}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000001080)=ANY=[@ANYBLOB="780000003f1090936e30879eed305e66fa1b1c12a5e21eb153d7fa36dd2e76e7dd2e405f5af845a8fb00459c3dd51a112659f2e03e7c56e57ec3b307134bef367c22b888850ac7de899d0f1b67bc7a2e4fca7d6ca9c80886cd7b36431979b2aa5c19c95c60b8624c8e264d439e0e868c26b04833eb11e6060c34f74b83bc3da7a5", @ANYRES64=r3, @ANYBLOB="08ca0025bd00000100df250300edff6400018008a732d1329c84258f9e1f330a9c5557d654823959579319742e899e71e022a67bceae8c0747de4e865e6966d9827527c4ea31cdf34d7e85efcf7896cf271dbdd4bc292ff16981a789f46b5fd8afd4", @ANYRES32=r3, @ANYRESDEC=r3, @ANYRES32, @ANYBLOB="1400020076657468305f746f5f6272696467650008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="1400020076657468315f766c616e000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r7, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4e}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) clock_nanosleep(0x0, 0x0, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r9, 0x40305829, &(0x7f0000000e00)={0x17c04, r9, 0x6, 0x24000003, 0x400000006, 0x3}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 969.935608ms ago: executing program 0 (id=11): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x5000, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 923.773811ms ago: executing program 0 (id=12): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1ffffffffffffdf4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) getxattr(0x0, 0x0, 0x0, 0x0) 788.066016ms ago: executing program 0 (id=13): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x40, 0x1, 0x0, 0x1, 0x7, 0x3, 0x1ba5, 0x6, 0x9, 0x8001, 0x3, 0xe6c4, 0x10000, 0x3, 0x3, 0xa971, 0x7f, 0x5, 0x2, 0x8, 0x1, 0x5, 0x8, 0x9, 0xa4, 0x5, 0x5, 0x6, 0xe72, 0x1, 0x0, 0x4, 0x3, 0x5, 0x3, 0x7fff, 0x3, 0xd, 0x113, 0x8, 0xd, 0x9, 0x401, 0xffff, 0x6, 0x4, 0x2a9a, 0xfffffff9, 0x5, 0x1, 0x7, 0x0, 0x5, 0x1, 0x100, 0x9, 0x3fc000, 0x5, 0x8, 0x7, 0x40, 0x6, 0xfffff81c, 0x4, 0x2, 0xb9c7, 0x40, 0x400, 0x3, 0x2, 0x6c85, 0x88a, 0x3, 0xffff, 0x7, 0xb4c5, 0x4, 0x4, 0x4, 0x4, 0x2, 0xbe42, 0x5, 0x6, 0x7, 0x71, 0x4, 0x2, 0x6, 0xbd, 0x7, 0xfffffdc4, 0x2, 0xc, 0x0, 0x4, 0x2, 0xd0, 0x10, 0x0, 0x19, 0x5, 0x9, 0x8, 0xfffffffa, 0xfffffffc, 0x9c3b, 0x81, 0x7, 0x5, 0xffff, 0xfffffff9, 0x9, 0x6b, 0x7, 0x1, 0x9, 0xff, 0x9, 0x7, 0xfff, 0x6, 0x1, 0x3, 0x5, 0x7, 0xc, 0x2, 0x4, 0x5bb, 0x7, 0x3, 0x679, 0x7, 0x2, 0x5, 0x0, 0xd, 0x10000, 0x7fffffff, 0x5, 0x81, 0x342, 0x2, 0x6, 0x10, 0x6a, 0xd7, 0x10001, 0xcf5, 0xfffffffc, 0x9, 0x2, 0x3, 0x2bd621da, 0xe8, 0x9, 0x6, 0x8, 0x8, 0x5, 0x4, 0x629, 0x0, 0x7a409af, 0xff, 0x8, 0x4, 0x9, 0xe, 0x73b052b9, 0x6, 0x10, 0x3, 0xa, 0x0, 0x1, 0x5a, 0xfff, 0x0, 0x1c, 0xe7a7, 0xfffffffa, 0x6, 0x3, 0xa, 0xfff, 0x2, 0x2, 0x29e, 0x5, 0x47f, 0x0, 0x8, 0x4, 0x9b8, 0x7fff, 0x8, 0xffff, 0x10000, 0x400, 0x0, 0x0, 0xffffff39, 0x5, 0x6a80, 0x10001, 0x4, 0x3, 0x8000, 0x1, 0x2, 0x8, 0xd, 0xce2, 0xffffffe1, 0x3, 0x7, 0x2, 0x4, 0x0, 0x4, 0x4931, 0x80, 0x9, 0x6, 0xd, 0x0, 0x6, 0x2, 0x0, 0xafd7, 0xe, 0x0, 0x9, 0x3c115f2c, 0x2, 0x5, 0x3, 0x1, 0x419, 0x2, 0x9, 0xfffffffd, 0x0, 0x9, 0x2, 0x3, 0x1, 0x101, 0x1, 0x1, 0x3fffc, 0x2626, 0x6]}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffffffff, 0x3, 0x9, 0x1, 0x800, 0x9c3, 0x4, 0x0, 0x8, 0xffffffff, 0x3, 0x8, 0x8, 0xfffffffd, 0x8, 0x8001, 0x100, 0x3, 0x0, 0x588e, 0x1, 0x1e00, 0x101, 0x7, 0x80000000, 0xf8f1, 0x0, 0x401, 0x10, 0x1, 0xc00000, 0xfffffff7, 0x400, 0x7f, 0x80000000, 0x3, 0x6ade, 0x0, 0x4, 0x401, 0x1, 0x5, 0x8, 0x1, 0x7, 0x3, 0x80, 0x7fffffff, 0x2, 0x9, 0x3, 0x80, 0x8, 0xe, 0x1c9, 0x0, 0x2, 0x4, 0xfffffffa, 0x4, 0x1, 0x4, 0x3, 0x1, 0x8, 0x2, 0xe757, 0xfffffff7, 0x8001, 0x45f, 0x1ff, 0xe, 0xd, 0x7d3, 0x4, 0xb, 0x58c4637b, 0x5, 0x0, 0x1, 0x2, 0x6, 0xb90, 0x203, 0x6, 0x200, 0x7, 0x10000, 0x4, 0xffffff25, 0xa04, 0x78da, 0x0, 0x0, 0xffffffff, 0x80000001, 0x0, 0x5, 0x465, 0x6, 0xcd17, 0x9, 0x6, 0x2, 0xfffffffc, 0xfffffff7, 0x7f, 0x2, 0x6, 0x1, 0x40000, 0x6, 0x6, 0x0, 0x40, 0x8, 0x3, 0x23, 0x0, 0x6, 0x1, 0x2fe, 0x96, 0x0, 0x2, 0x5, 0x2, 0x9, 0x8, 0x0, 0x0, 0x7, 0x6, 0x80, 0x100, 0x7, 0x7f, 0x2, 0x200, 0x8, 0xe330fdc7, 0x9, 0x5, 0x7e, 0x2, 0x0, 0x5, 0xffff0000, 0x2, 0x81, 0x401, 0x7, 0x8, 0xffff669d, 0xffffff94, 0x7, 0x5, 0x10001, 0x7, 0x7, 0x4, 0x5, 0xb2fb, 0x1, 0x7ff, 0x85, 0xffffffff, 0x4ac, 0xfc9, 0x80000000, 0x1, 0xfb, 0x6, 0xb, 0x3, 0x40, 0x3, 0x2, 0x83, 0x6, 0x56a, 0x0, 0x9, 0x9, 0x1, 0x7, 0x9, 0x4, 0xe, 0x6, 0x6, 0x8, 0x0, 0xfffffffe, 0x5, 0x44, 0x4, 0x2, 0x1, 0xfffffff1, 0x6, 0x80000000, 0x4, 0x100, 0xfffffff7, 0x2a8, 0x2, 0x9, 0x7f, 0x4, 0x8, 0xffffffff, 0x6ed916d9, 0xfffffff8, 0x38, 0x3, 0x2, 0xd0, 0x36a0, 0xc, 0x3, 0x2, 0x1, 0x7df0, 0x9, 0x9, 0x5, 0xfff, 0xc, 0x87, 0x8, 0x8, 0x80000000, 0x5, 0x3, 0x800, 0x1c43, 0x7, 0xa66, 0x6, 0x18000, 0x6, 0x4, 0x86f9, 0x6, 0x80, 0x200, 0x28000, 0x401, 0xffff, 0x4d, 0x2, 0xfc, 0x7, 0x2]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="24785466124cebc6c88735f544a9", 0xe, 0x440040c4, &(0x7f00000001c0)={0x11, 0xf8, r6, 0x1, 0xd8, 0x6, @remote}, 0x14) 487.530549ms ago: executing program 0 (id=14): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) 435.358971ms ago: executing program 0 (id=15): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000010850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) prctl$PR_SET_NAME(0xf, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000040)={0x3, 0x1, '\x00', 0xff, 0x1}) 390.329884ms ago: executing program 0 (id=16): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) io_uring_setup(0x6c5, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) accept(r2, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x800, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000140)={0x2, 0x4, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 287.537618ms ago: executing program 3 (id=17): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_secret(0x80000) fcntl$setlease(r1, 0x400, 0x0) close(r1) 134.909735ms ago: executing program 1 (id=18): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB=',context=']) 404.63µs ago: executing program 3 (id=19): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodelalloc}]}, 0xff, 0x264, &(0x7f00000007c0)="$eJzs3U1oFFccAPD/zO42TbKUtL0USj+glNIGQnor9JJeWgiUEEoptIWUUnppSQppQm9JT1486FFUcvISxJvRo+QSvCiCp6g5xIugwYPBg4oru7OBfElidrMjmd8PZudjZ97/DTP/95Zl32wAhdUXEUMRUYqI/oioRESyeYePs6mvuTrXvTQWUav98DBp7JetZzaO642I2Yj4KiIW0yT+KkdML/yy+nj5u8+OT1U+Pbfwc3dHT7JpbXXl+/WzI8cuDn85ff3m/ZEkhqK65bzaL9llWzmJeOcwgr0mknLeNWA/Rv+7cKue9+9GxCeN/K9EGtnFOzH5xmIlvjjzsmNPPrjxfifrCrRfrVap94GzNaBw0oioRpIORES2nKYDA9ln+NulnvTvicl/+/+cmBr/I++WCmiXasTKt5e7LvVuy/97pSz/gSMq+1Jq5cfR+Tv1hfVS3hUCOuKDbFbv//t/m/k85D8UjvyH4pL/UFzyH4pL/kNxyX8oLvkPBfG8+WO/TZvkPxTXvvLfOC44kg7c/596dniVAjpic/4DAMVS6zrQqOH2DkIGcpF3+wMAAAAAAAAAAAAAAAAAAOw01700tjG1p8S9Hx549XTE2jfZrjvjlxr/RxzxZuO151GypcSkDY8n/PWjFgto0fmcR1+/dTff+Nc+zDf+zHjE7P8RMVgu77z/kub9d3Bv7/F+5fcWA7yiZNv61z91Nv52T+fzjT+8HHGl3v4M7tb+pPFeY757+1OtX78W4//zpMUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6JgXAQAA///Rk3XT") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r3, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x7c8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 1 (id=20): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000e"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000016, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. [ 48.171349][ T4171] cgroup: Unknown subsys name 'net' [ 48.278161][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.489204][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.280671][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 51.407018][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 51.451084][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 51.470373][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 51.494204][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.501386][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.509409][ T4194] device bridge_slave_0 entered promiscuous mode [ 51.520137][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.527427][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.535693][ T4194] device bridge_slave_1 entered promiscuous mode [ 51.568059][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 51.605986][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.613159][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.621463][ T4181] device bridge_slave_0 entered promiscuous mode [ 51.635309][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.649242][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.669688][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.676833][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.684935][ T4181] device bridge_slave_1 entered promiscuous mode [ 51.722634][ T4194] team0: Port device team_slave_0 added [ 51.741178][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.760647][ T4194] team0: Port device team_slave_1 added [ 51.767624][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.808230][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.815507][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.823463][ T4184] device bridge_slave_0 entered promiscuous mode [ 51.848807][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.856041][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.863787][ T4182] device bridge_slave_0 entered promiscuous mode [ 51.872186][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.879277][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.887278][ T4182] device bridge_slave_1 entered promiscuous mode [ 51.894756][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.901991][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.909580][ T4184] device bridge_slave_1 entered promiscuous mode [ 51.924294][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.931446][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.957536][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.971144][ T4181] team0: Port device team_slave_0 added [ 51.977343][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.984353][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.010661][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.035664][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.042944][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.050711][ T4183] device bridge_slave_0 entered promiscuous mode [ 52.058831][ T4181] team0: Port device team_slave_1 added [ 52.081732][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.088775][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.097060][ T4183] device bridge_slave_1 entered promiscuous mode [ 52.125897][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.136533][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.153634][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.160634][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.186775][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.199263][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.206245][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.232401][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.245240][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.255775][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.266368][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.300709][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.346935][ T4184] team0: Port device team_slave_0 added [ 52.356004][ T4194] device hsr_slave_0 entered promiscuous mode [ 52.363357][ T4194] device hsr_slave_1 entered promiscuous mode [ 52.377582][ T4182] team0: Port device team_slave_0 added [ 52.385291][ T4182] team0: Port device team_slave_1 added [ 52.397398][ T4184] team0: Port device team_slave_1 added [ 52.413842][ T4181] device hsr_slave_0 entered promiscuous mode [ 52.420642][ T4181] device hsr_slave_1 entered promiscuous mode [ 52.427092][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.438371][ T4181] Cannot create hsr debugfs directory [ 52.453986][ T4183] team0: Port device team_slave_0 added [ 52.481680][ T4183] team0: Port device team_slave_1 added [ 52.491540][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.498474][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.524432][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.542192][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.549123][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.575332][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.600790][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.607722][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.633778][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.648225][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.655548][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.681708][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.737452][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.745111][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.771410][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.783787][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.791048][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.816968][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.853065][ T4184] device hsr_slave_0 entered promiscuous mode [ 52.860035][ T4184] device hsr_slave_1 entered promiscuous mode [ 52.866696][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.874354][ T4184] Cannot create hsr debugfs directory [ 52.913882][ T4182] device hsr_slave_0 entered promiscuous mode [ 52.920730][ T4182] device hsr_slave_1 entered promiscuous mode [ 52.927267][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.935357][ T4182] Cannot create hsr debugfs directory [ 52.973626][ T4183] device hsr_slave_0 entered promiscuous mode [ 52.981251][ T4183] device hsr_slave_1 entered promiscuous mode [ 52.987701][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.995462][ T4183] Cannot create hsr debugfs directory [ 53.060929][ T1326] Bluetooth: hci4: command 0x0409 tx timeout [ 53.060929][ T1110] Bluetooth: hci2: command 0x0409 tx timeout [ 53.061292][ T1110] Bluetooth: hci3: command 0x0409 tx timeout [ 53.067044][ T1326] Bluetooth: hci0: command 0x0409 tx timeout [ 53.078673][ T1110] Bluetooth: hci1: command 0x0409 tx timeout [ 53.227254][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.237560][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.246687][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.260024][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.311667][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.321235][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.330119][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.343466][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.395546][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.405809][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.426911][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.442947][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.466914][ T4182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.496321][ T4182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.524471][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.531499][ T4182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.539857][ T4182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.588396][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.621095][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.628162][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.641773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.651774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.664600][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.675457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.685160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.694027][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.701254][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.710508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.718660][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.730739][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.743602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.754008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.762625][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.769655][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.793014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.806139][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.817661][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.833575][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.842509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.850183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.882063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.891168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.899424][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.906469][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.914290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.923258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.930986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.939336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.947766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.956512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.965751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.974211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.983109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.991029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.015415][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.025597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.034538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.044979][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.052064][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.059769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.069406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.079617][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.095412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.104744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.129245][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.141791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.156492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.165968][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.173065][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.181739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.190834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.199153][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.206210][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.214498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.223098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.231589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.239500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.262452][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.271928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.281656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.291223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.299628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.308242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.321616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.329869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.338826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.347420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.355881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.386388][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.406820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.423615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.435486][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.442577][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.452326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.460795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.469023][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.476082][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.484462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.497356][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.513254][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.521870][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.530225][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.539995][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.559987][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.576447][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.591680][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.611523][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.619320][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.627358][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.643897][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.657074][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.667613][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.675968][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.684422][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.692975][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.708081][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.719251][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.732085][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.747504][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.757926][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.770195][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.788644][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.803070][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.816256][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.836055][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.844430][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.858417][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.867521][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.876920][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.885232][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.892851][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.900226][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.909221][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.917730][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.924787][ T4264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.938258][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.947468][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.989215][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.999372][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.016150][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.023256][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.038543][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.047859][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.075365][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.101253][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.109810][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.125695][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.140425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.140934][ T4258] Bluetooth: hci0: command 0x041b tx timeout [ 55.150614][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 55.156238][ T4258] Bluetooth: hci3: command 0x041b tx timeout [ 55.161298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.184766][ T4194] device veth0_vlan entered promiscuous mode [ 55.198861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.206415][ T4258] Bluetooth: hci4: command 0x041b tx timeout [ 55.206663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.217936][ T4258] Bluetooth: hci2: command 0x041b tx timeout [ 55.221780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.237343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.245876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.254945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.263349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.271913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.280004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.288826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.303085][ T4181] device veth0_vlan entered promiscuous mode [ 55.315158][ T4194] device veth1_vlan entered promiscuous mode [ 55.324518][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.337712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.353800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.365609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.374436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.386182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.395919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.426568][ T4194] device veth0_macvtap entered promiscuous mode [ 55.435243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.445294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.469383][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.480460][ T4181] device veth1_vlan entered promiscuous mode [ 55.489362][ T4194] device veth1_macvtap entered promiscuous mode [ 55.497013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.505242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.513751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.521251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.529143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.536832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.553810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.561661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.607899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.617615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.629510][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.639485][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.652439][ T4182] device veth0_vlan entered promiscuous mode [ 55.676744][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.685383][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.693870][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.702775][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.711443][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.719857][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.728603][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.742035][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.749785][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.757665][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.766972][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.777220][ T4182] device veth1_vlan entered promiscuous mode [ 55.795215][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.805837][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.815456][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.825527][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.834439][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.845966][ T4181] device veth0_macvtap entered promiscuous mode [ 55.857368][ T4181] device veth1_macvtap entered promiscuous mode [ 55.867474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.875641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.883743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.892872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.901645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.910070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.918778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.974455][ T4183] device veth0_vlan entered promiscuous mode [ 55.985821][ T4182] device veth0_macvtap entered promiscuous mode [ 55.998268][ T4182] device veth1_macvtap entered promiscuous mode [ 56.009747][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.018209][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.026580][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.035639][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.044515][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.053146][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.067219][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.076764][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.085311][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.103052][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.113827][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.125653][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.136960][ T4184] device veth0_vlan entered promiscuous mode [ 56.151976][ T4183] device veth1_vlan entered promiscuous mode [ 56.158748][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.166952][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.175657][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.184815][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.194352][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.203418][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.211822][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.224902][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.236003][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.247015][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.258238][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.268217][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.277690][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.286762][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.313832][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.323849][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.334216][ T4184] device veth1_vlan entered promiscuous mode [ 56.354309][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.365163][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.376206][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.386936][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.398120][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.408643][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.419444][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.423395][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.429831][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.447773][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.452151][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.460873][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.489486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.497872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.508785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.517513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.525528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.534293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.542979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.551700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.573878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.590116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.610974][ T4182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.619669][ T4182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.632691][ T4182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.641569][ T4182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.662745][ T4183] device veth0_macvtap entered promiscuous mode [ 56.708510][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.712053][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.720572][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.732027][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.738350][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.749134][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.757441][ T4183] device veth1_macvtap entered promiscuous mode [ 56.779719][ T4184] device veth0_macvtap entered promiscuous mode [ 56.786844][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.795383][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.808644][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.819458][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.830987][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.842338][ T4184] device veth1_macvtap entered promiscuous mode [ 56.886303][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.899350][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.909846][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.921406][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.931415][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.943064][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.954190][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.968279][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.978888][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.989918][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.001353][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.011323][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.021925][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.033976][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.045527][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.059121][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.078192][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.089433][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.109117][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.129096][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.144338][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.157856][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.172172][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.179509][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.188030][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.197006][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.206460][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.215256][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.220602][ T4253] Bluetooth: hci4: command 0x040f tx timeout [ 57.229556][ T4253] Bluetooth: hci3: command 0x040f tx timeout [ 57.231182][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.235745][ T4253] Bluetooth: hci1: command 0x040f tx timeout [ 57.249393][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.249602][ T4253] Bluetooth: hci0: command 0x040f tx timeout [ 57.260078][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.274526][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.284952][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.295942][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.306726][ T4242] Bluetooth: hci2: command 0x040f tx timeout [ 57.306774][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.324314][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.334131][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.344539][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.356377][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.370686][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.383173][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.397383][ T4294] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.417109][ T4295] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 57.425250][ T4295] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5'. [ 57.447320][ T4295] team0: Port device geneve0 added [ 57.453967][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.464251][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.473389][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.495152][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.496740][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.503535][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.517293][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.528399][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.537613][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.551100][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.559864][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.569349][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.578415][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.598837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.273536][ T4294] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.004684][ T4294] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.183842][ T4294] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.234963][ T4294] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.246850][ T4294] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.258736][ T4294] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.273130][ T4294] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.301155][ T4242] Bluetooth: hci0: command 0x0419 tx timeout [ 59.307529][ T4242] Bluetooth: hci1: command 0x0419 tx timeout [ 59.329190][ T4242] Bluetooth: hci3: command 0x0419 tx timeout [ 59.340469][ T4242] Bluetooth: hci4: command 0x0419 tx timeout [ 59.380750][ T1110] Bluetooth: hci2: command 0x0419 tx timeout [ 59.397700][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.406251][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.406543][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.421586][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.427405][ T4302] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.437929][ T4304] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 59.467452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.475967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.486354][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.495416][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.504831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.525403][ T4302] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.557363][ T4307] xt_CONNSECMARK: invalid mode: 0 [ 59.583282][ T4302] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.600592][ T4308] loop1: detected capacity change from 0 to 512 [ 59.638107][ T4308] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 59.654080][ T4308] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 59.668798][ T4302] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.693791][ T4308] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.7: bg 0: block 104: invalid block bitmap [ 59.711627][ T4308] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 59.720859][ T4308] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.7: invalid indirect mapped block 1 (level 1) [ 59.734724][ T4308] EXT4-fs (loop1): 1 truncate cleaned up [ 59.743534][ T4308] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 59.859119][ T4315] loop2: detected capacity change from 0 to 512 [ 60.006190][ T4314] loop2: detected capacity change from 0 to 512 [ 60.022523][ T4314] ======================================================= [ 60.022523][ T4314] WARNING: The mand mount option has been deprecated and [ 60.022523][ T4314] and is ignored by this kernel. Remove the mand [ 60.022523][ T4314] option from the mount to silence this warning. [ 60.022523][ T4314] ======================================================= [ 60.094469][ T4314] EXT4-fs (loop2): Ignoring removed orlov option [ 60.102453][ T4314] EXT4-fs (loop2): Mount option "norecovery" incompatible with ext2 [ 60.133980][ T1276] Bluetooth: hci5: Frame reassembly failed (-84) [ 62.180453][ T4258] Bluetooth: hci5: command 0x1003 tx timeout [ 62.186654][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 64.260466][ T4258] Bluetooth: hci5: command 0x1001 tx timeout [ 64.266590][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 64.833518][ T4302] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.845629][ T4302] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.857639][ T4302] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.869638][ T4302] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.951760][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.959771][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.966605][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.977281][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.987312][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.995316][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.109253][ T4322] loop3: detected capacity change from 0 to 512 [ 65.198502][ T4329] process 'syz.1.10' launched '/dev/fd/6' with NULL argv: empty string added [ 65.254500][ T4322] EXT4-fs (loop3): 1 truncate cleaned up [ 65.260180][ T4322] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 65.290460][ T4258] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.299783][ T25] audit: type=1326 audit(1765171473.117:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7758a7749 code=0x7ffc0000 [ 65.348632][ T25] audit: type=1326 audit(1765171473.117:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7758a7749 code=0x7ffc0000 [ 65.395350][ T25] audit: type=1326 audit(1765171473.127:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff77589e5e7 code=0x7ffc0000 [ 65.404982][ T4335] device syzkaller0 entered promiscuous mode [ 65.424248][ T25] audit: type=1326 audit(1765171473.127:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff775843829 code=0x7ffc0000 [ 65.447971][ T25] audit: type=1326 audit(1765171473.127:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7758a7749 code=0x7ffc0000 [ 65.471088][ T25] audit: type=1326 audit(1765171473.127:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff7758a7749 code=0x7ffc0000 [ 65.495788][ T25] audit: type=1326 audit(1765171473.127:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7758a7749 code=0x7ffc0000 [ 65.518447][ T25] audit: type=1326 audit(1765171473.127:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7758a7749 code=0x7ffc0000 [ 65.518684][ T4336] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4: bg 0: block 465: padding at end of block bitmap is not set [ 65.541480][ T25] audit: type=1326 audit(1765171473.127:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff7758a7749 code=0x7ffc0000 [ 65.564062][ T4336] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1164 with error 28 [ 65.577516][ T25] audit: type=1326 audit(1765171473.127:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7758a7749 code=0x7ffc0000 [ 65.607947][ T4336] EXT4-fs (loop3): This should not happen!! Data will be lost [ 65.607947][ T4336] [ 65.626823][ T4336] EXT4-fs (loop3): Total free blocks count 0 [ 65.633213][ T4336] EXT4-fs (loop3): Free/Dirty block details [ 65.639508][ T4336] EXT4-fs (loop3): free_blocks=0 [ 65.645416][ T4336] EXT4-fs (loop3): dirty_blocks=1168 [ 65.651091][ T4336] EXT4-fs (loop3): Block reservation details [ 65.657566][ T4336] EXT4-fs (loop3): i_reserved_data_blocks=1168 [ 65.812341][ T4322] Zero length message leads to an empty skb [ 65.940703][ T4258] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 65.963242][ T4258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.980303][ T4258] usb 5-1: Product: syz [ 66.017244][ T4258] usb 5-1: Manufacturer: syz [ 66.061259][ T4258] usb 5-1: SerialNumber: syz [ 66.067727][ T4350] rdma_op ffff88801abea1f0 conn xmit_rdma 0000000000000000 [ 66.150448][ C0] ------------[ cut here ]------------ [ 66.156262][ C0] WARNING: CPU: 0 PID: 4320 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 66.165574][ C0] Modules linked in: [ 66.169475][ C0] CPU: 0 PID: 4320 Comm: udevd Not tainted syzkaller #0 [ 66.176410][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.186471][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 66.192633][ C0] Code: 24 45 31 f6 31 ff 89 de e8 0d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 90 f2 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 66.212240][ C0] RSP: 0018:ffffc900000076d8 EFLAGS: 00010046 [ 66.218313][ C0] RAX: ffffffff819ed980 RBX: 0000000000000008 RCX: ffff8880770dd940 [ 66.226281][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.234248][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100ee1bb29 [ 66.242218][ C0] R10: ffffed100ee1bb29 R11: 1ffff1100ee1bb28 R12: ffff8880770df0c8 [ 66.250189][ C0] R13: 00007ffffffff000 R14: ffffc90000007748 R15: 0000000000000000 [ 66.258160][ C0] FS: 00007fb0f06f1880(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 66.267094][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.273675][ C0] CR2: 0000000000000000 CR3: 000000001e67e000 CR4: 00000000003506f0 [ 66.281646][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.289617][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.297586][ C0] Call Trace: [ 66.300864][ C0] [ 66.303708][ C0] bpf_probe_read_compat+0xdd/0x170 [ 66.308916][ C0] bpf_prog_ee60aafa828f4cb7+0x35/0x7c0 [ 66.314469][ C0] bpf_trace_run2+0x15b/0x2d0 [ 66.319154][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 66.324020][ C0] ? dummy_timer+0x7b3/0x2e10 [ 66.328705][ C0] ? dummy_timer+0x7b3/0x2e10 [ 66.333385][ C0] __bpf_trace_kfree+0x6e/0x90 [ 66.338154][ C0] ? dummy_timer+0x7b3/0x2e10 [ 66.342835][ C0] kfree+0x25f/0x2a0 [ 66.346736][ C0] dummy_timer+0x7b3/0x2e10 [ 66.351297][ C0] ? dummy_free_streams+0x530/0x530 [ 66.356501][ C0] ? dummy_free_streams+0x530/0x530 [ 66.361701][ C0] call_timer_fn+0x16c/0x530 [ 66.366296][ C0] ? dummy_free_streams+0x530/0x530 [ 66.371494][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 66.377480][ C0] ? __run_timers+0x7c0/0x7c0 [ 66.382168][ C0] ? rcu_is_watching+0x11/0xa0 [ 66.386935][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 66.392137][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 66.397338][ C0] ? dummy_free_streams+0x530/0x530 [ 66.402539][ C0] __run_timers+0x525/0x7c0 [ 66.407057][ C0] ? detach_timer+0x2b0/0x2b0 [ 66.411733][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 66.417726][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 66.422582][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 66.427879][ C0] run_timer_softirq+0x63/0xf0 [ 66.432648][ C0] handle_softirqs+0x328/0x820 [ 66.437430][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 66.442282][ C0] ? do_softirq+0x200/0x200 [ 66.446793][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 66.451994][ C0] __irq_exit_rcu+0x12f/0x220 [ 66.456671][ C0] ? irq_exit_rcu+0x20/0x20 [ 66.461182][ C0] irq_exit_rcu+0x5/0x20 [ 66.465420][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 66.471059][ C0] [ 66.473990][ C0] [ 66.476917][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 66.482896][ C0] RIP: 0010:pvclock_clocksource_read+0x5b/0x760 [ 66.489140][ C0] Code: ee 03 49 8d 48 07 4c 89 c0 48 c1 e8 03 48 89 84 24 90 00 00 00 48 89 4c 24 50 48 c1 e9 03 48 89 8c 24 88 00 00 00 49 8d 49 03 <4c> 89 c8 48 c1 e8 03 48 89 84 24 80 00 00 00 48 89 4c 24 48 48 c1 [ 66.508749][ C0] RSP: 0018:ffffc9000307f7b8 EFLAGS: 00000a03 [ 66.514821][ C0] RAX: 1ffffffff1dd7e01 RBX: dffffc0000000000 RCX: ffffffff8eebf01b [ 66.522796][ C0] RDX: 1ffffffff1dd7e00 RSI: ffffffff8eebf01c RDI: ffffffff8eebf000 [ 66.530771][ C0] RBP: 00000000001d20c0 R08: ffffffff8eebf008 R09: ffffffff8eebf018 [ 66.538746][ C0] R10: ffffffff8eebf010 R11: ffffffff8eebf003 R12: 00000000000010e0 [ 66.546717][ C0] R13: ffff888017f472a8 R14: 1ffffffff1dd7e00 R15: 0000000000000001 [ 66.554713][ C0] ? __reset_page_owner+0x180/0x180 [ 66.559935][ C0] kvm_sched_clock_read+0x14/0x40 [ 66.564959][ C0] sched_clock_cpu+0x15/0x3c0 [ 66.569641][ C0] ? preempt_count_add+0x8d/0x190 [ 66.574670][ C0] __set_page_owner+0x174/0x2d0 [ 66.579524][ C0] get_page_from_freelist+0x1b77/0x1c60 [ 66.585090][ C0] ? verify_lock_unused+0x140/0x140 [ 66.590306][ C0] ? __alloc_pages+0x470/0x470 [ 66.595080][ C0] ? prepare_alloc_pages+0x368/0x5f0 [ 66.600369][ C0] __alloc_pages+0x1e1/0x470 [ 66.604967][ C0] ? zone_statistics+0x170/0x170 [ 66.609917][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 66.615905][ C0] ? alloc_pages+0x438/0x550 [ 66.620503][ C0] new_slab+0xc0/0x4b0 [ 66.624574][ C0] ? kmem_cache_alloc+0x195/0x290 [ 66.629596][ C0] ___slab_alloc+0x81e/0xdf0 [ 66.634190][ C0] ? getname_flags+0xb5/0x500 [ 66.638870][ C0] ? getname_flags+0xb5/0x500 [ 66.643547][ C0] kmem_cache_alloc+0x195/0x290 [ 66.648408][ C0] getname_flags+0xb5/0x500 [ 66.652917][ C0] do_sys_openat2+0xcf/0x4a0 [ 66.657514][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 66.662547][ C0] ? do_sys_open+0xe0/0xe0 [ 66.666969][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 66.672955][ C0] ? lock_chain_count+0x20/0x20 [ 66.677815][ C0] ? vtime_user_exit+0x2dc/0x400 [ 66.682757][ C0] __x64_sys_openat+0x135/0x160 [ 66.687613][ C0] do_syscall_64+0x4c/0xa0 [ 66.692026][ C0] ? clear_bhb_loop+0x30/0x80 [ 66.696710][ C0] ? clear_bhb_loop+0x30/0x80 [ 66.701404][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.707315][ C0] RIP: 0033:0x7fb0f07df407 [ 66.711729][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 66.731339][ C0] RSP: 002b:00007ffe38e44070 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 66.739761][ C0] RAX: ffffffffffffffda RBX: 00007fb0f06f1880 RCX: 00007fb0f07df407 [ 66.747738][ C0] RDX: 0000000000080241 RSI: 00007ffe38e445d0 RDI: ffffffffffffff9c [ 66.755716][ C0] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 66.763689][ C0] R10: 00000000000001b6 R11: 0000000000000202 R12: 0000564cab0b0dfc [ 66.771662][ C0] R13: 0000564cab0b0dfc R14: 0000000000000001 R15: 0000564cab0cb140 [ 66.779660][ C0] [ 66.782689][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 66.787974][ T4354] loop3: detected capacity change from 0 to 128 [ 66.789958][ C0] CPU: 0 PID: 4320 Comm: udevd Not tainted syzkaller #0 [ 66.789996][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.813359][ C0] Call Trace: [ 66.816644][ C0] [ 66.819487][ C0] dump_stack_lvl+0x168/0x230 [ 66.824173][ C0] ? show_regs_print_info+0x20/0x20 [ 66.829373][ C0] ? load_image+0x3b0/0x3b0 [ 66.833890][ C0] panic+0x2c9/0x7f0 [ 66.837792][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 66.842313][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 66.847864][ C0] __warn+0x248/0x2b0 [ 66.851852][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 66.857403][ C0] report_bug+0x1b7/0x2e0 [ 66.861742][ C0] handle_bug+0x3a/0x70 [ 66.865901][ C0] exc_invalid_op+0x16/0x40 [ 66.870403][ C0] asm_exc_invalid_op+0x16/0x20 [ 66.875251][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 66.881408][ C0] Code: 24 45 31 f6 31 ff 89 de e8 0d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 90 f2 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 66.901099][ C0] RSP: 0018:ffffc900000076d8 EFLAGS: 00010046 [ 66.907168][ C0] RAX: ffffffff819ed980 RBX: 0000000000000008 RCX: ffff8880770dd940 [ 66.915141][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.923114][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100ee1bb29 [ 66.931089][ C0] R10: ffffed100ee1bb29 R11: 1ffff1100ee1bb28 R12: ffff8880770df0c8 [ 66.939058][ C0] R13: 00007ffffffff000 R14: ffffc90000007748 R15: 0000000000000000 [ 66.947040][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 66.952598][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 66.958167][ C0] bpf_probe_read_compat+0xdd/0x170 [ 66.963384][ C0] bpf_prog_ee60aafa828f4cb7+0x35/0x7c0 [ 66.968937][ C0] bpf_trace_run2+0x15b/0x2d0 [ 66.973623][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 66.978482][ C0] ? dummy_timer+0x7b3/0x2e10 [ 66.983172][ C0] ? dummy_timer+0x7b3/0x2e10 [ 66.987850][ C0] __bpf_trace_kfree+0x6e/0x90 [ 66.992640][ C0] ? dummy_timer+0x7b3/0x2e10 [ 66.997321][ C0] kfree+0x25f/0x2a0 [ 67.001223][ C0] dummy_timer+0x7b3/0x2e10 [ 67.005776][ C0] ? dummy_free_streams+0x530/0x530 [ 67.010988][ C0] ? dummy_free_streams+0x530/0x530 [ 67.016197][ C0] call_timer_fn+0x16c/0x530 [ 67.020794][ C0] ? dummy_free_streams+0x530/0x530 [ 67.025997][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 67.031980][ C0] ? __run_timers+0x7c0/0x7c0 [ 67.036663][ C0] ? rcu_is_watching+0x11/0xa0 [ 67.041426][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 67.046623][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 67.051822][ C0] ? dummy_free_streams+0x530/0x530 [ 67.057025][ C0] __run_timers+0x525/0x7c0 [ 67.061543][ C0] ? detach_timer+0x2b0/0x2b0 [ 67.066221][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 67.072213][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 67.077064][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 67.082360][ C0] run_timer_softirq+0x63/0xf0 [ 67.087130][ C0] handle_softirqs+0x328/0x820 [ 67.091899][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 67.096759][ C0] ? do_softirq+0x200/0x200 [ 67.101267][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 67.106557][ C0] __irq_exit_rcu+0x12f/0x220 [ 67.111238][ C0] ? irq_exit_rcu+0x20/0x20 [ 67.115754][ C0] irq_exit_rcu+0x5/0x20 [ 67.120001][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 67.125639][ C0] [ 67.128565][ C0] [ 67.131491][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 67.137475][ C0] RIP: 0010:pvclock_clocksource_read+0x5b/0x760 [ 67.143720][ C0] Code: ee 03 49 8d 48 07 4c 89 c0 48 c1 e8 03 48 89 84 24 90 00 00 00 48 89 4c 24 50 48 c1 e9 03 48 89 8c 24 88 00 00 00 49 8d 49 03 <4c> 89 c8 48 c1 e8 03 48 89 84 24 80 00 00 00 48 89 4c 24 48 48 c1 [ 67.163328][ C0] RSP: 0018:ffffc9000307f7b8 EFLAGS: 00000a03 [ 67.169388][ C0] RAX: 1ffffffff1dd7e01 RBX: dffffc0000000000 RCX: ffffffff8eebf01b [ 67.177340][ C0] RDX: 1ffffffff1dd7e00 RSI: ffffffff8eebf01c RDI: ffffffff8eebf000 [ 67.185296][ C0] RBP: 00000000001d20c0 R08: ffffffff8eebf008 R09: ffffffff8eebf018 [ 67.193251][ C0] R10: ffffffff8eebf010 R11: ffffffff8eebf003 R12: 00000000000010e0 [ 67.201205][ C0] R13: ffff888017f472a8 R14: 1ffffffff1dd7e00 R15: 0000000000000001 [ 67.209174][ C0] ? __reset_page_owner+0x180/0x180 [ 67.214384][ C0] kvm_sched_clock_read+0x14/0x40 [ 67.219393][ C0] sched_clock_cpu+0x15/0x3c0 [ 67.224056][ C0] ? preempt_count_add+0x8d/0x190 [ 67.229066][ C0] __set_page_owner+0x174/0x2d0 [ 67.233903][ C0] get_page_from_freelist+0x1b77/0x1c60 [ 67.239446][ C0] ? verify_lock_unused+0x140/0x140 [ 67.244637][ C0] ? __alloc_pages+0x470/0x470 [ 67.249385][ C0] ? prepare_alloc_pages+0x368/0x5f0 [ 67.254657][ C0] __alloc_pages+0x1e1/0x470 [ 67.259235][ C0] ? zone_statistics+0x170/0x170 [ 67.264158][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 67.270123][ C0] ? alloc_pages+0x438/0x550 [ 67.274696][ C0] new_slab+0xc0/0x4b0 [ 67.278747][ C0] ? kmem_cache_alloc+0x195/0x290 [ 67.283751][ C0] ___slab_alloc+0x81e/0xdf0 [ 67.288325][ C0] ? getname_flags+0xb5/0x500 [ 67.292987][ C0] ? getname_flags+0xb5/0x500 [ 67.297643][ C0] kmem_cache_alloc+0x195/0x290 [ 67.302476][ C0] getname_flags+0xb5/0x500 [ 67.306961][ C0] do_sys_openat2+0xcf/0x4a0 [ 67.311535][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 67.316550][ C0] ? do_sys_open+0xe0/0xe0 [ 67.320950][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 67.326920][ C0] ? lock_chain_count+0x20/0x20 [ 67.331846][ C0] ? vtime_user_exit+0x2dc/0x400 [ 67.336769][ C0] __x64_sys_openat+0x135/0x160 [ 67.341606][ C0] do_syscall_64+0x4c/0xa0 [ 67.346004][ C0] ? clear_bhb_loop+0x30/0x80 [ 67.350663][ C0] ? clear_bhb_loop+0x30/0x80 [ 67.355322][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.361204][ C0] RIP: 0033:0x7fb0f07df407 [ 67.365603][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 67.385188][ C0] RSP: 002b:00007ffe38e44070 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 67.393585][ C0] RAX: ffffffffffffffda RBX: 00007fb0f06f1880 RCX: 00007fb0f07df407 [ 67.401539][ C0] RDX: 0000000000080241 RSI: 00007ffe38e445d0 RDI: ffffffffffffff9c [ 67.409492][ C0] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 67.417446][ C0] R10: 00000000000001b6 R11: 0000000000000202 R12: 0000564cab0b0dfc [ 67.425399][ C0] R13: 0000564cab0b0dfc R14: 0000000000000001 R15: 0000564cab0cb140 [ 67.433363][ C0] [ 67.436545][ C0] Kernel Offset: disabled [ 67.440989][ C0] Rebooting in 86400 seconds..