last executing test programs: 14.158737098s ago: executing program 1 (id=122): r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000003040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000003080)='1\x00', 0x1) setfsgid(0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'veth1_to_bond\x00'}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) read$FUSE(r5, &(0x7f0000002080)={0x2020}, 0x2020) 12.029436971s ago: executing program 1 (id=131): socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000004c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x7f, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "754b9297d2f7d6ead1a8c625a6027c3da33ee7e67c5272bc672d774f827eecc0", "662cace2cd9bd233ecc708562880f2ed3e7915338888a348911f971c4561b852748b7796a4206c69face32b5aee53bea", "f239aecfba4b4ca42238c094d7c4c11f8264d679933e923937f3dbea", {"6bf7792a72a9a6bbc653880fadc8e4f6", "74281f809ca35bb7b5e2ab813678f21e"}}}}}}}, 0x0) socket(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0x12, 0x4, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 11.450314345s ago: executing program 1 (id=132): syz_io_uring_setup(0x29c, &(0x7f0000000300)={0x0, 0x14ba, 0x8, 0x1, 0x133}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x5}, 0x2) syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="010026bd7000fedbdf2504000000140001800f0001006574683a6e6963766630d2"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x810) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="611550000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r7, 0x0, 0x7}, 0x38) 8.413175761s ago: executing program 1 (id=135): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 8.216965792s ago: executing program 1 (id=137): syz_io_uring_setup(0x78b8, &(0x7f0000000240)={0x0, 0xca13, 0x3380, 0xffffffff, 0x400250}, &(0x7f0000000340), &(0x7f0000000040)) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0xe3, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b200, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0xc0105702, &(0x7f0000000040)=0x8001) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) 8.189825154s ago: executing program 2 (id=138): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) socket$inet6_sctp(0xa, 0x1, 0x84) 7.489824955s ago: executing program 0 (id=139): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/net\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$TUNSETIFF(r0, 0xb701, 0x0) 7.322963414s ago: executing program 4 (id=140): openat$vicodec1(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsmount(0xffffffffffffffff, 0x0, 0x83) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd, 0x5062}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 5.85964689s ago: executing program 2 (id=141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) 5.85917813s ago: executing program 4 (id=142): socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000004c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x7f, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "754b9297d2f7d6ead1a8c625a6027c3da33ee7e67c5272bc672d774f827eecc0", "662cace2cd9bd233ecc708562880f2ed3e7915338888a348911f971c4561b852748b7796a4206c69face32b5aee53bea", "f239aecfba4b4ca42238c094d7c4c11f8264d679933e923937f3dbea", {"6bf7792a72a9a6bbc653880fadc8e4f6", "74281f809ca35bb7b5e2ab813678f21e"}}}}}}}, 0x0) socket(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0x12, 0x4, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 5.85856246s ago: executing program 0 (id=143): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) syz_emit_ethernet(0x6c, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1a, 0x9, 0x802, 0x9, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) pipe(&(0x7f0000000000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x40000000015, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x5, 0xfffffffffffffffd, 0xd, 0x0, 0x80000004}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x6, 0x0, 0xc0, 0x80000002}, 0x0, 0x0) 5.749042216s ago: executing program 4 (id=144): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000002d40)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) 5.695287399s ago: executing program 2 (id=145): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) close(0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={r2, 0x0, 0x0, 0x4000}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5.631400883s ago: executing program 4 (id=146): syz_io_uring_setup(0x29c, &(0x7f0000000300)={0x0, 0x14ba, 0x8, 0x1, 0x133}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x5}, 0x2) syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="010026bd7000fedbdf2504000000140001800f0001006574683a6e6963766630d2"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x810) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r7, 0x0, 0x7}, 0x38) 4.1379732s ago: executing program 1 (id=147): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003b8d7fafb3bdc508dfae68da7702fb12636a35ff23c9a4985967164edb27918ad9120b1d645ded0c3b0801b8c39bfbb957e61bf9b573de769ceffa58ba5cdc793454a0012ebe165f445db4126a642af1ee3d4ed9db347239ddfd3eee43fba7814feaa963ce684d928f24d1b466d2601be83d90698581b4ed888f7e47fefbb2daecd1417d1d2175c571"], 0x50) 4.12338386s ago: executing program 3 (id=148): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 4.056260504s ago: executing program 3 (id=149): setresuid(0xee01, 0xee00, 0x0) keyctl$clear(0x16, 0x0) 3.885820624s ago: executing program 3 (id=150): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, &(0x7f0000000000)=0x3) readv(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/69, 0x45}], 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000005c0)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x2, 0x8, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000600)={r6}) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, 0x0) accept4$unix(r2, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x80800) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28400, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40046f41, &(0x7f0000000440)=0x1f) sendto$inet(r0, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3.845905846s ago: executing program 2 (id=151): r0 = socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r3, &(0x7f0000000040), &(0x7f0000000480)=ANY=[], 0xa, 0x0) fsetxattr$security_ima(r3, &(0x7f0000000080), &(0x7f0000000280)=ANY=[@ANYBLOB="048c0d9c8b7c7b646154d8582684cd0c0000003644"], 0x2, 0x2) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000880)="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", 0x1c5}], 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x65, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x6a) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r5, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) add_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, r4) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000140)={0x0, "cffe19ec022eb76d3e248a5269ce58ab564c06db7cfbd12551843332628d7e32807cb08518f0b570db3c0465bfeb954ca0ddbd3589b12f97b60f5fc19a1b25c0", 0x10}, 0x48, r4) sendmsg$nl_route(r0, 0x0, 0x5347ab71b5a3dc66) socket$packet(0x11, 0x3, 0x300) 3.816534598s ago: executing program 0 (id=152): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) socket$inet6_sctp(0xa, 0x1, 0x84) 2.847853774s ago: executing program 3 (id=153): r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000480)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000040)={0x1, 0xfffff800, 0x1, 0xfffffffe, 0x8, 0x107, 0x141, 0x11, 0x1, 0x44, 0x60}) 1.966234476s ago: executing program 2 (id=154): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/net\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$TUNSETIFF(r0, 0xb701, 0x0) 1.793924726s ago: executing program 3 (id=155): socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000004c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x7f, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "754b9297d2f7d6ead1a8c625a6027c3da33ee7e67c5272bc672d774f827eecc0", "662cace2cd9bd233ecc708562880f2ed3e7915338888a348911f971c4561b852748b7796a4206c69face32b5aee53bea", "f239aecfba4b4ca42238c094d7c4c11f8264d679933e923937f3dbea", {"6bf7792a72a9a6bbc653880fadc8e4f6", "74281f809ca35bb7b5e2ab813678f21e"}}}}}}}, 0x0) socket(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0x12, 0x4, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.651218914s ago: executing program 0 (id=156): openat$vicodec1(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_xfrm(0x10, 0x3, 0x6) fsmount(0xffffffffffffffff, 0x0, 0x83) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd, 0x5062}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 1.508340842s ago: executing program 3 (id=157): syz_io_uring_setup(0x78b8, &(0x7f0000000240)={0x0, 0xca13, 0x3380, 0xffffffff, 0x400250}, &(0x7f0000000340), &(0x7f0000000040)) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0xe3, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b200, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0xc0105702, &(0x7f0000000040)=0x8001) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) 777.775935ms ago: executing program 2 (id=158): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0x10, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000}, 0x64) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) 765.329365ms ago: executing program 0 (id=159): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 185.913449ms ago: executing program 0 (id=160): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xc, 0x12, r3, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000001e00)={0x2020}, 0x2020) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 68.536596ms ago: executing program 4 (id=161): r0 = syz_io_uring_setup(0x1215, &(0x7f0000000280)={0x0, 0x7d0c, 0x1, 0x4, 0x2b4}, &(0x7f0000000000), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000004cc0)={0x2, 0xe}, 0x0) 0s ago: executing program 4 (id=162): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x10) alarm(0x8000000000000001) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000700)=0xffffffff, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "02823f6bd900000000000097efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 47.645024][ T4172] cgroup: Unknown subsys name 'net' [ 47.745753][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.924182][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.674517][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 50.757395][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 50.795812][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 50.821526][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 50.851425][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 50.921781][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.928925][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.937475][ T4184] device bridge_slave_0 entered promiscuous mode [ 50.948906][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.956022][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.963909][ T4184] device bridge_slave_1 entered promiscuous mode [ 50.985387][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.992671][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.000264][ T4191] device bridge_slave_0 entered promiscuous mode [ 51.013434][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.020504][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.028527][ T4191] device bridge_slave_1 entered promiscuous mode [ 51.062417][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.086341][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.107011][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.114722][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.123167][ T4186] device bridge_slave_0 entered promiscuous mode [ 51.130404][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.137550][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.145726][ T4185] device bridge_slave_0 entered promiscuous mode [ 51.159237][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.173260][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.180314][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.188329][ T4186] device bridge_slave_1 entered promiscuous mode [ 51.195287][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.202514][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.210078][ T4185] device bridge_slave_1 entered promiscuous mode [ 51.224562][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.233797][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.241023][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.248654][ T4198] device bridge_slave_0 entered promiscuous mode [ 51.262052][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.269161][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.276886][ T4198] device bridge_slave_1 entered promiscuous mode [ 51.297865][ T4184] team0: Port device team_slave_0 added [ 51.326771][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.337478][ T4184] team0: Port device team_slave_1 added [ 51.357089][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.368341][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.379063][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.396437][ T4191] team0: Port device team_slave_0 added [ 51.403611][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.420365][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.436728][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.443771][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.469763][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.482271][ T4191] team0: Port device team_slave_1 added [ 51.488342][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.495368][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.521519][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.551755][ T4198] team0: Port device team_slave_0 added [ 51.572310][ T4185] team0: Port device team_slave_0 added [ 51.580030][ T4198] team0: Port device team_slave_1 added [ 51.591806][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.598752][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.624678][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.638854][ T4186] team0: Port device team_slave_0 added [ 51.645755][ T4185] team0: Port device team_slave_1 added [ 51.658390][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.665839][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.692190][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.704212][ T4186] team0: Port device team_slave_1 added [ 51.723946][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.730956][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.756955][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.797836][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.805153][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.831928][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.843620][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.850567][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.876780][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.894032][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.901034][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.926950][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.943453][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.950399][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.976500][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.001932][ T4184] device hsr_slave_0 entered promiscuous mode [ 52.008595][ T4184] device hsr_slave_1 entered promiscuous mode [ 52.016320][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.023418][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.049466][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.095805][ T4191] device hsr_slave_0 entered promiscuous mode [ 52.102866][ T4191] device hsr_slave_1 entered promiscuous mode [ 52.109341][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.117178][ T4191] Cannot create hsr debugfs directory [ 52.141522][ T4198] device hsr_slave_0 entered promiscuous mode [ 52.150481][ T4198] device hsr_slave_1 entered promiscuous mode [ 52.157368][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.165217][ T4198] Cannot create hsr debugfs directory [ 52.192638][ T4186] device hsr_slave_0 entered promiscuous mode [ 52.199283][ T4186] device hsr_slave_1 entered promiscuous mode [ 52.205934][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.213529][ T4186] Cannot create hsr debugfs directory [ 52.251983][ T4185] device hsr_slave_0 entered promiscuous mode [ 52.258612][ T4185] device hsr_slave_1 entered promiscuous mode [ 52.265740][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.273369][ T4185] Cannot create hsr debugfs directory [ 52.462524][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 52.469024][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 52.470863][ T4195] Bluetooth: hci3: command 0x0409 tx timeout [ 52.475896][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 52.541823][ T2312] Bluetooth: hci4: command 0x0409 tx timeout [ 52.554458][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.564689][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.578958][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.587878][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.618138][ T4198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.633826][ T4198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.648036][ T4198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.661527][ T4198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.706862][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.724047][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.733970][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.744476][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.807281][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.817077][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.828014][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.837832][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.906561][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.919286][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.957401][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.969257][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.977758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.987691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.001445][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.020018][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.031366][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.038191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.047331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.058091][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.065278][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.073556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.083009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.091696][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.098731][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.106575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.115124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.123131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.139584][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.154011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.162929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.179881][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.199489][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.213223][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.225512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.233469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.241943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.250453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.259253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.291895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.301588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.309935][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.317015][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.325403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.335426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.343990][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.351065][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.359311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.368209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.376602][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.383685][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.391657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.400349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.410062][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.417146][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.424895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.434253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.443025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.452154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.460406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.469524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.477500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.485958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.511638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.520200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.529179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.539959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.549188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.558486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.567591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.576309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.586435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.595874][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.617066][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.627688][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.645411][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.656664][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.666048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.674749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.686524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.695608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.704753][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.711835][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.719582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.728175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.736788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.745677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.754165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.762843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.771350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.779616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.787967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.796406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.807429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.815705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.824003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.832715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.841667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.866732][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.875462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.887483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.909641][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.916761][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.942714][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.963046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.973371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.990261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.006447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.025602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.060198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.082437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.093497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.101433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.111833][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.122691][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.131876][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.166958][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.177572][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.195739][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.204937][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.218810][ T1209] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.226310][ T1209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.235019][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.243866][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.252961][ T1209] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.260001][ T1209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.269275][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.286622][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.299868][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.309136][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.317672][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.335231][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.349616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.359965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.368037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.375801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.385398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.393874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.402724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.428493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.436648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.445399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.456051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.464413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.473708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.481873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.492328][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.505405][ T4184] device veth0_vlan entered promiscuous mode [ 54.515374][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.525148][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.539163][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.551329][ T4245] Bluetooth: hci3: command 0x041b tx timeout [ 54.553643][ T2312] Bluetooth: hci1: command 0x041b tx timeout [ 54.557491][ T4245] Bluetooth: hci2: command 0x041b tx timeout [ 54.574335][ T2312] Bluetooth: hci0: command 0x041b tx timeout [ 54.596617][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.623938][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.631254][ T4245] Bluetooth: hci4: command 0x041b tx timeout [ 54.638575][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.647464][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.656403][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.664044][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.674192][ T4184] device veth1_vlan entered promiscuous mode [ 54.751875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.771584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.789829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.798888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.818646][ T4191] device veth0_vlan entered promiscuous mode [ 54.833911][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.856808][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.870354][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.884390][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.898181][ T4184] device veth0_macvtap entered promiscuous mode [ 54.920287][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.928411][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.937372][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.954718][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.962400][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.969761][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.979559][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.995464][ T4191] device veth1_vlan entered promiscuous mode [ 55.008208][ T4184] device veth1_macvtap entered promiscuous mode [ 55.037676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.046893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.054994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.062681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.070099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.080518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.089188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.097154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.115836][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.125140][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.135101][ T4198] device veth0_vlan entered promiscuous mode [ 55.147030][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.158603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.166939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.176152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.185731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.195683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.206060][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.216420][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.225828][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.234784][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.243710][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.267639][ T4198] device veth1_vlan entered promiscuous mode [ 55.282674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.292534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.301404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.325082][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.334418][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.345771][ T4191] device veth0_macvtap entered promiscuous mode [ 55.378461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.387452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.396496][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.421465][ T4191] device veth1_macvtap entered promiscuous mode [ 55.438446][ T4186] device veth0_vlan entered promiscuous mode [ 55.456114][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.464605][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.473469][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.482340][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.490495][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.499675][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.535471][ T4198] device veth0_macvtap entered promiscuous mode [ 55.553939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.563091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.572573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.584548][ T4186] device veth1_vlan entered promiscuous mode [ 55.593334][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.602085][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.610152][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.620851][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.631847][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.643032][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.652805][ T4198] device veth1_macvtap entered promiscuous mode [ 55.661511][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.669471][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.691212][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.700134][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.708188][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.717128][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.727118][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.736185][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.746268][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.756761][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.768182][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.779907][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.802794][ T4185] device veth0_vlan entered promiscuous mode [ 55.813767][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.822691][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.834417][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.844028][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.853803][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.862905][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.892684][ T4185] device veth1_vlan entered promiscuous mode [ 55.908016][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.918625][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.928771][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.939489][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.951550][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.964585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.973453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.982854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.991783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.004345][ T4186] device veth0_macvtap entered promiscuous mode [ 56.021847][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.032400][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.042902][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.053500][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.066396][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.082363][ T4198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.091698][ T1209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.096557][ T4198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.099511][ T1209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.109684][ T4198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.124794][ T4198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.135650][ T4186] device veth1_macvtap entered promiscuous mode [ 56.144481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.152610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.160471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.168656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.178236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.219122][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.236011][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.247790][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.258848][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.268928][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.280195][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.291963][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.308195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.323703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.332628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.343098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.354367][ T4185] device veth0_macvtap entered promiscuous mode [ 56.365012][ T4185] device veth1_macvtap entered promiscuous mode [ 56.384891][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.397583][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.410324][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.422224][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.432194][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.442639][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.453915][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.479467][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.491523][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.501681][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.513116][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.523182][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.534262][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.544923][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.556042][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.567117][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.586056][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.596932][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.606164][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.615203][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.620880][ T2312] Bluetooth: hci0: command 0x040f tx timeout [ 56.624482][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 56.636543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.637326][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 56.645341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.650480][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 56.663303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.672763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.681837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.690421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.701894][ T4252] Bluetooth: hci4: command 0x040f tx timeout [ 56.712715][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.723830][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.733870][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.744710][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.754672][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.765187][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.775018][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.785781][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.800025][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.811366][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.820064][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.829395][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.838391][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.852072][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.870041][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.893426][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.902014][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.954815][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.976220][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.998964][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.008178][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.011330][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.037547][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.055705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.077760][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.090228][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.112557][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.143178][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.163565][ T1209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.168929][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.173762][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.189329][ T1209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.198324][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.236915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.248757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.261956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.296306][ T4260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.326482][ T4260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.368066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.411620][ T4296] device syzkaller0 entered promiscuous mode [ 57.466834][ T4302] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 57.483400][ T4301] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6'. [ 58.725117][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 58.788321][ T4245] Bluetooth: hci4: command 0x0419 tx timeout [ 59.245005][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 59.251779][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 59.257805][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 59.501418][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 59.510731][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 59.519838][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 59.551771][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 59.654203][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 59.741403][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 59.821485][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 59.858965][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 59.859923][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 60.020094][ T4330] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 60.085020][ T4332] process 'syz.2.12' launched '/dev/fd/7' with NULL argv: empty string added [ 60.096233][ T4330] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 60.438359][ T4330] capability: warning: `syz.2.12' uses deprecated v2 capabilities in a way that may be insecure [ 60.541076][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.138658][ T4339] delete_channel: no stack [ 62.173392][ T4363] bridge0: port 3(syz_tun) entered blocking state [ 62.196824][ T4363] bridge0: port 3(syz_tun) entered disabled state [ 62.227943][ T4363] device syz_tun entered promiscuous mode [ 62.277694][ T4363] bridge0: port 3(syz_tun) entered blocking state [ 62.284460][ T4363] bridge0: port 3(syz_tun) entered forwarding state [ 62.628146][ T4371] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 62.675190][ T4374] device syzkaller0 entered promiscuous mode [ 64.461560][ T4392] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 65.925343][ T4401] delete_channel: no stack [ 66.929981][ T4411] delete_channel: no stack [ 67.076765][ T4418] device syzkaller0 entered promiscuous mode [ 67.335684][ T4430] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 67.570931][ T4252] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.106382][ T4252] usb 4-1: Using ep0 maxpacket: 16 [ 69.481118][ T4252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.507575][ T4444] delete_channel: no stack [ 69.549171][ T4252] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 69.562622][ T4252] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 69.572027][ T4252] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.664135][ T4252] usb 4-1: config 0 descriptor?? [ 69.831078][ T4458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 70.138731][ T4468] netlink: 68 bytes leftover after parsing attributes in process `syz.4.57'. [ 71.008654][ T4472] binder: 4471:4472 unknown command 1074553619 [ 71.015108][ T4472] binder: 4471:4472 ioctl c0306201 2000000001c0 returned -22 [ 71.194449][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.230988][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.487108][ T4478] delete_channel: no stack [ 71.881469][ T4252] usbhid 4-1:0.0: can't add hid device: -71 [ 71.891896][ T4252] usbhid: probe of 4-1:0.0 failed with error -71 [ 72.053359][ T4252] usb 4-1: USB disconnect, device number 2 [ 72.650822][ T4481] delete_channel: no stack [ 72.833226][ T4502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'. [ 72.902306][ T4506] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.086413][ T4510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.68'. [ 73.702316][ T4510] netlink: 56 bytes leftover after parsing attributes in process `syz.3.68'. [ 73.721149][ T4516] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 74.536527][ T25] audit: type=1400 audit(1770905907.842:2): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=4520 comm="syz.4.74" [ 74.583870][ T4522] delete_channel: no stack [ 75.859018][ T4533] delete_channel: no stack [ 76.285174][ T4396] Bluetooth: (null): Invalid header checksum [ 76.302684][ T13] cfg80211: failed to load regulatory.db [ 76.406173][ T4396] Bluetooth: (null): Invalid header checksum [ 76.446696][ T4396] Bluetooth: (null): Invalid header checksum [ 76.878454][ T4559] delete_channel: no stack [ 77.129937][ T4568] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 77.136836][ T4568] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 78.358682][ T4577] sched: RT throttling activated [ 78.368269][ T4579] delete_channel: no stack [ 80.171305][ T4568] vhci_hcd vhci_hcd.0: Device attached [ 80.229300][ T4586] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.247809][ T4586] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 80.421011][ T4259] vhci_hcd: vhci_device speed not set [ 80.490791][ T4259] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 81.628798][ T4601] 9pnet_virtio: no channels available for device syz [ 82.268623][ T4570] vhci_hcd: connection reset by peer [ 82.275660][ T4260] vhci_hcd: stop threads [ 82.280187][ T4260] vhci_hcd: release socket [ 82.379041][ T4260] vhci_hcd: disconnect device [ 82.448538][ T4613] delete_channel: no stack [ 86.410994][ T4259] vhci_hcd: vhci_device speed not set [ 90.553075][ T4652] delete_channel: no stack [ 90.712399][ T4674] siw: device registration error -23 [ 93.190634][ T4699] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 97.189282][ T4717] delete_channel: no stack [ 101.029605][ T25] audit: type=1400 audit(1770905934.332:3): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=4762 comm="syz.2.151" [ 101.112816][ T4767] overlayfs: missing 'lowerdir' [ 103.137568][ T4778] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 104.839215][ T4795] [ 104.863488][ T4795] ============================= [ 104.868371][ T4795] WARNING: suspicious RCU usage [ 104.896369][ T4795] syzkaller #0 Not tainted [ 104.916493][ T4795] ----------------------------- [ 104.934226][ T4795] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 104.966535][ T4795] [ 104.966535][ T4795] other info that might help us debug this: [ 104.966535][ T4795] [ 105.007137][ T4795] [ 105.007137][ T4795] rcu_scheduler_active = 2, debug_locks = 1 [ 105.019347][ T4795] 1 lock held by syz.4.162/4795: [ 105.028048][ T4795] #0: ffffffff8d43c748 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 105.045723][ T4795] [ 105.045723][ T4795] stack backtrace: [ 105.052985][ T4795] CPU: 1 PID: 4795 Comm: syz.4.162 Not tainted syzkaller #0 [ 105.060282][ T4795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 105.070344][ T4795] Call Trace: [ 105.073622][ T4795] [ 105.076550][ T4795] dump_stack_lvl+0x188/0x250 [ 105.081247][ T4795] ? load_image+0x400/0x400 [ 105.085755][ T4795] ? show_regs_print_info+0x20/0x20 [ 105.090966][ T4795] ? lockdep_rcu_suspicious+0x110/0x180 [ 105.096515][ T4795] ? local_bh_enable+0x20/0x20 [ 105.101283][ T4795] rhltable_lookup+0x7a9/0x7c0 [ 105.106056][ T4795] ? local_bh_enable+0x20/0x20 [ 105.110833][ T4795] ? mr_mfc_find_parent+0x190/0x190 [ 105.116119][ T4795] ? mark_lock+0x94/0x320 [ 105.120451][ T4795] ? local_bh_enable+0x20/0x20 [ 105.125214][ T4795] ? mark_lock+0x94/0x320 [ 105.129525][ T4795] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 105.135485][ T4795] ? lock_chain_count+0x20/0x20 [ 105.140318][ T4795] mr_mfc_find_any_parent+0xb6/0x1e0 [ 105.145586][ T4795] ? local_bh_enable+0x20/0x20 [ 105.150330][ T4795] ip_mr_forward+0x24c/0xf90 [ 105.154907][ T4795] ipmr_mfc_add+0x23cc/0x2d40 [ 105.159834][ T4795] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 105.164750][ T4795] ? __lock_acquire+0x7d10/0x7d10 [ 105.169767][ T4795] ip_mroute_setsockopt+0xeaf/0x1250 [ 105.175039][ T4795] ? ipmr_rule_default+0x70/0x70 [ 105.179962][ T4795] ? __might_sleep+0xf0/0xf0 [ 105.184543][ T4795] ip_setsockopt+0x568/0x3130 [ 105.189211][ T4795] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 105.194580][ T4795] ? aa_sk_perm+0x7dc/0x910 [ 105.199067][ T4795] ? aa_af_perm+0x340/0x340 [ 105.203556][ T4795] ? __fget_files+0x40f/0x480 [ 105.208215][ T4795] ? aa_sock_opt_perm+0x74/0x100 [ 105.213141][ T4795] ? sock_common_setsockopt+0x32/0xb0 [ 105.218508][ T4795] ? raw_setsockopt+0xc5/0x180 [ 105.223262][ T4795] ? sock_common_recvmsg+0x1c0/0x1c0 [ 105.228557][ T4795] __sys_setsockopt+0x2bf/0x3d0 [ 105.233404][ T4795] __x64_sys_setsockopt+0xb1/0xc0 [ 105.238425][ T4795] do_syscall_64+0x4c/0xa0 [ 105.242822][ T4795] ? clear_bhb_loop+0x30/0x80 [ 105.247475][ T4795] ? clear_bhb_loop+0x30/0x80 [ 105.252138][ T4795] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.258036][ T4795] RIP: 0033:0x7f1107d58f79 [ 105.262433][ T4795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.282024][ T4795] RSP: 002b:00007f1105fb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.290421][ T4795] RAX: ffffffffffffffda RBX: 00007f1107fd2fa0 RCX: 00007f1107d58f79 [ 105.298377][ T4795] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 105.306344][ T4795] RBP: 00007f1107def7e0 R08: 000000000000003c R09: 0000000000000000 [ 105.314300][ T4795] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 105.322254][ T4795] R13: 00007f1107fd3038 R14: 00007f1107fd2fa0 R15: 00007ffdde6d9588 [ 105.330214][ T4795] [ 105.333288][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.355220][ T4795] [ 105.357723][ T4795] ============================= [ 105.363378][ T4795] WARNING: suspicious RCU usage [ 105.368516][ T4795] syzkaller #0 Not tainted [ 105.373391][ T4795] ----------------------------- [ 105.378352][ T4795] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 105.388358][ T4795] [ 105.388358][ T4795] other info that might help us debug this: [ 105.388358][ T4795] [ 105.399188][ T4795] [ 105.399188][ T4795] rcu_scheduler_active = 2, debug_locks = 1 [ 105.408233][ T4795] 1 lock held by syz.4.162/4795: [ 105.414752][ T4795] #0: ffffffff8d43c748 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 105.425158][ T4795] [ 105.425158][ T4795] stack backtrace: [ 105.432875][ T4795] CPU: 1 PID: 4795 Comm: syz.4.162 Not tainted syzkaller #0 [ 105.440264][ T4795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 105.450319][ T4795] Call Trace: [ 105.453600][ T4795] [ 105.456538][ T4795] dump_stack_lvl+0x188/0x250 [ 105.461225][ T4795] ? load_image+0x400/0x400 [ 105.465734][ T4795] ? show_regs_print_info+0x20/0x20 [ 105.470943][ T4795] ? lockdep_rcu_suspicious+0x110/0x180 [ 105.476486][ T4795] ? local_bh_enable+0x20/0x20 [ 105.481251][ T4795] rhltable_lookup+0x52a/0x7c0 [ 105.486019][ T4795] ? local_bh_enable+0x20/0x20 [ 105.490788][ T4795] ? mr_mfc_find_parent+0x190/0x190 [ 105.495983][ T4795] ? mark_lock+0x94/0x320 [ 105.500323][ T4795] ? local_bh_enable+0x20/0x20 [ 105.505094][ T4795] ? mark_lock+0x94/0x320 [ 105.509426][ T4795] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 105.515413][ T4795] ? lock_chain_count+0x20/0x20 [ 105.520295][ T4795] mr_mfc_find_any_parent+0xb6/0x1e0 [ 105.525592][ T4795] ? local_bh_enable+0x20/0x20 [ 105.530364][ T4795] ip_mr_forward+0x24c/0xf90 [ 105.534970][ T4795] ipmr_mfc_add+0x23cc/0x2d40 [ 105.539659][ T4795] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 105.544596][ T4795] ? __lock_acquire+0x7d10/0x7d10 [ 105.549654][ T4795] ip_mroute_setsockopt+0xeaf/0x1250 [ 105.554949][ T4795] ? ipmr_rule_default+0x70/0x70 [ 105.559898][ T4795] ? __might_sleep+0xf0/0xf0 [ 105.564497][ T4795] ip_setsockopt+0x568/0x3130 [ 105.569186][ T4795] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 105.574556][ T4795] ? aa_sk_perm+0x7dc/0x910 [ 105.579062][ T4795] ? aa_af_perm+0x340/0x340 [ 105.583558][ T4795] ? __fget_files+0x40f/0x480 [ 105.588237][ T4795] ? aa_sock_opt_perm+0x74/0x100 [ 105.593176][ T4795] ? sock_common_setsockopt+0x32/0xb0 [ 105.598639][ T4795] ? raw_setsockopt+0xc5/0x180 [ 105.603399][ T4795] ? sock_common_recvmsg+0x1c0/0x1c0 [ 105.608690][ T4795] __sys_setsockopt+0x2bf/0x3d0 [ 105.613550][ T4795] __x64_sys_setsockopt+0xb1/0xc0 [ 105.618580][ T4795] do_syscall_64+0x4c/0xa0 [ 105.623002][ T4795] ? clear_bhb_loop+0x30/0x80 [ 105.627672][ T4795] ? clear_bhb_loop+0x30/0x80 [ 105.632348][ T4795] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.638240][ T4795] RIP: 0033:0x7f1107d58f79 [ 105.642754][ T4795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.662360][ T4795] RSP: 002b:00007f1105fb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.670781][ T4795] RAX: ffffffffffffffda RBX: 00007f1107fd2fa0 RCX: 00007f1107d58f79 [ 105.678754][ T4795] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 105.686723][ T4795] RBP: 00007f1107def7e0 R08: 000000000000003c R09: 0000000000000000 [ 105.694692][ T4795] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 105.702755][ T4795] R13: 00007f1107fd3038 R14: 00007f1107fd2fa0 R15: 00007ffdde6d9588 [ 105.710751][ T4795] [ 105.713818][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.790735][ T4795] [ 105.793156][ T4795] ============================= [ 105.798068][ T4795] WARNING: suspicious RCU usage [ 105.841563][ T4795] syzkaller #0 Not tainted [ 105.856275][ T4795] ----------------------------- [ 105.876495][ T4795] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 105.891235][ T4795] [ 105.891235][ T4795] other info that might help us debug this: [ 105.891235][ T4795] [ 105.901953][ T4795] [ 105.901953][ T4795] rcu_scheduler_active = 2, debug_locks = 1 [ 105.915194][ T4795] 1 lock held by syz.4.162/4795: [ 105.920292][ T4795] #0: ffffffff8d43c748 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 105.940664][ T4795] [ 105.940664][ T4795] stack backtrace: [ 105.950724][ T4795] CPU: 0 PID: 4795 Comm: syz.4.162 Not tainted syzkaller #0 [ 105.958035][ T4795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 105.968179][ T4795] Call Trace: [ 105.971462][ T4795] [ 105.974393][ T4795] dump_stack_lvl+0x188/0x250 [ 105.979077][ T4795] ? load_image+0x400/0x400 [ 105.983587][ T4795] ? show_regs_print_info+0x20/0x20 [ 105.988796][ T4795] ? lockdep_rcu_suspicious+0x110/0x180 [ 105.994355][ T4795] ? local_bh_enable+0x20/0x20 [ 105.999123][ T4795] rhltable_lookup+0x61e/0x7c0 [ 106.003893][ T4795] ? local_bh_enable+0x20/0x20 [ 106.008674][ T4795] ? mr_mfc_find_parent+0x190/0x190 [ 106.013877][ T4795] ? mark_lock+0x94/0x320 [ 106.018212][ T4795] ? local_bh_enable+0x20/0x20 [ 106.022982][ T4795] ? mark_lock+0x94/0x320 [ 106.027318][ T4795] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 106.033304][ T4795] ? lock_chain_count+0x20/0x20 [ 106.038164][ T4795] mr_mfc_find_any_parent+0xb6/0x1e0 [ 106.043456][ T4795] ? local_bh_enable+0x20/0x20 [ 106.048230][ T4795] ip_mr_forward+0x24c/0xf90 [ 106.052843][ T4795] ipmr_mfc_add+0x23cc/0x2d40 [ 106.057538][ T4795] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 106.062477][ T4795] ? __lock_acquire+0x7d10/0x7d10 [ 106.067526][ T4795] ip_mroute_setsockopt+0xeaf/0x1250 [ 106.072830][ T4795] ? ipmr_rule_default+0x70/0x70 [ 106.077785][ T4795] ? __might_sleep+0xf0/0xf0 [ 106.082381][ T4795] ip_setsockopt+0x568/0x3130 [ 106.087064][ T4795] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 106.092444][ T4795] ? aa_sk_perm+0x7dc/0x910 [ 106.096957][ T4795] ? aa_af_perm+0x340/0x340 [ 106.101457][ T4795] ? __fget_files+0x40f/0x480 [ 106.106139][ T4795] ? aa_sock_opt_perm+0x74/0x100 [ 106.111083][ T4795] ? sock_common_setsockopt+0x32/0xb0 [ 106.116456][ T4795] ? raw_setsockopt+0xc5/0x180 [ 106.121220][ T4795] ? sock_common_recvmsg+0x1c0/0x1c0 [ 106.126511][ T4795] __sys_setsockopt+0x2bf/0x3d0 [ 106.131371][ T4795] __x64_sys_setsockopt+0xb1/0xc0 [ 106.136410][ T4795] do_syscall_64+0x4c/0xa0 [ 106.140828][ T4795] ? clear_bhb_loop+0x30/0x80 [ 106.145505][ T4795] ? clear_bhb_loop+0x30/0x80 [ 106.150269][ T4795] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.156161][ T4795] RIP: 0033:0x7f1107d58f79 [ 106.160582][ T4795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.180192][ T4795] RSP: 002b:00007f1105fb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 106.188613][ T4795] RAX: ffffffffffffffda RBX: 00007f1107fd2fa0 RCX: 00007f1107d58f79 [ 106.196595][ T4795] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 106.204576][ T4795] RBP: 00007f1107def7e0 R08: 000000000000003c R09: 0000000000000000 [ 106.212549][ T4795] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 106.220519][ T4795] R13: 00007f1107fd3038 R14: 00007f1107fd2fa0 R15: 00007ffdde6d9588 [ 106.228507][ T4795]