last executing test programs: 12.119595452s ago: executing program 3 (id=4): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000001300)=""/4100, 0x1004}], 0x1, 0x8c0, 0x2bd6) 10.792240373s ago: executing program 2 (id=3): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x1, 0x900, 0x0, 0xfffffffc}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x40000000000009a, 0x10100, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2b) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$uac2(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x82, 0x199) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, 0x0, 0x0) 9.91372099s ago: executing program 3 (id=7): openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x48840) syz_emit_ethernet(0x52, &(0x7f0000000640)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts={0x33}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000906033e31442b0000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700060000000c000180080001400a0101010c00028008000140200000000c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 7.565578393s ago: executing program 2 (id=12): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f00000000c0)=[{0x2416, 0x0, 0x0, 0x0}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.934007729s ago: executing program 1 (id=16): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfc, 0xfffffe0000000001, 0xf, 0xffffffff}, 0x0) fsopen(0x0, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x1, 0x4}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, 0x0}, 0x4048043) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x4400c800) 5.43235886s ago: executing program 4 (id=19): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004000001000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xfe5, &(0x7f0000001840)=""/4069, 0x0, 0x2}, 0x94) 5.295235413s ago: executing program 4 (id=20): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) 5.229273574s ago: executing program 3 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="95e1e8633bf1"}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 4.981560716s ago: executing program 3 (id=22): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000200)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e25, 0x8}}}}}, 0x0) 4.962307299s ago: executing program 4 (id=23): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) creat(0x0, 0xecf86c37d53049cc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 4.878243073s ago: executing program 1 (id=24): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) getresuid(&(0x7f0000000100), 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x6, &(0x7f0000000700)=ANY=[@ANYRESHEX=r4], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.801618176s ago: executing program 3 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x111080, 0x41) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 4.721135659s ago: executing program 3 (id=26): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_bond\x00', 0x1000}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x200000000005, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0x800, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000140)={&(0x7f0000000000)=""/120, 0x78}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x101, 0xffffffffffffffff, 0x6, 0xfa11, 0xffefffff}, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x50080, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, 0x0, 0x0, 0x1000000000) syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009050d00000000000009050a02"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x86) fchdir(r7) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0\x00') rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1f00, 0x12) 3.959308067s ago: executing program 4 (id=29): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) madvise(&(0x7f000078a000/0x2000)=nil, 0x2000, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(&(0x7f0000000240)='fuse\x00', 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r2, 0x0, 0x0, 0x1000000000fe, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c060000) rt_sigqueueinfo(0x0, 0x21, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/time_for_children\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.794715922s ago: executing program 2 (id=35): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a0004000100080017"], 0x3c}}, 0x8000) 2.62558977s ago: executing program 1 (id=36): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) unshare(0x24060400) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='ip_vti0\x00', 0x54) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x4, 0x0, 0x3, r3}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x80000}) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r6, 0x9, 0x4) 2.537635395s ago: executing program 2 (id=37): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0x20044001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'veth0_to_bridge\x00', {}, 0x9}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0) 2.342110647s ago: executing program 0 (id=38): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 2.340417698s ago: executing program 1 (id=39): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000100), 0x48) 2.212666299s ago: executing program 0 (id=40): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0x324e4000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, 0x0) 2.121648164s ago: executing program 1 (id=41): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000380)={"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"}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.030068199s ago: executing program 0 (id=42): socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) 1.867004457s ago: executing program 4 (id=43): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000200)={0x6deb, 0x0, r2, 0xfbfbfbfb}) 1.697408785s ago: executing program 4 (id=44): ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0x1d3) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x8000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x2, 0x3, 0xf8) sendto$unix(r3, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x90, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x60, 0x2, [@TCA_CGROUP_ACT={0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80000000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xfffffa3c, 0x3f, 0x4, 0x80000001}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x3f}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x90}}, 0x20040054) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r10 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r10, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1}) 328.507094ms ago: executing program 1 (id=45): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0x6, 0x4) socket(0x1d, 0x80802, 0x6) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x183902, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000016c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000180)={0x4, 0x0, 0x1, 0x4, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x5, 0x8000000003, 0x80000005, 0xfffffffffffffffc}, 0x0, 0x0) 191.270527ms ago: executing program 0 (id=46): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a300000000009"], 0x110}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80005, 0x6, 0x20009c}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}], 0x1}, 0x0) 89.425474ms ago: executing program 0 (id=47): bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffcbf) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) syz_mount_image$fuse(0x0, 0x0, 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x0) getdents64(r1, &(0x7f0000000340)=""/214, 0xd6) fcntl$notify(0xffffffffffffffff, 0x402, 0x21) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)=@getqdisc={0x34, 0x26, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xf, 0xfff1}, {0x5, 0xc}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x41) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 88.966544ms ago: executing program 2 (id=48): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) recvmsg(r1, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x10000) 0s ago: executing program 0 (id=49): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. [ 64.563363][ T4172] cgroup: Unknown subsys name 'net' [ 64.694046][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.181101][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.165767][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 68.234738][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 68.263982][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 68.338311][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 68.377802][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.385219][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.394059][ T4185] device bridge_slave_0 entered promiscuous mode [ 68.406389][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.413922][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.422016][ T4185] device bridge_slave_1 entered promiscuous mode [ 68.458045][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.465229][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.473835][ T4194] device bridge_slave_0 entered promiscuous mode [ 68.481187][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 68.505122][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.512391][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.520953][ T4194] device bridge_slave_1 entered promiscuous mode [ 68.549812][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.556997][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.565013][ T4192] device bridge_slave_0 entered promiscuous mode [ 68.587481][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.599103][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.613900][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.621240][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.630003][ T4192] device bridge_slave_1 entered promiscuous mode [ 68.644050][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.661838][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.721161][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.735810][ T4185] team0: Port device team_slave_0 added [ 68.745623][ T4194] team0: Port device team_slave_0 added [ 68.751931][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.759832][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.767831][ T4193] device bridge_slave_0 entered promiscuous mode [ 68.776831][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.798015][ T4185] team0: Port device team_slave_1 added [ 68.813237][ T4194] team0: Port device team_slave_1 added [ 68.819575][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.826728][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.834904][ T4193] device bridge_slave_1 entered promiscuous mode [ 68.898919][ T4192] team0: Port device team_slave_0 added [ 68.908453][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.918987][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.927685][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.955044][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.967031][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.974566][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.983069][ T4184] device bridge_slave_0 entered promiscuous mode [ 68.991385][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.998638][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.025982][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.040297][ T4192] team0: Port device team_slave_1 added [ 69.048192][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.064752][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.072335][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.099224][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.110747][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.118308][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.126423][ T4184] device bridge_slave_1 entered promiscuous mode [ 69.134399][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.141945][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.169703][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.220996][ T4193] team0: Port device team_slave_0 added [ 69.229682][ T4193] team0: Port device team_slave_1 added [ 69.251672][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.261571][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.268944][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.295789][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.322599][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.330227][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.356919][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.380467][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.390626][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.397993][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.425354][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.448702][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.455690][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.483153][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.524138][ T4185] device hsr_slave_0 entered promiscuous mode [ 69.531059][ T4185] device hsr_slave_1 entered promiscuous mode [ 69.559373][ T4194] device hsr_slave_0 entered promiscuous mode [ 69.566771][ T4194] device hsr_slave_1 entered promiscuous mode [ 69.573602][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.581398][ T4194] Cannot create hsr debugfs directory [ 69.589127][ T4184] team0: Port device team_slave_0 added [ 69.633041][ T4184] team0: Port device team_slave_1 added [ 69.648994][ T4193] device hsr_slave_0 entered promiscuous mode [ 69.656574][ T4193] device hsr_slave_1 entered promiscuous mode [ 69.664803][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.673211][ T4193] Cannot create hsr debugfs directory [ 69.714465][ T4192] device hsr_slave_0 entered promiscuous mode [ 69.721631][ T4192] device hsr_slave_1 entered promiscuous mode [ 69.728937][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.736504][ T4192] Cannot create hsr debugfs directory [ 69.751137][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.758371][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.785357][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.803185][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.810738][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.838441][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 69.843113][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.845344][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 69.877583][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 69.917383][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 69.930937][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 69.989607][ T4184] device hsr_slave_0 entered promiscuous mode [ 69.996402][ T4184] device hsr_slave_1 entered promiscuous mode [ 70.004478][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.012816][ T4184] Cannot create hsr debugfs directory [ 70.213764][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.225290][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.244883][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.262205][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.289013][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.299709][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.317601][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.337111][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.391204][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.403712][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.413106][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.440716][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.487763][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.538293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.548057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.558119][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.568442][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.581922][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.596808][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.609155][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.638837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.655728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.666454][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.674279][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.687943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.703773][ T4193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.716712][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.727563][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.736210][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.743555][ T417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.763323][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.771154][ T4193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.782065][ T4193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.804257][ T4193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.819004][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.830571][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.839479][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.871793][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.879671][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.891364][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.902004][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.945837][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.954363][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.963562][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.976108][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.985895][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.994354][ T1327] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.001648][ T1327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.009958][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.018814][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.028410][ T1327] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.035676][ T1327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.043521][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.053276][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.062789][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.078631][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.091281][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.111467][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.126748][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.137167][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.152891][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.164606][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.173910][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.183190][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.192076][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.216301][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.227451][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.245866][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.255594][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.264841][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.280641][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.290820][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.299849][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.310141][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.346154][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.383773][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.396770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.406158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.430314][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.444345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.452547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.461215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.470271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.479214][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.486409][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.494952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.509614][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.554920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.564336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.573479][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.580825][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.591148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.600075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.609790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.619806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.628089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.637071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.648281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.661706][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.687846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.696692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.706091][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.713628][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.723081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.732610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.742009][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.749135][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.760458][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.762066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.766994][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.781768][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.792928][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.825599][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.835236][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.845333][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.853524][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.864079][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.874118][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.886969][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.903661][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.915961][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.917545][ T4225] Bluetooth: hci1: command 0x041b tx timeout [ 71.934862][ T4185] device veth0_vlan entered promiscuous mode [ 71.944977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.958091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.966867][ T4225] Bluetooth: hci0: command 0x041b tx timeout [ 71.979814][ T4225] Bluetooth: hci2: command 0x041b tx timeout [ 71.986408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.000832][ T4227] Bluetooth: hci3: command 0x041b tx timeout [ 72.007068][ T4227] Bluetooth: hci4: command 0x041b tx timeout [ 72.011876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.022049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.030192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.039062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.047314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.055720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.063874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.072885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.082649][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.109011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.119530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.130617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.140890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.168968][ T4185] device veth1_vlan entered promiscuous mode [ 72.197184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.209362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.220509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.229694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.239092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.248352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.257100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.266667][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.273861][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.282866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.291737][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.300582][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.307951][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.316720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.325713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.334711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.350998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.361256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.370302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.379571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.389698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.470963][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.482444][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.492746][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.502705][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.512027][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.521172][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.530549][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.548079][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.572662][ T4185] device veth0_macvtap entered promiscuous mode [ 72.584949][ T4185] device veth1_macvtap entered promiscuous mode [ 72.595917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.606093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.615619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.624011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.633424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.647009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.679859][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.691245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.728516][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.739538][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.755114][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.774748][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.791682][ T4194] device veth0_vlan entered promiscuous mode [ 72.809672][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.819121][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.828476][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.837207][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.846647][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.856764][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.865417][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.880988][ T4194] device veth1_vlan entered promiscuous mode [ 72.912564][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.931774][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.958376][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.983495][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.030042][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.039552][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.049294][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.059680][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.068916][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.076751][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.085004][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.093153][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.111067][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.141856][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.161289][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.171340][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.181636][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.192453][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.201172][ T4192] device veth0_vlan entered promiscuous mode [ 73.244075][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.253104][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.263778][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.276520][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.288415][ T4194] device veth0_macvtap entered promiscuous mode [ 73.317624][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.325940][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.337566][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.346459][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.357084][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.366661][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.374984][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.385164][ T4194] device veth1_macvtap entered promiscuous mode [ 73.399538][ T4192] device veth1_vlan entered promiscuous mode [ 73.411157][ T4184] device veth0_vlan entered promiscuous mode [ 73.463614][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.474372][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.489465][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.501063][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.513315][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.527135][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.542734][ T4193] device veth0_vlan entered promiscuous mode [ 73.552678][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.564454][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.574072][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.583542][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.593470][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.604177][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.613163][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.622190][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.633502][ T4184] device veth1_vlan entered promiscuous mode [ 73.646013][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.654473][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.678149][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.688199][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.699534][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.711351][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.723028][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.739741][ T4193] device veth1_vlan entered promiscuous mode [ 73.753281][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.764221][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.774689][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.803308][ T4192] device veth0_macvtap entered promiscuous mode [ 73.823478][ T4192] device veth1_macvtap entered promiscuous mode [ 73.878687][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.886788][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.898493][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.909353][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.920199][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.932038][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.951377][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.961839][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.971514][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.980327][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.989722][ T4227] Bluetooth: hci2: command 0x040f tx timeout [ 73.995750][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.996010][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 74.004879][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.010874][ T4227] Bluetooth: hci1: command 0x040f tx timeout [ 74.024183][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.033582][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.043821][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.060801][ T4184] device veth0_macvtap entered promiscuous mode [ 74.078501][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 74.085013][ T4193] device veth0_macvtap entered promiscuous mode [ 74.087405][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 74.100933][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.115295][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.125906][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.138572][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.151117][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.164725][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.176389][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.196842][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.212861][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.222555][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.232590][ T1327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.246983][ T4184] device veth1_macvtap entered promiscuous mode [ 74.257943][ T4193] device veth1_macvtap entered promiscuous mode [ 74.280541][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.290710][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.300081][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.313425][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.361836][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.406064][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.417226][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.429880][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.442030][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.453391][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.465282][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.483763][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.494953][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.505312][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.516460][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.526646][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.541558][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.555294][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.573531][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.588488][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.596630][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.605894][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.615776][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.626989][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.646638][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.656699][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.663471][ T417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.671427][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.674997][ T417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.689257][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.704705][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.716505][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.727197][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.739396][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.749637][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.757726][ T4226] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 74.760814][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.778276][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.789305][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.800699][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.821090][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.829346][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.840616][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.880313][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.891682][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.902367][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.914397][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.924671][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.935433][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.946018][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.957931][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.970326][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.999620][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.005235][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.008935][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.024988][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.034615][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.046496][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.055433][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.066211][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.075967][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.167715][ T4226] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.194461][ T4226] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 75.204211][ T4226] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 75.215415][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.240083][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.250213][ T4269] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 75.255620][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.259839][ T4226] usb 4-1: config 0 descriptor?? [ 75.275092][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.285933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.295442][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.314398][ T4226] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 75.323164][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.331692][ T4226] dvb-usb: bulk message failed: -22 (3/0) [ 75.352399][ T4226] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 75.378925][ T4226] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 75.388125][ T4226] usb 4-1: media controller created [ 75.405168][ T4226] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 75.408084][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.431013][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.444040][ T4226] dvb-usb: bulk message failed: -22 (6/0) [ 75.460136][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.467884][ T4226] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 75.483887][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.513344][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.522792][ T4226] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 75.534397][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.545110][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.564372][ T4226] dvb-usb: schedule remote query interval to 150 msecs. [ 75.565074][ T4264] dvb-usb: bulk message failed: -22 (4/0) [ 75.582160][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.586013][ T4226] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 75.590200][ T417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.666108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.684337][ T417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.734741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.743736][ T4267] dvb-usb: bulk message failed: -22 (1/0) [ 75.766750][ T4267] dvb-usb: error while querying for an remote control event. [ 75.883193][ T4277] mmap: syz.4.6 (4277) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 75.933992][ T4227] usb 4-1: USB disconnect, device number 2 [ 75.947481][ T1111] dvb-usb: bulk message failed: -22 (1/0) [ 75.960505][ T1111] dvb-usb: error while querying for an remote control event. [ 76.073423][ T4227] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 76.112446][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 76.135879][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 76.167498][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 76.189992][ T4228] Bluetooth: hci3: command 0x0419 tx timeout [ 76.232764][ T4228] Bluetooth: hci4: command 0x0419 tx timeout [ 76.270140][ T4197] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.381109][ T4278] infiniband syz1: set active [ 76.436964][ T4278] infiniband syz1: added syz_tun [ 76.527399][ T2284] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 76.548385][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 76.769224][ T4278] RDS/IB: syz1: added [ 76.782640][ T4278] smc: adding ib device syz1 with port count 1 [ 76.803896][ T4278] smc: ib device syz1 port 1 has pnetid [ 76.868690][ T4197] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 76.882791][ T4287] ODEBUG: Out of memory. ODEBUG disabled [ 76.909087][ T4197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.918858][ T4197] usb 3-1: Product: syz [ 76.937614][ T4197] usb 3-1: Manufacturer: syz [ 76.948304][ T4197] usb 3-1: SerialNumber: syz [ 76.968182][ T4197] usb 3-1: config 0 descriptor?? [ 76.997684][ T2284] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.018903][ T4197] hub 3-1:0.0: bad descriptor, ignoring hub [ 77.031618][ T4197] hub: probe of 3-1:0.0 failed with error -5 [ 77.064668][ T4281] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 77.208849][ T2284] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 77.231636][ T2284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.247490][ T4197] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 77.299230][ T4197] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 77.314856][ T2284] usb 2-1: Product: syz [ 77.337771][ T2284] usb 2-1: Manufacturer: syz [ 77.361611][ T2284] usb 2-1: SerialNumber: syz [ 77.384601][ T2284] usb 2-1: config 0 descriptor?? [ 77.391315][ T4197] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 77.405881][ T4197] usb 3-1: media controller created [ 77.439846][ T4197] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 77.449330][ T2284] usb 2-1: bad CDC descriptors [ 77.463653][ T2284] usb 2-1: unsupported MDLM descriptors [ 77.595133][ T4281] syz.0.1 (4281) used greatest stack depth: 21040 bytes left [ 77.644557][ T4197] DVB: Unable to find symbol dib7000p_attach() [ 77.653872][ T4197] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 77.798076][ T4197] rc_core: IR keymap rc-dib0700-rc5 not found [ 77.818318][ T4197] Registered IR keymap rc-empty [ 77.823453][ T4197] dvb-usb: could not initialize remote control. [ 77.866403][ T4197] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 78.318063][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.338303][ T4197] usb 3-1: USB disconnect, device number 2 [ 78.423796][ T4197] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 78.884309][ T4186] Bluetooth: hci2: hcon ffff88802be14000 sent 1 < count 2047 [ 78.893121][ T4186] Bluetooth: hci2: hcon ffff88802be14000 sent 0 < count 9 [ 79.207407][ T4197] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.267807][ T4226] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.375376][ T2284] usb 2-1: USB disconnect, device number 2 [ 79.447406][ T4197] usb 5-1: Using ep0 maxpacket: 16 [ 79.465486][ T4305] program syz.1.14 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.517465][ T4226] usb 3-1: Using ep0 maxpacket: 16 [ 79.613949][ T4197] usb 5-1: unable to get BOS descriptor or descriptor too short [ 79.642599][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 79.697599][ T4197] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.815959][ T4315] netlink: 14 bytes leftover after parsing attributes in process `syz.1.16'. [ 79.827705][ T4226] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 79.867610][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.885544][ T4226] usb 3-1: Product: syz [ 79.891063][ T4197] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 79.993907][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 80.003235][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 80.012454][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 80.021714][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 80.030927][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 80.040411][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 80.050063][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 80.059235][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 80.068746][ T4197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.078379][ T4226] usb 3-1: Manufacturer: syz [ 80.083377][ T4226] usb 3-1: SerialNumber: syz [ 80.118878][ T4197] usb 5-1: Product: syz [ 80.123168][ T4197] usb 5-1: Manufacturer: syz [ 80.148631][ T4226] usb 3-1: config 0 descriptor?? [ 80.164582][ T4197] usb 5-1: SerialNumber: syz [ 80.208017][ T4226] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 80.223633][ T4226] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 80.321187][ T4315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.352599][ T4315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.370669][ T4315] bond0 (unregistering): Released all slaves [ 80.590584][ T4197] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 80.676039][ T4197] usb 5-1: USB disconnect, device number 2 [ 80.839282][ T4226] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 80.969670][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.104556][ T4287] Set syz1 is full, maxelem 65536 reached [ 81.270571][ T4333] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.357651][ T4226] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 81.377495][ T4226] em28xx 3-1:0.0: board has no eeprom [ 81.827418][ T4226] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 81.834848][ T4351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 81.856341][ T4226] em28xx 3-1:0.0: dvb set to bulk mode. [ 81.902424][ T1111] em28xx 3-1:0.0: Binding DVB extension [ 82.317390][ T4228] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 82.717509][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 82.755368][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 82.837003][ T4368] netlink: 28 bytes leftover after parsing attributes in process `syz.4.29'. [ 82.851127][ T4368] netlink: 28 bytes leftover after parsing attributes in process `syz.4.29'. [ 83.009675][ T4368] device bridge0 entered promiscuous mode [ 83.020827][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 83.044617][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 83.073574][ T4373] delete_channel: no stack [ 83.087460][ T4301] em28xx 3-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 83.129986][ T4368] device ip6gretap0 entered promiscuous mode [ 83.138785][ T4227] usb 3-1: USB disconnect, device number 3 [ 83.157493][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 83.169786][ T4227] em28xx 3-1:0.0: Disconnecting em28xx [ 83.208693][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 83.271493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 83.315443][ T1111] em28xx 3-1:0.0: Registering input extension [ 83.346530][ T4227] em28xx 3-1:0.0: Closing input extension [ 83.384156][ T4227] em28xx 3-1:0.0: Freeing device [ 83.395925][ T26] audit: type=1326 audit(1776057729.548:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4377 comm="syz.0.34" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4434c82819 code=0x0 [ 83.511788][ T4228] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 83.524390][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.547055][ T4228] usb 4-1: Product: syz [ 83.559681][ T4228] usb 4-1: Manufacturer: syz [ 83.570945][ T4228] usb 4-1: SerialNumber: syz [ 83.598006][ T4228] usb 4-1: config 0 descriptor?? [ 83.652770][ T4228] ti_usb_3410_5052 4-1:0.0: TI USB 5052 2 port adapter converter detected [ 83.721335][ T4228] ti_usb_3410_5052 4-1:0.0: missing endpoints [ 86.508338][ T4420] [ 86.510935][ T4420] ====================================================== [ 86.518149][ T4420] WARNING: possible circular locking dependency detected [ 86.525681][ T4420] syzkaller #0 Not tainted [ 86.530181][ T4420] ------------------------------------------------------ [ 86.537292][ T4420] syz.2.48/4420 is trying to acquire lock: [ 86.543195][ T4420] ffff888058750120 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_sk_diag_fill+0xf5e/0x1ca0 [ 86.553132][ T4420] [ 86.553132][ T4420] but task is already holding lock: [ 86.561159][ T4420] ffffc900018d6510 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 86.572377][ T4420] [ 86.572377][ T4420] which lock already depends on the new lock. [ 86.572377][ T4420] [ 86.584032][ T4420] [ 86.584032][ T4420] the existing dependency chain (in reverse order) is: [ 86.593853][ T4420] [ 86.593853][ T4420] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 86.602224][ T4420] _raw_spin_lock+0x2a/0x40 [ 86.607357][ T4420] __inet_hash+0xe3/0x960 [ 86.612670][ T4420] inet_csk_listen_start+0x22f/0x320 [ 86.619707][ T4420] inet_listen+0x2e1/0x590 [ 86.625358][ T4420] __sys_listen+0x19d/0x220 [ 86.630568][ T4420] __x64_sys_listen+0x56/0x60 [ 86.635926][ T4420] do_syscall_64+0x4c/0xa0 [ 86.641891][ T4420] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.648909][ T4420] [ 86.648909][ T4420] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 86.658364][ T4420] __lock_acquire+0x2c42/0x7d10 [ 86.665038][ T4420] lock_acquire+0x19e/0x400 [ 86.671507][ T4420] mptcp_diag_get_info+0x1f2/0x9e0 [ 86.679141][ T4420] inet_sk_diag_fill+0xf5e/0x1ca0 [ 86.686144][ T4420] mptcp_diag_dump+0xce6/0x12b0 [ 86.692549][ T4420] __inet_diag_dump+0x1f6/0x380 [ 86.700415][ T4420] inet_diag_dump_compat+0x17e/0x220 [ 86.708039][ T4420] netlink_dump+0x694/0xcf0 [ 86.714947][ T4420] __netlink_dump_start+0x523/0x700 [ 86.721909][ T4420] inet_diag_rcv_msg_compat+0x207/0x420 [ 86.730377][ T4420] sock_diag_rcv_msg+0x164/0x3e0 [ 86.736478][ T4420] netlink_rcv_skb+0x1f5/0x440 [ 86.742013][ T4420] sock_diag_rcv+0x26/0x40 [ 86.747233][ T4420] netlink_unicast+0x774/0x920 [ 86.752884][ T4420] netlink_sendmsg+0x8ba/0xbe0 [ 86.758351][ T4420] ____sys_sendmsg+0x5b7/0x8f0 [ 86.763701][ T4420] ___sys_sendmsg+0x236/0x2e0 [ 86.770658][ T4420] __se_sys_sendmsg+0x1af/0x290 [ 86.776351][ T4420] do_syscall_64+0x4c/0xa0 [ 86.781480][ T4420] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.788469][ T4420] [ 86.788469][ T4420] other info that might help us debug this: [ 86.788469][ T4420] [ 86.799337][ T4420] Possible unsafe locking scenario: [ 86.799337][ T4420] [ 86.806918][ T4420] CPU0 CPU1 [ 86.812472][ T4420] ---- ---- [ 86.817847][ T4420] lock(&h->lhash2[i].lock); [ 86.822538][ T4420] lock(sk_lock-AF_INET); [ 86.829503][ T4420] lock(&h->lhash2[i].lock); [ 86.837021][ T4420] lock(sk_lock-AF_INET); [ 86.841600][ T4420] [ 86.841600][ T4420] *** DEADLOCK *** [ 86.841600][ T4420] [ 86.850304][ T4420] 6 locks held by syz.2.48/4420: [ 86.855764][ T4420] #0: ffffffff8d4466e8 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 86.865721][ T4420] #1: ffffffff8d4465a8 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x14a/0x3e0 [ 86.876485][ T4420] #2: ffff888025e84698 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 86.887309][ T4420] #3: ffffffff8d520588 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 86.898908][ T4420] #4: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 86.910160][ T4420] #5: ffffc900018d6510 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 86.922009][ T4420] [ 86.922009][ T4420] stack backtrace: [ 86.930054][ T4420] CPU: 1 PID: 4420 Comm: syz.2.48 Not tainted syzkaller #0 [ 86.937489][ T4420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 86.949205][ T4420] Call Trace: [ 86.952510][ T4420] [ 86.955743][ T4420] dump_stack_lvl+0x188/0x250 [ 86.961024][ T4420] ? load_image+0x400/0x400 [ 86.965710][ T4420] ? show_regs_print_info+0x20/0x20 [ 86.971338][ T4420] ? print_circular_bug+0x12b/0x1a0 [ 86.977284][ T4420] check_noncircular+0x296/0x330 [ 86.982583][ T4420] ? add_chain_block+0x940/0x940 [ 86.988178][ T4420] ? lockdep_lock+0xf1/0x1f0 [ 86.992970][ T4420] ? __lock_acquire+0x13bc/0x7d10 [ 86.998027][ T4420] ? mark_lock+0x94/0x320 [ 87.002647][ T4420] __lock_acquire+0x2c42/0x7d10 [ 87.007695][ T4420] ? mark_lock+0x94/0x320 [ 87.012069][ T4420] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 87.018985][ T4420] ? verify_lock_unused+0x140/0x140 [ 87.024288][ T4420] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 87.030365][ T4420] ? __local_bh_enable_ip+0xd7/0x1c0 [ 87.035771][ T4420] ? __local_bh_enable_ip+0x136/0x1c0 [ 87.041167][ T4420] ? lockdep_hardirqs_on+0x94/0x140 [ 87.046366][ T4420] ? __local_bh_enable_ip+0x136/0x1c0 [ 87.051735][ T4420] ? _local_bh_enable+0xa0/0xa0 [ 87.056639][ T4420] ? nla_put+0x130/0x1e0 [ 87.060926][ T4420] lock_acquire+0x19e/0x400 [ 87.065442][ T4420] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 87.070649][ T4420] ? read_lock_is_recursive+0x10/0x10 [ 87.076034][ T4420] ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30 [ 87.082773][ T4420] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 87.087990][ T4420] mptcp_diag_get_info+0x1f2/0x9e0 [ 87.093447][ T4420] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 87.099162][ T4420] inet_sk_diag_fill+0xf5e/0x1ca0 [ 87.104308][ T4420] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 87.109445][ T13] cfg80211: failed to load regulatory.db [ 87.110070][ T4420] ? do_raw_spin_lock+0x128/0x2f0 [ 87.121430][ T4420] ? __rwlock_init+0x140/0x140 [ 87.126449][ T4420] ? inet_diag_bc_sk+0x18b/0x1120 [ 87.131583][ T4420] mptcp_diag_dump+0xce6/0x12b0 [ 87.136436][ T4420] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 87.143062][ T4420] __inet_diag_dump+0x1f6/0x380 [ 87.148522][ T4420] inet_diag_dump_compat+0x17e/0x220 [ 87.154055][ T4420] ? inet_diag_dump_start_compat+0x20/0x20 [ 87.160138][ T4420] ? __alloc_skb+0x473/0x750 [ 87.164797][ T4420] netlink_dump+0x694/0xcf0 [ 87.169591][ T4420] ? netlink_lookup+0x1d0/0x1d0 [ 87.174656][ T4420] ? __inet_diag_dump_start+0x805/0x970 [ 87.180392][ T4420] __netlink_dump_start+0x523/0x700 [ 87.185625][ T4420] inet_diag_rcv_msg_compat+0x207/0x420 [ 87.191197][ T4420] ? inet_diag_unregister+0xb0/0xb0 [ 87.196667][ T4420] ? __mutex_trylock_common+0x155/0x260 [ 87.202352][ T4420] ? mutex_lock_io_nested+0x60/0x60 [ 87.207741][ T4420] ? __inet_diag_dump+0x380/0x380 [ 87.212966][ T4420] ? inet_diag_dump_start_compat+0x20/0x20 [ 87.218785][ T4420] ? inet_diag_dump+0x50/0x50 [ 87.223741][ T4420] ? inet_diag_unregister+0xb0/0xb0 [ 87.229270][ T4420] sock_diag_rcv_msg+0x164/0x3e0 [ 87.234436][ T4420] netlink_rcv_skb+0x1f5/0x440 [ 87.239407][ T4420] ? sock_diag_bind+0xa0/0xa0 [ 87.244321][ T4420] ? netlink_ack+0xb50/0xb50 [ 87.249179][ T4420] ? __lock_acquire+0x7d10/0x7d10 [ 87.255021][ T4420] sock_diag_rcv+0x26/0x40 [ 87.259474][ T4420] netlink_unicast+0x774/0x920 [ 87.264333][ T4420] netlink_sendmsg+0x8ba/0xbe0 [ 87.269108][ T4420] ? netlink_getsockopt+0x570/0x570 [ 87.274893][ T4420] ? aa_sock_msg_perm+0x94/0x150 [ 87.280333][ T4420] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 87.285839][ T4420] ? security_socket_sendmsg+0x7c/0xa0 [ 87.291571][ T4420] ? netlink_getsockopt+0x570/0x570 [ 87.297654][ T4420] ____sys_sendmsg+0x5b7/0x8f0 [ 87.303330][ T4420] ? __sys_sendmsg_sock+0x30/0x30 [ 87.310276][ T4420] ? import_iovec+0x6f/0xa0 [ 87.316256][ T4420] ___sys_sendmsg+0x236/0x2e0 [ 87.321296][ T4420] ? __sys_sendmsg+0x2a0/0x2a0 [ 87.326264][ T4420] ? percpu_counter_add_batch+0x13b/0x160 [ 87.332212][ T4420] __se_sys_sendmsg+0x1af/0x290 [ 87.337187][ T4420] ? __x64_sys_sendmsg+0x80/0x80 [ 87.345176][ T4420] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 87.354000][ T4420] ? lockdep_hardirqs_on+0x94/0x140 [ 87.359835][ T4420] do_syscall_64+0x4c/0xa0 [ 87.365477][ T4420] ? clear_bhb_loop+0x30/0x80 [ 87.371180][ T4420] ? clear_bhb_loop+0x30/0x80 [ 87.376206][ T4420] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.382496][ T4420] RIP: 0033:0x7f98df3ac819 [ 87.387485][ T4420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.408519][ T4420] RSP: 002b:00007f98dd606028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.417821][ T4420] RAX: ffffffffffffffda RBX: 00007f98df625fa0 RCX: 00007f98df3ac819 [ 87.426124][ T4420] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 87.434370][ T4420] RBP: 00007f98df442c91 R08: 0000000000000000 R09: 0000000000000000 [ 87.443033][ T4420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.451372][ T4420] R13: 00007f98df626038 R14: 00007f98df625fa0 R15: 00007ffe633cd4e8 [ 87.459621][ T4420] [ 87.462678][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.470618][ T4420] BUG: sleeping function called from invalid context at net/core/sock.c:3291 [ 87.480870][ T4420] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4420, name: syz.2.48 [ 87.490013][ T4420] INFO: lockdep is turned off. [ 87.494983][ T4420] Preemption disabled at: [ 87.494992][ T4420] [<0000000000000000>] 0x0 [ 87.503985][ T4420] CPU: 1 PID: 4420 Comm: syz.2.48 Not tainted syzkaller #0 [ 87.511653][ T4420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 87.521924][ T4420] Call Trace: [ 87.525308][ T4420] [ 87.528265][ T4420] dump_stack_lvl+0x188/0x250 [ 87.533177][ T4420] ? show_regs_print_info+0x20/0x20 [ 87.538483][ T4420] ? load_image+0x400/0x400 [ 87.543411][ T4420] ___might_sleep+0x493/0x610 [ 87.548126][ T4420] ? __might_sleep+0xf0/0xf0 [ 87.552818][ T4420] ? read_lock_is_recursive+0x10/0x10 [ 87.558571][ T4420] ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30 [ 87.565336][ T4420] __lock_sock_fast+0x2f/0xe0 [ 87.570524][ T4420] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 87.575771][ T4420] mptcp_diag_get_info+0x1fe/0x9e0 [ 87.581068][ T4420] inet_sk_diag_fill+0xf5e/0x1ca0 [ 87.586099][ T4420] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 87.591822][ T4420] ? do_raw_spin_lock+0x128/0x2f0 [ 87.597030][ T4420] ? __rwlock_init+0x140/0x140 [ 87.601906][ T4420] ? inet_diag_bc_sk+0x18b/0x1120 [ 87.607223][ T4420] mptcp_diag_dump+0xce6/0x12b0 [ 87.612173][ T4420] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 87.618860][ T4420] __inet_diag_dump+0x1f6/0x380 [ 87.624142][ T4420] inet_diag_dump_compat+0x17e/0x220 [ 87.629431][ T4420] ? inet_diag_dump_start_compat+0x20/0x20 [ 87.635253][ T4420] ? __alloc_skb+0x473/0x750 [ 87.639841][ T4420] netlink_dump+0x694/0xcf0 [ 87.644453][ T4420] ? netlink_lookup+0x1d0/0x1d0 [ 87.649498][ T4420] ? __inet_diag_dump_start+0x805/0x970 [ 87.655371][ T4420] __netlink_dump_start+0x523/0x700 [ 87.660761][ T4420] inet_diag_rcv_msg_compat+0x207/0x420 [ 87.666484][ T4420] ? inet_diag_unregister+0xb0/0xb0 [ 87.671964][ T4420] ? __mutex_trylock_common+0x155/0x260 [ 87.677996][ T4420] ? mutex_lock_io_nested+0x60/0x60 [ 87.683788][ T4420] ? __inet_diag_dump+0x380/0x380 [ 87.689639][ T4420] ? inet_diag_dump_start_compat+0x20/0x20 [ 87.695632][ T4420] ? inet_diag_dump+0x50/0x50 [ 87.700768][ T4420] ? inet_diag_unregister+0xb0/0xb0 [ 87.706415][ T4420] sock_diag_rcv_msg+0x164/0x3e0 [ 87.712474][ T4420] netlink_rcv_skb+0x1f5/0x440 [ 87.717346][ T4420] ? sock_diag_bind+0xa0/0xa0 [ 87.722404][ T4420] ? netlink_ack+0xb50/0xb50 [ 87.727479][ T4420] ? __lock_acquire+0x7d10/0x7d10 [ 87.732541][ T4420] sock_diag_rcv+0x26/0x40 [ 87.737147][ T4420] netlink_unicast+0x774/0x920 [ 87.742057][ T4420] netlink_sendmsg+0x8ba/0xbe0 [ 87.746933][ T4420] ? netlink_getsockopt+0x570/0x570 [ 87.752664][ T4420] ? aa_sock_msg_perm+0x94/0x150 [ 87.757693][ T4420] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 87.763164][ T4420] ? security_socket_sendmsg+0x7c/0xa0 [ 87.768613][ T4420] ? netlink_getsockopt+0x570/0x570 [ 87.773907][ T4420] ____sys_sendmsg+0x5b7/0x8f0 [ 87.778686][ T4420] ? __sys_sendmsg_sock+0x30/0x30 [ 87.783886][ T4420] ? import_iovec+0x6f/0xa0 [ 87.788462][ T4420] ___sys_sendmsg+0x236/0x2e0 [ 87.793314][ T4420] ? __sys_sendmsg+0x2a0/0x2a0 [ 87.798193][ T4420] ? percpu_counter_add_batch+0x13b/0x160 [ 87.803937][ T4420] __se_sys_sendmsg+0x1af/0x290 [ 87.809108][ T4420] ? __x64_sys_sendmsg+0x80/0x80 [ 87.814397][ T4420] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 87.821229][ T4420] ? lockdep_hardirqs_on+0x94/0x140 [ 87.826828][ T4420] do_syscall_64+0x4c/0xa0 [ 87.831466][ T4420] ? clear_bhb_loop+0x30/0x80 [ 87.836234][ T4420] ? clear_bhb_loop+0x30/0x80 [ 87.841011][ T4420] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.847092][ T4420] RIP: 0033:0x7f98df3ac819 [ 87.851720][ T4420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.872282][ T4420] RSP: 002b:00007f98dd606028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.880795][ T4420] RAX: ffffffffffffffda RBX: 00007f98df625fa0 RCX: 00007f98df3ac819 [ 87.888779][ T4420] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 87.896884][ T4420] RBP: 00007f98df442c91 R08: 0000000000000000 R09: 0000000000000000 [ 87.905137][ T4420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.913196][ T4420] R13: 00007f98df626038 R14: 00007f98df625fa0 R15: 00007ffe633cd4e8 [ 87.921169][ T4420] [ 87.924453][ C1] vkms_vblank_simulate: vblank timer overrun [ 88.163954][ T4227] usb 4-1: USB disconnect, device number 3