last executing test programs: 7.857134426s ago: executing program 1 (id=16): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 6.323448192s ago: executing program 1 (id=30): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x10, 0x0, &(0x7f0000000580)=[@clear_death], 0x0, 0x0, 0x0}) 6.256651393s ago: executing program 1 (id=32): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)="031f31b1f0", 0x5}], 0x1) 6.119228022s ago: executing program 1 (id=34): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000100)='V', 0x1) syz_usb_disconnect(r0) 5.843629482s ago: executing program 3 (id=39): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fanotify_init(0x81, 0x0) fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x1, 0x4, 0x2, 0x7fffd}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180"], 0xe4}}, 0x0) 4.537490209s ago: executing program 3 (id=40): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000540)={0xa800000000000000, 0xeeef0000, 0x5, 0x2, 0x6}) 4.154571989s ago: executing program 3 (id=43): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_adjtime(0x0, &(0x7f0000000000)={0x66b8, 0x80000001, 0x7, 0x2, 0x0, 0x2, 0x0, 0xfffffffffffffffa, 0x0, 0x100008, 0x2, 0x248a, 0x9, 0x7, 0x0, 0x0, 0x3ff, 0xf, 0x0, 0x4, 0x5999, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x2be, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) 4.067674338s ago: executing program 3 (id=44): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {0x6}, {0x0, 0xa}}, [@filter_kind_options=@f_flow={{0xfffffeed}, {0x4}}]}, 0x34}}, 0x4000) 3.811390087s ago: executing program 3 (id=50): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000080)=0x1, 0x200000, 0x4) 3.198688946s ago: executing program 2 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='1-1,'], 0x31) preadv(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000014c0)=""/4096, 0x1000) 2.935350256s ago: executing program 1 (id=53): pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0xc8d4) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) 2.078741604s ago: executing program 2 (id=55): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r1, &(0x7f0000002680)=[{&(0x7f0000000480)="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", 0x921}, {0x0}], 0x2, 0xf1, 0x5) 2.002216854s ago: executing program 1 (id=56): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TCSETS(r0, 0x8910, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "73195a7375845ee299572d7de2efe20f9d5a12"}) r1 = socket(0x1f, 0x1, 0x8000000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@allocspi={0xf8, 0x16, 0x1, 0x70bd25, 0x0, {{{@in6=@private1={0xfc, 0x1, '\x00', 0x7}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, {@in6=@private1, 0x2, 0x33}, @in=@rand_addr=0x64010100, {0x0, 0x0, 0x9}, {0x0, 0x8000}, {0x0, 0xfff}, 0x100000, 0x0, 0x2, 0x0, 0x0, 0x80}, 0x4, 0x3}}, 0xf8}}, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x42041) syz_usb_disconnect(r2) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000001300)) 1.751314003s ago: executing program 2 (id=57): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x1, 0x24}, 0x9c) 1.471491343s ago: executing program 0 (id=59): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9201c001800050017fd14"], 0x21) 1.331330292s ago: executing program 0 (id=60): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x200810, &(0x7f0000000240)=ANY=[@ANYBLOB="00d381c67f655a2559d29eb6892bf10aeebbc9df90ef45b8d28119848805fefae1189951a233a78b9637d45da9d54e0abef364a75cbd87895df4934f06561c2d3fb08f0dfdec93d05440296ea969bffef25943a0a483d382446e1bc00eb59b"], 0x1, 0xc3c, &(0x7f0000000d00)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81000) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) sync() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) renameat2(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.331142713s ago: executing program 2 (id=61): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000240)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000004c0)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x0) 1.215296322s ago: executing program 2 (id=62): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x100000001, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1_macvtap\x00'}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4010, 0xffffffffffffffff, 0x5e391000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f003, 0x1}) 782.508361ms ago: executing program 4 (id=65): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x800) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000580)=0x2) 732.703531ms ago: executing program 0 (id=66): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "0000001000000007", "5e1cdd4af3bd2b0da0c5bdb1bd658200", "a98ae4df", "cd3019070000002b"}, 0x38) sendto$inet6(r0, &(0x7f0000000480)='&', 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x4, 0x0) 572.456371ms ago: executing program 4 (id=67): socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0xc048aeca, &(0x7f0000000180)=ANY=[@ANYRES64=r0]) 523.001551ms ago: executing program 2 (id=68): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x130, 0x26010000, 0x0, 0x130, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@state={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 467.799801ms ago: executing program 3 (id=69): syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x7, 0x3, "f4"}, @timestamp_addr={0x44, 0xc, 0xa, 0x1, 0x0, [{@empty}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x8) r2 = socket$inet(0x2, 0x3, 0x7f) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000140)=0xfffffffa, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 346.94564ms ago: executing program 0 (id=70): r0 = io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x104}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, r3, 0x0) 346.77458ms ago: executing program 4 (id=71): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x528}}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) 272.08748ms ago: executing program 4 (id=72): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_num_supported_adv_sets={{0x5}, {0x6, 0x15}}}}, 0x8) 175.80383ms ago: executing program 4 (id=73): socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b000100746172676574000024000280100001"], 0xa0}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 95.36597ms ago: executing program 0 (id=74): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_require}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 5.64121ms ago: executing program 0 (id=75): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x1f, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) 0s ago: executing program 4 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200008d4, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6163636573b038998d9884077122733d616e792c63616368657461673d2f252d2c63616368653d6d6d61702c6c6f6f73652c00"]) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r0, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts. [ 50.744103][ T4156] cgroup: Unknown subsys name 'net' [ 50.905409][ T4156] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.217102][ T4156] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.534059][ T4173] chnl_net:caif_netlink_parms(): no params data found [ 53.576669][ T4175] chnl_net:caif_netlink_parms(): no params data found [ 53.618645][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 53.683673][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.691305][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.699153][ T4173] device bridge_slave_0 entered promiscuous mode [ 53.724652][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 53.734283][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.741429][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.749227][ T4173] device bridge_slave_1 entered promiscuous mode [ 53.821479][ T4173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.830782][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.837824][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.846895][ T4175] device bridge_slave_0 entered promiscuous mode [ 53.860429][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.867560][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.875594][ T4167] device bridge_slave_0 entered promiscuous mode [ 53.884266][ T4173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.896365][ T4177] chnl_net:caif_netlink_parms(): no params data found [ 53.904972][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.912774][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.920542][ T4175] device bridge_slave_1 entered promiscuous mode [ 53.930322][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.937363][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.945096][ T4167] device bridge_slave_1 entered promiscuous mode [ 53.987653][ T4173] team0: Port device team_slave_0 added [ 54.015084][ T4173] team0: Port device team_slave_1 added [ 54.023206][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.040411][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.058988][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.083420][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.115847][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.123070][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.131439][ T4171] device bridge_slave_0 entered promiscuous mode [ 54.148163][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.155220][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.181281][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.194909][ T4175] team0: Port device team_slave_0 added [ 54.200988][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.208063][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.216273][ T4171] device bridge_slave_1 entered promiscuous mode [ 54.225001][ T4167] team0: Port device team_slave_0 added [ 54.233013][ T4167] team0: Port device team_slave_1 added [ 54.245238][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.252408][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.278517][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.290681][ T4175] team0: Port device team_slave_1 added [ 54.346167][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.353294][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.361468][ T4177] device bridge_slave_0 entered promiscuous mode [ 54.369360][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.376946][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.384739][ T4177] device bridge_slave_1 entered promiscuous mode [ 54.392152][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.399086][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.425084][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.437511][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.447165][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.454215][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.480474][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.504825][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.511894][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.537811][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.550448][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.568934][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.576014][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.602113][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.628447][ T4173] device hsr_slave_0 entered promiscuous mode [ 54.635839][ T4173] device hsr_slave_1 entered promiscuous mode [ 54.667907][ T4171] team0: Port device team_slave_0 added [ 54.683528][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.708207][ T4171] team0: Port device team_slave_1 added [ 54.725739][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.744946][ T4175] device hsr_slave_0 entered promiscuous mode [ 54.752045][ T4175] device hsr_slave_1 entered promiscuous mode [ 54.758549][ T4175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.766369][ T4175] Cannot create hsr debugfs directory [ 54.797942][ T4167] device hsr_slave_0 entered promiscuous mode [ 54.804753][ T4167] device hsr_slave_1 entered promiscuous mode [ 54.811530][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.819074][ T4167] Cannot create hsr debugfs directory [ 54.833894][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.840925][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.867015][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.906381][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.913968][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.940286][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.953885][ T4177] team0: Port device team_slave_0 added [ 54.979236][ T4177] team0: Port device team_slave_1 added [ 55.032550][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.039612][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.065567][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.096087][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.103313][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.129541][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.154144][ T4171] device hsr_slave_0 entered promiscuous mode [ 55.160824][ T4171] device hsr_slave_1 entered promiscuous mode [ 55.167294][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.174929][ T4171] Cannot create hsr debugfs directory [ 55.190725][ T1336] Bluetooth: hci0: command 0x0409 tx timeout [ 55.262113][ T4177] device hsr_slave_0 entered promiscuous mode [ 55.268778][ T4158] Bluetooth: hci3: command 0x0409 tx timeout [ 55.275002][ T4158] Bluetooth: hci2: command 0x0409 tx timeout [ 55.281141][ T4158] Bluetooth: hci1: command 0x0409 tx timeout [ 55.287386][ T4177] device hsr_slave_1 entered promiscuous mode [ 55.293932][ T4177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.301519][ T4177] Cannot create hsr debugfs directory [ 55.344614][ T4158] Bluetooth: hci4: command 0x0409 tx timeout [ 55.429682][ T4173] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.460200][ T4173] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.473856][ T4175] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.495137][ T4173] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.504866][ T4175] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.514336][ T4173] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.528852][ T4175] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.538593][ T4175] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.581957][ T4171] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.592973][ T4171] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.625901][ T4171] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.639382][ T4171] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.688774][ T4167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.702550][ T4167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.711421][ T4167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.734255][ T4167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.757395][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.799728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.808129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.823709][ T4177] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.832557][ T4177] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.846265][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.867869][ T4177] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.877485][ T4177] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.902433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.912662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.922442][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.929607][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.938998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.959404][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.975141][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.982503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.992790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.002280][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.009318][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.017572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.027205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.035676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.045810][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.063551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.073288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.082796][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.089915][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.109456][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.132394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.141405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.150440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.158495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.166725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.177223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.185988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.195160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.204372][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.211447][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.219305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.243518][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.253562][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.262256][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.271871][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.281658][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.290575][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.298910][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.305982][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.315541][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.345465][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.354340][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.364891][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.371965][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.379668][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.389551][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.398145][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.406722][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.415450][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.423976][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.432498][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.441692][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.450280][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.458899][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.480728][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.509157][ T4173] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.519612][ T4173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.533593][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.543008][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.552611][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.561429][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.569732][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.578798][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.587381][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.629229][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.638411][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.646269][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.657167][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.671383][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.681073][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.691960][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.702455][ T4171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.716126][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.727801][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.738302][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.754133][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.779717][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.806903][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.816308][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.833039][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.850366][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.859198][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.876441][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.887718][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.906275][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.917054][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.929600][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.936698][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.953491][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.962314][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.971822][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.978867][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.986496][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.995269][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.004062][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.011148][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.019162][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.028377][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.036388][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.049556][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.063114][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.102970][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.114811][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.123747][ T1232] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.130889][ T1232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.138628][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.146966][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.154867][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.163646][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.174198][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.182942][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.191488][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.199891][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.208095][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.216731][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.225263][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.236677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.244358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.253930][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.260081][ T4205] Bluetooth: hci0: command 0x041b tx timeout [ 57.269992][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.292014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.307415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.318730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.328579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.337774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.346089][ T4208] Bluetooth: hci1: command 0x041b tx timeout [ 57.346787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.352644][ T4208] Bluetooth: hci2: command 0x041b tx timeout [ 57.366442][ T4208] Bluetooth: hci3: command 0x041b tx timeout [ 57.368204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.392825][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.406134][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.416602][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.420184][ T4205] Bluetooth: hci4: command 0x041b tx timeout [ 57.433222][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.447619][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.479096][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.502372][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.512768][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.526676][ T4173] device veth0_vlan entered promiscuous mode [ 57.562422][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.577400][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.589976][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.598721][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.608447][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.617690][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.627161][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.636315][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.644318][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.652333][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.676985][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.687194][ T4171] device veth0_vlan entered promiscuous mode [ 57.695967][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.703551][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.726863][ T4173] device veth1_vlan entered promiscuous mode [ 57.737721][ T4171] device veth1_vlan entered promiscuous mode [ 57.769879][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.778526][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.788943][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.799114][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.807394][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.815757][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.845011][ T4175] device veth0_vlan entered promiscuous mode [ 57.854326][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.863447][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.872672][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.880654][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.892231][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.905444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.915122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.924463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.932454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.953092][ T4177] device veth0_vlan entered promiscuous mode [ 57.965769][ T4175] device veth1_vlan entered promiscuous mode [ 57.977185][ T4173] device veth0_macvtap entered promiscuous mode [ 57.995728][ T4173] device veth1_macvtap entered promiscuous mode [ 58.003280][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.014065][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.023236][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.033147][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.041238][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.049609][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.058520][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.075603][ T4171] device veth0_macvtap entered promiscuous mode [ 58.087056][ T4177] device veth1_vlan entered promiscuous mode [ 58.105898][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.116893][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.125776][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.134500][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.143702][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.152444][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.161645][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.170202][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.186607][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.195435][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.206238][ T4171] device veth1_macvtap entered promiscuous mode [ 58.223142][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.231948][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.241095][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.248700][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.267946][ T4167] device veth0_vlan entered promiscuous mode [ 58.280629][ T4167] device veth1_vlan entered promiscuous mode [ 58.288244][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.295957][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.304859][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.314542][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.323137][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.331817][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.342491][ T4175] device veth0_macvtap entered promiscuous mode [ 58.349616][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.361377][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.372656][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.386665][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.398173][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.409478][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.423356][ T4173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.432892][ T4173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.442087][ T4173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.452291][ T4173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.462963][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.473655][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.482976][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.491977][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.501206][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.509567][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.518361][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.530144][ T4177] device veth0_macvtap entered promiscuous mode [ 58.541568][ T4177] device veth1_macvtap entered promiscuous mode [ 58.550451][ T4171] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.559151][ T4171] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.569251][ T4171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.578163][ T4171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.590270][ T4175] device veth1_macvtap entered promiscuous mode [ 58.626339][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.637815][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.648817][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.659556][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.671540][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.694625][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.704451][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.712703][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.721830][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.729662][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.738586][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.751552][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.763601][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.773529][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.784260][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.794684][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.805347][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.818723][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.828633][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.839384][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.850176][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.861280][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.873742][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.895123][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.906745][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.915789][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.924569][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.938262][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.949307][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.959443][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.970126][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.980737][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.991387][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.002360][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.013338][ T4175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.022860][ T4175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.032130][ T4175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.041127][ T4175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.056135][ T4177] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.066393][ T4177] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.075316][ T4177] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.084288][ T4177] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.095276][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.104256][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.113359][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.122355][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.133623][ T4167] device veth0_macvtap entered promiscuous mode [ 59.187813][ T4167] device veth1_macvtap entered promiscuous mode [ 59.204491][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.225246][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.277804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.287026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.295699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.310078][ T1232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.317981][ T1232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.327373][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.338225][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.348657][ T4208] Bluetooth: hci0: command 0x040f tx timeout [ 59.349132][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.365811][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.375622][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.386356][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.396361][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.406995][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.418191][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.420340][ T4208] Bluetooth: hci3: command 0x040f tx timeout [ 59.432855][ T4212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.441338][ T4212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.449940][ T4208] Bluetooth: hci2: command 0x040f tx timeout [ 59.451572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.456961][ T4208] Bluetooth: hci1: command 0x040f tx timeout [ 59.464335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.478548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.487576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.497731][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.500648][ T4208] Bluetooth: hci4: command 0x040f tx timeout [ 59.514939][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.525164][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.535807][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.548110][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.558588][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.568428][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.579104][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.593523][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.606573][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.616260][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.624984][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.633679][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.650120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.658643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.668748][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.687428][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.713107][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.723480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.743517][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.781324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.803526][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.817438][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.827521][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.976057][ T4242] input: syz1 as /devices/virtual/input/input5 [ 60.390479][ T1232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.403015][ T4212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.448678][ T1232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.478758][ T4212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.497633][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.509371][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.598973][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.619106][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.649447][ T405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.704023][ T405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.721499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.785972][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.089483][ T4257] loop7: detected capacity change from 0 to 16384 [ 61.131675][ T4260] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.301488][ T4264] program syz.1.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.420913][ T4158] Bluetooth: hci0: command 0x0419 tx timeout [ 61.503559][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 61.528230][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 61.587517][ T4257] loop_set_status: loop7 () has still dirty pages (nrpages=64) [ 61.608707][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 61.625655][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 61.770273][ T4263] loop_set_status: loop7 () has still dirty pages (nrpages=385) [ 61.787696][ T4283] syz.4.13 uses obsolete (PF_INET,SOCK_PACKET) [ 62.021478][ T4257] syz.0.1 (4257) used greatest stack depth: 19384 bytes left [ 62.037223][ T4295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 62.425726][ T4314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 62.449245][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 62.459768][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 62.469771][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 62.478627][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 62.487513][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 62.496352][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 62.505318][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 62.514201][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 62.523172][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 62.532106][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 62.633681][ T4316] netlink: 128 bytes leftover after parsing attributes in process `syz.0.26'. [ 62.642767][ T4316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.26'. [ 62.651529][ T4316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.26'. [ 64.261680][ T4344] netlink: 128 bytes leftover after parsing attributes in process `syz.3.39'. [ 64.271195][ T4344] netlink: 40 bytes leftover after parsing attributes in process `syz.3.39'. [ 64.281226][ T4344] netlink: 40 bytes leftover after parsing attributes in process `syz.3.39'. [ 65.211355][ T4158] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.588114][ T4350] Zero length message leads to an empty skb [ 65.759784][ T4158] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 65.770550][ T4359] 9pnet_virtio: no channels available for device syz [ 65.790400][ T4360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.44'. [ 65.816670][ T4360] qfq: no options [ 65.872605][ T4158] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 65.881513][ T4158] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 65.939613][ T4158] usb 2-1: config 0 interface 0 has no altsetting 0 [ 66.022246][ T4158] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 66.043705][ T4370] 9pnet: p9_client_clunk (4370): Trying to clunk with invalid fid [ 66.052746][ T4158] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 66.071682][ T4370] CPU: 0 PID: 4370 Comm: syz.4.49 Not tainted 5.15.177-syzkaller #0 [ 66.076692][ T4158] usb 2-1: config 0 interface 0 has no altsetting 0 [ 66.079679][ T4370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 66.079708][ T4370] Call Trace: [ 66.079716][ T4370] [ 66.102511][ T4370] dump_stack_lvl+0x1e3/0x2d0 [ 66.107215][ T4370] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 66.112855][ T4370] ? panic+0x860/0x860 [ 66.116943][ T4370] p9_client_clunk+0x2d0/0x390 [ 66.121724][ T4370] v9fs_statfs+0x170/0x4e0 [ 66.126151][ T4370] ? slab_free_freelist_hook+0xdd/0x160 [ 66.131706][ T4370] ? v9fs_drop_inode+0x120/0x120 [ 66.136649][ T4370] ? rcu_is_watching+0x11/0xa0 [ 66.141435][ T4370] vfs_statfs+0x133/0x2b0 [ 66.145781][ T4370] ovl_get_lowerstack+0x1ff/0x1fe0 [ 66.150903][ T4370] ? ovl_get_workdir+0x102/0x1350 [ 66.155943][ T4370] ? ovl_get_upper+0x5f0/0x5f0 [ 66.160717][ T4370] ? ovl_get_workdir+0x1350/0x1350 [ 66.165849][ T4370] ? __kmalloc+0x168/0x300 [ 66.170283][ T4370] ovl_fill_super+0x16d8/0x2a20 [ 66.175165][ T4370] ? ovl_mount+0x30/0x30 [ 66.179449][ T4370] ? sget+0x4b8/0x4d0 [ 66.182602][ T4158] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 66.183531][ T4370] ? free_anon_bdev+0x20/0x20 [ 66.183555][ T4370] ? ovl_mount+0x30/0x30 [ 66.198116][ T4158] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 66.201267][ T4370] mount_nodev+0x52/0xe0 [ 66.201296][ T4370] legacy_get_tree+0xeb/0x180 [ 66.220994][ T4370] ? virtio_fs_zero_page_range+0x170/0x170 [ 66.226818][ T4370] vfs_get_tree+0x88/0x270 [ 66.231243][ T4370] do_new_mount+0x2ba/0xb40 [ 66.235755][ T4370] ? do_move_mount_old+0x160/0x160 [ 66.238875][ T4158] usb 2-1: config 0 interface 0 has no altsetting 0 [ 66.240869][ T4370] ? user_path_at_empty+0x12b/0x180 [ 66.240898][ T4370] __se_sys_mount+0x2d5/0x3c0 [ 66.257294][ T4370] ? __x64_sys_mount+0xc0/0xc0 [ 66.262063][ T4370] ? syscall_enter_from_user_mode+0x2e/0x240 [ 66.268051][ T4370] ? lockdep_hardirqs_on+0x94/0x130 [ 66.273253][ T4370] ? __x64_sys_mount+0x1c/0xc0 [ 66.278034][ T4370] do_syscall_64+0x3b/0xb0 [ 66.282453][ T4370] ? clear_bhb_loop+0x15/0x70 [ 66.287142][ T4370] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.293046][ T4370] RIP: 0033:0x7f63da315da9 [ 66.297459][ T4370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.317067][ T4370] RSP: 002b:00007f63d817f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 66.325484][ T4370] RAX: ffffffffffffffda RBX: 00007f63da52efa0 RCX: 00007f63da315da9 [ 66.333455][ T4370] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 66.341427][ T4370] RBP: 00007f63da3972a0 R08: 0000000020000700 R09: 0000000000000000 [ 66.343020][ T4158] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 66.349399][ T4370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.349417][ T4370] R13: 0000000000000000 R14: 00007f63da52efa0 R15: 00007ffcb3cf3208 [ 66.349462][ T4370] [ 66.371053][ T4158] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 66.417019][ T4158] usb 2-1: config 0 interface 0 has no altsetting 0 [ 66.514005][ T4158] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 66.524525][ T4370] overlayfs: statfs failed on './file0' [ 66.537821][ T4158] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 66.571137][ T4158] usb 2-1: config 0 interface 0 has no altsetting 0 [ 66.826691][ T4158] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 66.836089][ T4158] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 66.847760][ T4158] usb 2-1: config 0 interface 0 has no altsetting 0 [ 66.920368][ T4158] usb 2-1: unable to read config index 6 descriptor/start: -71 [ 66.939775][ T4158] usb 2-1: can't read configurations, error -71 [ 67.833382][ T4387] loop4: detected capacity change from 0 to 8 [ 67.937918][ T4387] SQUASHFS error: Failed to read block 0x62b: -5 [ 67.968855][ T4387] SQUASHFS error: Unable to read metadata cache entry [629] [ 68.010334][ T4387] SQUASHFS error: Unable to read inode 0x11f [ 68.245837][ T4158] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 68.363947][ T4168] Bluetooth: Wrong link type (-22) [ 68.550632][ T4415] loop0: detected capacity change from 0 to 2048 [ 68.630874][ T4158] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 68.662621][ T4158] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 68.683431][ T4415] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 68.714150][ T4415] UDF-fs: Scanning with blocksize 512 failed [ 68.715703][ T4158] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 68.748103][ T4415] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 68.759060][ T4158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.832235][ T4391] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 69.112021][ T4158] usb 2-1: USB disconnect, device number 3 [ 69.478756][ T4433] udevd[4433]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 69.697681][ T4468] overlayfs: unrecognized mount option "verity=require" or missing value [ 69.854955][ T4475] [ 69.857465][ T4475] ============================= [ 69.866752][ T4475] WARNING: suspicious RCU usage [ 69.878824][ T4473] 9pnet_virtio: no channels available for device syz [ 69.881165][ T4449] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.911275][ T4475] 5.15.177-syzkaller #0 Not tainted [ 69.924124][ T4475] ----------------------------- [ 69.931475][ T4475] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 69.977758][ T4475] [ 69.977758][ T4475] other info that might help us debug this: [ 69.977758][ T4475] [ 70.000507][ T4475] [ 70.000507][ T4475] rcu_scheduler_active = 2, debug_locks = 1 [ 70.008771][ T4475] 1 lock held by syz.0.75/4475: [ 70.018793][ T4475] #0: ffffffff8dc42708 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x15e/0x1540 [ 70.053171][ T4475] [ 70.053171][ T4475] stack backtrace: [ 70.059349][ T4475] CPU: 0 PID: 4475 Comm: syz.0.75 Not tainted 5.15.177-syzkaller #0 [ 70.067340][ T4475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 70.077394][ T4475] Call Trace: [ 70.080673][ T4475] [ 70.083604][ T4475] dump_stack_lvl+0x1e3/0x2d0 [ 70.088321][ T4475] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 70.093982][ T4475] ? lockdep_rcu_suspicious+0x158/0x1c0 [ 70.099537][ T4475] rhltable_lookup+0x7e5/0x7f0 [ 70.104323][ T4475] ? mark_lock+0x98/0x340 [ 70.108691][ T4475] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 70.114692][ T4475] ? local_bh_enable+0x20/0x20 [ 70.119481][ T4475] ? mr_mfc_find_parent+0x190/0x190 [ 70.124707][ T4475] ? local_bh_enable+0x20/0x20 [ 70.129499][ T4475] ? print_irqtrace_events+0x210/0x210 [ 70.134962][ T4475] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 70.140950][ T4475] mr_mfc_find_any_parent+0xb4/0x1e0 [ 70.146245][ T4475] ? local_bh_enable+0x20/0x20 [ 70.151012][ T4475] ip_mr_forward+0x213/0x1010 [ 70.155703][ T4475] ? ipmr_mfc_add+0x1e9b/0x2df0 [ 70.160562][ T4475] ipmr_mfc_add+0x243a/0x2df0 [ 70.165275][ T4475] ? ipmr_mfc_delete+0x660/0x660 [ 70.170219][ T4475] ? futex_wait+0x634/0x740 [ 70.174756][ T4475] ip_mroute_setsockopt+0xfa9/0x1540 [ 70.180068][ T4475] ? ipmr_rule_default+0x70/0x70 [ 70.185068][ T4475] ip_setsockopt+0x5b3/0x3fb0 [ 70.189764][ T4475] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 70.195153][ T4475] ? aa_af_perm+0x350/0x350 [ 70.199663][ T4475] ? __fget_files+0x413/0x480 [ 70.204361][ T4475] ? aa_sock_opt_perm+0x79/0x110 [ 70.209309][ T4475] ? sock_common_setsockopt+0x33/0xc0 [ 70.214717][ T4475] ? raw_setsockopt+0x100/0x180 [ 70.219575][ T4475] ? sock_common_recvmsg+0x240/0x240 [ 70.224884][ T4475] __sys_setsockopt+0x57e/0x990 [ 70.229749][ T4475] ? __ia32_sys_recv+0xb0/0xb0 [ 70.234528][ T4475] ? syscall_enter_from_user_mode+0x2e/0x240 [ 70.240520][ T4475] __x64_sys_setsockopt+0xb1/0xc0 [ 70.245559][ T4475] do_syscall_64+0x3b/0xb0 [ 70.249985][ T4475] ? clear_bhb_loop+0x15/0x70 [ 70.254663][ T4475] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.260593][ T4475] RIP: 0033:0x7f529b325da9 [ 70.265017][ T4475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.284625][ T4475] RSP: 002b:00007f529918f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 70.293045][ T4475] RAX: ffffffffffffffda RBX: 00007f529b53efa0 RCX: 00007f529b325da9 [ 70.301023][ T4475] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000004 [ 70.309001][ T4475] RBP: 00007f529b3a72a0 R08: 000000000000003c R09: 0000000000000000 [ 70.316980][ T4475] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000000 [ 70.324953][ T4475] R13: 0000000000000000 R14: 00007f529b53efa0 R15: 00007ffc1ba7ab88 [ 70.332945][ T4475] [ 70.345159][ T4475] [ 70.347604][ T4475] ============================= [ 70.352939][ T4475] WARNING: suspicious RCU usage [ 70.357941][ T4475] 5.15.177-syzkaller #0 Not tainted [ 70.363717][ T4475] ----------------------------- [ 70.368791][ T4475] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 70.377853][ T4475] [ 70.377853][ T4475] other info that might help us debug this: [ 70.377853][ T4475] [ 70.388797][ T4475] [ 70.388797][ T4475] rcu_scheduler_active = 2, debug_locks = 1 [ 70.405424][ T4475] 1 lock held by syz.0.75/4475: [ 70.412743][ T4475] #0: ffffffff8dc42708 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x15e/0x1540 [ 70.430766][ T4475] [ 70.430766][ T4475] stack backtrace: [ 70.444132][ T4475] CPU: 0 PID: 4475 Comm: syz.0.75 Not tainted 5.15.177-syzkaller #0 [ 70.452118][ T4475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 70.462168][ T4475] Call Trace: [ 70.465445][ T4475] [ 70.468376][ T4475] dump_stack_lvl+0x1e3/0x2d0 [ 70.473092][ T4475] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 70.478742][ T4475] ? lockdep_rcu_suspicious+0x158/0x1c0 [ 70.484304][ T4475] rhltable_lookup+0x582/0x7f0 [ 70.489096][ T4475] ? local_bh_enable+0x20/0x20 [ 70.493875][ T4475] ? mr_mfc_find_parent+0x190/0x190 [ 70.499082][ T4475] ? local_bh_enable+0x20/0x20 [ 70.503862][ T4475] ? print_irqtrace_events+0x210/0x210 [ 70.509326][ T4475] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 70.515319][ T4475] mr_mfc_find_any_parent+0xb4/0x1e0 [ 70.520614][ T4475] ? local_bh_enable+0x20/0x20 [ 70.525383][ T4475] ip_mr_forward+0x213/0x1010 [ 70.530069][ T4475] ? ipmr_mfc_add+0x1e9b/0x2df0 [ 70.534922][ T4475] ipmr_mfc_add+0x243a/0x2df0 [ 70.539612][ T4475] ? ipmr_mfc_delete+0x660/0x660 [ 70.544548][ T4475] ? futex_wait+0x634/0x740 [ 70.549087][ T4475] ip_mroute_setsockopt+0xfa9/0x1540 [ 70.554397][ T4475] ? ipmr_rule_default+0x70/0x70 [ 70.559365][ T4475] ip_setsockopt+0x5b3/0x3fb0 [ 70.564158][ T4475] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 70.569547][ T4475] ? aa_af_perm+0x350/0x350 [ 70.574056][ T4475] ? __fget_files+0x413/0x480 [ 70.578744][ T4475] ? aa_sock_opt_perm+0x79/0x110 [ 70.583698][ T4475] ? sock_common_setsockopt+0x33/0xc0 [ 70.589075][ T4475] ? raw_setsockopt+0x100/0x180 [ 70.593934][ T4475] ? sock_common_recvmsg+0x240/0x240 [ 70.599224][ T4475] __sys_setsockopt+0x57e/0x990 [ 70.604090][ T4475] ? __ia32_sys_recv+0xb0/0xb0 [ 70.608866][ T4475] ? syscall_enter_from_user_mode+0x2e/0x240 [ 70.614862][ T4475] __x64_sys_setsockopt+0xb1/0xc0 [ 70.619892][ T4475] do_syscall_64+0x3b/0xb0 [ 70.624321][ T4475] ? clear_bhb_loop+0x15/0x70 [ 70.629004][ T4475] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.634908][ T4475] RIP: 0033:0x7f529b325da9 [ 70.639329][ T4475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.658948][ T4475] RSP: 002b:00007f529918f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 70.667378][ T4475] RAX: ffffffffffffffda RBX: 00007f529b53efa0 RCX: 00007f529b325da9 [ 70.675346][ T4475] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000004 [ 70.683315][ T4475] RBP: 00007f529b3a72a0 R08: 000000000000003c R09: 0000000000000000 [ 70.691284][ T4475] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000000 [ 70.699256][ T4475] R13: 0000000000000000 R14: 00007f529b53efa0 R15: 00007ffc1ba7ab88 [ 70.707248][ T4475] [ 70.738713][ T4475] [ 70.741131][ T4475] ============================= [ 70.760776][ T4475] WARNING: suspicious RCU usage [ 70.767683][ T4475] 5.15.177-syzkaller #0 Not tainted [ 70.773204][ T4475] ----------------------------- [ 70.778054][ T4475] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 70.787059][ T4475] [ 70.787059][ T4475] other info that might help us debug this: [ 70.787059][ T4475] [ 70.797707][ T4475] [ 70.797707][ T4475] rcu_scheduler_active = 2, debug_locks = 1 [ 70.805914][ T4475] 1 lock held by syz.0.75/4475: [ 70.810766][ T4475] #0: ffffffff8dc42708 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x15e/0x1540 [ 70.820707][ T4475] [ 70.820707][ T4475] stack backtrace: [ 70.831853][ T4475] CPU: 0 PID: 4475 Comm: syz.0.75 Not tainted 5.15.177-syzkaller #0 [ 70.839841][ T4475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 70.849893][ T4475] Call Trace: [ 70.853173][ T4475] [ 70.856100][ T4475] dump_stack_lvl+0x1e3/0x2d0 [ 70.860787][ T4475] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 70.866430][ T4475] ? lockdep_rcu_suspicious+0x158/0x1c0 [ 70.871982][ T4475] rhltable_lookup+0x676/0x7f0 [ 70.876759][ T4475] ? local_bh_enable+0x20/0x20 [ 70.881526][ T4475] ? mr_mfc_find_parent+0x190/0x190 [ 70.886737][ T4475] ? local_bh_enable+0x20/0x20 [ 70.891520][ T4475] ? print_irqtrace_events+0x210/0x210 [ 70.896988][ T4475] ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0 [ 70.903057][ T4475] mr_mfc_find_any_parent+0xb4/0x1e0 [ 70.908352][ T4475] ? local_bh_enable+0x20/0x20 [ 70.913129][ T4475] ip_mr_forward+0x213/0x1010 [ 70.917812][ T4475] ? ipmr_mfc_add+0x1e9b/0x2df0 [ 70.922667][ T4475] ipmr_mfc_add+0x243a/0x2df0 [ 70.927363][ T4475] ? ipmr_mfc_delete+0x660/0x660 [ 70.932302][ T4475] ? futex_wait+0x634/0x740 [ 70.936836][ T4475] ip_mroute_setsockopt+0xfa9/0x1540 [ 70.942147][ T4475] ? ipmr_rule_default+0x70/0x70 [ 70.947119][ T4475] ip_setsockopt+0x5b3/0x3fb0 [ 70.951810][ T4475] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 70.957207][ T4475] ? aa_af_perm+0x350/0x350 [ 70.961717][ T4475] ? __fget_files+0x413/0x480 [ 70.966383][ T4475] ? aa_sock_opt_perm+0x79/0x110 [ 70.971303][ T4475] ? sock_common_setsockopt+0x33/0xc0 [ 70.976679][ T4475] ? raw_setsockopt+0x100/0x180 [ 70.981513][ T4475] ? sock_common_recvmsg+0x240/0x240 [ 70.986799][ T4475] __sys_setsockopt+0x57e/0x990 [ 70.991639][ T4475] ? __ia32_sys_recv+0xb0/0xb0 [ 70.996392][ T4475] ? syscall_enter_from_user_mode+0x2e/0x240 [ 71.002360][ T4475] __x64_sys_setsockopt+0xb1/0xc0 [ 71.007368][ T4475] do_syscall_64+0x3b/0xb0 [ 71.011764][ T4475] ? clear_bhb_loop+0x15/0x70 [ 71.016445][ T4475] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.022343][ T4475] RIP: 0033:0x7f529b325da9 [ 71.026743][ T4475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.046330][ T4475] RSP: 002b:00007f529918f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 71.054737][ T4475] RAX: ffffffffffffffda RBX: 00007f529b53efa0 RCX: 00007f529b325da9 [ 71.062710][ T4475] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000004 [ 71.070669][ T4475] RBP: 00007f529b3a72a0 R08: 000000000000003c R09: 0000000000000000 [ 71.078638][ T4475] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000000 [ 71.086615][ T4475] R13: 0000000000000000 R14: 00007f529b53efa0 R15: 00007ffc1ba7ab88 [ 71.094587][ T4475] [ 71.393836][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.400401][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.883776][ T1111] cfg80211: failed to load regulatory.db