last executing test programs: 6.563707074s ago: executing program 4 (id=5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001981100fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 6.496283275s ago: executing program 3 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x800000068}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x0, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) 6.127423432s ago: executing program 0 (id=1): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000940)="ea6d177f4bca9fdd116cfe98efd4953a9819c23df89e1915ca87034640e03a4572c243e90b1abb18f2907a0741170177e74f7c883ffacb823f2db3515b8e6aa8a863eae7ac1773e9dd0213bd2742121b65b50995549076c9053cda2e6e3ddbb32ccf7e412a", 0x65}], 0x1}}], 0x1, 0x4048010) sendto$inet(r0, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 6.064707103s ago: executing program 4 (id=9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000640)='highspeed', 0x9) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) shutdown(r0, 0x1) 6.014342264s ago: executing program 1 (id=10): socket(0x10, 0x803, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) close(0x4) 5.973300615s ago: executing program 0 (id=11): socket$inet(0x2, 0x1, 0x0) r0 = socket(0x2c, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x1c, 0x14, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}, @nested={0x6, 0x2, 0x0, 0x1, [@generic="ecc0"]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.945131176s ago: executing program 4 (id=12): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$I2C(&(0x7f00000000c0), 0x79, 0x101) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0x0, "0000000000000000f7fcfeff000000a88000"}) r2 = syz_open_pts(r1, 0x8182) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x17) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='ip6gre0\x00', 0x10) r4 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 5.828987288s ago: executing program 2 (id=3): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 5.031833103s ago: executing program 0 (id=13): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000020303000000000040e1d0e4f36979df00000000000000100800010001000000"], 0x1c}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f0000000000)=0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) keyctl$search(0xa, r0, &(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000280)={'syz', 0x1}, r1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 4.932894995s ago: executing program 1 (id=14): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @loopback, 0xfffffffe}, 0x1c) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.485203034s ago: executing program 3 (id=15): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) 4.440937925s ago: executing program 4 (id=16): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) 3.422277444s ago: executing program 4 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYBLOB, @ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) mkdir(&(0x7f0000000100)='./control\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r6 = openat$cgroup_freezer_state(r5, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='FROZEN\x00', 0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x816744, &(0x7f0000000580)={[{@grpjquota}, {@discard}, {@norecovery}, {@noinit_itable}, {@resgid}, {@dioread_nolock}, {@usrjquota}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@dioread_lock}, {@resuid}, {@noquota}]}, 0x3, 0x46c, &(0x7f0000001380)="$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") 3.320114396s ago: executing program 3 (id=18): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 3.297481137s ago: executing program 1 (id=19): sched_setscheduler(0x0, 0x2, 0x0) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000050) 2.936295094s ago: executing program 2 (id=20): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r0}) close(r1) 2.335116325s ago: executing program 1 (id=21): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000027c0)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x4}, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="02", 0x1}], 0x1}}, {{&(0x7f0000001c80)={0xa, 0x4e23, 0x5b, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffff}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000001d40)='c', 0x1}], 0x1}}], 0x2, 0x48040) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 2.312028695s ago: executing program 3 (id=22): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e25, 0x0, @loopback, 0x18}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "e10ffd72b8f4a0e5", "4f4083a96fba33412106fa96b85e61f9", '6__P', "4c6da454b4ecb21b"}, 0x28) recvfrom$inet6(r0, &(0x7f00000005c0)=""/4, 0x4, 0x40001163, 0x0, 0x0) 2.188244148s ago: executing program 2 (id=23): socket$inet(0x2, 0x1, 0x0) r0 = socket(0x2c, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x1c, 0x14, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}, @nested={0x6, 0x2, 0x0, 0x1, [@generic="ecc0"]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.172238558s ago: executing program 0 (id=24): socket(0x10, 0x803, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) close(0x4) 2.1063665s ago: executing program 1 (id=25): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r5) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x24000000) 1.981665342s ago: executing program 4 (id=26): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$I2C(&(0x7f00000000c0), 0x79, 0x101) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0x0, "0000000000000000f7fcfeff000000a88000"}) r2 = syz_open_pts(r1, 0x8182) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x17) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='ip6gre0\x00', 0x10) r4 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1.028893641s ago: executing program 3 (id=27): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) 100.529299ms ago: executing program 3 (id=28): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) 0s ago: executing program 1 (id=29): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd']) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.205' (ED25519) to the list of known hosts. syzkaller login: [ 57.585788][ T4168] cgroup: Unknown subsys name 'net' [ 57.698983][ T4168] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.205126][ T4168] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.597743][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.718129][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.733036][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.741589][ T4186] device bridge_slave_0 entered promiscuous mode [ 60.785025][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.792213][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.801182][ T4186] device bridge_slave_1 entered promiscuous mode [ 60.818555][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 60.850630][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 60.877038][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.921223][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.967851][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 60.989507][ T4186] team0: Port device team_slave_0 added [ 61.017400][ T4186] team0: Port device team_slave_1 added [ 61.067720][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 61.078385][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.085814][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.094106][ T4182] device bridge_slave_0 entered promiscuous mode [ 61.113201][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.120207][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.146780][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.168865][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.176399][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.185529][ T4182] device bridge_slave_1 entered promiscuous mode [ 61.192803][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.199901][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.208598][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.220219][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.227516][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.236814][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.244950][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.251917][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.278586][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.354778][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.378359][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.398258][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.420749][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.430407][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.438234][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.446512][ T4193] device bridge_slave_0 entered promiscuous mode [ 61.465228][ T4186] device hsr_slave_0 entered promiscuous mode [ 61.471991][ T4186] device hsr_slave_1 entered promiscuous mode [ 61.496476][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.503862][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.511907][ T4193] device bridge_slave_1 entered promiscuous mode [ 61.530799][ T4187] team0: Port device team_slave_0 added [ 61.545929][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.553433][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.561596][ T4188] device bridge_slave_0 entered promiscuous mode [ 61.595743][ T4187] team0: Port device team_slave_1 added [ 61.603851][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.618504][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.626214][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.635214][ T4188] device bridge_slave_1 entered promiscuous mode [ 61.644705][ T4182] team0: Port device team_slave_0 added [ 61.675218][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.694740][ T4182] team0: Port device team_slave_1 added [ 61.726375][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.750702][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.757945][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.784359][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.805025][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.833344][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.840327][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.866901][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.878808][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.886429][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.912426][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.925787][ T4193] team0: Port device team_slave_0 added [ 61.949467][ T4188] team0: Port device team_slave_0 added [ 61.956150][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.963759][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.990106][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.006850][ T4193] team0: Port device team_slave_1 added [ 62.026001][ T4188] team0: Port device team_slave_1 added [ 62.054359][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.061446][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.088420][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.134304][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.141296][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.167939][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.183636][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.190625][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.217709][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.240367][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.247674][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.254654][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.262611][ T4187] Cannot create hsr debugfs directory [ 62.279654][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.287052][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.313408][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.328117][ T4182] device hsr_slave_0 entered promiscuous mode [ 62.335276][ T4182] device hsr_slave_1 entered promiscuous mode [ 62.341951][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.349623][ T4182] Cannot create hsr debugfs directory [ 62.353906][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 62.355232][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 62.361934][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 62.382768][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 62.388930][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 62.433075][ T4193] device hsr_slave_0 entered promiscuous mode [ 62.439784][ T4193] device hsr_slave_1 entered promiscuous mode [ 62.447000][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.454801][ T4193] Cannot create hsr debugfs directory [ 62.504466][ T4188] device hsr_slave_0 entered promiscuous mode [ 62.511763][ T4188] device hsr_slave_1 entered promiscuous mode [ 62.518757][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.526511][ T4188] Cannot create hsr debugfs directory [ 62.760776][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.786699][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.797204][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.810726][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.864586][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.875523][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.886906][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.900674][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.001413][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.026384][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.036645][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.047585][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.066023][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.078699][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.088319][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.105721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.114706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.124207][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.131412][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.141285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.152789][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.166580][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.179700][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.192894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.205587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.214319][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.221408][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.239425][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.249753][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.263365][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.307529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.347405][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.357552][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.368469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.378786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.399177][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.406699][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.416707][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.437610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.446738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.457945][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.489918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.498594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.507695][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.516552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.528427][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.555643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.565422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.576513][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.608003][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.619129][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.632118][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.639479][ T1225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.657549][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.690762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.700595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.714990][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.722557][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.753125][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.765436][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.784263][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.803190][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.814178][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.823517][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.833076][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.841717][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.863287][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.874871][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.900745][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.908662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.920261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.936574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.945485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.955070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.963426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.993193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.001976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.010110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.019603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.028510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.037885][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.045220][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.053410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.062227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.071061][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.078249][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.086505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.104380][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.122010][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.144672][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.154023][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.201773][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.221094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.231039][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.240257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.252334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.260552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.270067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.279728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.287859][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.295756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.306407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.315743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.328300][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.340283][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.351047][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.361317][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.390890][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.398645][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.409030][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.420060][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.427209][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.435501][ T4240] Bluetooth: hci0: command 0x041b tx timeout [ 64.441632][ T4240] Bluetooth: hci1: command 0x041b tx timeout [ 64.447801][ T4240] Bluetooth: hci2: command 0x041b tx timeout [ 64.451534][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.454422][ T4240] Bluetooth: hci3: command 0x041b tx timeout [ 64.463216][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.482164][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.489781][ T4240] Bluetooth: hci4: command 0x041b tx timeout [ 64.513864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.525856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.535993][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.543514][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.552221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.561648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.570861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.579657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.588692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.598139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.607609][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.614760][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.625687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.635252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.644232][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.651579][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.659781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.667923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.676222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.686645][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.697527][ T4186] device veth0_vlan entered promiscuous mode [ 64.706608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.735429][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.759865][ T4186] device veth1_vlan entered promiscuous mode [ 64.783583][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.798177][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.808441][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.833884][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.851547][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.861125][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.875470][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.885978][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.899015][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.908324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.933314][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.947767][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.958836][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.974593][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.016404][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.039922][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.059882][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.071587][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.080666][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.090028][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.099724][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.108417][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.117435][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.126839][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.135670][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.145179][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.157937][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.185467][ T4186] device veth0_macvtap entered promiscuous mode [ 65.198879][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.208240][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.218560][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.261277][ T4186] device veth1_macvtap entered promiscuous mode [ 65.277269][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.287375][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.295251][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.308763][ T4187] device veth0_vlan entered promiscuous mode [ 65.331828][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.344702][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.358764][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.376836][ T4187] device veth1_vlan entered promiscuous mode [ 65.386792][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.396852][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.405947][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.419377][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.450630][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.466212][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.485774][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.509289][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.520000][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.529204][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.540214][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.549599][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.557815][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.570342][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.583295][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.592452][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.602364][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.621371][ T4182] device veth0_vlan entered promiscuous mode [ 65.646552][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.655879][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.665577][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.674967][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.683577][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.698608][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.726009][ T4182] device veth1_vlan entered promiscuous mode [ 65.734824][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.743923][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.753290][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.769039][ T4187] device veth0_macvtap entered promiscuous mode [ 65.785141][ T4187] device veth1_macvtap entered promiscuous mode [ 65.806220][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.816786][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.824897][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.837198][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.861832][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.874964][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.887454][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.927301][ T4182] device veth0_macvtap entered promiscuous mode [ 65.938119][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.947110][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.957285][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.966540][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.976046][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.995985][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.011029][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.013769][ T4182] device veth1_macvtap entered promiscuous mode [ 66.027704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.038397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.047253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.057091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.066868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.076040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.117219][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.130822][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.145208][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.168654][ T4188] device veth0_vlan entered promiscuous mode [ 66.176430][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.187335][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.196470][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.207717][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.216584][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.225389][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.238590][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.252775][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.263144][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.273866][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.285741][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.300865][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.310200][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.319176][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.328665][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.350847][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.361922][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.373293][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.384230][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.385182][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.392239][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.405646][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.420247][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.432320][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.447653][ T4188] device veth1_vlan entered promiscuous mode [ 66.460239][ T4193] device veth0_vlan entered promiscuous mode [ 66.468032][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.476469][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.485332][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.494107][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.503092][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.511805][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.521338][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.529341][ T4240] Bluetooth: hci4: command 0x040f tx timeout [ 66.535910][ T4240] Bluetooth: hci3: command 0x040f tx timeout [ 66.536364][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.542043][ T4240] Bluetooth: hci2: command 0x040f tx timeout [ 66.555851][ T4240] Bluetooth: hci1: command 0x040f tx timeout [ 66.564153][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.572961][ T4240] Bluetooth: hci0: command 0x040f tx timeout [ 66.579298][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.589003][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.598538][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.629036][ T4193] device veth1_vlan entered promiscuous mode [ 66.708677][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.722046][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.737767][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.746687][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.757259][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.782713][ T4193] device veth0_macvtap entered promiscuous mode [ 66.821213][ T4188] device veth0_macvtap entered promiscuous mode [ 66.841951][ T4193] device veth1_macvtap entered promiscuous mode [ 66.869367][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.879772][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.889124][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.897622][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.937835][ T4188] device veth1_macvtap entered promiscuous mode [ 66.977281][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.990540][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.001324][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.012169][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.022371][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.033424][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.046830][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.069015][ T4291] tipc: Started in network mode [ 67.076744][ T4291] tipc: Node identity a26f554983d8, cluster identity 4711 [ 67.086648][ T4291] tipc: Enabled bearer , priority 0 [ 67.097594][ T1225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.105992][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.114314][ T1225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.123465][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.134611][ T4292] device syzkaller0 entered promiscuous mode [ 67.144368][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.156628][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.166225][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.174596][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.184822][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.196145][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.206575][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.220726][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.231458][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.243329][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.254580][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.265445][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.277951][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.288472][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.299436][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.310069][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.321145][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.333125][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.344027][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.355818][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.387068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.397553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.407832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.417899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.432058][ T4294] tipc: Resetting bearer [ 67.448037][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.458826][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.469351][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.481294][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.491531][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.502924][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.514118][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.524694][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.537017][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.555836][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.566567][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.576475][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.586011][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.597157][ T4290] tipc: Resetting bearer [ 67.611659][ T4290] tipc: Disabling bearer [ 67.629009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.639266][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.649064][ T463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.656071][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.666418][ T463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.669476][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.682988][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.691749][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.715717][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.754826][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.806646][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.819004][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.919003][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.941336][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.983352][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.007772][ T463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.023409][ T463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.060617][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.173362][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.183188][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.194210][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.325504][ T4309] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 68.337595][ T463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.389120][ T463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.415985][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.480549][ T4307] loop3: detected capacity change from 0 to 512 [ 68.593016][ T4297] Bluetooth: hci0: command 0x0419 tx timeout [ 68.609236][ T4297] Bluetooth: hci1: command 0x0419 tx timeout [ 68.628437][ T4297] Bluetooth: hci2: command 0x0419 tx timeout [ 68.640865][ T4297] Bluetooth: hci3: command 0x0419 tx timeout [ 68.647777][ T4297] Bluetooth: hci4: command 0x0419 tx timeout [ 68.763277][ T4323] netlink: 'syz.0.11': attribute type 2 has an invalid length. [ 68.992771][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.549426][ T4336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 69.567955][ T4336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 69.886017][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #240!!! [ 70.089571][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 70.099005][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 70.202909][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.212244][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.221657][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 70.231036][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 70.240314][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 70.250072][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 71.403379][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.410225][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.484122][ T4334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 71.496488][ T4334] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 71.785051][ T4360] loop4: detected capacity change from 0 to 512 [ 72.193483][ T1325] cfg80211: failed to load regulatory.db [ 72.284077][ T4360] ======================================================= [ 72.284077][ T4360] WARNING: The mand mount option has been deprecated and [ 72.284077][ T4360] and is ignored by this kernel. Remove the mand [ 72.284077][ T4360] option from the mount to silence this warning. [ 72.284077][ T4360] ======================================================= [ 72.372295][ T4336] syz.0.13 (4336) used greatest stack depth: 20832 bytes left [ 73.302121][ T4379] kthread_run failed with err -4 [ 74.533213][ T4383] netlink: 'syz.2.23': attribute type 2 has an invalid length. [ 178.982452][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 178.989815][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P144/1:b..l [ 178.997925][ C1] (detected by 1, t=10502 jiffies, g=7689, q=232) [ 179.004672][ C1] task:kworker/u4:1 state:R running task stack:24840 pid: 144 ppid: 2 flags:0x00004000 [ 179.016137][ C1] Workqueue: bat_events batadv_nc_worker [ 179.021920][ C1] Call Trace: [ 179.025258][ C1] [ 179.028344][ C1] __schedule+0x11bb/0x4390 [ 179.033066][ C1] ? mark_lock+0x94/0x320 [ 179.037513][ C1] ? mark_lock+0x94/0x320 [ 179.041965][ C1] ? release_firmware_map_entry+0x190/0x190 [ 179.048157][ C1] ? mark_lock+0x94/0x320 [ 179.052773][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 179.058122][ C1] preempt_schedule_irq+0xb1/0x150 [ 179.063573][ C1] ? __cond_resched+0xb0/0xb0 [ 179.068474][ C1] ? rcu_is_watching+0x11/0xa0 [ 179.073348][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 179.079333][ C1] irqentry_exit+0x63/0x70 [ 179.083943][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 179.090139][ C1] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 179.095565][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 179.115817][ C1] RSP: 0018:ffffc900015ffaa0 EFLAGS: 00000206 [ 179.122237][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: dce361ef6b247900 [ 179.130488][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b2ac0 RDI: ffffffff8a59a480 [ 179.138650][ C1] RBP: ffffc900015ffbc0 R08: dffffc0000000000 R09: fffffbfff1ff7819 [ 179.147102][ C1] R10: fffffbfff1ff7819 R11: 1ffffffff1ff7818 R12: ffffffff8c11c660 [ 179.155678][ C1] R13: 1ffff920002bff60 R14: 0000000000000246 R15: dffffc0000000000 [ 179.164025][ C1] ? rcu_lock_release+0x5/0x20 [ 179.168880][ C1] ? read_lock_is_recursive+0x10/0x10 [ 179.174282][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 179.179427][ C1] rcu_lock_acquire+0x2a/0x30 [ 179.184137][ C1] ? rcu_lock_acquire+0x5/0x30 [ 179.189056][ C1] batadv_nc_worker+0xc9/0x5c0 [ 179.193856][ C1] process_one_work+0x863/0x1000 [ 179.198823][ C1] ? worker_detach_from_pool+0x240/0x240 [ 179.204465][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 179.209780][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 179.214811][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 179.220294][ C1] ? wq_worker_running+0x97/0x170 [ 179.225329][ C1] worker_thread+0xaa8/0x12a0 [ 179.230029][ C1] kthread+0x436/0x520 [ 179.234186][ C1] ? rcu_lock_release+0x20/0x20 [ 179.239034][ C1] ? kthread_blkcg+0xd0/0xd0 [ 179.243788][ C1] ret_from_fork+0x1f/0x30 [ 179.248413][ C1] [ 179.251474][ C1] rcu: rcu_preempt kthread starved for 10392 jiffies! g7689 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 179.262787][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 179.273508][ C1] rcu: RCU grace-period kthread stack dump: [ 179.279560][ C1] task:rcu_preempt state:R running task stack:28032 pid: 15 ppid: 2 flags:0x00004000 [ 179.290470][ C1] Call Trace: [ 179.293969][ C1] [ 179.296909][ C1] __schedule+0x11bb/0x4390 [ 179.301609][ C1] ? release_firmware_map_entry+0x190/0x190 [ 179.307718][ C1] schedule+0x11b/0x1e0 [ 179.311998][ C1] schedule_timeout+0x15c/0x280 [ 179.316931][ C1] ? console_conditional_schedule+0x40/0x40 [ 179.323007][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 179.329127][ C1] ? update_process_times+0x200/0x200 [ 179.334521][ C1] ? prepare_to_swait_event+0x331/0x350 [ 179.340187][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 179.345382][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 179.350951][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 179.357127][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 179.361900][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 179.367136][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 179.372346][ C1] rcu_gp_kthread+0x98/0x350 [ 179.376939][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 179.382053][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 179.387947][ C1] ? __kthread_parkme+0x157/0x1b0 [ 179.393000][ C1] kthread+0x436/0x520 [ 179.397064][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 179.402181][ C1] ? kthread_blkcg+0xd0/0xd0 [ 179.406786][ C1] ret_from_fork+0x1f/0x30 [ 179.411400][ C1] [ 179.414555][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 179.420963][ C1] Sending NMI from CPU 1 to CPUs 0: [ 179.426180][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 [ 179.435320][ C1] sched: RT throttling activated