last executing test programs: 2.560467916s ago: executing program 1 (id=2): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) write$cgroup_type(r3, &(0x7f0000000000), 0x180600) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@check_strict}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@showassoc}, {@map_acorn}, {@session={'session', 0x3d, 0x1b}}, {@gid}, {@nojoliet}, {@map_off}, {@overriderock}, {@gid}, {@nocompress}, {@uid}, {@dmode={'dmode', 0x3d, 0x7}}]}, 0x0, 0x563, &(0x7f0000001240)="$eJzs3VFv01YbwPHHpYW8eSWEXl4hhAocyiYVqQQngaCIK885SQ8kdmQ7qL1CFU1RRQoTZdLam603bJO2D8HtPsTupn0atI/AZDspDWmaQmhTdf9fBOfUPvZ5jhv5qdv4WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFhuxbbzltSN11pSw7mVwG98+LK79cACudVXHNCviBX/k0xGLqeLLv//w+pL8X9zMpt+NSuZuMjI9n8vXXhwcXqqt/0BAR+Lza3t5yudTvvVpAM5QlfPDV9X054JfdNwalqZ0FflUsm+s1gNVdXUdbgcRrqh3EA7kR+oefeWypfLRaVzy37Lq1Wcuu4tvH+7YNsl9TDX1E4Q+t6dh7nQXTT1uvFqSZt4ddzmfvxGfGQiFWmnodTaeqddHDWAuFH+MI0KoxoV7EIhny8U8qV75Xv3bXt6YIH9ERloMfk3LSbrC569gfFMdfO/1MWIJy1ZErXvy5WKBOJLY8j6rl7+//qOPrDfvfm/l+W7PwfITreck2tp5dqw/D8kluN7bcqWbMtzWZGOdKQtryYe0fG+aqLFEyOh+GKkIU6yRHWXKClLSUpiyxNZlKqEoqQqRuqiJZRlCSUSnbyjXAlEiyOR+BKIknlx5ZYoyUtZylIUJVpysiy+tMSTmlTESfayJuvJcS+KsobFuNsoP3QY2d7bsi2FA0ZL/sf4vuj5GxjH+17+BwAAAAAAp5aV/PY9vv6fkatJrWrq2p50WAAAAAAA4AtK/vI/Gxczce2qWFz/AwAAAABw2ljJPXaWiGTlelpbEyu5XYpfAgAAAAAAcEokf/+/FhfJHCjXxdqdLoXrfwAAAAAATomfR86xHzbPWX/8LZlgxtppLn1lbThxO2fjTLrdmY/3GFWvWOe7O0mKUlpMT7t61sqkjXYnwXzXLdZGxPFnWWQwgB8/JYCL0/Kr3Ejb3FhNy9XemrSXbNXUdc716w/y4jjnpyK9FH33Yv17kSCYsX7xGuctWVvvtHNPX3ZWk1iSuYp3NroTKA7Mo3hALK+T+RaSey72HfFMciNGt99s2q+9d/xT6eZTn9DnG5lL28x1Z7zN9o8/E/eZz/WNPl63G0VG1jvt/JgjfyM30zY352+mxT5RFHLDvgfdY1HYG8VnHYvBKKyPoyj2RWENRlEcMwoAmJS1EVnISs53O2PmnVHZ3bKCePk4P14kZ/T5tM38leTEOn1ln7xij8or9pjZ7feBZyANy7Fxv7/t9ptm1bfxBm+H9hvWC1Z8CM+83vhWLm1ubd9e31h51n7WflEoFEv2Xdu+V5CZZBjdYk+k78+RewAAqdHP2BnZwrqbXlVfENn/qvp/ux8pyMlTeSkdWZWF5G6D5BMH++41u+djCAsjrlqzSZpMn/CycMC15dnkLofefgsHtu2PoXgc3woAAI7N3Ig8fJj8vzDiurs/l/dfHZ+VYW3zx34sAAD4t9DBOysb/WQFgWk+yZfLeSda1Crw3UcqMJWaVsaLdOAuOl5Nq2bgR77r1+PKY1PRoQpbzaYfRKrqB6rph2YpefK76j76PdQNx4uMGzbr2gm1cn0vctxIVUz4H9VsfVM34aIOko3DpnZN1bhOZHxPhX4rcHVOqVDrPQ1NRXuRqZq46qlmYBpOsKwe+/VWQytLLAlMM/LTHfb6Ml7VDxrJbnOTPtgAAJwQm1vbz1c6nfarI6xMeowAAKAfWRoAAAAAAAAAAAAAAAAAAAAAgJPvOO7/o3LKK72poA+31fSJiPkzKtYhB3iSK3/JYRuPPHX8cOQnJwBH6p8AAAD//xdGSyg=") r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='kfree\x00', r6}, 0x18) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioprio_set$pid(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x9}, 0x18) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000100)={[], [{@uid_eq}, {@flag='ro'}, {@euid_lt}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\\'}}]}, 0x7, 0x4b0, &(0x7f0000001000)="$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") creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 2.407633356s ago: executing program 0 (id=1): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) socket$inet6(0xa, 0x6, 0x0) memfd_create(&(0x7f0000000240)='GPL\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0}) 2.105339298s ago: executing program 0 (id=6): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000008000000df7f000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'dvmrp1\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) 2.011005958s ago: executing program 2 (id=3): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) pwritev2(r3, &(0x7f0000000200)=[{0x0}, {&(0x7f00000009c0)=']', 0x1}], 0x2, 0xfffffff7, 0xa, 0x1) 1.823106729s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r3], 0x3c}}, 0x0) 1.816624849s ago: executing program 0 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='dots,errors=continue,nodots,dmask=00000000000000000077777,nodots,dots,nodots,showexec,dots,sys_immutable,discard,dots,nodots,nodots,dots,nodots,dots,nfs,dots,dots,dots,dots,nodots,nodots,nodots,quiet,dots,nodots,gid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000O00000,erroRs=coe,uid<\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB=',\x00'], 0xfd, 0x1bf, &(0x7f0000000640)="$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") unlinkat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 1.78063134s ago: executing program 4 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x3c}}, 0x0) 1.74633213s ago: executing program 1 (id=8): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$watch_queue(r2, &(0x7f0000000e00)=""/4096, 0x1000) readv(r2, &(0x7f0000000740)=[{&(0x7f0000000100)=""/156, 0x9c}], 0x1) 1.676993241s ago: executing program 4 (id=9): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000001c0)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x1}, 0xc) bind$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1, 0xf0}, 0xc) 852.705665ms ago: executing program 2 (id=10): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) 671.709376ms ago: executing program 3 (id=11): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000050001"], 0x1c}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x20) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 662.237457ms ago: executing program 4 (id=12): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 556.947617ms ago: executing program 4 (id=13): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r0, @ANYRES16=r0], &(0x7f0000000200)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000002000000000000000000000080000000de500500e53bbbdbd6ae327f9042", @ANYRES32=0x0, @ANYBLOB='\x00\x00\'\n'], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x20000000000000f4, &(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(0xffffffffffffffff, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000280), 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) close(r4) socket$phonet_pipe(0x23, 0x5, 0x2) 489.401407ms ago: executing program 0 (id=14): r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x22020600) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 474.095648ms ago: executing program 1 (id=15): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) 390.685298ms ago: executing program 2 (id=16): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) unlink(&(0x7f00000000c0)='./file1\x00') 340.740698ms ago: executing program 3 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 264.367768ms ago: executing program 1 (id=18): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 78.338059ms ago: executing program 0 (id=19): r0 = socket$isdn(0x22, 0x2, 0x25) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) 78.19793ms ago: executing program 1 (id=20): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) 11.20528ms ago: executing program 1 (id=21): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0xb) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "35f36008c636847e", "b1528832dadd8423b4b617efc885a45d", "49d69735", "1c228c29966e0467"}, 0x28) sendmsg$inet6(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rthdrdstopts={{0x18}}], 0x18}, 0x0) 0s ago: executing program 3 (id=22): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10400, 0x0) vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000280)='-', 0x1}], 0x1, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. [ 49.093868][ T4155] cgroup: Unknown subsys name 'net' [ 49.237725][ T4155] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.516889][ T4155] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.630194][ T4177] chnl_net:caif_netlink_parms(): no params data found [ 51.740798][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 51.785048][ T4174] chnl_net:caif_netlink_parms(): no params data found [ 51.795328][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.802439][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.810901][ T4177] device bridge_slave_0 entered promiscuous mode [ 51.857534][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.864694][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.872388][ T4177] device bridge_slave_1 entered promiscuous mode [ 51.892615][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 51.922993][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.970860][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.006184][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 52.021180][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.028525][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.036740][ T4174] device bridge_slave_0 entered promiscuous mode [ 52.044087][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.051133][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.059465][ T4166] device bridge_slave_0 entered promiscuous mode [ 52.085613][ T4177] team0: Port device team_slave_0 added [ 52.095354][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.102410][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.110367][ T4174] device bridge_slave_1 entered promiscuous mode [ 52.117529][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.124777][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.132354][ T4166] device bridge_slave_1 entered promiscuous mode [ 52.145319][ T4177] team0: Port device team_slave_1 added [ 52.186579][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.193882][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.201546][ T4172] device bridge_slave_0 entered promiscuous mode [ 52.241199][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.248391][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.256895][ T4172] device bridge_slave_1 entered promiscuous mode [ 52.265663][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.276424][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.286275][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.293413][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.319318][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.330793][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.338077][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.345860][ T4167] device bridge_slave_0 entered promiscuous mode [ 52.361617][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.372385][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.381973][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.389165][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.415247][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.426427][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.433728][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.441614][ T4167] device bridge_slave_1 entered promiscuous mode [ 52.480552][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.504925][ T4166] team0: Port device team_slave_0 added [ 52.519473][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.530735][ T4174] team0: Port device team_slave_0 added [ 52.545653][ T4166] team0: Port device team_slave_1 added [ 52.559996][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.578838][ T4174] team0: Port device team_slave_1 added [ 52.592320][ T4177] device hsr_slave_0 entered promiscuous mode [ 52.599117][ T4177] device hsr_slave_1 entered promiscuous mode [ 52.607720][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.656854][ T4172] team0: Port device team_slave_0 added [ 52.663204][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.670145][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.696950][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.716925][ T4167] team0: Port device team_slave_0 added [ 52.724659][ T4172] team0: Port device team_slave_1 added [ 52.731737][ T4167] team0: Port device team_slave_1 added [ 52.738205][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.745276][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.771307][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.783744][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.790684][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.816679][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.849827][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.857371][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.883690][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.915202][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.922154][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.948175][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.970226][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.977658][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.004019][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.015984][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.023215][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.049369][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.081251][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.088350][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.114465][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.140224][ T4166] device hsr_slave_0 entered promiscuous mode [ 53.147180][ T4166] device hsr_slave_1 entered promiscuous mode [ 53.154174][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.161952][ T4166] Cannot create hsr debugfs directory [ 53.216830][ T4174] device hsr_slave_0 entered promiscuous mode [ 53.223985][ T4174] device hsr_slave_1 entered promiscuous mode [ 53.230481][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.238428][ T4174] Cannot create hsr debugfs directory [ 53.264502][ T4172] device hsr_slave_0 entered promiscuous mode [ 53.274277][ T4172] device hsr_slave_1 entered promiscuous mode [ 53.280763][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.288781][ T4172] Cannot create hsr debugfs directory [ 53.308209][ T4167] device hsr_slave_0 entered promiscuous mode [ 53.315239][ T4167] device hsr_slave_1 entered promiscuous mode [ 53.321686][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.329443][ T4167] Cannot create hsr debugfs directory [ 53.413600][ T2858] Bluetooth: hci3: command 0x0409 tx timeout [ 53.413597][ T4181] Bluetooth: hci4: command 0x0409 tx timeout [ 53.425841][ T2858] Bluetooth: hci0: command 0x0409 tx timeout [ 53.431870][ T2858] Bluetooth: hci1: command 0x0409 tx timeout [ 53.500403][ T2858] Bluetooth: hci2: command 0x0409 tx timeout [ 53.585616][ T4177] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.596179][ T4177] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.606004][ T4177] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.618946][ T4177] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.658918][ T4166] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.668563][ T4166] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.677747][ T4166] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.700950][ T4174] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.711186][ T4166] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.724951][ T4174] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.735128][ T4174] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.759869][ T4174] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.835036][ T4172] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.846451][ T4172] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.857369][ T4172] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.867648][ T4172] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.936869][ T4167] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.950625][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.962477][ T4167] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.971252][ T4167] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.980108][ T4167] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.996780][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.023939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.035125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.046244][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.061564][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.075694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.085046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.095962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.105197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.115169][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.122400][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.158477][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.167946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.176224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.188577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.197762][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.204867][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.214199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.222809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.231090][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.238160][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.247140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.256249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.278940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.310672][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.318642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.327840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.336359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.346612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.355313][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.362356][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.370255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.378679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.388811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.397502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.415852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.424885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.434035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.442527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.453552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.462051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.471054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.479592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.493166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.501618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.516235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.526306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.535999][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.543080][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.551615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.560251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.568683][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.575777][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.588303][ T4166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.598932][ T4166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.620425][ T4177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.631360][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.647840][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.669049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.679199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.693753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.702307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.713020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.721148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.730458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.739188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.748080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.757123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.766254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.778722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.792104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.815930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.836375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.864333][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.878779][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.888246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.898900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.908557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.918087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.927451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.935784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.947603][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.974715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.982209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.990179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.999536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.007563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.016383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.025363][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.032417][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.040755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.049652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.058113][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.065246][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.074390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.090317][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.100398][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.113008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.128962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.140767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.150117][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.157226][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.170971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.180077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.187709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.200871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.221739][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.243161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.254254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.262675][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.269771][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.278254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.287680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.296659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.306666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.315278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.324345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.334948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.350814][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.360566][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.369149][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.378897][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.387975][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.396418][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.423640][ T4177] device veth0_vlan entered promiscuous mode [ 55.437653][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.449494][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.458383][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.466329][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.475477][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.483862][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.492036][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.493059][ T4209] Bluetooth: hci1: command 0x041b tx timeout [ 55.500551][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.511760][ T4209] Bluetooth: hci0: command 0x041b tx timeout [ 55.516599][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.520045][ T4209] Bluetooth: hci3: command 0x041b tx timeout [ 55.527987][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.538980][ T4209] Bluetooth: hci4: command 0x041b tx timeout [ 55.542041][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.558264][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.566641][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.573375][ T4209] Bluetooth: hci2: command 0x041b tx timeout [ 55.580813][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.588940][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.600029][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.630719][ T4177] device veth1_vlan entered promiscuous mode [ 55.646116][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.658385][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.667503][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.682106][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.690483][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.712041][ T4166] device veth0_vlan entered promiscuous mode [ 55.725950][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.737286][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.749526][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.761575][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.784505][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.802934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.810369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.823655][ T4166] device veth1_vlan entered promiscuous mode [ 55.848457][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.876157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.884382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.892225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.904056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.912520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.920589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.950569][ T4177] device veth0_macvtap entered promiscuous mode [ 55.958856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.968608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.978901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.987525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.996096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.004788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.016622][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.027522][ T4174] device veth0_vlan entered promiscuous mode [ 56.044818][ T4166] device veth0_macvtap entered promiscuous mode [ 56.066783][ T4177] device veth1_macvtap entered promiscuous mode [ 56.074302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.082380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.091940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.101540][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.110584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.119390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.127907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.136516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.145212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.153287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.160943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.170705][ T4166] device veth1_macvtap entered promiscuous mode [ 56.190760][ T4174] device veth1_vlan entered promiscuous mode [ 56.202310][ T4167] device veth0_vlan entered promiscuous mode [ 56.225826][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.244662][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.253862][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.261913][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.271198][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.280267][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.290496][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.301781][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.314811][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.331224][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.340698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.351636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.364658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.377121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.390098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.399360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.410507][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.423915][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.435995][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.445872][ T4167] device veth1_vlan entered promiscuous mode [ 56.454075][ T4177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.465263][ T4177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.474589][ T4177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.483541][ T4177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.498722][ T4174] device veth0_macvtap entered promiscuous mode [ 56.506244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.515236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.523413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.531873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.545735][ T4166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.555162][ T4166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.564091][ T4166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.574046][ T4166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.597095][ T4174] device veth1_macvtap entered promiscuous mode [ 56.640866][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.652221][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.660615][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.669613][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.721613][ T4172] device veth0_vlan entered promiscuous mode [ 56.730598][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.741859][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.752278][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.764122][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.776927][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.785818][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.795717][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.805554][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.813825][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.822011][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.830913][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.846030][ T4167] device veth0_macvtap entered promiscuous mode [ 56.865247][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.875859][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.887602][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.898312][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.910024][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.919615][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.928032][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.936247][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.945099][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.954158][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.977064][ T4167] device veth1_macvtap entered promiscuous mode [ 57.008576][ T4172] device veth1_vlan entered promiscuous mode [ 57.024684][ T4174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.035236][ T4174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.044211][ T4174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.053399][ T4174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.067228][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.075500][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.090474][ T4172] device veth0_macvtap entered promiscuous mode [ 57.100597][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.112894][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.123293][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.134635][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.144491][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.155101][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.166571][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.176466][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.185059][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.193262][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.201126][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.208955][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.217999][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.226663][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.235580][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.245160][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.274972][ T4172] device veth1_macvtap entered promiscuous mode [ 57.286710][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.297471][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.307916][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.318497][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.328517][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.339813][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.350767][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.375603][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.376261][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.384842][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.401624][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.411021][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.420651][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.429010][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.437889][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.446801][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.461298][ T4167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.472013][ T4167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.482868][ T4167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.491736][ T4167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.513802][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.529640][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.539867][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.550565][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.560536][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.571103][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.581380][ T4209] Bluetooth: hci4: command 0x040f tx timeout [ 57.584913][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.587834][ T4209] Bluetooth: hci3: command 0x040f tx timeout [ 57.603904][ T4209] Bluetooth: hci0: command 0x040f tx timeout [ 57.605155][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.609944][ T4209] Bluetooth: hci1: command 0x040f tx timeout [ 57.629118][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.643146][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.654430][ T4209] Bluetooth: hci2: command 0x040f tx timeout [ 57.660255][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.681923][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.691003][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.700081][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.711486][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.722132][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.739792][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.750417][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.760484][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.771180][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.781283][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.792274][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.804120][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.835125][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.848389][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.889769][ T4172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.901212][ T4172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.915427][ T4241] loop1: detected capacity change from 0 to 1024 [ 57.917823][ T4172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.931055][ T4172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.993949][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.001900][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.009721][ T4241] EXT4-fs (loop1): Ignoring removed orlov option [ 58.021876][ T4241] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 58.087196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.123315][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.127567][ T4241] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 58.132517][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.168224][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.188400][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.195966][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.219046][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.234769][ T26] audit: type=1800 audit(1732074014.235:2): pid=4241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 58.339213][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.370033][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.383065][ T4241] process 'syz.1.2' launched './file0' with NULL argv: empty string added [ 58.390617][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.412019][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.426154][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.431707][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.452633][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.473658][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.483511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.671302][ T4268] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 58.773197][ T4270] loop0: detected capacity change from 0 to 256 [ 59.492624][ T4270] ======================================================= [ 59.492624][ T4270] WARNING: The mand mount option has been deprecated and [ 59.492624][ T4270] and is ignored by this kernel. Remove the mand [ 59.492624][ T4270] option from the mount to silence this warning. [ 59.492624][ T4270] ======================================================= [ 59.676695][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 59.677529][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 59.677595][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 59.677649][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 59.735141][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 59.976390][ T26] audit: type=1326 audit(1732074015.975:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4290 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4bdfa759 code=0x7ffc0000 [ 60.067369][ T4295] loop2: detected capacity change from 0 to 1024 [ 60.077308][ T26] audit: type=1326 audit(1732074015.975:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4290 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4bdfa759 code=0x7ffc0000 [ 60.102026][ T26] audit: type=1326 audit(1732074015.985:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4290 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fcf4bdfa759 code=0x7ffc0000 [ 60.161176][ T4295] EXT4-fs (loop2): Ignoring removed orlov option [ 60.202911][ T4295] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 60.261310][ T4295] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 60.283841][ T26] audit: type=1326 audit(1732074015.985:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4290 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4bdfa759 code=0x7ffc0000 [ 60.283886][ T26] audit: type=1326 audit(1732074015.985:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4290 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4bdfa759 code=0x7ffc0000 [ 60.337001][ T4308] delete_channel: no stack [ 60.346872][ T4289] [ 60.349215][ T4289] ====================================================== [ 60.356224][ T4289] WARNING: possible circular locking dependency detected [ 60.363239][ T4289] 5.15.173-syzkaller #0 Not tainted [ 60.368430][ T4289] ------------------------------------------------------ [ 60.375446][ T4289] syz.4.13/4289 is trying to acquire lock: [ 60.381245][ T4289] ffff888028100b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xcf/0x1a0 [ 60.391714][ T4289] [ 60.391714][ T4289] but task is already holding lock: [ 60.399074][ T4289] ffff888028100ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 60.408389][ T4289] [ 60.408389][ T4289] which lock already depends on the new lock. [ 60.408389][ T4289] [ 60.418882][ T4289] [ 60.418882][ T4289] the existing dependency chain (in reverse order) is: [ 60.427893][ T4289] [ 60.427893][ T4289] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 60.435660][ T4289] lock_acquire+0x1db/0x4f0 [ 60.440691][ T4289] __mutex_lock_common+0x1da/0x25a0 [ 60.446423][ T4289] mutex_lock_nested+0x17/0x20 [ 60.451708][ T4289] hci_dev_do_close+0x63/0x1070 [ 60.457076][ T4289] hci_rfkill_set_block+0x114/0x1a0 [ 60.462786][ T4289] rfkill_set_block+0x1e7/0x430 [ 60.468146][ T4289] rfkill_fop_write+0x5b7/0x790 [ 60.473500][ T4289] vfs_write+0x30c/0xe50 [ 60.478252][ T4289] ksys_write+0x1a2/0x2c0 [ 60.483085][ T4289] do_syscall_64+0x3b/0xb0 [ 60.488003][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.494402][ T4289] [ 60.494402][ T4289] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 60.502375][ T4289] lock_acquire+0x1db/0x4f0 [ 60.507389][ T4289] __mutex_lock_common+0x1da/0x25a0 [ 60.513091][ T4289] mutex_lock_nested+0x17/0x20 [ 60.518355][ T4289] rfkill_register+0x30/0x880 [ 60.523532][ T4289] hci_register_dev+0x4dd/0xa50 [ 60.528888][ T4289] vhci_create_device+0x310/0x590 [ 60.534414][ T4289] vhci_write+0x382/0x430 [ 60.539244][ T4289] vfs_write+0xacd/0xe50 [ 60.543986][ T4289] ksys_write+0x1a2/0x2c0 [ 60.548818][ T4289] do_syscall_64+0x3b/0xb0 [ 60.553739][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.560137][ T4289] [ 60.560137][ T4289] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 60.567931][ T4289] lock_acquire+0x1db/0x4f0 [ 60.572935][ T4289] __mutex_lock_common+0x1da/0x25a0 [ 60.578634][ T4289] mutex_lock_nested+0x17/0x20 [ 60.583909][ T4289] vhci_send_frame+0x8a/0xf0 [ 60.589002][ T4289] hci_send_frame+0x1af/0x2f0 [ 60.594181][ T4289] hci_tx_work+0xb2e/0x1a30 [ 60.599185][ T4289] process_one_work+0x8a1/0x10c0 [ 60.604626][ T4289] worker_thread+0xaca/0x1280 [ 60.609804][ T4289] kthread+0x3f6/0x4f0 [ 60.614373][ T4289] ret_from_fork+0x1f/0x30 [ 60.619294][ T4289] [ 60.619294][ T4289] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 60.628481][ T4289] validate_chain+0x1649/0x5930 [ 60.633831][ T4289] __lock_acquire+0x1295/0x1ff0 [ 60.639181][ T4289] lock_acquire+0x1db/0x4f0 [ 60.644182][ T4289] __flush_work+0xeb/0x1a0 [ 60.649096][ T4289] hci_dev_do_close+0x20a/0x1070 [ 60.654533][ T4289] hci_rfkill_set_block+0x114/0x1a0 [ 60.660231][ T4289] rfkill_set_block+0x1e7/0x430 [ 60.665584][ T4289] rfkill_fop_write+0x5b7/0x790 [ 60.670933][ T4289] vfs_write+0x30c/0xe50 [ 60.675675][ T4289] ksys_write+0x1a2/0x2c0 [ 60.680503][ T4289] do_syscall_64+0x3b/0xb0 [ 60.685420][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.691907][ T4289] [ 60.691907][ T4289] other info that might help us debug this: [ 60.691907][ T4289] [ 60.702199][ T4289] Chain exists of: [ 60.702199][ T4289] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 60.702199][ T4289] [ 60.717117][ T4289] Possible unsafe locking scenario: [ 60.717117][ T4289] [ 60.724630][ T4289] CPU0 CPU1 [ 60.730159][ T4289] ---- ---- [ 60.735500][ T4289] lock(&hdev->req_lock); [ 60.739896][ T4289] lock(rfkill_global_mutex); [ 60.747159][ T4289] lock(&hdev->req_lock); [ 60.754071][ T4289] lock((work_completion)(&hdev->tx_work)); [ 60.760033][ T4289] [ 60.760033][ T4289] *** DEADLOCK *** [ 60.760033][ T4289] [ 60.768161][ T4289] 2 locks held by syz.4.13/4289: [ 60.773073][ T4289] #0: ffffffff8dcbe668 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 60.783146][ T4289] #1: ffff888028100ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 60.792862][ T4289] [ 60.792862][ T4289] stack backtrace: [ 60.798738][ T4289] CPU: 0 PID: 4289 Comm: syz.4.13 Not tainted 5.15.173-syzkaller #0 [ 60.806696][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 60.816735][ T4289] Call Trace: [ 60.819997][ T4289] [ 60.822910][ T4289] dump_stack_lvl+0x1e3/0x2d0 [ 60.827570][ T4289] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 60.833187][ T4289] ? print_circular_bug+0x12b/0x1a0 [ 60.838367][ T4289] check_noncircular+0x2f8/0x3b0 [ 60.843292][ T4289] ? add_chain_block+0x850/0x850 [ 60.848210][ T4289] ? lockdep_lock+0x11f/0x2a0 [ 60.852868][ T4289] ? stack_trace_save+0x113/0x1c0 [ 60.857880][ T4289] validate_chain+0x1649/0x5930 [ 60.862722][ T4289] ? reacquire_held_locks+0x660/0x660 [ 60.868079][ T4289] ? validate_chain+0x13bd/0x5930 [ 60.873090][ T4289] ? look_up_lock_class+0x77/0x120 [ 60.878182][ T4289] ? register_lock_class+0x100/0x9a0 [ 60.883445][ T4289] ? reacquire_held_locks+0x660/0x660 [ 60.888797][ T4289] ? is_dynamic_key+0x1f0/0x1f0 [ 60.893626][ T4289] ? mark_lock+0x98/0x340 [ 60.897935][ T4289] __lock_acquire+0x1295/0x1ff0 [ 60.902788][ T4289] lock_acquire+0x1db/0x4f0 [ 60.907284][ T4289] ? __flush_work+0xcf/0x1a0 [ 60.911864][ T4289] ? mark_lock+0x98/0x340 [ 60.916185][ T4289] ? read_lock_is_recursive+0x10/0x10 [ 60.921541][ T4289] ? __lock_acquire+0x1295/0x1ff0 [ 60.926554][ T4289] __flush_work+0xeb/0x1a0 [ 60.930954][ T4289] ? __flush_work+0xcf/0x1a0 [ 60.935526][ T4289] ? flush_work+0x20/0x20 [ 60.939843][ T4289] hci_dev_do_close+0x20a/0x1070 [ 60.944764][ T4289] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 60.950644][ T4289] ? kmem_cache_alloc_trace+0x143/0x290 [ 60.956173][ T4289] hci_rfkill_set_block+0x114/0x1a0 [ 60.961360][ T4289] ? rcu_lock_release+0x20/0x20 [ 60.966203][ T4289] rfkill_set_block+0x1e7/0x430 [ 60.971067][ T4289] rfkill_fop_write+0x5b7/0x790 [ 60.975917][ T4289] ? rfkill_fop_read+0x470/0x470 [ 60.980891][ T4289] ? fsnotify_perm+0x64/0x590 [ 60.985564][ T4289] ? security_file_permission+0x75/0xa0 [ 60.991094][ T4289] ? rfkill_fop_read+0x470/0x470 [ 60.996533][ T4289] vfs_write+0x30c/0xe50 [ 61.000767][ T4289] ? file_end_write+0x250/0x250 [ 61.005608][ T4289] ? __fget_files+0x413/0x480 [ 61.010280][ T4289] ? __fdget_pos+0x1e9/0x380 [ 61.014853][ T4289] ? ksys_write+0x77/0x2c0 [ 61.019284][ T4289] ksys_write+0x1a2/0x2c0 [ 61.023597][ T4289] ? print_irqtrace_events+0x210/0x210 [ 61.029038][ T4289] ? __ia32_sys_read+0x80/0x80 [ 61.033785][ T4289] ? syscall_enter_from_user_mode+0x2e/0x240 [ 61.039749][ T4289] ? lockdep_hardirqs_on+0x94/0x130 [ 61.044953][ T4289] ? syscall_enter_from_user_mode+0x2e/0x240 [ 61.050921][ T4289] do_syscall_64+0x3b/0xb0 [ 61.055320][ T4289] ? clear_bhb_loop+0x15/0x70 [ 61.059983][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.065861][ T4289] RIP: 0033:0x7f2a0c3ef759 [ 61.070259][ T4289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.089859][ T4289] RSP: 002b:00007f2a0a867038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.098264][ T4289] RAX: ffffffffffffffda RBX: 00007f2a0c5a6f80 RCX: 00007f2a0c3ef759 [ 61.106229][ T4289] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 000000000000000a [ 61.114187][ T4289] RBP: 00007f2a0c46275e R08: 0000000000000000 R09: 0000000000000000 [ 61.122142][ T4289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.130099][ T4289] R13: 0000000000000000 R14: 00007f2a0c5a6f80 R15: 00007ffee8d21a38 [ 61.138061][ T4289]