last executing test programs: 11.579691548s ago: executing program 3 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x400000000000004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="08000500030000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x80) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) 11.172927892s ago: executing program 3 (id=6): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x8ace0a3f86283e7d, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x1000003, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f00000004c0)=[@increfs_done={0x40106308, 0x2}, @request_death={0x400c630e, 0x1}, @release={0x40046306, 0x2}, @request_death={0x400c630e, 0x3}, @exit_looper, @dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x1, &(0x7f0000000300), 0x0, 0x0, 0x1e}}, 0x0}}], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) readlink(0x0, &(0x7f0000001200)=""/4096, 0x1000) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) 11.164647373s ago: executing program 2 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xd, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x10, 0x803, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) request_key(0x0, &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='ns\x00') getdents(r4, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) openat$hwrng(0xffffffffffffff9c, 0x0, 0x10480, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10.458904385s ago: executing program 0 (id=1): r0 = socket(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r0, 0x200000000114, 0x8, &(0x7f00000008c0)=""/7, &(0x7f0000000000)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) r8 = openat$binfmt(0xffffffffffffff9c, r6, 0x2, 0x0) close(r8) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r6, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) 6.473177699s ago: executing program 0 (id=7): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r1], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 6.472462319s ago: executing program 3 (id=8): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000200000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.258031332s ago: executing program 3 (id=9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 6.133999409s ago: executing program 0 (id=10): socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, 0x0, 0x140) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/226}, {&(0x7f0000000300)=""/33}, {&(0x7f0000000480)=""/185}, {&(0x7f00000005c0)=""/83}], 0x0, &(0x7f0000000640)=""/79}, 0x7fb7}, {{&(0x7f0000000700)=@l2={0x1f, 0x0, @fixed}, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)=""/87}, {&(0x7f0000000900)=""/194}, {&(0x7f0000000a00)=""/76}, {&(0x7f0000000b00)=""/245}, {&(0x7f0000000c00)=""/67}, {&(0x7f0000000c80)=""/87}], 0x0, &(0x7f0000000d00)=""/152}, 0x3}, {{&(0x7f0000000dc0)=@in={0x2, 0x0, @private}, 0x0, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/135}, {&(0x7f0000000a80)=""/60}, {&(0x7f0000000f80)=""/221}, {&(0x7f0000000f00)=""/34}, {&(0x7f0000001080)=""/236}]}, 0xeaff}, {{&(0x7f00000011c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x0, &(0x7f0000001240)}, 0xfd32}], 0x80000f7, 0x122, 0x0) mount(0x0, 0x0, &(0x7f0000000580)='nfs4\x00', 0x2be9492, 0x0) r3 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee00, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) 4.868765164s ago: executing program 1 (id=12): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x90a003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000034000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000190000/0x1000)=nil) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x2a, 0x2, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x3}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtfilter={0x24, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff3}, {}, {0xfff3}}}, 0x24}}, 0x0) request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2d, 0x0, 0x0, 0xcbf, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x2, 0x4038a09, 0x4, @loopback={0xe0}, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 4.267098259s ago: executing program 2 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x7}) r2 = eventfd2(0x6, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000300)={r2, 0x8, 0x2, r2}) 2.854469642s ago: executing program 1 (id=16): r0 = socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x197, 0x7, 0x9}}}}]}, 0x44}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {0xa6, 0xfff1}, {0x6, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.665062323s ago: executing program 4 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x2, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0xf290, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x800, 0x6, 0xffff8001, 0x80, 0x7a, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x5e, 0x3, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0x2, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x8, 0x6, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0x0, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0x8, 0x3, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x8, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x7, 0xffffffff, 0x601, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd5, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x34, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0x2, 0x5ca0, 0x3, 0x1000, 0x4, 0x9, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x3, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0xffff, 0x66c, 0x7ff, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x6, 0x9, 0x2823, 0x8, 0xffffffff, 0x0, 0x3, 0x8001, 0x0, 0x9, 0x1, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x8, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0x7, 0x7, 0x7, {0x4, 0x2, 0xfe00, 0xfe42, 0x4, 0x7}, {0x3, 0x1, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x7, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x9, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0x9, 0xffffffff, 0x2, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0x4b, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x8001, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x1d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x7fff, 0x9, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdfb, 0x7, 0x9, 0x223ec3e7, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x1, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38b, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x4, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x4, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x3, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x73da, 0x401, 0x7, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 2.305913984s ago: executing program 3 (id=18): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$fuse(0x0, &(0x7f0000000b00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 2.268139177s ago: executing program 1 (id=19): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1394", 0x2}], 0x1}, 0x4051) recvmsg$unix(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x101) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)}], 0x1}, 0x48844) 2.235429109s ago: executing program 4 (id=20): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000000c0)="eb", 0x1}], 0x2}}], 0x1, 0x4604c880) sendto$inet6(r0, &(0x7f0000000440)='\x00\x00', 0x1b, 0x20003bc4, 0x0, 0x0) 2.126225925s ago: executing program 2 (id=21): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, 0x0) syslog(0x4, 0x0, 0x0) preadv(r2, &(0x7f00000001c0), 0x0, 0x0, 0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.078133338s ago: executing program 4 (id=22): r0 = socket(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r1 = socket(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xe64, 0xb, @loopback, 0x4}, 0x1c) 1.882744969s ago: executing program 4 (id=23): sched_setaffinity(0x0, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)="ca21", 0x2}, {&(0x7f00000002c0)="d7f24ad912cf826214b3928626c9149fe11a740db13fba", 0x17}], 0x2) 1.52313219s ago: executing program 4 (id=24): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) poll(&(0x7f00000000c0)=[{r0, 0x201}], 0x1, 0x4) 1.307182033s ago: executing program 1 (id=25): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioprio_set$pid(0x3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000003c00)='net/ptype\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000080)={0x3ff, 0x7, 0x100000, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) 1.209949779s ago: executing program 4 (id=26): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x4000064f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x9, 0x1, 0x3, 0x0, @vifc_lcl_addr=@local, @loopback}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 190.878279ms ago: executing program 1 (id=27): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfff, 0x4}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000200", 0x41d) 129.538152ms ago: executing program 1 (id=28): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000180)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 0s ago: executing program 3 (id=29): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x12}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 64.260202][ T4172] cgroup: Unknown subsys name 'net' [ 64.390297][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.897630][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.399564][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 67.465649][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 67.476237][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 67.562082][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 67.586514][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.593978][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.602688][ T4189] device bridge_slave_0 entered promiscuous mode [ 67.638369][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.645705][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.653519][ T4189] device bridge_slave_1 entered promiscuous mode [ 67.679586][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 67.711232][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.718532][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.730208][ T4187] device bridge_slave_0 entered promiscuous mode [ 67.742099][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.749247][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.757524][ T4186] device bridge_slave_0 entered promiscuous mode [ 67.771761][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.779730][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.788122][ T4186] device bridge_slave_1 entered promiscuous mode [ 67.804848][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.812318][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.820422][ T4187] device bridge_slave_1 entered promiscuous mode [ 67.830131][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.861011][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.909690][ T4189] team0: Port device team_slave_0 added [ 67.917756][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.935006][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.942162][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.950810][ T4185] device bridge_slave_0 entered promiscuous mode [ 67.964342][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.974676][ T4189] team0: Port device team_slave_1 added [ 67.982825][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.993764][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.002960][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.010581][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.018568][ T4185] device bridge_slave_1 entered promiscuous mode [ 68.062373][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.069450][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.095675][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.123880][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.141371][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.148617][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.157423][ T4188] device bridge_slave_0 entered promiscuous mode [ 68.172250][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.179722][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.188422][ T4188] device bridge_slave_1 entered promiscuous mode [ 68.196038][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.203010][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.229423][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.242309][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.253808][ T4187] team0: Port device team_slave_0 added [ 68.261811][ T4186] team0: Port device team_slave_0 added [ 68.289392][ T4187] team0: Port device team_slave_1 added [ 68.301678][ T4186] team0: Port device team_slave_1 added [ 68.315688][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.335126][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.368534][ T4185] team0: Port device team_slave_0 added [ 68.377459][ T4185] team0: Port device team_slave_1 added [ 68.416071][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.423071][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.450201][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.468570][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.476175][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.502725][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.530801][ T4189] device hsr_slave_0 entered promiscuous mode [ 68.538739][ T4189] device hsr_slave_1 entered promiscuous mode [ 68.546389][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.553452][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.579465][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.591549][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.599032][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.625624][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.643724][ T4188] team0: Port device team_slave_0 added [ 68.650589][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.658126][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.684652][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.696513][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.703726][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.729763][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.762401][ T4188] team0: Port device team_slave_1 added [ 68.799642][ T4187] device hsr_slave_0 entered promiscuous mode [ 68.806970][ T4187] device hsr_slave_1 entered promiscuous mode [ 68.814712][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.822472][ T4187] Cannot create hsr debugfs directory [ 68.837650][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.844697][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.871266][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.899747][ T4185] device hsr_slave_0 entered promiscuous mode [ 68.907339][ T4185] device hsr_slave_1 entered promiscuous mode [ 68.914540][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.922246][ T4185] Cannot create hsr debugfs directory [ 68.953611][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.960693][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.986927][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.054997][ T4186] device hsr_slave_0 entered promiscuous mode [ 69.062097][ T4186] device hsr_slave_1 entered promiscuous mode [ 69.067534][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 69.069276][ T2239] Bluetooth: hci4: command 0x0409 tx timeout [ 69.081609][ T2239] Bluetooth: hci3: command 0x0409 tx timeout [ 69.088122][ T2239] Bluetooth: hci0: command 0x0409 tx timeout [ 69.094366][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.101946][ T4186] Cannot create hsr debugfs directory [ 69.132749][ T4188] device hsr_slave_0 entered promiscuous mode [ 69.139731][ T4188] device hsr_slave_1 entered promiscuous mode [ 69.146742][ T2239] Bluetooth: hci1: command 0x0409 tx timeout [ 69.154483][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.162081][ T4188] Cannot create hsr debugfs directory [ 69.440621][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.452289][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.467739][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.478646][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.543314][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.567561][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.587070][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.599044][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.650384][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.660456][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.677398][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.687100][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.697526][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.721249][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.732380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.742006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.786819][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.804344][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.814539][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.823822][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.831107][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.841297][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.850519][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.859275][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.866394][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.881993][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.906463][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.917749][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.927902][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.949130][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.974072][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.012417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.021854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.033964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.042853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.065518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.074867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.087423][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.098652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.109158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.133960][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.142708][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.152428][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.162745][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.176351][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.190802][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.205950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.216081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.228338][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.253430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.262863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.272876][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.280022][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.288745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.303030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.312736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.328807][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.336322][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.381697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.398013][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.425030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.443381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.461770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.471055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.487311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.512338][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.539353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.549895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.558186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.569198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.577085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.593109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.602641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.622171][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.638326][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.651087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.661587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.670803][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.678001][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.687926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.696714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.705328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.714424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.723135][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.730327][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.738303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.766483][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.781730][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.790638][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.799948][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.809063][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.831443][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.849595][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.859339][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.871178][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.881038][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.890387][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.899097][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.906246][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.914531][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.922671][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.954522][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.961945][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.974545][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.990680][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.001332][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.016637][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.023814][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.037738][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.047988][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.061790][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.071917][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.081029][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.089164][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.097397][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.109321][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.134307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.143243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.145575][ T2239] Bluetooth: hci0: command 0x041b tx timeout [ 71.162032][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.173047][ T2239] Bluetooth: hci3: command 0x041b tx timeout [ 71.179672][ T2239] Bluetooth: hci4: command 0x041b tx timeout [ 71.186083][ T2239] Bluetooth: hci2: command 0x041b tx timeout [ 71.192812][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.221822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.225739][ T4174] Bluetooth: hci1: command 0x041b tx timeout [ 71.237574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.255521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.265525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.274388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.282996][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.290150][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.299403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.317324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.331697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.344680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.353171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.362076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.370602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.379695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.390549][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.393062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.397999][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.421911][ T4189] device veth0_vlan entered promiscuous mode [ 71.434249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.447041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.456034][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.463108][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.471091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.484975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.494449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.520900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.530340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.541079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.552432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.567850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.579790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.591374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.602217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.618738][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.645769][ T4189] device veth1_vlan entered promiscuous mode [ 71.672178][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.682648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.700171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.712843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.727817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.745561][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.824849][ T4189] device veth0_macvtap entered promiscuous mode [ 71.877207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.886241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.894358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.903946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.912715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.924501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.946236][ T4189] device veth1_macvtap entered promiscuous mode [ 71.961500][ T4187] device veth0_vlan entered promiscuous mode [ 71.977036][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.990595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.002638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.014418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.022941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.051876][ T4187] device veth1_vlan entered promiscuous mode [ 72.082896][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.097887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.108547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.118343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.127144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.137436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.170964][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.187137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.197158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.208173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.217792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.226857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.236402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.244489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.277822][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.287269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.303776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.311360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.328354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.342943][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.358719][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.368950][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.385716][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.394638][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.408713][ T4185] device veth0_vlan entered promiscuous mode [ 72.417689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.427189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.435679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.444429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.459095][ T4187] device veth0_macvtap entered promiscuous mode [ 72.482853][ T4185] device veth1_vlan entered promiscuous mode [ 72.520336][ T4187] device veth1_macvtap entered promiscuous mode [ 72.605065][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.625839][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.639453][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.650890][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.675991][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.695002][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.710901][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.732032][ T4185] device veth0_macvtap entered promiscuous mode [ 72.740390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.749592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.759405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.789177][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.800766][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.813353][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.828073][ T4185] device veth1_macvtap entered promiscuous mode [ 72.841742][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.851810][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.861203][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.871408][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.880194][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.925354][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.934917][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.945630][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.953932][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.967540][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.977494][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.988030][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.998435][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.015476][ T4186] device veth0_vlan entered promiscuous mode [ 73.031776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.040311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.050503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.059084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.081260][ T4186] device veth1_vlan entered promiscuous mode [ 73.091217][ T4188] device veth0_vlan entered promiscuous mode [ 73.100237][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.109107][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.119302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.130709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.148416][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.159895][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.169936][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.181447][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.193295][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.224368][ T4250] Bluetooth: hci2: command 0x040f tx timeout [ 73.238238][ T4250] Bluetooth: hci4: command 0x040f tx timeout [ 73.244896][ T4250] Bluetooth: hci3: command 0x040f tx timeout [ 73.251002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.260617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.269413][ T4250] Bluetooth: hci0: command 0x040f tx timeout [ 73.272051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.287063][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.298407][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.308640][ T4250] Bluetooth: hci1: command 0x040f tx timeout [ 73.314745][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.326692][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.338323][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.361530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.375385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.387703][ T4188] device veth1_vlan entered promiscuous mode [ 73.399325][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.408401][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.417568][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.426516][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.471500][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.488593][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.500967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.512880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.521264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.529275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.542342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.562005][ T4186] device veth0_macvtap entered promiscuous mode [ 73.595489][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.603469][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.642357][ T4186] device veth1_macvtap entered promiscuous mode [ 73.656080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.669190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.679087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.693381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.740161][ T4188] device veth0_macvtap entered promiscuous mode [ 73.748472][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.759783][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.779768][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.798062][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.809870][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.831187][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.846103][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.856741][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.870198][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.884596][ T4188] device veth1_macvtap entered promiscuous mode [ 73.903831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.912504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.924702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.932676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.943019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.958017][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.969328][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.981491][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.992366][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.004245][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.015605][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.033384][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.043081][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.053484][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.074607][ T4300] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 74.109832][ T4300] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 74.120368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.128901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.143410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.156815][ T4300] syz.3.4 (4300) used greatest stack depth: 19440 bytes left [ 74.169936][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.203744][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.212649][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.236230][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.258895][ T4302] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.295309][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.318431][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.329019][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.339672][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.351521][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.366023][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.388920][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.400831][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.412962][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.427408][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.433132][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.447321][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.459859][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.470585][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.470585][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.480469][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.480487][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.480497][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.480510][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.551802][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.613790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.628226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.658153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.690356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.716419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.731095][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.750660][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.765883][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.789094][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.003149][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.018231][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.060122][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.091924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.104666][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.123258][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.358998][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 75.381410][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.395726][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.406568][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 76.254256][ T4316] process 'syz.0.1' launched './file1' with NULL argv: empty string added [ 76.277674][ T4311] sched: RT throttling activated [ 76.283097][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #240!!! [ 76.332286][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.257525][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 77.264533][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 77.271057][ T4191] Bluetooth: hci1: command 0x0419 tx timeout [ 78.286589][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.302235][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.335597][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.273696][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 79.283400][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #240!!! [ 79.369721][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 79.472830][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 79.677344][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 79.687016][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 79.863775][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 80.641265][ T4344] loop1: detected capacity change from 0 to 512 [ 82.546128][ T4349] ALSA: mixer_oss: invalid OSS volume '' [ 82.813986][ T4366] device syzkaller0 entered promiscuous mode [ 83.363678][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 83.373850][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 85.381788][ T4401] [ 85.393725][ T4401] ============================= [ 85.399283][ T4401] WARNING: suspicious RCU usage [ 85.422530][ T4401] syzkaller #0 Not tainted [ 85.532989][ T4401] ----------------------------- [ 85.544841][ T4401] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 85.554298][ T4401] [ 85.554298][ T4401] other info that might help us debug this: [ 85.554298][ T4401] [ 85.628911][ T4401] [ 85.628911][ T4401] rcu_scheduler_active = 2, debug_locks = 1 [ 85.661027][ T4401] 1 lock held by syz.4.26/4401: [ 85.667585][ T4401] #0: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 85.698933][ T4401] [ 85.698933][ T4401] stack backtrace: [ 85.713224][ T4401] CPU: 1 PID: 4401 Comm: syz.4.26 Not tainted syzkaller #0 [ 85.720499][ T4401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.730596][ T4401] Call Trace: [ 85.733896][ T4401] [ 85.736858][ T4401] dump_stack_lvl+0x188/0x250 [ 85.741565][ T4401] ? load_image+0x400/0x400 [ 85.746095][ T4401] ? show_regs_print_info+0x20/0x20 [ 85.751311][ T4401] ? lockdep_rcu_suspicious+0x110/0x180 [ 85.756867][ T4401] ? local_bh_enable+0x20/0x20 [ 85.761655][ T4401] rhltable_lookup+0x7a9/0x7c0 [ 85.766457][ T4401] ? local_bh_enable+0x20/0x20 [ 85.771280][ T4401] ? mr_mfc_find_parent+0x190/0x190 [ 85.776522][ T4401] ? mark_lock+0x94/0x320 [ 85.780949][ T4401] ? local_bh_enable+0x20/0x20 [ 85.785720][ T4401] ? mark_lock+0x94/0x320 [ 85.790054][ T4401] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 85.796219][ T4401] ? lock_chain_count+0x20/0x20 [ 85.801085][ T4401] mr_mfc_find_any_parent+0xb6/0x1e0 [ 85.806494][ T4401] ? local_bh_enable+0x20/0x20 [ 85.811284][ T4401] ip_mr_forward+0x24c/0xf90 [ 85.815953][ T4401] ipmr_mfc_add+0x23cc/0x2d40 [ 85.820791][ T4401] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 85.826055][ T4401] ? __lock_acquire+0x7d10/0x7d10 [ 85.831142][ T4401] ip_mroute_setsockopt+0xeaf/0x1250 [ 85.836451][ T4401] ? ipmr_rule_default+0x70/0x70 [ 85.841442][ T4401] ? __might_sleep+0xf0/0xf0 [ 85.846056][ T4401] ip_setsockopt+0x568/0x3130 [ 85.850755][ T4401] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 85.856151][ T4401] ? aa_sk_perm+0x7dc/0x910 [ 85.860679][ T4401] ? aa_af_perm+0x340/0x340 [ 85.865213][ T4401] ? __fget_files+0x40f/0x480 [ 85.869913][ T4401] ? aa_sock_opt_perm+0x74/0x100 [ 85.874946][ T4401] ? sock_common_setsockopt+0x32/0xb0 [ 85.880326][ T4401] ? raw_setsockopt+0xc5/0x180 [ 85.885126][ T4401] ? sock_common_recvmsg+0x1c0/0x1c0 [ 85.890423][ T4401] __sys_setsockopt+0x2bf/0x3d0 [ 85.895289][ T4401] __x64_sys_setsockopt+0xb1/0xc0 [ 85.900322][ T4401] do_syscall_64+0x4c/0xa0 [ 85.904745][ T4401] ? clear_bhb_loop+0x30/0x80 [ 85.909427][ T4401] ? clear_bhb_loop+0x30/0x80 [ 85.914112][ T4401] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.920018][ T4401] RIP: 0033:0x7fa6502aecb9 [ 85.924445][ T4401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.944087][ T4401] RSP: 002b:00007fa64e4c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 85.952534][ T4401] RAX: ffffffffffffffda RBX: 00007fa65052a180 RCX: 00007fa6502aecb9 [ 85.960555][ T4401] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000009 [ 85.968566][ T4401] RBP: 00007fa65031cbf7 R08: 000000000000003c R09: 0000000000000000 [ 85.976651][ T4401] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 85.984631][ T4401] R13: 00007fa65052a218 R14: 00007fa65052a180 R15: 00007ffedcfb8468 [ 85.992630][ T4401] [ 86.749521][ T23] cfg80211: failed to load regulatory.db [ 86.800694][ T4401] [ 86.811546][ T4401] ============================= [ 86.825999][ T4401] WARNING: suspicious RCU usage [ 86.844436][ T4401] syzkaller #0 Not tainted [ 86.856031][ T4401] ----------------------------- [ 86.869081][ T4401] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 86.889431][ T4401] [ 86.889431][ T4401] other info that might help us debug this: [ 86.889431][ T4401] [ 86.912289][ T4401] [ 86.912289][ T4401] rcu_scheduler_active = 2, debug_locks = 1 [ 86.929730][ T4401] 1 lock held by syz.4.26/4401: [ 86.943285][ T4401] #0: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 86.991358][ T4401] [ 86.991358][ T4401] stack backtrace: [ 86.998007][ T4401] CPU: 0 PID: 4401 Comm: syz.4.26 Not tainted syzkaller #0 [ 87.005266][ T4401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.015540][ T4401] Call Trace: [ 87.018845][ T4401] [ 87.021801][ T4401] dump_stack_lvl+0x188/0x250 [ 87.026502][ T4401] ? load_image+0x400/0x400 [ 87.031024][ T4401] ? show_regs_print_info+0x20/0x20 [ 87.036361][ T4401] ? lockdep_rcu_suspicious+0x110/0x180 [ 87.041970][ T4401] ? local_bh_enable+0x20/0x20 [ 87.046765][ T4401] rhltable_lookup+0x52a/0x7c0 [ 87.051559][ T4401] ? local_bh_enable+0x20/0x20 [ 87.056355][ T4401] ? mr_mfc_find_parent+0x190/0x190 [ 87.061765][ T4401] ? mark_lock+0x94/0x320 [ 87.066288][ T4401] ? local_bh_enable+0x20/0x20 [ 87.071076][ T4401] ? mark_lock+0x94/0x320 [ 87.075432][ T4401] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 87.081435][ T4401] ? lock_chain_count+0x20/0x20 [ 87.086322][ T4401] mr_mfc_find_any_parent+0xb6/0x1e0 [ 87.091649][ T4401] ? local_bh_enable+0x20/0x20 [ 87.096439][ T4401] ip_mr_forward+0x24c/0xf90 [ 87.101065][ T4401] ipmr_mfc_add+0x23cc/0x2d40 [ 87.105772][ T4401] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 87.110731][ T4401] ? __lock_acquire+0x7d10/0x7d10 [ 87.115798][ T4401] ip_mroute_setsockopt+0xeaf/0x1250 [ 87.121123][ T4401] ? ipmr_rule_default+0x70/0x70 [ 87.126101][ T4401] ? __might_sleep+0xf0/0xf0 [ 87.130719][ T4401] ip_setsockopt+0x568/0x3130 [ 87.135433][ T4401] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 87.140831][ T4401] ? aa_sk_perm+0x7dc/0x910 [ 87.145362][ T4401] ? aa_af_perm+0x340/0x340 [ 87.149890][ T4401] ? __fget_files+0x40f/0x480 [ 87.154589][ T4401] ? aa_sock_opt_perm+0x74/0x100 [ 87.159544][ T4401] ? sock_common_setsockopt+0x32/0xb0 [ 87.164936][ T4401] ? raw_setsockopt+0xc5/0x180 [ 87.169738][ T4401] ? sock_common_recvmsg+0x1c0/0x1c0 [ 87.175042][ T4401] __sys_setsockopt+0x2bf/0x3d0 [ 87.180016][ T4401] __x64_sys_setsockopt+0xb1/0xc0 [ 87.185067][ T4401] do_syscall_64+0x4c/0xa0 [ 87.189498][ T4401] ? clear_bhb_loop+0x30/0x80 [ 87.194192][ T4401] ? clear_bhb_loop+0x30/0x80 [ 87.198887][ T4401] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.204808][ T4401] RIP: 0033:0x7fa6502aecb9 [ 87.209334][ T4401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.229052][ T4401] RSP: 002b:00007fa64e4c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 87.237499][ T4401] RAX: ffffffffffffffda RBX: 00007fa65052a180 RCX: 00007fa6502aecb9 [ 87.245504][ T4401] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000009 [ 87.253762][ T4401] RBP: 00007fa65031cbf7 R08: 000000000000003c R09: 0000000000000000 [ 87.261783][ T4401] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 87.269775][ T4401] R13: 00007fa65052a218 R14: 00007fa65052a180 R15: 00007ffedcfb8468 [ 87.277785][ T4401] [ 87.299594][ T4401] [ 87.301991][ T4401] ============================= [ 87.307482][ T4401] WARNING: suspicious RCU usage [ 87.312414][ T4401] syzkaller #0 Not tainted [ 87.323628][ T4401] ----------------------------- [ 87.328740][ T4401] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 87.339795][ T4401] [ 87.339795][ T4401] other info that might help us debug this: [ 87.339795][ T4401] [ 87.350722][ T4401] [ 87.350722][ T4401] rcu_scheduler_active = 2, debug_locks = 1 [ 87.366571][ T4401] 1 lock held by syz.4.26/4401: [ 87.371649][ T4401] #0: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 87.383809][ T4401] [ 87.383809][ T4401] stack backtrace: [ 87.390648][ T4401] CPU: 0 PID: 4401 Comm: syz.4.26 Not tainted syzkaller #0 [ 87.398026][ T4401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.408115][ T4401] Call Trace: [ 87.411424][ T4401] [ 87.414379][ T4401] dump_stack_lvl+0x188/0x250 [ 87.419084][ T4401] ? load_image+0x400/0x400 [ 87.423617][ T4401] ? show_regs_print_info+0x20/0x20 [ 87.428849][ T4401] ? lockdep_rcu_suspicious+0x110/0x180 [ 87.434421][ T4401] ? local_bh_enable+0x20/0x20 [ 87.439204][ T4401] rhltable_lookup+0x61e/0x7c0 [ 87.443991][ T4401] ? local_bh_enable+0x20/0x20 [ 87.448778][ T4401] ? mr_mfc_find_parent+0x190/0x190 [ 87.453991][ T4401] ? mark_lock+0x94/0x320 [ 87.458348][ T4401] ? local_bh_enable+0x20/0x20 [ 87.463130][ T4401] ? mark_lock+0x94/0x320 [ 87.467479][ T4401] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 87.473608][ T4401] ? lock_chain_count+0x20/0x20 [ 87.478490][ T4401] mr_mfc_find_any_parent+0xb6/0x1e0 [ 87.483801][ T4401] ? local_bh_enable+0x20/0x20 [ 87.488583][ T4401] ip_mr_forward+0x24c/0xf90 [ 87.493202][ T4401] ipmr_mfc_add+0x23cc/0x2d40 [ 87.497906][ T4401] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 87.503022][ T4401] ? __lock_acquire+0x7d10/0x7d10 [ 87.508086][ T4401] ip_mroute_setsockopt+0xeaf/0x1250 [ 87.513403][ T4401] ? ipmr_rule_default+0x70/0x70 [ 87.518380][ T4401] ? __might_sleep+0xf0/0xf0 [ 87.522998][ T4401] ip_setsockopt+0x568/0x3130 [ 87.527794][ T4401] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 87.533187][ T4401] ? aa_sk_perm+0x7dc/0x910 [ 87.537719][ T4401] ? aa_af_perm+0x340/0x340 [ 87.542403][ T4401] ? __fget_files+0x40f/0x480 [ 87.547118][ T4401] ? aa_sock_opt_perm+0x74/0x100 [ 87.552085][ T4401] ? sock_common_setsockopt+0x32/0xb0 [ 87.557585][ T4401] ? raw_setsockopt+0xc5/0x180 [ 87.562394][ T4401] ? sock_common_recvmsg+0x1c0/0x1c0 [ 87.567709][ T4401] __sys_setsockopt+0x2bf/0x3d0 [ 87.572593][ T4401] __x64_sys_setsockopt+0xb1/0xc0 [ 87.577643][ T4401] do_syscall_64+0x4c/0xa0 [ 87.582170][ T4401] ? clear_bhb_loop+0x30/0x80 [ 87.586967][ T4401] ? clear_bhb_loop+0x30/0x80 [ 87.591662][ T4401] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.597571][ T4401] RIP: 0033:0x7fa6502aecb9 [ 87.602015][ T4401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.621644][ T4401] RSP: 002b:00007fa64e4c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 87.630079][ T4401] RAX: ffffffffffffffda RBX: 00007fa65052a180 RCX: 00007fa6502aecb9 [ 87.638072][ T4401] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000009 [ 87.646058][ T4401] RBP: 00007fa65031cbf7 R08: 000000000000003c R09: 0000000000000000 [ 87.654043][ T4401] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 87.662033][ T4401] R13: 00007fa65052a218 R14: 00007fa65052a180 R15: 00007ffedcfb8468 [ 87.670041][ T4401]