last executing test programs: 11.177785741s ago: executing program 0 (id=120): openat$random(0xffffffffffffff9c, 0x0, 0x502, 0x0) creat(0x0, 0x0) syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdir(0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 10.555185012s ago: executing program 2 (id=122): bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 9.734177523s ago: executing program 0 (id=124): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x201) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x14, 0x4}, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048014) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r1, 0x1) 8.730148442s ago: executing program 0 (id=127): landlock_create_ruleset(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x100, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000003c0)="d7c2a74db04a0956169f0741c41621197219876d1586f46d53df421ba4375ca9c9d927bbf98f", 0x26}], 0x1}}], 0x1, 0x0) 8.724019493s ago: executing program 1 (id=128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) 8.323447702s ago: executing program 4 (id=131): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) 8.24197039s ago: executing program 2 (id=133): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknod$loop(&(0x7f00000000c0)='./file1/file4/file6\x00', 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x210a}, 0x0) 8.186218115s ago: executing program 4 (id=134): openat$random(0xffffffffffffff9c, 0x0, 0x502, 0x0) creat(0x0, 0x0) syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdir(0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 8.106248573s ago: executing program 1 (id=135): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000340), 0x1, 0x564, &(0x7f0000000c00)="$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") openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x282202, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) brk(0x689d80000000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x84) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) renameat2(0xffffffffffffffff, &(0x7f0000000240)='./bus/file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2) 5.842574526s ago: executing program 0 (id=137): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x201) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x14, 0x4}, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048014) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r1, 0x1) 5.821349158s ago: executing program 4 (id=138): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@default, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) 5.544865435s ago: executing program 2 (id=139): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000580)='vegas', 0x5) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x100000000000000) 5.134129305s ago: executing program 2 (id=140): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x5a303}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.133791905s ago: executing program 4 (id=141): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}]}, 0x48}}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 5.076239611s ago: executing program 0 (id=142): ioprio_set$pid(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 5.064305422s ago: executing program 4 (id=143): bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 4.662213832s ago: executing program 2 (id=145): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.461060761s ago: executing program 1 (id=147): landlock_create_ruleset(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x100, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000003c0)="d7c2a74db04a0956169f0741c41621197219876d1586f46d53df421ba4375ca9c9d927bbf98f", 0x26}], 0x1}}], 0x1, 0x0) 3.754306461s ago: executing program 3 (id=148): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xf, 0x5, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.494250197s ago: executing program 3 (id=149): openat$random(0xffffffffffffff9c, 0x0, 0x502, 0x0) creat(0x0, 0x0) syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdir(0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 3.017611243s ago: executing program 1 (id=150): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknod$loop(&(0x7f00000000c0)='./file1/file4/file6\x00', 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x210a}, 0x0) 2.428855771s ago: executing program 3 (id=151): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f00000000c0)=@udp6=r1, 0x1}, 0x20) poll(&(0x7f0000000200)=[{r1, 0x1e8}], 0x1, 0xe) 1.888552064s ago: executing program 1 (id=152): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x201) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x14, 0x4}, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048014) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r1, 0x1) 1.790257174s ago: executing program 3 (id=153): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @bcast, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 1.436231129s ago: executing program 3 (id=154): landlock_create_ruleset(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x100, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000003c0)="d7c2a74db04a0956169f0741c41621197219876d1586f46d53df421ba4375ca9c9d927bbf98f", 0x26}], 0x1}}], 0x1, 0x0) 809.7485ms ago: executing program 4 (id=155): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x90c, 0x0, &(0x7f0000000740), 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x300, 0x0, 0x4, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 762.261475ms ago: executing program 1 (id=156): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 163.103674ms ago: executing program 2 (id=157): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000340), 0x1, 0x564, &(0x7f0000000c00)="$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") openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x282202, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) brk(0x689d80000000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x84) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) renameat2(0xffffffffffffffff, &(0x7f0000000240)='./bus/file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2) 37.089586ms ago: executing program 3 (id=158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b", 0x2a, 0xebec93e830f96115}) io_uring_enter(0xffffffffffffffff, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r4, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r5, 0x5437, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 0s ago: executing program 0 (id=159): sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x7, 0x7, 0xfffffffa, 0x0, {{0x5, 0x4, 0x1, 0x3c, 0x14, 0x66, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2f}}}}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.147' (ED25519) to the list of known hosts. [ 64.667107][ T4169] cgroup: Unknown subsys name 'net' [ 64.779996][ T4169] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.403046][ T4169] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.028574][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 68.047687][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 68.069537][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 68.096280][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 68.298376][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.306347][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.315639][ T4184] device bridge_slave_0 entered promiscuous mode [ 68.324836][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.332359][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.340700][ T4183] device bridge_slave_0 entered promiscuous mode [ 68.349074][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 68.360018][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.369272][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.379715][ T4182] device bridge_slave_0 entered promiscuous mode [ 68.401764][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.409764][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.420071][ T4184] device bridge_slave_1 entered promiscuous mode [ 68.428567][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.436447][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.445091][ T4183] device bridge_slave_1 entered promiscuous mode [ 68.457849][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.465384][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.473946][ T4182] device bridge_slave_1 entered promiscuous mode [ 68.481881][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.489312][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.499107][ T4185] device bridge_slave_0 entered promiscuous mode [ 68.551908][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.560315][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.569304][ T4185] device bridge_slave_1 entered promiscuous mode [ 68.609712][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.628497][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.642550][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.655689][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.671163][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.682508][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.735759][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.750216][ T4183] team0: Port device team_slave_0 added [ 68.778496][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.789600][ T4183] team0: Port device team_slave_1 added [ 68.808127][ T4184] team0: Port device team_slave_0 added [ 68.828031][ T4182] team0: Port device team_slave_0 added [ 68.856461][ T4184] team0: Port device team_slave_1 added [ 68.871315][ T4182] team0: Port device team_slave_1 added [ 68.886824][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.894328][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.922983][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.950526][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.957934][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.966531][ T4186] device bridge_slave_0 entered promiscuous mode [ 68.984948][ T4185] team0: Port device team_slave_0 added [ 69.000399][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.007847][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.035152][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.055804][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.063128][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.072881][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.082143][ T4185] team0: Port device team_slave_1 added [ 69.088930][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.096926][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.125551][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.142719][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.150320][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.180990][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.210281][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.218078][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.245329][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.272496][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.279860][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.307395][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.339496][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.347691][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.376373][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.403511][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.424117][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.431664][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.459084][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.475924][ T4183] device hsr_slave_0 entered promiscuous mode [ 69.483257][ T4183] device hsr_slave_1 entered promiscuous mode [ 69.507354][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.557010][ T4182] device hsr_slave_0 entered promiscuous mode [ 69.564849][ T4182] device hsr_slave_1 entered promiscuous mode [ 69.572427][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.580681][ T4182] Cannot create hsr debugfs directory [ 69.587687][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 69.614340][ T4184] device hsr_slave_0 entered promiscuous mode [ 69.622277][ T4184] device hsr_slave_1 entered promiscuous mode [ 69.629196][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.637342][ T4184] Cannot create hsr debugfs directory [ 69.652800][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 69.658945][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 69.659035][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 69.684462][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 69.711712][ T4186] team0: Port device team_slave_0 added [ 69.730503][ T4185] device hsr_slave_0 entered promiscuous mode [ 69.738081][ T4185] device hsr_slave_1 entered promiscuous mode [ 69.745619][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.754159][ T4185] Cannot create hsr debugfs directory [ 69.774527][ T4186] team0: Port device team_slave_1 added [ 69.849269][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.857372][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.886135][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.924159][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.931686][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.959200][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.103226][ T4186] device hsr_slave_0 entered promiscuous mode [ 70.111370][ T4186] device hsr_slave_1 entered promiscuous mode [ 70.120319][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.129493][ T4186] Cannot create hsr debugfs directory [ 70.277576][ T4182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.297694][ T4182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.315527][ T4182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.325271][ T4182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.375648][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.390186][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.416399][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.428962][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.484974][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.495552][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.528838][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.547452][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.565695][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.576871][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.606256][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.633858][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.688927][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.722170][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.736533][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.747356][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.796827][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.859740][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.879614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.891549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.927574][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.951523][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.976634][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.986271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.996477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.021731][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.033707][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.045285][ T708] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.053718][ T708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.089277][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.097029][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.108750][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.119718][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.129390][ T708] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.136961][ T708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.146184][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.155823][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.164915][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.174431][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.184009][ T708] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.192042][ T708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.200519][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.209647][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.245378][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.259432][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.269603][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.281881][ T708] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.289077][ T708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.297362][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.309498][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.318695][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.328854][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.338653][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.348378][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.357921][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.367962][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.378548][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.393404][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.404307][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.414675][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.431254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.441181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.471375][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.484438][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.494888][ T708] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.502397][ T708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.510464][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.520554][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.531086][ T708] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.538565][ T708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.548723][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.559415][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.571423][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.583722][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.592805][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.607068][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.623071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.634368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.646162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.655869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.664264][ T4260] Bluetooth: hci1: command 0x041b tx timeout [ 71.670592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.685477][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.699320][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.715336][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.732923][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 71.739852][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 71.742625][ T1111] Bluetooth: hci4: command 0x041b tx timeout [ 71.753842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.766031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.766101][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 71.775273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.790506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.800093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.808994][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.816323][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.826693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.835669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.844493][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.851666][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.860005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.869490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.878807][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.885945][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.895241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.903499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.927031][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.941155][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.977037][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.983915][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.000167][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.017716][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.027336][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.038855][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.048424][ T708] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.056027][ T708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.065808][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.076353][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.086082][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.097244][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.106791][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.118174][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.127951][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.137840][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.147287][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.158005][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.167779][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.176284][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.205597][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.222979][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.235241][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.253217][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.270192][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.285512][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.310366][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.328283][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.342868][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.357951][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.368574][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.378999][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.387993][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.397218][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.406517][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.415623][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.424995][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.485373][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.507038][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.547760][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.578142][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.588636][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.598271][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.607457][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.616798][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.628327][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.679498][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.717284][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.748051][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.782844][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.839376][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.869244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.878438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.887618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.897409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.907210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.918525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.985928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.996416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.010137][ T4182] device veth0_vlan entered promiscuous mode [ 73.026712][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.059966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.069741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.080269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.089446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.112443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.121363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.131556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.141280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.150179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.159876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.175951][ T4182] device veth1_vlan entered promiscuous mode [ 73.188075][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.202390][ T4183] device veth0_vlan entered promiscuous mode [ 73.220525][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.232402][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.248444][ T4183] device veth1_vlan entered promiscuous mode [ 73.291767][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.307615][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.331303][ T4182] device veth0_macvtap entered promiscuous mode [ 73.367295][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.384838][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.400258][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.410092][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.420352][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.429782][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.439465][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.463325][ T4186] device veth0_vlan entered promiscuous mode [ 73.473831][ T4182] device veth1_macvtap entered promiscuous mode [ 73.513446][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.523878][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.533552][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.548147][ T4186] device veth1_vlan entered promiscuous mode [ 73.560716][ T4185] device veth0_vlan entered promiscuous mode [ 73.578493][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.586971][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.596361][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.605721][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.617300][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.627308][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.636674][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.645879][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.656162][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.665805][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.690172][ T4185] device veth1_vlan entered promiscuous mode [ 73.700363][ T4183] device veth0_macvtap entered promiscuous mode [ 73.721712][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.734120][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 73.753863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.763110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.771532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.782482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.791292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.803954][ T4183] device veth1_macvtap entered promiscuous mode [ 73.812957][ T4260] Bluetooth: hci3: command 0x040f tx timeout [ 73.819149][ T4260] Bluetooth: hci2: command 0x040f tx timeout [ 73.824566][ T4182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.832358][ T4260] Bluetooth: hci4: command 0x040f tx timeout [ 73.840665][ T4260] Bluetooth: hci0: command 0x040f tx timeout [ 73.844370][ T4182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.860376][ T4182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.869847][ T4182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.926745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.936707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.946897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.956360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.967343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.977305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.986963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.996207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.010821][ T4186] device veth0_macvtap entered promiscuous mode [ 74.020643][ T4184] device veth0_vlan entered promiscuous mode [ 74.033208][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.044405][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.059984][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.070901][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.085749][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.099117][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.111529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.120530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.130794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.141012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.151060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.162799][ T4186] device veth1_macvtap entered promiscuous mode [ 74.174006][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.191232][ T4184] device veth1_vlan entered promiscuous mode [ 74.217258][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.227754][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.238048][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.247330][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.260337][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.269769][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.300672][ T4185] device veth0_macvtap entered promiscuous mode [ 74.342688][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.354289][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.365718][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.386050][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.398587][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.416395][ T4185] device veth1_macvtap entered promiscuous mode [ 74.436445][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.450087][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.460479][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.469662][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.507528][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.518571][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.528939][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.542292][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.555220][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.583010][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.595885][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.607166][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.619884][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.633342][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.643896][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.655935][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.663847][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.675856][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.684866][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.694840][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.706610][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.715723][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.728617][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.737736][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.747830][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.757203][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.784415][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.785400][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.811170][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.815411][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.822708][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.841499][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.853365][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.864216][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.876481][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.888803][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.898655][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.910069][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.919245][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.941375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.951394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.960720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.972610][ T4184] device veth0_macvtap entered promiscuous mode [ 75.037105][ T4184] device veth1_macvtap entered promiscuous mode [ 75.059367][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.077218][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.091664][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.100042][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.138965][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.154906][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.163677][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.172178][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.215768][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.228953][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.240968][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.257512][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.270061][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.288261][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.300109][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.311387][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.327123][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.344585][ T708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.369887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.380948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.394575][ T708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.431774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.455069][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.471750][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.498942][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.527645][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.542702][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.560965][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.579222][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.605956][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.627288][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.672964][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.682286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.691789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.709219][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.719905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.816871][ T4278] Bluetooth: hci1: command 0x0419 tx timeout [ 76.165365][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.503746][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.523163][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.534840][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 76.540995][ T4278] Bluetooth: hci4: command 0x0419 tx timeout [ 76.547328][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 76.553900][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 76.582011][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.697335][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.716157][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.753927][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.764434][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.824981][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.869324][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.902820][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.911714][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.976417][ T4303] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.024730][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.108517][ T708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.148447][ T708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.228121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.271741][ T3077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.313786][ T3077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.370970][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.380196][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #1a!!! [ 77.390666][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18!!! [ 77.402970][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18!!! [ 77.467206][ T708] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.543280][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 77.552364][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #12!!! [ 77.561368][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #112!!! [ 77.570672][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #112!!! [ 77.761706][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 77.812390][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.865982][ T4331] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET) [ 80.332384][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.602498][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 80.722691][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.778778][ T21] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 81.032624][ T21] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 81.282019][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.360707][ T4348] process 'syz.1.14' launched './file0' with NULL argv: empty string added [ 81.398921][ T21] usb 4-1: Product: syz [ 81.431567][ T21] usb 4-1: Manufacturer: syz [ 81.446789][ T21] usb 4-1: SerialNumber: syz [ 81.850414][ T21] usb 4-1: config 0 descriptor?? [ 83.043799][ T21] usb 4-1: USB disconnect, device number 2 [ 83.215976][ T4197] Bluetooth: hci0: Unknown advertising packet type: 0x115 [ 83.226929][ T4367] input: syz0 as /devices/virtual/input/input5 [ 85.895320][ T4398] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 85.972451][ T4398] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 86.042145][ T4260] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.322704][ T4260] usb 1-1: Using ep0 maxpacket: 8 [ 86.453815][ T4260] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.603993][ T4260] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.724908][ T4260] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.813301][ T4260] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.887682][ T4260] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.928802][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.154478][ T4431] loop2: detected capacity change from 0 to 512 [ 88.042521][ T4260] usb 1-1: GET_CAPABILITIES returned 0 [ 88.048403][ T4260] usbtmc 1-1:16.0: can't read capabilities [ 88.138222][ T4431] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.152630][ T4431] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.322111][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 88.406995][ T21] usb 1-1: USB disconnect, device number 2 [ 88.990616][ T4447] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz.2.40: corrupted inode contents [ 89.407386][ T4444] sched: RT throttling activated [ 89.446076][ T4447] EXT4-fs error (device loop2): ext4_dirty_inode:6046: inode #2: comm syz.2.40: mark_inode_dirty error [ 89.459831][ T4447] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz.2.40: corrupted inode contents [ 89.472603][ T4447] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.40: mark_inode_dirty error [ 92.454661][ T1325] cfg80211: failed to load regulatory.db [ 92.852173][ T4486] netlink: 'syz.2.54': attribute type 10 has an invalid length. [ 92.940488][ T4486] team0: Device ipvlan1 failed to register rx_handler [ 93.432127][ T1325] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.475131][ T4486] syz.2.54 (4486) used greatest stack depth: 20768 bytes left [ 93.616524][ T4496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 94.055667][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.911692][ T4508] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 94.997459][ T4508] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 95.030264][ T4508] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 95.077113][ T4508] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 95.082092][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 95.098876][ T4508] pit: kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 95.113635][ T4508] pit: kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 95.123008][ T4508] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 95.132852][ T1325] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 95.145580][ T4508] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 95.167986][ T1325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.190390][ T4508] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 95.199216][ T1325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.216202][ T4508] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 95.231608][ T1325] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 95.279950][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.310822][ T21] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.333330][ T1325] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 95.347836][ T1325] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 95.356584][ T1325] usb 2-1: Manufacturer: syz [ 95.398412][ T1325] usb 2-1: config 0 descriptor?? [ 95.528579][ T21] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 95.547102][ T21] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 95.710121][ T21] usb 4-1: Product: syz [ 95.799371][ T21] usb 4-1: Manufacturer: syz [ 95.862717][ T21] usb 4-1: SerialNumber: syz [ 96.012136][ T1325] usbhid 2-1:0.0: can't add hid device: -71 [ 96.335002][ T1325] usbhid: probe of 2-1:0.0 failed with error -71 [ 96.342337][ T21] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input6 [ 96.350245][ T1325] usb 2-1: USB disconnect, device number 2 [ 96.717833][ T21] usb 4-1: USB disconnect, device number 3 [ 96.724517][ C1] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 96.922423][ T21] appletouch 4-1:1.0: input: appletouch disconnected [ 97.515879][ T4541] xt_hashlimit: size too large, truncated to 1048576 [ 97.999515][ T4553] loop3: detected capacity change from 0 to 512 [ 98.083165][ T4553] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.098749][ T4553] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.549433][ T4558] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #2: comm syz.3.73: corrupted inode contents [ 98.564478][ T4558] EXT4-fs error (device loop3): ext4_dirty_inode:6046: inode #2: comm syz.3.73: mark_inode_dirty error [ 98.579234][ T4558] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #2: comm syz.3.73: corrupted inode contents [ 98.597440][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.614536][ T4558] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.73: mark_inode_dirty error [ 98.992143][ T4260] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.424446][ T4260] usb 1-1: Using ep0 maxpacket: 8 [ 99.742524][ T4260] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.773201][ T4260] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.837656][ T4260] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.905354][ T4260] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.026856][ T4260] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.040633][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.444481][ T4260] usb 1-1: GET_CAPABILITIES returned 0 [ 100.450463][ T4260] usbtmc 1-1:16.0: can't read capabilities [ 100.652631][ T4260] usb 1-1: USB disconnect, device number 3 [ 101.147911][ T4241] Bluetooth: hci0: command 0x1407 tx timeout [ 102.471500][ T4593] loop0: detected capacity change from 0 to 512 [ 102.631302][ T4593] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.650412][ T4593] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.285688][ T4605] EXT4-fs error (device loop0): ext4_do_update_inode:5210: inode #2: comm syz.0.85: corrupted inode contents [ 103.300956][ T4605] EXT4-fs error (device loop0): ext4_dirty_inode:6046: inode #2: comm syz.0.85: mark_inode_dirty error [ 103.373108][ T4605] EXT4-fs error (device loop0): ext4_do_update_inode:5210: inode #2: comm syz.0.85: corrupted inode contents [ 103.386378][ T4605] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.85: mark_inode_dirty error [ 105.587925][ T4225] Bluetooth: hci0: command 0x1407 tx timeout [ 107.327074][ T4655] tmpfs: Unknown parameter 'usrquota' [ 108.492697][ T1325] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 109.523264][ T1325] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 109.571346][ T1325] usb 2-1: config 0 has no interface number 0 [ 109.664396][ T1325] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 109.847377][ T1325] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 109.996111][ T1325] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 110.074907][ T1325] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.152182][ T1325] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 110.215456][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.483639][ T1325] usb 2-1: config 0 descriptor?? [ 110.522587][ T4668] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.540256][ T4668] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.554578][ T1325] ldusb 2-1:0.55: Interrupt in endpoint not found [ 110.763852][ T4225] usb 2-1: USB disconnect, device number 3 [ 111.266541][ T4706] loop3: detected capacity change from 0 to 7 [ 111.682228][ T4706] Dev loop3: unable to read RDB block 7 [ 111.795451][ T4706] loop3: AHDI p1 [ 112.032024][ T4706] loop3: partition table partially beyond EOD, truncated [ 112.129274][ T4721] loop1: detected capacity change from 0 to 512 [ 112.325005][ T4721] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.392383][ T4721] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.746775][ T4729] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz.1.121: corrupted inode contents [ 112.759588][ T4729] EXT4-fs error (device loop1): ext4_dirty_inode:6046: inode #2: comm syz.1.121: mark_inode_dirty error [ 112.772838][ T4729] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz.1.121: corrupted inode contents [ 112.785128][ T1325] Bluetooth: hci0: command 0x1407 tx timeout [ 112.794753][ T4729] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.121: mark_inode_dirty error [ 112.997648][ T4195] Bluetooth: hci4: link tx timeout [ 113.003309][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.013639][ T4195] Bluetooth: hci4: link tx timeout [ 113.019579][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.045096][ T4195] Bluetooth: hci4: link tx timeout [ 113.050776][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.098786][ T4195] Bluetooth: hci4: link tx timeout [ 113.123784][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.148805][ T4744] device syzkaller0 entered promiscuous mode [ 116.827210][ T4767] loop1: detected capacity change from 0 to 512 [ 116.959001][ T4225] Bluetooth: hci4: command 0x0406 tx timeout [ 117.431791][ T4767] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.454505][ T4785] (unnamed net_device) (uninitialized): ARP target 4.0.0.0 is already present [ 117.455703][ T4767] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.465152][ T4785] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (4) [ 117.518483][ T4786] bridge0: port 1(bridge_slave_0) entered listening state [ 117.694111][ T4786] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.746131][ T4789] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz.1.135: corrupted inode contents [ 117.764796][ T4789] EXT4-fs error (device loop1): ext4_dirty_inode:6046: inode #2: comm syz.1.135: mark_inode_dirty error [ 117.783527][ T4789] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz.1.135: corrupted inode contents [ 117.796481][ T4789] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.135: mark_inode_dirty error [ 117.860400][ T4786] syz.2.140 (4786) used greatest stack depth: 20000 bytes left [ 121.545841][ T4241] Bluetooth: hci0: command 0x1407 tx timeout [ 121.878935][ T4835] xt_hashlimit: size too large, truncated to 1048576 [ 122.601473][ T4840] loop2: detected capacity change from 0 to 512 [ 122.679730][ T4833] [ 122.682210][ T4833] ====================================================== [ 122.689521][ T4833] WARNING: possible circular locking dependency detected [ 122.696575][ T4833] syzkaller #0 Not tainted [ 122.701020][ T4833] ------------------------------------------------------ [ 122.708147][ T4833] syz.4.155/4833 is trying to acquire lock: [ 122.714253][ T4833] ffff88807bb11458 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 122.726077][ T4833] [ 122.726077][ T4833] but task is already holding lock: [ 122.733563][ T4833] ffff88807bb10120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 122.742866][ T4833] [ 122.742866][ T4833] which lock already depends on the new lock. [ 122.742866][ T4833] [ 122.753380][ T4833] [ 122.753380][ T4833] the existing dependency chain (in reverse order) is: [ 122.762733][ T4833] [ 122.762733][ T4833] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 122.770755][ T4833] lock_sock_nested+0x44/0x100 [ 122.776264][ T4833] smc_listen_out+0x109/0x3d0 [ 122.781959][ T4833] process_one_work+0x863/0x1000 [ 122.788624][ T4833] worker_thread+0xaa8/0x12a0 [ 122.794710][ T4833] kthread+0x436/0x520 [ 122.800128][ T4833] ret_from_fork+0x1f/0x30 [ 122.805579][ T4833] [ 122.805579][ T4833] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 122.816569][ T4833] __lock_acquire+0x2c33/0x7c60 [ 122.822837][ T4833] lock_acquire+0x197/0x3f0 [ 122.827920][ T4833] __flush_work+0xdd/0x1b0 [ 122.833012][ T4833] __cancel_work_timer+0x3ac/0x520 [ 122.838973][ T4833] smc_clcsock_release+0x5c/0xe0 [ 122.844780][ T4833] __smc_release+0x398/0x500 [ 122.850220][ T4833] smc_close_non_accepted+0xd1/0x1f0 [ 122.856071][ T4833] smc_close_active+0x9d3/0xd90 [ 122.861766][ T4833] __smc_release+0x9a/0x500 [ 122.866848][ T4833] smc_release+0x2ca/0x530 [ 122.871815][ T4833] sock_close+0xd5/0x240 [ 122.876737][ T4833] __fput+0x234/0x930 [ 122.881287][ T4833] task_work_run+0x125/0x1a0 [ 122.887074][ T4833] get_signal+0x1222/0x12c0 [ 122.892314][ T4833] arch_do_signal_or_restart+0xc1/0x1300 [ 122.898722][ T4833] exit_to_user_mode_loop+0x9e/0x130 [ 122.904580][ T4833] exit_to_user_mode_prepare+0xee/0x180 [ 122.911011][ T4833] syscall_exit_to_user_mode+0x16/0x40 [ 122.917350][ T4833] do_syscall_64+0x58/0xa0 [ 122.922530][ T4833] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.929336][ T4833] [ 122.929336][ T4833] other info that might help us debug this: [ 122.929336][ T4833] [ 122.939753][ T4833] Possible unsafe locking scenario: [ 122.939753][ T4833] [ 122.947308][ T4833] CPU0 CPU1 [ 122.953433][ T4833] ---- ---- [ 122.958831][ T4833] lock(sk_lock-AF_SMC/1); [ 122.963355][ T4833] lock((work_completion)(&new_smc->smc_listen_work)); [ 122.973332][ T4833] lock(sk_lock-AF_SMC/1); [ 122.980389][ T4833] lock((work_completion)(&new_smc->smc_listen_work)); [ 122.987706][ T4833] [ 122.987706][ T4833] *** DEADLOCK *** [ 122.987706][ T4833] [ 122.996396][ T4833] 2 locks held by syz.4.155/4833: [ 123.001435][ T4833] #0: ffff8880600fca10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 123.011903][ T4833] #1: ffff88807bb10120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 123.022431][ T4833] [ 123.022431][ T4833] stack backtrace: [ 123.028444][ T4833] CPU: 0 PID: 4833 Comm: syz.4.155 Not tainted syzkaller #0 [ 123.036023][ T4833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.046462][ T4833] Call Trace: [ 123.049992][ T4833] [ 123.053141][ T4833] dump_stack_lvl+0x168/0x230 [ 123.058472][ T4833] ? load_image+0x3b0/0x3b0 [ 123.063018][ T4833] ? show_regs_print_info+0x20/0x20 [ 123.068524][ T4833] ? print_circular_bug+0x12b/0x1a0 [ 123.074042][ T4833] check_noncircular+0x274/0x310 [ 123.079515][ T4833] ? add_chain_block+0x940/0x940 [ 123.084953][ T4833] ? lockdep_lock+0xdc/0x1e0 [ 123.089589][ T4833] ? rcu_lock_release+0x5/0x20 [ 123.094510][ T4833] ? __kernel_text_address+0x9a/0x100 [ 123.099998][ T4833] ? mark_lock+0x94/0x320 [ 123.104575][ T4833] __lock_acquire+0x2c33/0x7c60 [ 123.109800][ T4833] ? deref_stack_reg+0xd0/0x120 [ 123.115333][ T4833] ? hlock_conflict+0x59/0x1f0 [ 123.120248][ T4833] ? check_path+0x40/0x40 [ 123.124613][ T4833] ? verify_lock_unused+0x140/0x140 [ 123.130706][ T4833] ? mark_lock+0x94/0x320 [ 123.136509][ T4833] ? __lock_acquire+0x13ad/0x7c60 [ 123.142019][ T4833] ? add_chain_block+0x940/0x940 [ 123.147213][ T4833] lock_acquire+0x197/0x3f0 [ 123.152537][ T4833] ? __flush_work+0xc1/0x1b0 [ 123.157446][ T4833] ? read_lock_is_recursive+0x10/0x10 [ 123.163294][ T4833] __flush_work+0xdd/0x1b0 [ 123.168037][ T4833] ? __flush_work+0xc1/0x1b0 [ 123.172968][ T4833] ? flush_work+0x20/0x20 [ 123.177350][ T4833] ? try_to_grab_pending+0xf3/0x7e0 [ 123.183034][ T4833] ? lockdep_hardirqs_off+0x70/0x100 [ 123.188455][ T4833] ? mark_lock+0x94/0x320 [ 123.193074][ T4833] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 123.199172][ T4833] ? lock_chain_count+0x20/0x20 [ 123.204066][ T4833] ? print_unlock_imbalance_bug+0x160/0x160 [ 123.209998][ T4833] ? __cancel_work_timer+0x331/0x520 [ 123.215391][ T4833] __cancel_work_timer+0x3ac/0x520 [ 123.220524][ T4833] ? cancel_work_sync+0x20/0x20 [ 123.225389][ T4833] ? __local_bh_enable_ip+0x12a/0x1b0 [ 123.230875][ T4833] ? lockdep_hardirqs_on+0x94/0x140 [ 123.236252][ T4833] ? __local_bh_enable_ip+0x12a/0x1b0 [ 123.241750][ T4833] ? _local_bh_enable+0xa0/0xa0 [ 123.246737][ T4833] smc_clcsock_release+0x5c/0xe0 [ 123.251703][ T4833] __smc_release+0x398/0x500 [ 123.256429][ T4833] smc_close_non_accepted+0xd1/0x1f0 [ 123.262033][ T4833] smc_close_active+0x9d3/0xd90 [ 123.267682][ T4833] __smc_release+0x9a/0x500 [ 123.272411][ T4833] smc_release+0x2ca/0x530 [ 123.276981][ T4833] sock_close+0xd5/0x240 [ 123.282561][ T4833] ? sock_mmap+0x90/0x90 [ 123.287218][ T4833] __fput+0x234/0x930 [ 123.291605][ T4833] task_work_run+0x125/0x1a0 [ 123.296232][ T4833] get_signal+0x1222/0x12c0 [ 123.301788][ T4833] ? core_sys_select+0x72b/0x860 [ 123.306857][ T4833] ? poll_select_set_timeout+0x150/0x150 [ 123.312856][ T4833] arch_do_signal_or_restart+0xc1/0x1300 [ 123.319107][ T4833] ? memset+0x1e/0x40 [ 123.323219][ T4833] ? poll_select_finish+0x26b/0x5e0 [ 123.328664][ T4833] ? poll_schedule_timeout+0x150/0x150 [ 123.334859][ T4833] ? get_sigframe_size+0x10/0x10 [ 123.339932][ T4833] ? exit_to_user_mode_loop+0x3b/0x130 [ 123.345508][ T4833] exit_to_user_mode_loop+0x9e/0x130 [ 123.351256][ T4833] exit_to_user_mode_prepare+0xee/0x180 [ 123.356921][ T4833] syscall_exit_to_user_mode+0x16/0x40 [ 123.362545][ T4833] do_syscall_64+0x58/0xa0 [ 123.367029][ T4833] ? clear_bhb_loop+0x30/0x80 [ 123.372189][ T4833] ? clear_bhb_loop+0x30/0x80 [ 123.377110][ T4833] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.383179][ T4833] RIP: 0033:0x7f48b816bfc9 [ 123.387657][ T4833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.408116][ T4833] RSP: 002b:00007f48b63d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 123.417943][ T4833] RAX: 0000000000000001 RBX: 00007f48b83c2fa0 RCX: 00007f48b816bfc9 [ 123.425936][ T4833] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000040 [ 123.433973][ T4833] RBP: 00007f48b81eef91 R08: 0000000000000000 R09: 0000000000000000 [ 123.442120][ T4833] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 123.450612][ T4833] R13: 00007f48b83c3038 R14: 00007f48b83c2fa0 R15: 00007ffeefde53f8 [ 123.458709][ T4833] [ 123.790426][ T4840] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.810126][ T4840] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.018160][ T4851] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz.2.157: corrupted inode contents [ 124.034535][ T4851] EXT4-fs error (device loop2): ext4_dirty_inode:6046: inode #2: comm syz.2.157: mark_inode_dirty error [ 124.047954][ T4851] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz.2.157: corrupted inode contents [ 124.062736][ T4851] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.157: mark_inode_dirty error