last executing test programs: 3.827795057s ago: executing program 1 (id=407): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bind$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001680)=@security={'security\x00', 0xe, 0x4, 0x14f0, 0xffffffff, 0x248, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x1448, 0x1448, 0x1448, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff, 0x0, 0xffffffff], [0xffffff00, 0xffffff00, 0x0, 0xff], 'dvmrp1\x00', 'ip6gre0\x00', {}, {}, 0xd3, 0xc, 0x4, 0x4}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'ip_vti0\x00', {0x200}}}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@srh={{0x30}, {0x84, 0x1, 0x6, 0xc, 0x8, 0x10, 0x1020}}, @common=@unspec=@realm={{0x30}, {0x0, 0x7f}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8458}}}, {{@uncond, 0x0, 0x10d8, 0x1200, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0xb, 0x1, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0x1, {0x6}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1ff, 'system_u:object_r:setrans_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1550) r3 = openat$cgroup_int(r0, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000180)="cf", 0x1}, {&(0x7f0000000400)}, {0x0}, {&(0x7f00000001c0)="d5", 0x1}, {&(0x7f0000000480)='q', 0x1}], 0x5, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0xe0, 0x73, &(0x7f0000000200)="769d162bb795b19f180705c0952ce7051198e0683148a7412e36546302c9d9b0a83c3b38951e571e68d9348fe15ae928a65e82529425ef22c5461cdcde66458c17865128a6e0bbaa7203dac2e3d6c6d41cb39bb79be73c59791edfde0ebfc663596c0a32e963625795ec71d4c253ad4f9631bd467fdd7a486a050f942d454919d1e4a9c4eefc241fef5b9f7469c2d0057006b09c95826b56c52591ad026205cea61eccbb51c4ba0df69edd818c0b13110c8ec9f299c95ec2fbe0027a6391c56df479dceec5893db43e86daa8bc95cff3a5e583200112c915552ac246249e93a7", &(0x7f0000000300)=""/115, 0x4, 0x0, 0x85, 0x3, &(0x7f0000000380)="2507d0f49fb84861e7b6d225fb21445c914f7f621fabb4f71324254a247c66cc0b8adf119a285baf4963288f7de79cffa555c5a75018b82ee0c024695c1c2fdc3dc3eacadba10f21ed795baee101567ec4d81dca5436ea315f9c5ae3518cdaf35bcdd5208c63256945b4744bf80355486f0824ae12f2547c5d1769f72ae43ba824745ae0af", &(0x7f0000000440)="6ff50e", 0x3, 0x0, 0x1}, 0x50) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="e32ae39eee850e3518e276a8c16faf2c0000001800dd8d031000000000000002e7ff000000ff060020002008000500e000000208c50b000b000000722775e477353fce7794e92464992a4aef23b3079706cfe4e83a5b1e92475330cb194a80e2185b43cccb17ff7c5e93576d7e209f91ece03f7f89ead16976ac4fe124e2d912e791715d9eb027a362571d80254a1bcc644f43ccdcf180b7dbfa24341b230bfafd79def5f9b575860dcabd202f17"], 0x2c}}, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) socket$alg(0x26, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x180000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x6, 0x3}, 0x10) bind$tipc(r6, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfffffe5a) 2.438291302s ago: executing program 0 (id=424): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000011}, 0x20044080) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x0) 2.405927092s ago: executing program 3 (id=425): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000004", 0x16, 0x11, 0xff, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x0, @val=0xe00}, "ff300afe4e70"}}}}}}}, 0x0) 2.248005428s ago: executing program 0 (id=426): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000009c00)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x102, 0x0) 2.247794048s ago: executing program 3 (id=427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4004040) 2.011796235s ago: executing program 3 (id=431): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0xfffffdd4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r1, 0x1, 0x26, 0x0, &(0x7f0000000140)) 1.788413532s ago: executing program 2 (id=433): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 1.591845698s ago: executing program 2 (id=434): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x2}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1.448525453s ago: executing program 2 (id=437): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) recvmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/70, 0x46}], 0x1, &(0x7f0000000340)=""/39, 0x27}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x0, 0x0) 1.303881168s ago: executing program 0 (id=438): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) accept(r0, 0xfffffffffffffffd, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$alg(0x26, 0x5, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) 1.296018158s ago: executing program 4 (id=439): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c21000000000020f8ff000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x5c}}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) close(0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000880) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) 975.409878ms ago: executing program 3 (id=440): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x6, 0x1, [0x0]}, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x1000000000fea8, 0xc) 903.536ms ago: executing program 4 (id=441): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffc, 0x0, 0xb, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x1c, 0x0, @opaque="9ee179cabbd284d64e4afbaca54ea2f3eeb705a8"}}}}}, 0x0) 798.316554ms ago: executing program 1 (id=442): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x38, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@exit, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6fb}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x806, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 771.038255ms ago: executing program 4 (id=443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 568.017361ms ago: executing program 1 (id=444): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 567.799821ms ago: executing program 2 (id=445): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x1100, 0x40, 0x0, 0x0) 432.045706ms ago: executing program 2 (id=446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 424.128286ms ago: executing program 4 (id=447): unshare(0x20000400) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x42, 0x0, 0x0) 327.976679ms ago: executing program 3 (id=448): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffc}, [@jmp={0x6, 0x0, 0xa, 0x0, 0x0, 0x1, 0x8}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 327.649089ms ago: executing program 0 (id=449): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x2, 0x0, @void}, "00000000010040000000"}}}}}}}, 0x0) 285.72053ms ago: executing program 1 (id=450): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f00000001c0), 0x0}, 0x20) 283.60364ms ago: executing program 4 (id=451): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) shutdown(r0, 0x1) sendto$inet6(r0, &(0x7f0000000240), 0x0, 0xe912d4c52dab9e46, &(0x7f0000000300)={0xa, 0x4e23, 0x100, @local, 0x7}, 0x1c) 168.028814ms ago: executing program 0 (id=452): unshare(0x24060400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x3, 'dh\x00', 0x22, 0x22, 0x70}, 0x2c) 152.022474ms ago: executing program 4 (id=453): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 140.832325ms ago: executing program 3 (id=454): socket(0x15, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGARP(r2, 0x8954, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 87.857797ms ago: executing program 1 (id=455): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf33dc964eff3b3ca}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10000, 0xffffff87}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) 87.681117ms ago: executing program 2 (id=456): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10, 0x0}, 0x0) 26.342349ms ago: executing program 0 (id=457): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r0, &(0x7f0000000080)=""/4, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8801, 0x0) socket(0x22, 0x800, 0x6) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xfffb, 0x2}, 0x6) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000240)=0x3, 0x4) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb88fb4500002c0000000410119078640108000000142100004e20001890780400"], 0x0) sendmmsg$inet6(r3, &(0x7f0000007240), 0x0, 0x1c000) pselect6(0x40, &(0x7f0000000a80)={0x2, 0x5, 0x0, 0x100000000, 0x6, 0x1, 0x100000000000003, 0xfffffffffffffffd}, &(0x7f00000003c0)={0x8, 0xa, 0x4, 0x800, 0x1000000000e, 0x7fff, 0xfffffffffffff2e0, 0x5}, 0x0, 0x0, 0x0) shutdown(r3, 0x0) socket$kcm(0x29, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000400)=ANY=[@ANYBLOB="d4000021", @ANYRESHEX=r4, @ANYBLOB="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", @ANYRES8], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x40010) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f0000000040)) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000000240)={r1, &(0x7f0000000140)='/dev/rfkill\x00', 0x20b840, &(0x7f0000000180)={@_ha_fsid={[0xb594, 0x8bf]}, {0x6, 0x401, 0x2d6, 0x6}}, 0x7fffffff, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x6}) 0s ago: executing program 1 (id=458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. [ 61.842085][ T4176] cgroup: Unknown subsys name 'net' [ 61.984652][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.480810][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.323432][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 65.403737][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 65.471051][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 65.516045][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.524169][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.533087][ T4195] device bridge_slave_0 entered promiscuous mode [ 65.545626][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.552910][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.560998][ T4195] device bridge_slave_1 entered promiscuous mode [ 65.580736][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.587892][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.595829][ T4191] device bridge_slave_0 entered promiscuous mode [ 65.603517][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 65.613818][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.621124][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.629394][ T4191] device bridge_slave_1 entered promiscuous mode [ 65.656141][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.685302][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.697530][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 65.747266][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.785962][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.810418][ T4195] team0: Port device team_slave_0 added [ 65.831452][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.838565][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.847250][ T4199] device bridge_slave_0 entered promiscuous mode [ 65.856562][ T4195] team0: Port device team_slave_1 added [ 65.887998][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.895407][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.903851][ T4199] device bridge_slave_1 entered promiscuous mode [ 65.932382][ T4191] team0: Port device team_slave_0 added [ 65.938431][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.946046][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.953893][ T4201] device bridge_slave_0 entered promiscuous mode [ 65.968316][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.975673][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.984344][ T4201] device bridge_slave_1 entered promiscuous mode [ 65.992263][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.999834][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.025746][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.037376][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.044688][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.052976][ T4190] device bridge_slave_0 entered promiscuous mode [ 66.062110][ T4191] team0: Port device team_slave_1 added [ 66.082671][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.089823][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.116815][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.131047][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.147309][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.154891][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.163385][ T4190] device bridge_slave_1 entered promiscuous mode [ 66.183027][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.206538][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.231934][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.238945][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.266112][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.294885][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.306356][ T4199] team0: Port device team_slave_0 added [ 66.312758][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.320148][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.346395][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.371516][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.382224][ T4199] team0: Port device team_slave_1 added [ 66.389560][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.419529][ T4195] device hsr_slave_0 entered promiscuous mode [ 66.426274][ T4195] device hsr_slave_1 entered promiscuous mode [ 66.451341][ T4201] team0: Port device team_slave_0 added [ 66.472887][ T4201] team0: Port device team_slave_1 added [ 66.486370][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.493929][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.520577][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.534371][ T4190] team0: Port device team_slave_0 added [ 66.572675][ T4190] team0: Port device team_slave_1 added [ 66.583459][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.590816][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.617013][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.628761][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.635815][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.661933][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.677092][ T4191] device hsr_slave_0 entered promiscuous mode [ 66.684178][ T4191] device hsr_slave_1 entered promiscuous mode [ 66.691346][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.699402][ T4191] Cannot create hsr debugfs directory [ 66.726017][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.733727][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.760179][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.796391][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.803519][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.830276][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.844305][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.851422][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.878204][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.916614][ T4201] device hsr_slave_0 entered promiscuous mode [ 66.924106][ T4201] device hsr_slave_1 entered promiscuous mode [ 66.931566][ T4201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.939329][ T4201] Cannot create hsr debugfs directory [ 67.005629][ T4199] device hsr_slave_0 entered promiscuous mode [ 67.012667][ T4199] device hsr_slave_1 entered promiscuous mode [ 67.019698][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.027395][ T4199] Cannot create hsr debugfs directory [ 67.063611][ T4190] device hsr_slave_0 entered promiscuous mode [ 67.070998][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 67.077886][ T4190] device hsr_slave_1 entered promiscuous mode [ 67.078092][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 67.089029][ T4178] Bluetooth: hci3: command 0x0409 tx timeout [ 67.091655][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 67.097062][ T4178] Bluetooth: hci1: command 0x0409 tx timeout [ 67.108726][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.116711][ T4190] Cannot create hsr debugfs directory [ 67.374141][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.384317][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.400093][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.416103][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.474992][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.495471][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.511619][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.523615][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.592404][ T4201] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.604954][ T4201] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.625056][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.634073][ T4201] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.646731][ T4201] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.672712][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.685508][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.695809][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.726767][ T4199] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.738744][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.751621][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.760894][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.768274][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.788623][ T4199] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.812106][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.831310][ T4199] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.841449][ T4199] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.852746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.863192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.872514][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.879660][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.887280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.919451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.945721][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.974854][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.986061][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.995350][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.005638][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.014334][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.023297][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.033614][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.043200][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.052064][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.071204][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.078901][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.094416][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.105667][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.122476][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.131794][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.145995][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.155134][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.181726][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.190510][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.198412][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.211945][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.267050][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.277232][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.286152][ T1443] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.293267][ T1443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.301381][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.312128][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.320655][ T1443] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.327704][ T1443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.335464][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.344361][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.354444][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.363586][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.373131][ T1443] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.380341][ T1443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.388090][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.397058][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.405832][ T1443] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.413041][ T1443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.421728][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.429777][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.457092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.474764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.527473][ T4201] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.549684][ T4201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.563147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.572367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.583881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.593335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.602742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.612678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.621426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.631874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.640459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.648868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.658295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.692111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.700683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.710842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.722430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.732143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.740074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.750178][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.761451][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.775346][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.802701][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.816539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.840603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.863153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.874863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.888671][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.906257][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.917458][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.952365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.976542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.000140][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.007259][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.024621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.049917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.058468][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.065693][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.075680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.086108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.106189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.115219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.127232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.136338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.146550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.155040][ T1324] Bluetooth: hci1: command 0x041b tx timeout [ 69.159162][ T4241] Bluetooth: hci3: command 0x041b tx timeout [ 69.161294][ T1324] Bluetooth: hci2: command 0x041b tx timeout [ 69.168851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.181015][ T1324] Bluetooth: hci0: command 0x041b tx timeout [ 69.187126][ T1324] Bluetooth: hci4: command 0x041b tx timeout [ 69.205858][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.218361][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.241461][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.257460][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.283448][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.297758][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.334907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.345245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.354266][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.361422][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.371884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.380847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.390333][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.397582][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.405328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.414848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.424211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.432865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.442843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.451580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.460494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.468835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.514269][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.523664][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.534091][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.542845][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.558201][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.566856][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.575314][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.585014][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.593624][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.602215][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.612395][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.621246][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.630623][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.638488][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.650838][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.664364][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.680081][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.688014][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.708274][ T4195] device veth0_vlan entered promiscuous mode [ 69.722237][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.754470][ T4195] device veth1_vlan entered promiscuous mode [ 69.790851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.812459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.838730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.888836][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.898942][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.907380][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.916942][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.926209][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.940910][ T4201] device veth0_vlan entered promiscuous mode [ 69.954951][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.966206][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.975553][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.985205][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.002054][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.013790][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.036920][ T4201] device veth1_vlan entered promiscuous mode [ 70.054358][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.063936][ T4195] device veth0_macvtap entered promiscuous mode [ 70.092344][ T4195] device veth1_macvtap entered promiscuous mode [ 70.107108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.116808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.126082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.134845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.143603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.152373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.166413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.174772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.183829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.192710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.218588][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.230658][ T4191] device veth0_vlan entered promiscuous mode [ 70.246115][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.254636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.264714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.275262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.284317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.294454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.303995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.314309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.323735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.337763][ T4191] device veth1_vlan entered promiscuous mode [ 70.347940][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.367377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.376336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.385555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.398433][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.407859][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.417928][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.426978][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.451024][ T4199] device veth0_vlan entered promiscuous mode [ 70.467472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.475628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.483731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.493358][ T4201] device veth0_macvtap entered promiscuous mode [ 70.504416][ T4201] device veth1_macvtap entered promiscuous mode [ 70.518673][ T4199] device veth1_vlan entered promiscuous mode [ 70.568645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.577767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.587550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.598417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.610393][ T4191] device veth0_macvtap entered promiscuous mode [ 70.632735][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.644059][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.656188][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.674535][ T4190] device veth0_vlan entered promiscuous mode [ 70.686919][ T4191] device veth1_macvtap entered promiscuous mode [ 70.696004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.704330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.712955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.721924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.730703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.738766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.750462][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.761716][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.773932][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.785545][ T4201] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.794672][ T4201] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.804160][ T4201] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.812930][ T4201] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.841323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.849650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.857658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.866802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.880671][ T4190] device veth1_vlan entered promiscuous mode [ 70.891486][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.906234][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.918263][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.933056][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.944361][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.959345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.967616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.981287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.992826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.001896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.016986][ T4199] device veth0_macvtap entered promiscuous mode [ 71.031596][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.042510][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.053574][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.064343][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.075670][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.098051][ T4199] device veth1_macvtap entered promiscuous mode [ 71.108845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.118496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.127064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.136470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.145433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.162580][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.176281][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.185461][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.194767][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.228882][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.229583][ T1107] Bluetooth: hci4: command 0x040f tx timeout [ 71.243953][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.256010][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.259190][ T1107] Bluetooth: hci0: command 0x040f tx timeout [ 71.266853][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.277743][ T1107] Bluetooth: hci2: command 0x040f tx timeout [ 71.282995][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.288531][ T1107] Bluetooth: hci3: command 0x040f tx timeout [ 71.299269][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.309295][ T1107] Bluetooth: hci1: command 0x040f tx timeout [ 71.318824][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.333725][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.344639][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.354568][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.365235][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.375171][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.385698][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.397015][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.414346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.423205][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.431134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.438334][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.440589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.457128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.466008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.475865][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.482812][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.498443][ T4199] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.507394][ T4199] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.516256][ T4199] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.525439][ T4199] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.549730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.558341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.570762][ T4190] device veth0_macvtap entered promiscuous mode [ 71.599843][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.610471][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.628658][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.629765][ T4190] device veth1_macvtap entered promiscuous mode [ 71.645553][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.656766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.666467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.675489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.683697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.798723][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.814298][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.824598][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.835593][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.846068][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.857241][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.867690][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.880805][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.892465][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.902780][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.914806][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.934430][ T1443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.942797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.943666][ T1443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.958749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.968411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.985248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.005835][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.021016][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.036205][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.038937][ T4275] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.046697][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.046716][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.046732][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.046742][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.046755][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.048021][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.128550][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.143029][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.153356][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.162938][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.173352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.183619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.260534][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.288779][ T1443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.289177][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.301219][ T1443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.371454][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.392133][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.540106][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.540113][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.540130][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.599151][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.647561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.669842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.713784][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.730792][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.815571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.309430][ T1324] Bluetooth: hci2: command 0x0419 tx timeout [ 73.315583][ T1324] Bluetooth: hci0: command 0x0419 tx timeout [ 73.352624][ T1324] Bluetooth: hci4: command 0x0419 tx timeout [ 73.393101][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 73.409649][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 73.487684][ T4330] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 73.632554][ T4342] kvm [4341]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0x80ffffff [ 73.679639][ T4342] kvm [4341]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010006 data 0x8000000000000 [ 74.550808][ T4400] netlink: 'syz.0.39': attribute type 11 has an invalid length. [ 74.609874][ T4407] syz.2.43 uses obsolete (PF_INET,SOCK_PACKET) [ 74.612413][ T4408] netlink: 'syz.3.41': attribute type 4 has an invalid length. [ 75.185122][ T4424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.192743][ T4424] IPv6: NLM_F_CREATE should be set when creating new route [ 75.244857][ T4424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.45'. [ 75.312101][ T4424] Zero length message leads to an empty skb [ 75.418760][ T4449] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.458761][ T4449] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.466188][ T4449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.665966][ T4461] netlink: 'syz.3.57': attribute type 2 has an invalid length. [ 76.059365][ T4480] tipc: Started in network mode [ 76.085661][ T4480] tipc: Node identity 0e5c4f75dc36, cluster identity 4711 [ 76.122753][ T4480] tipc: Enabled bearer , priority 0 [ 76.131832][ T4481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 76.263596][ T4490] device syzkaller0 entered promiscuous mode [ 76.325115][ T4499] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 76.481302][ T4476] tipc: Resetting bearer [ 76.578728][ T4476] tipc: Disabling bearer [ 77.062901][ T4544] netlink: 48 bytes leftover after parsing attributes in process `syz.2.82'. [ 77.110831][ T4544] unsupported nla_type 7424 [ 77.152469][ T1324] Bluetooth: hci4: command 0x0405 tx timeout [ 77.374579][ T4562] netlink: 20 bytes leftover after parsing attributes in process `syz.4.89'. [ 77.508675][ T4567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'. [ 77.557844][ T4567] device bond0 entered promiscuous mode [ 77.567983][ T4567] device bond_slave_0 entered promiscuous mode [ 77.576129][ T4567] device bond_slave_1 entered promiscuous mode [ 77.586938][ T4567] device gretap0 entered promiscuous mode [ 77.595974][ T4567] device hsr1 entered promiscuous mode [ 77.603251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 77.697928][ T4578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.95'. [ 77.901073][ T4586] tipc: Can't bind to reserved service type 0 [ 78.091490][ T23] cfg80211: failed to load regulatory.db [ 78.697648][ T4577] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.705769][ T4577] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.353845][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.380571][ T4577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.592685][ T4577] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.601897][ T4577] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.611548][ T4577] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.620731][ T4577] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.829866][ T4647] tipc: Enabling of bearer rejected, failed to enable media [ 80.017590][ T4675] netlink: 76 bytes leftover after parsing attributes in process `syz.2.114'. [ 80.171275][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.244363][ T4684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.309158][ T4692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.118'. [ 80.346170][ T4695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 80.606290][ T4708] device syzkaller0 entered promiscuous mode [ 80.713586][ T4718] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20001 [ 80.951542][ T4732] netlink: 'syz.0.129': attribute type 1 has an invalid length. [ 81.117123][ T4739] device veth3 entered promiscuous mode [ 81.266010][ T4757] netlink: 'syz.2.135': attribute type 8 has an invalid length. [ 81.284494][ T4757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'. [ 81.307183][ T4757] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.315209][ T4757] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.505023][ T4770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.137'. [ 82.037737][ T4798] KVM: debugfs: duplicate directory 4798-5 [ 82.415153][ T4821] kvm: pic: single mode not supported [ 82.415672][ T4821] kvm: pic: single mode not supported [ 82.431900][ T4821] kvm: pic: single mode not supported [ 82.478534][ T4821] kvm: pic: single mode not supported [ 82.484438][ T4821] kvm: pic: level sensitive irq not supported [ 82.515082][ T4821] kvm: pic: level sensitive irq not supported [ 82.531141][ T4821] kvm: pic: single mode not supported [ 82.544988][ T4821] kvm: pic: single mode not supported [ 84.006144][ T4902] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.471670][ T4936] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.506976][ T4938] netlink: 'syz.0.186': attribute type 6 has an invalid length. [ 84.541270][ T4938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 84.552852][ T4677] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 84.586721][ T4938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.840288][ T4682] tipc: Subscription rejected, illegal request [ 84.875848][ T4972] netlink: 'syz.1.199': attribute type 1 has an invalid length. [ 84.905248][ T4972] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 84.920824][ T4972] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 84.952760][ T4974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.199'. [ 84.972842][ T4974] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 85.204445][ T4927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 85.571285][ T5004] device syzkaller1 entered promiscuous mode [ 86.067345][ T5018] syz.1.215 sent an empty control message without MSG_MORE. [ 86.716754][ C0] hrtimer: interrupt took 210120 ns [ 87.054075][ T5128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.227'. [ 87.085414][ T5127] tc action pedit 'at' offset 6 out of bounds [ 87.433608][ T5138] team0 (unregistering): Port device team_slave_0 removed [ 87.497249][ T5138] team0 (unregistering): Port device team_slave_1 removed [ 87.795051][ T5156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'. [ 87.949316][ T4242] Bluetooth: hci4: command 0x0405 tx timeout [ 88.000591][ T5156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'. [ 88.325288][ T5190] tipc: Started in network mode [ 88.347931][ T5190] tipc: Node identity 626864889182, cluster identity 4711 [ 88.374100][ T5190] tipc: Enabled bearer , priority 0 [ 88.500421][ T5195] device syzkaller0 entered promiscuous mode [ 88.537626][ T5189] tipc: Resetting bearer [ 88.608128][ T5189] tipc: Disabling bearer [ 88.857507][ T5209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.248'. [ 89.192931][ T5238] device vlan0 entered promiscuous mode [ 89.289118][ T5240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.251'. [ 89.298047][ T5240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.251'. [ 89.737357][ T5260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.259'. [ 89.864650][ T5265] raw_sendmsg: syz.2.263 forgot to set AF_INET. Fix it! [ 90.171858][ T5282] netlink: 436 bytes leftover after parsing attributes in process `syz.1.270'. [ 90.196724][ T5284] device syzkaller1 entered promiscuous mode [ 90.444428][ T5303] device syzkaller0 entered promiscuous mode [ 90.475544][ T5305] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.795929][ T5325] IPVS: dh: FWM 3 0x00000003 - no destination available [ 90.854201][ T5327] device syzkaller1 entered promiscuous mode [ 90.977881][ T5332] netlink: 51 bytes leftover after parsing attributes in process `syz.4.290'. [ 91.026213][ T5334] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.287751][ T1443] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 92.317471][ T5381] netlink: 280 bytes leftover after parsing attributes in process `syz.1.309'. [ 94.200989][ T5342] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.455241][ T5397] device syzkaller1 entered promiscuous mode [ 94.490662][ T5393] device syzkaller0 entered promiscuous mode [ 94.675605][ T5401] netlink: 44 bytes leftover after parsing attributes in process `syz.2.311'. [ 95.046601][ T5437] device syzkaller0 entered promiscuous mode [ 95.120686][ T1443] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 95.256342][ T5430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.488134][ T5467] device syzkaller0 entered promiscuous mode [ 96.957396][ T5518] device syzkaller1 entered promiscuous mode [ 96.988391][ T5518] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 97.215651][ T5534] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.821171][ T5572] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.109348][ T5580] netlink: 'syz.2.383': attribute type 29 has an invalid length. [ 98.120872][ T5580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 98.139474][ T5580] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 98.283774][ T5587] device syzkaller0 entered promiscuous mode [ 100.178009][ T5652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.409'. [ 100.232268][ T5654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.410'. [ 100.276376][ T5654] bond0: option miimon: invalid value (18446744073339807932) [ 100.326472][ T5654] bond0: option miimon: allowed values 0 - 2147483647 [ 100.725104][ T5668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'. [ 101.211610][ T5690] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 102.031689][ T5721] tipc: Cannot configure node identity twice [ 102.359525][ T5731] netlink: 'syz.4.439': attribute type 10 has an invalid length. [ 102.407260][ T5734] xt_connbytes: Forcing CT accounting to be enabled [ 102.532171][ T5731] team0: Port device dummy0 added [ 102.659321][ T5731] syz.4.439 (5731) used greatest stack depth: 19600 bytes left [ 102.944885][ T5743] device syzkaller0 entered promiscuous mode [ 103.260069][ T5754] device syzkaller1 entered promiscuous mode [ 103.614286][ T5776] [ 103.616784][ T5776] ====================================================== [ 103.623824][ T5776] WARNING: possible circular locking dependency detected [ 103.630844][ T5776] syzkaller #0 Not tainted [ 103.635253][ T5776] ------------------------------------------------------ [ 103.642354][ T5776] syz.0.457/5776 is trying to acquire lock: [ 103.648246][ T5776] ffff88807e744b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 103.658693][ T5776] [ 103.658693][ T5776] but task is already holding lock: [ 103.666054][ T5776] ffff88807e744ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 103.675499][ T5776] [ 103.675499][ T5776] which lock already depends on the new lock. [ 103.675499][ T5776] [ 103.686001][ T5776] [ 103.686001][ T5776] the existing dependency chain (in reverse order) is: [ 103.695034][ T5776] [ 103.695034][ T5776] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 103.702686][ T5776] __mutex_lock_common+0x1e3/0x2400 [ 103.708420][ T5776] mutex_lock_nested+0x17/0x20 [ 103.713789][ T5776] hci_dev_do_close+0x5f/0x1030 [ 103.719380][ T5776] hci_rfkill_set_block+0x10a/0x190 [ 103.725123][ T5776] rfkill_set_block+0x1c9/0x3d0 [ 103.730593][ T5776] rfkill_fop_write+0x452/0x560 [ 103.735969][ T5776] vfs_write+0x30b/0xd60 [ 103.740994][ T5776] ksys_write+0x152/0x260 [ 103.745845][ T5776] do_syscall_64+0x4c/0xa0 [ 103.750792][ T5776] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.757206][ T5776] [ 103.757206][ T5776] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 103.765283][ T5776] __mutex_lock_common+0x1e3/0x2400 [ 103.771009][ T5776] mutex_lock_nested+0x17/0x20 [ 103.776291][ T5776] rfkill_register+0x33/0x980 [ 103.781605][ T5776] hci_register_dev+0x452/0x970 [ 103.787208][ T5776] vhci_create_device+0x32c/0x5c0 [ 103.792878][ T5776] vhci_write+0x391/0x450 [ 103.797929][ T5776] vfs_write+0x745/0xd60 [ 103.802747][ T5776] ksys_write+0x152/0x260 [ 103.807596][ T5776] do_syscall_64+0x4c/0xa0 [ 103.812541][ T5776] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.818988][ T5776] [ 103.818988][ T5776] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 103.826819][ T5776] __mutex_lock_common+0x1e3/0x2400 [ 103.832543][ T5776] mutex_lock_nested+0x17/0x20 [ 103.837834][ T5776] vhci_send_frame+0x88/0x100 [ 103.843208][ T5776] hci_send_frame+0x1a9/0x2e0 [ 103.848521][ T5776] hci_tx_work+0x9f9/0x1710 [ 103.853573][ T5776] process_one_work+0x85f/0x1010 [ 103.859034][ T5776] worker_thread+0xaa6/0x1290 [ 103.864244][ T5776] kthread+0x436/0x520 [ 103.868833][ T5776] ret_from_fork+0x1f/0x30 [ 103.873771][ T5776] [ 103.873771][ T5776] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 103.883024][ T5776] __lock_acquire+0x2c42/0x7d10 [ 103.888404][ T5776] lock_acquire+0x19e/0x400 [ 103.893428][ T5776] __flush_work+0x116/0x210 [ 103.898453][ T5776] hci_dev_do_close+0x1e7/0x1030 [ 103.904085][ T5776] hci_rfkill_set_block+0x10a/0x190 [ 103.909925][ T5776] rfkill_set_block+0x1c9/0x3d0 [ 103.915324][ T5776] rfkill_fop_write+0x452/0x560 [ 103.920740][ T5776] vfs_write+0x30b/0xd60 [ 103.925512][ T5776] ksys_write+0x152/0x260 [ 103.930368][ T5776] do_syscall_64+0x4c/0xa0 [ 103.935308][ T5776] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.941725][ T5776] [ 103.941725][ T5776] other info that might help us debug this: [ 103.941725][ T5776] [ 103.952037][ T5776] Chain exists of: [ 103.952037][ T5776] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 103.952037][ T5776] [ 103.967243][ T5776] Possible unsafe locking scenario: [ 103.967243][ T5776] [ 103.974837][ T5776] CPU0 CPU1 [ 103.980212][ T5776] ---- ---- [ 103.985659][ T5776] lock(&hdev->req_lock); [ 103.990104][ T5776] lock(rfkill_global_mutex); [ 103.997496][ T5776] lock(&hdev->req_lock); [ 104.004459][ T5776] lock((work_completion)(&hdev->tx_work)); [ 104.010447][ T5776] [ 104.010447][ T5776] *** DEADLOCK *** [ 104.010447][ T5776] [ 104.018594][ T5776] 2 locks held by syz.0.457/5776: [ 104.023630][ T5776] #0: ffffffff8d6c5da8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 104.033823][ T5776] #1: ffff88807e744ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 104.044098][ T5776] [ 104.044098][ T5776] stack backtrace: [ 104.049985][ T5776] CPU: 1 PID: 5776 Comm: syz.0.457 Not tainted syzkaller #0 [ 104.057265][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 104.067413][ T5776] Call Trace: [ 104.070694][ T5776] [ 104.073623][ T5776] dump_stack_lvl+0x188/0x250 [ 104.078301][ T5776] ? load_image+0x400/0x400 [ 104.082807][ T5776] ? show_regs_print_info+0x20/0x20 [ 104.088036][ T5776] ? print_circular_bug+0x12b/0x1a0 [ 104.093236][ T5776] check_noncircular+0x296/0x330 [ 104.098172][ T5776] ? look_up_lock_class+0x71/0x110 [ 104.103286][ T5776] ? add_chain_block+0x940/0x940 [ 104.108221][ T5776] ? lockdep_lock+0xf1/0x1f0 [ 104.112811][ T5776] ? mark_lock+0x94/0x320 [ 104.117136][ T5776] __lock_acquire+0x2c42/0x7d10 [ 104.121995][ T5776] ? lockdep_unlock+0x143/0x2e0 [ 104.126846][ T5776] ? mark_lock+0x94/0x320 [ 104.131169][ T5776] ? verify_lock_unused+0x140/0x140 [ 104.136370][ T5776] ? __lock_acquire+0x12e8/0x7d10 [ 104.141404][ T5776] lock_acquire+0x19e/0x400 [ 104.145910][ T5776] ? __flush_work+0xfa/0x210 [ 104.150499][ T5776] ? verify_lock_unused+0x140/0x140 [ 104.155705][ T5776] ? __mutex_trylock_common+0x155/0x260 [ 104.161255][ T5776] ? read_lock_is_recursive+0x10/0x10 [ 104.166636][ T5776] __flush_work+0x116/0x210 [ 104.171151][ T5776] ? __flush_work+0xfa/0x210 [ 104.175743][ T5776] ? flush_work+0x20/0x20 [ 104.180076][ T5776] ? hci_leds_update_powered+0x148/0x160 [ 104.185754][ T5776] ? rcu_lock_release+0x5/0x20 [ 104.190540][ T5776] ? __lock_acquire+0x7d10/0x7d10 [ 104.195576][ T5776] hci_dev_do_close+0x1e7/0x1030 [ 104.200515][ T5776] ? _raw_spin_unlock+0x40/0x40 [ 104.205366][ T5776] hci_rfkill_set_block+0x10a/0x190 [ 104.210571][ T5776] ? rcu_lock_release+0x20/0x20 [ 104.215425][ T5776] rfkill_set_block+0x1c9/0x3d0 [ 104.220366][ T5776] rfkill_fop_write+0x452/0x560 [ 104.225215][ T5776] ? rfkill_fop_read+0x520/0x520 [ 104.230153][ T5776] ? common_file_perm+0x140/0x1c0 [ 104.235271][ T5776] ? fsnotify_perm+0x5d/0x560 [ 104.240033][ T5776] ? security_file_permission+0x75/0xa0 [ 104.245577][ T5776] ? rfkill_fop_read+0x520/0x520 [ 104.250516][ T5776] vfs_write+0x30b/0xd60 [ 104.254860][ T5776] ? file_end_write+0x250/0x250 [ 104.259707][ T5776] ? __fget_files+0x40f/0x480 [ 104.264387][ T5776] ? __fdget_pos+0x1e2/0x370 [ 104.269145][ T5776] ? ksys_write+0x71/0x260 [ 104.273558][ T5776] ksys_write+0x152/0x260 [ 104.277884][ T5776] ? __ia32_sys_read+0x80/0x80 [ 104.282648][ T5776] ? lockdep_hardirqs_on+0x94/0x140 [ 104.287874][ T5776] do_syscall_64+0x4c/0xa0 [ 104.292378][ T5776] ? clear_bhb_loop+0x30/0x80 [ 104.297052][ T5776] ? clear_bhb_loop+0x30/0x80 [ 104.301724][ T5776] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.307674][ T5776] RIP: 0033:0x7faf7427de59 [ 104.312088][ T5776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.331692][ T5776] RSP: 002b:00007faf724d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.340107][ T5776] RAX: ffffffffffffffda RBX: 00007faf744f6fa0 RCX: 00007faf7427de59 [ 104.348082][ T5776] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 104.356069][ T5776] RBP: 00007faf74313d6f R08: 0000000000000000 R09: 0000000000000000 [ 104.364051][ T5776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.372016][ T5776] R13: 00007faf744f7038 R14: 00007faf744f6fa0 R15: 00007ffef9257008 [ 104.380137][ T5776]