last executing test programs: 18.274107328s ago: executing program 0 (id=504): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev, 0x78}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close_range(r3, 0xffffffffffffffff, 0x0) 18.09711466s ago: executing program 0 (id=510): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x20, 0x12, 0xa01, 0x70bd28, 0x25dfdbfd, {0x80, 0x0, 0x300}, [@typed={0x9, 0xf5, 0x0, 0x0, @binary="585878a177"}]}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 17.854838794s ago: executing program 0 (id=512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) 15.76819111s ago: executing program 0 (id=517): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 13.40093361s ago: executing program 0 (id=521): socket$packet(0x11, 0x2, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000000)={[{@nodiscard}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x400}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@nobh}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(r1, 0x0, 0x0) ptrace(0x10, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000340)=0x2, 0x4) 12.496910162s ago: executing program 0 (id=527): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x312f, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078) 9.932214164s ago: executing program 32 (id=527): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x312f, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078) 9.663230748s ago: executing program 3 (id=534): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x80000001}) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000000c0)=0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500200000000000211ce47a2496260ee5a1d1c68b7d0617266ff78db990ab9b86c9233a54fa04e6e55b68a3c4647684b7992e0d2c427c4cee6373ae35f6fab064de8b99eeb95fc5fb81"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x2, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0x0, r1, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0x55, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x1ff, 0xa000}}}, 0x78) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r4, 0xc0485630, &(0x7f0000000140)={0x1, "d1369cf58e4c2521380d10ba3c6906da6fab93d12c03a89341659a2aea99cef5", 0x2, 0x1ff, 0x5, 0x10003, 0x2}) 7.009981281s ago: executing program 4 (id=537): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 7.005472191s ago: executing program 4 (id=538): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000140)=0xfffffffc, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 5.466360201s ago: executing program 3 (id=539): creat(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000091c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x2}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$tipc(r3, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1}, 0x10) close(r3) 5.465646571s ago: executing program 1 (id=540): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$keyring(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000780)='\x00', 0x1, 0x4001, 0x0, 0x0) shutdown(r1, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) 5.398456832s ago: executing program 2 (id=541): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f733e1a00000000", 0xe, 0xfffffffffffffffe) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r3, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.363716232s ago: executing program 1 (id=542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mreq(r3, 0x88, 0x64, 0x0, &(0x7f00000004c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknod$loop(0x0, 0x0, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xcac) fchown(r4, r6, r7) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x4}, [], {0x4, 0x4}, [{0x8, 0x0, r7}], {0x10, 0x1}, {0x20, 0x5}}, 0x2c, 0x2) link(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.238750664s ago: executing program 4 (id=543): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) 4.057596489s ago: executing program 1 (id=544): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40483000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x18000000, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000580)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x4000000, 0x0, 0x0, 0x1, 0x14, 0x4, "fee8a2ab78fc979fd1e00d96072000001ea89d0080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb2220000b420a1893c5240f45f819e0100", "90be8b1c55126540679f306003d8a0f4bd0000da663300", [0xbde, 0x8]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) 4.056627799s ago: executing program 3 (id=545): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x7}, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x79e5a327e49487d3, 0x0, 0xee01}, {0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2, 0x4c817065, 0x0, 0x101}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x2, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x10000000, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x2, 0xb7, 0xffffffff, 0x4d, 0x4}}, 0xe8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x138, 0x1a, 0x1, 0x3, 0x25dfdbfd, {{@in=@local, @in=@multicast1=0xac1414bb, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {@in=@broadcast, 0x4000000, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000000000}, {0x7b, 0x0, 0x2000}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6b}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc75c2b196d661e27}, 0x0) 3.933699501s ago: executing program 4 (id=546): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 3.893226121s ago: executing program 2 (id=547): r0 = syz_open_dev$video(&(0x7f00000005c0), 0x5, 0x80942) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsmount(0xffffffffffffffff, 0x0, 0x80) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b47880000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448d4, &(0x7f0000000100)={0x300, 0x1fe, '\x00\x00\b', 0x2, 0xf}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000000)={0x3, "f9008800290215cbab2f111658df5edc0100000000000000000000000400", 0x1, 0x4, 0x4, 0x8, 0x3a5, 0x2}) 1.900950196s ago: executing program 1 (id=548): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) socket$kcm(0x29, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = timerfd_create(0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f000000bc40), 0x8, 0x128000) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sched\x00') pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x0, 0x47}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.898789366s ago: executing program 4 (id=549): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r1, 0x107, 0x2, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, 0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81004e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000240)=0x8) r3 = semget$private(0x0, 0x6, 0x0) semctl$IPC_INFO(r3, 0x1, 0x3, &(0x7f0000000100)=""/205) semtimedop(r3, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r3, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r3, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semctl$IPC_RMID(r3, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x7, 0x9, 0x1, 'queue1\x00', 0xfffffffd}) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0xee42}, {0xffffffffffffffff, 0x4501}], 0x2, 0x100) 1.898436356s ago: executing program 3 (id=550): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev, 0x78}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close_range(r3, 0xffffffffffffffff, 0x0) 1.761282968s ago: executing program 2 (id=551): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$keyring(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000780)='\x00', 0x1, 0x4001, 0x0, 0x0) shutdown(r1, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) 1.309032764s ago: executing program 3 (id=552): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) listen(r4, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000240)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a0673bc45ff810500000000000058000b4804009448a49a0c067cc3e0925a0100ddffffed00008000f0fffeffe8099900000ef4320207fff5dd04fcff00"/88, 0x58}], 0x1) 1.221871125s ago: executing program 4 (id=553): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x20000090) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c"], 0x3c}}, 0x0) 1.129748436s ago: executing program 2 (id=554): creat(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000091c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x2}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$tipc(r3, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1}, 0x10) close(r3) 1.112373877s ago: executing program 1 (id=555): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read(r0, &(0x7f0000001240)=""/195, 0xc3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x4000, 0x44) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.075800806s ago: executing program 3 (id=556): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x810, 0xffffffffffffffff, 0x17c62000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$AUDIT_GET(0xffffffffffffffff, 0x0, 0x40010) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = creat(0x0, 0x77) lsetxattr$security_ima(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180), 0x0, 0x2, 0x1) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) sendto$inet(r4, &(0x7f0000000440)="eaedc54dc9dd37a911162a3c52d59ee540a4cd090c8e034120d46bad3f8ded27a52b03e717f986f978355f2af6d47fbcb18b60f23a5c8bc6ef1714a4f6ba5ae886b3f4e06d6611fea293c08ff63fa3966ec4", 0x52, 0x4010, 0x0, 0x0) bind$ax25(r5, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 49.41681ms ago: executing program 2 (id=557): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x121000, 0x109) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@getqdisc={0x24, 0x26, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0xfff3, 0x2}, {0xd, 0x4}}}, 0x24}}, 0x4810) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 32.1463ms ago: executing program 1 (id=558): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x0, @isdn={0x22, 0x1, 0x4f, 0x0, 0x2}, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, @l2tp={0x2, 0x0, @multicast2}, 0x7, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)='batadv0\x00', 0xfffffff8, 0x3, 0xfffc}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r3, 0x541b, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 0s ago: executing program 2 (id=559): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. syzkaller login: [ 47.241741][ T4157] cgroup: Unknown subsys name 'net' [ 47.404689][ T4157] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.727642][ T4157] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.055321][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 50.086228][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 50.129940][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 50.152533][ T4175] chnl_net:caif_netlink_parms(): no params data found [ 50.244615][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.251828][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.260030][ T4169] device bridge_slave_0 entered promiscuous mode [ 50.271014][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.278060][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.286292][ T4169] device bridge_slave_1 entered promiscuous mode [ 50.302086][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 50.328307][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.335430][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.343648][ T4168] device bridge_slave_0 entered promiscuous mode [ 50.354254][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.361356][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.369258][ T4168] device bridge_slave_1 entered promiscuous mode [ 50.408782][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.415939][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.424162][ T4167] device bridge_slave_0 entered promiscuous mode [ 50.439091][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.450626][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.466382][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.475967][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.483373][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.491523][ T4167] device bridge_slave_1 entered promiscuous mode [ 50.515753][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.531378][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.538418][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.546540][ T4175] device bridge_slave_0 entered promiscuous mode [ 50.583228][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.590596][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.598493][ T4175] device bridge_slave_1 entered promiscuous mode [ 50.607760][ T4169] team0: Port device team_slave_0 added [ 50.617430][ T4169] team0: Port device team_slave_1 added [ 50.625025][ T4168] team0: Port device team_slave_0 added [ 50.632540][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.643486][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.671288][ T4168] team0: Port device team_slave_1 added [ 50.715046][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.722053][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.748053][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.762231][ T4167] team0: Port device team_slave_0 added [ 50.768514][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.776167][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.802264][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.814838][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.824021][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.831955][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.839706][ T4181] device bridge_slave_0 entered promiscuous mode [ 50.856229][ T4167] team0: Port device team_slave_1 added [ 50.866423][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.875760][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.883005][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.891116][ T4181] device bridge_slave_1 entered promiscuous mode [ 50.898548][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.905598][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.931639][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.972801][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.979957][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.006181][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.028006][ T4175] team0: Port device team_slave_0 added [ 51.054900][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.061993][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.088116][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.101158][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.108100][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.134231][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.146665][ T4175] team0: Port device team_slave_1 added [ 51.154188][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.165395][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.211400][ T4169] device hsr_slave_0 entered promiscuous mode [ 51.218253][ T4169] device hsr_slave_1 entered promiscuous mode [ 51.244945][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.252144][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.278465][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.298381][ T4181] team0: Port device team_slave_0 added [ 51.306392][ T4181] team0: Port device team_slave_1 added [ 51.322242][ T4167] device hsr_slave_0 entered promiscuous mode [ 51.329051][ T4167] device hsr_slave_1 entered promiscuous mode [ 51.335515][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.343493][ T4167] Cannot create hsr debugfs directory [ 51.349533][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.356473][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.382728][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.416006][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.423355][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.449440][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.466586][ T4168] device hsr_slave_0 entered promiscuous mode [ 51.473721][ T4168] device hsr_slave_1 entered promiscuous mode [ 51.481102][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.488657][ T4168] Cannot create hsr debugfs directory [ 51.506288][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.513294][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.539556][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.621718][ T4181] device hsr_slave_0 entered promiscuous mode [ 51.628329][ T4181] device hsr_slave_1 entered promiscuous mode [ 51.634988][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.642724][ T4181] Cannot create hsr debugfs directory [ 51.656993][ T4175] device hsr_slave_0 entered promiscuous mode [ 51.663838][ T4175] device hsr_slave_1 entered promiscuous mode [ 51.670335][ T4175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.677876][ T4175] Cannot create hsr debugfs directory [ 51.790078][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 51.790110][ T4172] Bluetooth: hci2: command 0x0409 tx timeout [ 51.790464][ T4172] Bluetooth: hci1: command 0x0409 tx timeout [ 51.796299][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 51.814508][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 51.942857][ T4167] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.954314][ T4167] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.964434][ T4167] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.973856][ T4167] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.017208][ T4169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.028833][ T4169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.040634][ T4169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.058973][ T4169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.116011][ T4168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.140482][ T4168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.149720][ T4168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.164762][ T4168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.216557][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.225983][ T4181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.235938][ T4181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.266680][ T4181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.281047][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.292631][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.301570][ T4181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.313318][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.323701][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.345572][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.356614][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.374246][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.382771][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.391720][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.403539][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.410832][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.419196][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.442893][ T4175] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.455558][ T4175] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.466794][ T4175] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.475467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.484541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.494135][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.501218][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.508892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.518422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.527470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.536724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.545188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.555161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.564035][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.571118][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.578689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.587424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.605122][ T4175] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.616152][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.625567][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.634476][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.643118][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.652330][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.659415][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.681855][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.697774][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.706457][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.715241][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.725093][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.733875][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.743419][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.752116][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.764888][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.776038][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.793607][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.804329][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.813100][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.822302][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.830975][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.838611][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.848212][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.856954][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.882794][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.918295][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.927070][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.937071][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.946027][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.955801][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.962932][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.972035][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.984071][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.999794][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.014489][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.026581][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.033668][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.062429][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.100261][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.131371][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.146382][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.160017][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.167454][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.178963][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.188880][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.202690][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.211979][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.223534][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.235262][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.247304][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.272965][ T4168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.290758][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.309135][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.318818][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.328977][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.336975][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.345169][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.353521][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.362147][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.370384][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.385829][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.394297][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.404220][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.411878][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.420786][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.429119][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.436280][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.446583][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.471639][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.490310][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.498908][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.514481][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.521599][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.530242][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.538973][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.548892][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.556013][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.570728][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.579313][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.589275][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.598389][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.614219][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.622775][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.632376][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.641162][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.650701][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.657743][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.666813][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.675967][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.684840][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.726500][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.740725][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.750169][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.758726][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.774007][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.783135][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.814783][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.824858][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.834995][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.844394][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.853959][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.862576][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.870900][ T4217] Bluetooth: hci0: command 0x041b tx timeout [ 53.876478][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.877174][ T4217] Bluetooth: hci3: command 0x041b tx timeout [ 53.886238][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.891793][ T4217] Bluetooth: hci1: command 0x041b tx timeout [ 53.904604][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.904785][ T4217] Bluetooth: hci4: command 0x041b tx timeout [ 53.918566][ T4217] Bluetooth: hci2: command 0x041b tx timeout [ 53.920527][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.956550][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.971514][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.981031][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.991771][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.000810][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.017243][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.035071][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.061050][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.068492][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.077857][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.091988][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.103762][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.113393][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.121742][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.129516][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.137080][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.150686][ T4169] device veth0_vlan entered promiscuous mode [ 54.157300][ T4167] device veth0_vlan entered promiscuous mode [ 54.198648][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.222598][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.238933][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.247524][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.263110][ T4167] device veth1_vlan entered promiscuous mode [ 54.279243][ T4168] device veth0_vlan entered promiscuous mode [ 54.298208][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.310137][ T4169] device veth1_vlan entered promiscuous mode [ 54.317091][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.324777][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.333795][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.341366][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.374610][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.383046][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.392329][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.401261][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.410049][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.420028][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.428604][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.442113][ T4168] device veth1_vlan entered promiscuous mode [ 54.466914][ T4167] device veth0_macvtap entered promiscuous mode [ 54.476347][ T4167] device veth1_macvtap entered promiscuous mode [ 54.490122][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.498530][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.506891][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.517362][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.525451][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.534617][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.571036][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.579127][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.590966][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.599282][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.610781][ T4181] device veth0_vlan entered promiscuous mode [ 54.617232][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.624905][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.633223][ T4169] device veth0_macvtap entered promiscuous mode [ 54.648314][ T4168] device veth0_macvtap entered promiscuous mode [ 54.656767][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.665745][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.676171][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.685093][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.693406][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.702323][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.710564][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.718375][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.728706][ T4175] device veth0_vlan entered promiscuous mode [ 54.737995][ T4169] device veth1_macvtap entered promiscuous mode [ 54.761414][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.768828][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.777047][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.785771][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.797563][ T4168] device veth1_macvtap entered promiscuous mode [ 54.806037][ T4181] device veth1_vlan entered promiscuous mode [ 54.817935][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.840137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.848239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.857917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.867184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.880899][ T4167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.890651][ T4167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.899342][ T4167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.908482][ T4167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.921695][ T4175] device veth1_vlan entered promiscuous mode [ 54.930715][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.942483][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.953496][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.966269][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.977757][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.988610][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.003328][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.014624][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.026290][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.038489][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.050694][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.058872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.067388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.077962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.086034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.094809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.103641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.112568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.122169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.131329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.149231][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.160327][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.171295][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.183066][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.194072][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.211367][ T4169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.220813][ T4169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.232271][ T4169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.241370][ T4169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.257719][ T4181] device veth0_macvtap entered promiscuous mode [ 55.265953][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.274996][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.283782][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.294344][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.302866][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.328473][ T4181] device veth1_macvtap entered promiscuous mode [ 55.337973][ T4168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.347028][ T4168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.355885][ T4168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.372288][ T4168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.391759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.400415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.408928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.441370][ T4175] device veth0_macvtap entered promiscuous mode [ 55.474544][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.488570][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.498988][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.509522][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.519313][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.529978][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.542469][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.551709][ T4175] device veth1_macvtap entered promiscuous mode [ 55.572822][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.584694][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.592869][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.601551][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.612763][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.623912][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.634489][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.645016][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.654988][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.665591][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.676550][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.700096][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.717734][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.726865][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.731050][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.747902][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.758492][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.768689][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.779743][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.789973][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.800576][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.811085][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.821551][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.832808][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.852579][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.861473][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.871042][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.881453][ T4181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.890328][ T4181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.899007][ T4181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.908036][ T4181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.925023][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.935812][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.945749][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.950081][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 55.957693][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.972350][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 55.972359][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.978429][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 55.988880][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.000726][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 56.005943][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.015011][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 56.021760][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.038748][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.047190][ T834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.061653][ T834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.069927][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.081873][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.092166][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.113603][ T4175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.122942][ T4175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.132458][ T4175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.142451][ T4175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.154611][ T834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.163197][ T834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.205724][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.246310][ T834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.256616][ T834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.274001][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.287203][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.323000][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.336047][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.382821][ T834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.383369][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.399477][ T834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.404343][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.416710][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.432939][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.444541][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.458666][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.475259][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.561602][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.576345][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.589106][ T834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.603801][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.641499][ T834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.692997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.904444][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 56.955775][ T4262] loop1: detected capacity change from 0 to 1024 [ 57.949679][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 57.958976][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 57.968147][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 57.977349][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 57.986449][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 57.995577][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 58.004676][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 58.013814][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 58.022926][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 58.411608][ T4214] Bluetooth: hci0: command 0x0419 tx timeout [ 58.417757][ T4214] Bluetooth: hci3: command 0x0419 tx timeout [ 58.423840][ T4214] Bluetooth: hci1: command 0x0419 tx timeout [ 58.430118][ T4214] Bluetooth: hci4: command 0x0419 tx timeout [ 58.436150][ T4214] Bluetooth: hci2: command 0x0419 tx timeout [ 58.537119][ T4262] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 59.498278][ T4288] loop3: detected capacity change from 0 to 2048 [ 60.467177][ T4299] loop0: detected capacity change from 0 to 512 [ 60.616669][ T4288] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.406643][ T4310] loop4: detected capacity change from 0 to 512 [ 61.515596][ T4299] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.582972][ T4310] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 61.976954][ T4310] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.244556][ T4310] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 63.942326][ T4331] sched: RT throttling activated [ 64.008170][ T4310] EXT4-fs (loop4): 1 truncate cleaned up [ 64.273271][ T4310] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 65.701443][ T4351] xt_nat: multiple ranges no longer supported [ 65.790404][ T4350] tipc: Started in network mode [ 65.792300][ T4350] tipc: Node identity dae3b23cbf33, cluster identity 4711 [ 65.800588][ T4350] tipc: Enabled bearer , priority 0 [ 66.166943][ T4342] tipc: Disabling bearer [ 71.340200][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.346753][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.156185][ T13] cfg80211: failed to load regulatory.db [ 76.590016][ T4214] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.849621][ T4214] usb 3-1: Using ep0 maxpacket: 32 [ 76.970209][ T4214] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 77.169956][ T4214] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 77.232733][ T4214] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 77.302977][ T4214] usb 3-1: Product: syz [ 77.328779][ T4214] usb 3-1: Manufacturer: syz [ 77.356765][ T4214] usb 3-1: SerialNumber: syz [ 77.461408][ T4214] usb 3-1: config 0 descriptor?? [ 77.524052][ T4415] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 79.564380][ T4249] usb 3-1: USB disconnect, device number 2 [ 81.662530][ T4447] loop1: detected capacity change from 0 to 1024 [ 81.681781][ T4447] ======================================================= [ 81.681781][ T4447] WARNING: The mand mount option has been deprecated and [ 81.681781][ T4447] and is ignored by this kernel. Remove the mand [ 81.681781][ T4447] option from the mount to silence this warning. [ 81.681781][ T4447] ======================================================= [ 82.486798][ T4447] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.996568][ T4465] netlink: 'syz.4.51': attribute type 12 has an invalid length. [ 85.165050][ T4484] No such timeout policy "syz1" [ 85.886473][ T4480] sctp: failed to load transform for md5: -2 [ 88.624769][ T4498] loop1: detected capacity change from 0 to 512 [ 88.706196][ T4517] loop4: detected capacity change from 0 to 64 [ 88.723108][ T4498] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.665894][ T4498] EXT4-fs: error -4 creating inode table initialization thread [ 89.792062][ T4498] EXT4-fs (loop1): mount failed [ 90.198481][ T4530] tipc: Started in network mode [ 90.203737][ T4530] tipc: Node identity 66347f9422b4, cluster identity 4711 [ 90.217440][ T4530] tipc: Enabled bearer , priority 0 [ 90.376810][ T4530] tipc: Resetting bearer [ 91.804478][ T4214] tipc: Node number set to 1149271956 [ 91.894841][ T4527] kvm [4526]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x90 [ 91.975604][ T4530] tipc: Disabling bearer [ 91.997459][ T4554] lo speed is unknown, defaulting to 1000 [ 92.010616][ T4554] lo speed is unknown, defaulting to 1000 [ 92.040755][ T4554] lo speed is unknown, defaulting to 1000 [ 92.082497][ T4554] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 92.134298][ T4554] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 92.144731][ T4557] loop2: detected capacity change from 0 to 256 [ 92.173884][ T4559] syz.1.76 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 92.221612][ T4554] lo speed is unknown, defaulting to 1000 [ 92.262525][ T4557] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 92.265809][ T4554] lo speed is unknown, defaulting to 1000 [ 92.305875][ T4559] loop1: detected capacity change from 0 to 2048 [ 92.356530][ T4554] lo speed is unknown, defaulting to 1000 [ 92.376161][ T4554] lo speed is unknown, defaulting to 1000 [ 92.383842][ T4554] lo speed is unknown, defaulting to 1000 [ 92.451523][ T4559] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.565246][ T26] audit: type=1804 audit(1747892034.885:2): pid=4559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.76" name="/newroot/16/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 92.691103][ T26] audit: type=1804 audit(1747892034.925:3): pid=4559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.76" name="/newroot/16/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 96.166510][ T4608] ODEBUG: Out of memory. ODEBUG disabled [ 96.687279][ T4608] syz.0.87 (4608): drop_caches: 2 [ 96.949614][ T4626] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 99.337406][ T4648] loop4: detected capacity change from 0 to 1024 [ 99.368327][ T4650] Zero length message leads to an empty skb [ 99.478970][ T4652] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.513864][ T4648] EXT4-fs (loop4): Ignoring removed orlov option [ 99.573467][ T4648] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,lazytime,noauto_da_alloc,stripe=0x0000000000000005,orlov,,errors=continue. Quota mode: writeback. [ 101.500088][ T4650] device sit1 entered promiscuous mode [ 106.018303][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.043135][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.051501][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.074748][ T4700] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 106.494751][ T4700] syz.4.109 (4700) used greatest stack depth: 20544 bytes left [ 110.990095][ T4729] smc: net device bond0 applied user defined pnetid SYZ2 [ 111.145609][ T4730] netlink: 128 bytes leftover after parsing attributes in process `syz.3.118'. [ 111.169635][ T4729] smc: net device bond0 erased user defined pnetid SYZ2 [ 111.424819][ T4738] loop1: detected capacity change from 0 to 2 [ 111.471312][ T4738] jffs2: rp_size unrepresentable [ 114.090571][ T4745] loop1: detected capacity change from 0 to 4096 [ 114.254387][ T4745] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.715269][ T4757] netlink: 'syz.4.126': attribute type 4 has an invalid length. [ 116.184283][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.276357][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.370453][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.474041][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.569234][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.662757][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.762577][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.854804][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.936831][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.009101][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.087224][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.162557][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.238152][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.307555][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.370107][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.461142][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.541004][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.613878][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.691614][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.768952][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.851754][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.948627][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.074797][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.153263][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.228447][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.306039][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.379159][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.415217][ T4767] lo speed is unknown, defaulting to 1000 [ 118.444432][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.519683][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.593083][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.670202][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.740090][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.814650][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.888815][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.964540][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.035933][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.107614][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.178072][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.259565][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.267360][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.323443][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.336322][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.344169][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.356885][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.364607][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.372892][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.380468][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.387854][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.409439][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.416830][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.424507][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.432627][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.440206][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.447593][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.455286][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.463006][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.471734][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.479138][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.483290][ T4767] chnl_net:caif_netlink_parms(): no params data found [ 119.489523][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.521371][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.528811][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.543252][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.551185][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.558576][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.566000][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.579103][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.592740][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.613964][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.636027][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.658527][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.668016][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.680006][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.687464][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.698194][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.709624][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.717023][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.717830][ T4776] loop4: detected capacity change from 0 to 8 [ 119.724546][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.724582][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.724604][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.747505][ T4323] udevd[4323]: incorrect cramfs checksum on /dev/loop4 [ 119.753306][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.767394][ T4776] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 119.768012][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.782143][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.793168][ T4172] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 119.806955][ T4172] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 120.059016][ T4779] process 'syz.4.132' launched './file2' with NULL argv: empty string added [ 120.070198][ T4779] cramfs: Error -3 while decompressing! [ 120.075939][ T4779] cramfs: ffffffff961c8228(26)->ffff88805a9cf000(4096) [ 120.082897][ T4779] cramfs: Error -3 while decompressing! [ 120.088878][ T4779] cramfs: ffffffff961c8242(26)->ffff888059059000(4096) [ 120.095789][ T4779] cramfs: Error -3 while decompressing! [ 120.101379][ T4779] cramfs: ffffffff961c825c(16)->ffff88805738f000(4096) [ 120.108305][ T4779] cramfs: Error -3 while decompressing! [ 120.113972][ T4779] cramfs: ffffffff961c8228(26)->ffff88805a9cf000(4096) [ 120.812736][ T4321] udevd[4321]: incorrect cramfs checksum on /dev/loop4 [ 120.841329][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 120.853775][ T4773] device netdevsim0 entered promiscuous mode [ 120.878003][ T4773] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 120.976359][ T4778] fido_id[4778]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 121.652471][ T4787] loop0: detected capacity change from 0 to 64 [ 122.938172][ T4209] Bluetooth: hci0: command 0x041b tx timeout [ 123.163434][ T4767] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.320902][ T4767] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.611166][ T4767] device bridge_slave_0 entered promiscuous mode [ 123.722648][ T4767] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.892459][ T4767] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.900670][ T4767] device bridge_slave_1 entered promiscuous mode [ 123.954070][ T4808] loop3: detected capacity change from 0 to 16 [ 123.996309][ T4767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.020727][ T4767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.156625][ T4808] erofs: (device loop3): mounted with root inode @ nid 36. [ 124.608503][ T4767] team0: Port device team_slave_0 added [ 124.664052][ T4767] team0: Port device team_slave_1 added [ 124.721400][ T4767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.728406][ T4767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.757237][ T4767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.791571][ T4767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.819853][ T4767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.846930][ T4808] kvm: emulating exchange as write [ 124.895506][ T4767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.051046][ T4767] device hsr_slave_0 entered promiscuous mode [ 125.057872][ T4767] device hsr_slave_1 entered promiscuous mode [ 125.076049][ T4767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.099599][ T4767] Cannot create hsr debugfs directory [ 126.245263][ T4172] Bluetooth: hci0: command 0x040f tx timeout [ 127.940511][ T4839] loop0: detected capacity change from 0 to 128 [ 127.970757][ T4767] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.026571][ T4839] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.086443][ T4839] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.125378][ T4767] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.715142][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 129.733209][ T4232] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.063857][ T4847] kvm [4843]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x0 [ 130.073054][ T4847] kvm [4843]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 130.085871][ T4847] kvm [4843]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x80 [ 130.119575][ T4847] kvm [4843]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0x186 data 0x80 [ 130.124001][ T4767] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.731951][ T4767] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.431601][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.438861][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.837995][ T4767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 133.855382][ T4767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 133.868697][ T4767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 133.882090][ T4767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 133.955437][ T4887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.002679][ T4887] device batadv_slave_0 entered promiscuous mode [ 135.553565][ T4894] loop4: detected capacity change from 0 to 4096 [ 135.556972][ T4767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.592057][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.609241][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.001295][ T4767] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.483396][ T4899] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.766951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.006408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.842517][ T4910] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 138.880834][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.888041][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.620285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.685694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.894659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.903662][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.910768][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.918979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.093541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.133221][ T4936] loop4: detected capacity change from 0 to 256 [ 141.345032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.206448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.283187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.363557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.618787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 142.627723][ T4920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.167'. [ 142.640169][ T4920] device bond_slave_0 entered promiscuous mode [ 142.646614][ T4920] device bond_slave_1 entered promiscuous mode [ 143.341283][ T4920] device macvtap1 entered promiscuous mode [ 143.347178][ T4920] device bond0 entered promiscuous mode [ 143.355061][ T4920] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 143.368879][ T4921] device bond0 left promiscuous mode [ 143.380644][ T4921] device bond_slave_0 left promiscuous mode [ 143.386628][ T4921] device bond_slave_1 left promiscuous mode [ 143.599267][ T4767] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 143.612898][ T4767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.713335][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.749213][ T4956] loop1: detected capacity change from 0 to 1024 [ 143.823171][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.831724][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.840223][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.868349][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.762313][ T4964] loop4: detected capacity change from 0 to 1024 [ 144.784159][ T4956] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 144.927599][ T4964] EXT4-fs (loop4): Ignoring removed nobh option [ 145.009554][ T4964] EXT4-fs (loop4): inline encryption not supported [ 145.024919][ T4956] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,bsddf,sysvgroups,discard,noblock_validity,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 145.116777][ T4975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'. [ 145.125741][ T4975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.179'. [ 145.214531][ T4964] EXT4-fs (loop4): Ignoring removed bh option [ 145.748714][ T4976] loop3: detected capacity change from 0 to 512 [ 146.350858][ T4964] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.406844][ T4976] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 146.427079][ T4976] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.688163][ T4964] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,quota,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,journal_dev=0x0000000000000800,nobh,inlinecrypt,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 148.010841][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.018428][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.036034][ T4767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.137712][ T4767] device veth0_vlan entered promiscuous mode [ 148.151062][ T4767] device veth1_vlan entered promiscuous mode [ 148.168179][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.265562][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.274984][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.322506][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.342088][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.370904][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.380099][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.566428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.575065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.588296][ T4767] device veth0_macvtap entered promiscuous mode [ 149.861487][ T4767] device veth1_macvtap entered promiscuous mode [ 150.319065][ T4999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.412459][ T4767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.448541][ T4767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.458549][ T4767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.480594][ T4767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.491322][ T4767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.509721][ T4767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.526859][ T4767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.558911][ T4767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.588454][ T4767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.632114][ T4767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.642634][ T4767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.662519][ T4767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.674115][ T4767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.686318][ T4767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.704356][ T4767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.758919][ T4767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.995264][ T4767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.143672][ T4767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.292001][ T4767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.421331][ T5006] kvm [5005]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 151.503739][ T4767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.538030][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.547285][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.557824][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.567161][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.576307][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.585135][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.599864][ T5014] netlink: 48 bytes leftover after parsing attributes in process `syz.0.189'. [ 151.671943][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 151.812992][ T4767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.867538][ T4767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.899654][ T4767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.908514][ T4767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.194568][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.246143][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.401796][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.283747][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.453158][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.304537][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.260061][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 158.861044][ T5086] netlink: 48 bytes leftover after parsing attributes in process `syz.4.203'. [ 161.772994][ T5104] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 162.525572][ T5106] netlink: 156 bytes leftover after parsing attributes in process `syz.2.211'. [ 166.205319][ T5152] syz.2.220 sent an empty control message without MSG_MORE. [ 170.326382][ T5239] delete_channel: no stack [ 176.185715][ T5283] loop2: detected capacity change from 0 to 1024 [ 176.244873][ T4275] Bluetooth: hci1: command 0x0406 tx timeout [ 176.251254][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 176.601076][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 176.612578][ T5283] EXT4-fs (loop2): Ignoring removed nobh option [ 176.632541][ T5283] EXT4-fs (loop2): inline encryption not supported [ 177.524364][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 177.557252][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 177.622925][ T5283] EXT4-fs (loop2): Ignoring removed bh option [ 177.721980][ T5283] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.029513][ T5283] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2. [ 181.001969][ T5331] syz.1.255 uses obsolete (PF_INET,SOCK_PACKET) [ 181.258586][ T5320] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.314788][ T5320] device bridge_slave_0 left promiscuous mode [ 181.456535][ T5320] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.421553][ T5320] device bridge_slave_1 left promiscuous mode [ 182.427874][ T5320] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.532135][ T5320] bond0: (slave bond_slave_0): Releasing backup interface [ 182.562200][ T5320] bond0: (slave bond_slave_1): Releasing backup interface [ 182.611810][ T5320] team0: Port device team_slave_0 removed [ 182.639071][ T5320] team0: Port device team_slave_1 removed [ 182.663665][ T5320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.672830][ T5320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.686303][ T5320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.742326][ T5347] kvm [5346]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 182.841745][ T5350] netlink: 'syz.3.261': attribute type 4 has an invalid length. [ 182.914483][ T13] lo speed is unknown, defaulting to 1000 [ 183.297145][ T5366] xt_connbytes: Forcing CT accounting to be enabled [ 183.304192][ T5366] Cannot find add_set index 0 as target [ 184.155734][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.268'. [ 184.727045][ T5377] netlink: 32 bytes leftover after parsing attributes in process `syz.3.265'. [ 184.769287][ T5377] netlink: 216 bytes leftover after parsing attributes in process `syz.3.265'. [ 184.769405][ T4275] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 185.019442][ T4275] usb 5-1: Using ep0 maxpacket: 16 [ 185.165537][ T5377] netlink: 216 bytes leftover after parsing attributes in process `syz.3.265'. [ 185.179029][ T5377] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 185.285005][ T4275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 186.124797][ T4275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 186.389597][ T4275] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=8b.57 [ 186.404255][ T4275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.445549][ T4275] usb 5-1: Product: syz [ 186.463567][ T4275] usb 5-1: Manufacturer: syz [ 186.480691][ T4275] usb 5-1: SerialNumber: syz [ 186.527004][ T4275] usb 5-1: config 0 descriptor?? [ 186.620067][ T4275] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 186.828551][ T4275] usb 5-1: USB disconnect, device number 2 [ 186.900737][ T5408] binder: 5405:5408 ioctl c0306201 200000000680 returned -14 [ 189.036712][ T5434] loop4: detected capacity change from 0 to 512 [ 190.156579][ T5434] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 190.244053][ T5434] EXT4-fs (loop4): 1 truncate cleaned up [ 190.249885][ T5434] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 190.270661][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.239294][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.246024][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.604593][ T5511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 196.619026][ T5511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 199.526283][ T5544] loop4: detected capacity change from 0 to 1024 [ 201.463926][ T5565] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 203.947871][ T5585] xt_NFQUEUE: number of total queues is 0 [ 205.817372][ T5603] xt_CT: No such helper "snmp_trap" [ 207.742774][ T5624] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 215.072351][ T5670] tipc: Started in network mode [ 215.089413][ T5670] tipc: Node identity 4, cluster identity 4711 [ 215.129539][ T5670] tipc: Node number set to 4 [ 218.743058][ T5714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 219.726742][ T5714] device team_slave_0 entered promiscuous mode [ 219.733120][ T5714] device team_slave_1 entered promiscuous mode [ 219.739850][ T5714] device macvtap1 entered promiscuous mode [ 219.745653][ T5714] device team0 entered promiscuous mode [ 219.752944][ T5714] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 220.149379][ T5726] Cannot find add_set index 0 as target [ 228.164881][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'. [ 228.182134][ T5802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 239.489430][ T26] audit: type=1326 audit(1747892181.805:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d2abd969 code=0x7ffc0000 [ 241.189072][ T26] audit: type=1326 audit(1747892181.845:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f77d2abd969 code=0x7ffc0000 [ 241.213180][ T26] audit: type=1326 audit(1747892181.845:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d2abd969 code=0x7ffc0000 [ 241.235841][ T26] audit: type=1326 audit(1747892181.845:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f77d2abd969 code=0x7ffc0000 [ 241.260994][ T26] audit: type=1326 audit(1747892181.845:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d2abd969 code=0x7ffc0000 [ 241.288560][ T26] audit: type=1326 audit(1747892181.845:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f77d2abd969 code=0x7ffc0000 [ 241.371229][ T5924] Bluetooth: hci0: service_discovery: too big uuid_count value 65062 [ 241.655978][ T26] audit: type=1326 audit(1747892181.845:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d2abd969 code=0x7ffc0000 [ 242.298268][ T26] audit: type=1326 audit(1747892181.845:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f77d2abd969 code=0x7ffc0000 [ 243.308209][ T26] audit: type=1326 audit(1747892181.845:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77d2abd969 code=0x7ffc0000 [ 243.346002][ T26] audit: type=1326 audit(1747892181.845:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f77d2abd969 code=0x7ffc0000 [ 243.356366][ T4216] Bluetooth: hci0: command 0x0406 tx timeout [ 245.335607][ T5953] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 247.233107][ T5977] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 254.996705][ T6022] tipc: Enabled bearer , priority 10 [ 255.465562][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.471984][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.031139][ T4275] tipc: Node number set to 1708175932 [ 257.923471][ T6058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.457'. [ 259.796974][ T6059] overlayfs: failed to resolve './file0': -2 [ 262.109461][ T6084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.467'. [ 266.866071][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 267.559414][ T6122] netlink: 40 bytes leftover after parsing attributes in process `syz.2.478'. [ 272.080932][ T6142] netlink: 28 bytes leftover after parsing attributes in process `syz.0.484'. [ 274.871856][ T6167] bridge0: port 3(netdevsim0) entered blocking state [ 274.898986][ T6167] bridge0: port 3(netdevsim0) entered disabled state [ 274.917739][ T6167] device netdevsim0 entered promiscuous mode [ 274.927529][ T6167] bridge0: port 3(netdevsim0) entered blocking state [ 274.934432][ T6167] bridge0: port 3(netdevsim0) entered forwarding state [ 275.146176][ T6170] ptrace attach of "./syz-executor exec"[4167] was attempted by "./syz-executor exec"[6170] [ 277.135572][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.497'. [ 277.496110][ T6198] lo speed is unknown, defaulting to 1000 [ 289.885125][ T6311] lo speed is unknown, defaulting to 1000 [ 291.263256][ T6314] netlink: 'syz.3.534': attribute type 10 has an invalid length. [ 291.271138][ T6314] netlink: 40 bytes leftover after parsing attributes in process `syz.3.534'. [ 291.339250][ T6314] device geneve0 entered promiscuous mode [ 291.348937][ T6314] team0: Port device geneve0 added [ 293.778404][ T6328] lo speed is unknown, defaulting to 1000 [ 296.541867][ T4214] Bluetooth: hci3: command 0x0409 tx timeout [ 297.452912][ T6328] chnl_net:caif_netlink_parms(): no params data found [ 297.890832][ T6384] netlink: 'syz.4.553': attribute type 1 has an invalid length. [ 298.130087][ T6385] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 298.146978][ T6385] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 298.274388][ T6385] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 298.344963][ T6385] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 298.500174][ T6385] bond2: (slave geneve2): making interface the new active one [ 298.589485][ T4217] Bluetooth: hci3: command 0x041b tx timeout [ 298.628258][ T6385] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 298.974164][ T6384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 299.071927][ T6397] ================================================================== [ 299.080381][ T6397] BUG: KASAN: slab-out-of-bounds in count_subheaders+0x69/0xf0 [ 299.087944][ T6397] Read of size 8 at addr ffff888028c9a3b8 by task syz.3.556/6397 [ 299.095671][ T6397] [ 299.097998][ T6397] CPU: 0 PID: 6397 Comm: syz.3.556 Not tainted 5.15.183-syzkaller #0 [ 299.106075][ T6397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.116141][ T6397] Call Trace: [ 299.119420][ T6397] [ 299.122361][ T6397] dump_stack_lvl+0x168/0x230 [ 299.127046][ T6397] ? show_regs_print_info+0x20/0x20 [ 299.132244][ T6397] ? _printk+0xcc/0x110 [ 299.136398][ T6397] ? count_subheaders+0x69/0xf0 [ 299.141258][ T6397] ? load_image+0x3b0/0x3b0 [ 299.145771][ T6397] print_address_description+0x60/0x2d0 [ 299.151339][ T6397] ? count_subheaders+0x69/0xf0 [ 299.156200][ T6397] kasan_report+0xdf/0x130 [ 299.160625][ T6397] ? count_subheaders+0x69/0xf0 [ 299.165495][ T6397] count_subheaders+0x69/0xf0 [ 299.170193][ T6397] unregister_sysctl_table+0x5b/0x130 [ 299.175575][ T6397] ax25_unregister_dev_sysctl+0x79/0xa0 [ 299.181130][ T6397] ax25_dev_device_down+0x5b/0x520 [ 299.186259][ T6397] ax25_device_event+0x4b4/0x4f0 [ 299.191210][ T6397] raw_notifier_call_chain+0xcb/0x160 [ 299.196593][ T6397] dev_close_many+0x28d/0x400 [ 299.201276][ T6397] ? _raw_spin_unlock+0x40/0x40 [ 299.206144][ T6397] ? __dev_open+0x420/0x420 [ 299.210661][ T6397] ? bond_netdev_event+0x159/0xea0 [ 299.215785][ T6397] ? try_to_del_timer_sync+0x165/0x1b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 299.221347][ T6397] dev_close+0x14c/0x200 [ 299.225593][ T6397] ? __dev_close_many+0x2a0/0x2a0 [ 299.230621][ T6397] ? macvlan_device_event+0x10b/0x930 [ 299.236008][ T6397] bpq_device_event+0x2f4/0x9c0 [ 299.240867][ T6397] ? lockdep_rtnl_is_held+0x22/0x30 [ 299.246072][ T6397] ? team_device_event+0x11b/0x9e0 [ 299.251194][ T6397] raw_notifier_call_chain+0xcb/0x160 [ 299.256585][ T6397] dev_close_many+0x28d/0x400 [ 299.261277][ T6397] ? __dev_open+0x420/0x420 [ 299.265792][ T6397] ? lock_chain_count+0x20/0x20 [ 299.270667][ T6397] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 299.276667][ T6397] dev_close+0x14c/0x200 [ 299.280917][ T6397] ? __dev_close_many+0x2a0/0x2a0 [ 299.285949][ T6397] ? __local_bh_enable_ip+0x12a/0x1b0 [ 299.291331][ T6397] ? _local_bh_enable+0xa0/0xa0 [ 299.296187][ T6397] bond_setup_by_slave+0x61/0x3a0 [ 299.301226][ T6397] bond_enslave+0x77c/0x3a40 [ 299.305834][ T6397] ? rcu_force_quiescent_state+0x230/0x230 [ 299.311681][ T6397] ? verify_lock_unused+0x140/0x140 [ 299.316899][ T6397] ? bond_lower_state_changed+0x150/0x150 [ 299.322626][ T6397] ? __schedule+0x11c0/0x43b0 [ 299.327330][ T6397] ? apparmor_capable+0x12c/0x190 [ 299.332372][ T6397] ? bpf_lsm_capable+0x5/0x10 [ 299.337054][ T6397] ? full_name_hash+0x8e/0xe0 [ 299.341752][ T6397] bond_do_ioctl+0x2a2/0x8c0 [ 299.346369][ T6397] ? bond_eth_ioctl+0x200/0x200 [ 299.351229][ T6397] ? __rwlock_init+0x140/0x140 [ 299.356022][ T6397] ? __mutex_lock_common+0x14d8/0x2390 [ 299.361491][ T6397] ? full_name_hash+0x8e/0xe0 [ 299.366188][ T6397] ? dev_siocbond+0xcf/0x100 [ 299.370791][ T6397] dev_ifsioc+0xc01/0xe70 [ 299.375138][ T6397] ? dev_ioctl+0x54e/0xe50 [ 299.379566][ T6397] ? dev_ioctl+0xe50/0xe50 [ 299.383991][ T6397] ? full_name_hash+0x8e/0xe0 [ 299.388690][ T6397] dev_ioctl+0x55f/0xe50 [ 299.392942][ T6397] ? _copy_from_user+0x111/0x170 [ 299.397902][ T6397] sock_do_ioctl+0x222/0x2f0 [ 299.402518][ T6397] ? sock_show_fdinfo+0xb0/0xb0 [ 299.407408][ T6397] sock_ioctl+0x4ed/0x6e0 [ 299.411763][ T6397] ? sock_poll+0x3f0/0x3f0 [ 299.416198][ T6397] ? bpf_lsm_file_ioctl+0x5/0x10 [ 299.421145][ T6397] ? security_file_ioctl+0x7c/0xa0 [ 299.426266][ T6397] ? sock_poll+0x3f0/0x3f0 [ 299.430690][ T6397] __se_sys_ioctl+0xfa/0x170 [ 299.435305][ T6397] do_syscall_64+0x4c/0xa0 [ 299.439723][ T6397] ? clear_bhb_loop+0x15/0x70 [ 299.444403][ T6397] ? clear_bhb_loop+0x15/0x70 [ 299.449085][ T6397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 299.455000][ T6397] RIP: 0033:0x7f9cceb50969 [ 299.459427][ T6397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.479033][ T6397] RSP: 002b:00007f9ccc997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.487462][ T6397] RAX: ffffffffffffffda RBX: 00007f9cced78080 RCX: 00007f9cceb50969 [ 299.495447][ T6397] RDX: 0000200000000180 RSI: 0000000000008990 RDI: 0000000000000008 [ 299.503427][ T6397] RBP: 00007f9ccebd2ab1 R08: 0000000000000000 R09: 0000000000000000 [ 299.511408][ T6397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.519406][ T6397] R13: 0000000000000000 R14: 00007f9cced78080 R15: 00007fff95200448 [ 299.527412][ T6397] [ 299.530438][ T6397] [ 299.532763][ T6397] Allocated by task 4168: [ 299.537092][ T6397] __kasan_kmalloc+0xb5/0xf0 [ 299.541705][ T6397] mem_cgroup_css_alloc+0x10fe/0x1640 [ 299.547107][ T6397] cgroup_apply_control_enable+0x3cc/0xb00 [ 299.552920][ T6397] cgroup_mkdir+0xcdf/0xf00 [ 299.557430][ T6397] kernfs_iop_mkdir+0x24c/0x3d0 [ 299.562308][ T6397] vfs_mkdir+0x387/0x570 [ 299.566571][ T6397] do_mkdirat+0x1d7/0x5a0 [ 299.570915][ T6397] __x64_sys_mkdirat+0x85/0x90 [ 299.575683][ T6397] do_syscall_64+0x4c/0xa0 [ 299.580102][ T6397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 299.585997][ T6397] [ 299.588317][ T6397] The buggy address belongs to the object at ffff888028c9a380 [ 299.588317][ T6397] which belongs to the cache kmalloc-64 of size 64 [ 299.602201][ T6397] The buggy address is located 56 bytes inside of [ 299.602201][ T6397] 64-byte region [ffff888028c9a380, ffff888028c9a3c0) [ 299.615311][ T6397] The buggy address belongs to the page: [ 299.620937][ T6397] page:ffffea0000a32680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28c9a [ 299.631085][ T6397] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 299.638650][ T6397] raw: 00fff00000000200 ffffea0000885100 0000000500000005 ffff888016841640 [ 299.647245][ T6397] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 299.655834][ T6397] page dumped because: kasan: bad access detected [ 299.662254][ T6397] page_owner tracks the page as allocated [ 299.667968][ T6397] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 9, ts 10791052001, free_ts 10788711873 [ 299.683869][ T6397] get_page_from_freelist+0x1b77/0x1c60 [ 299.689424][ T6397] __alloc_pages+0x1e1/0x470 [ 299.694019][ T6397] new_slab+0xc0/0x4b0 [ 299.698099][ T6397] ___slab_alloc+0x81e/0xdf0 [ 299.702707][ T6397] __kmalloc+0x1cd/0x330 [ 299.706955][ T6397] security_task_alloc+0x42/0x130 [ 299.711985][ T6397] copy_process+0x1639/0x3e60 [ 299.716680][ T6397] kernel_clone+0x219/0x930 [ 299.721179][ T6397] kernel_thread+0xc8/0x120 [ 299.725679][ T6397] call_usermodehelper_exec_work+0x58/0x220 [ 299.731577][ T6397] process_one_work+0x863/0x1000 [ 299.736520][ T6397] worker_thread+0xaa8/0x12a0 [ 299.741201][ T6397] kthread+0x436/0x520 [ 299.745269][ T6397] ret_from_fork+0x1f/0x30 [ 299.749686][ T6397] page last free stack trace: [ 299.754345][ T6397] free_unref_page_prepare+0x637/0x6c0 [ 299.759801][ T6397] free_unref_page+0x94/0x280 [ 299.764492][ T6397] __mmdrop+0xaa/0x3e0 [ 299.768561][ T6397] free_bprm+0x141/0x300 [ 299.772800][ T6397] kernel_execve+0x380/0x900 [ 299.777404][ T6397] call_usermodehelper_exec_async+0x207/0x350 [ 299.783574][ T6397] ret_from_fork+0x1f/0x30 [ 299.788007][ T6397] [ 299.790399][ T6397] Memory state around the buggy address: [ 299.796040][ T6397] ffff888028c9a280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 299.804513][ T6397] ffff888028c9a300: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 299.812583][ T6397] >ffff888028c9a380: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 299.820649][ T6397] ^ [ 299.826548][ T6397] ffff888028c9a400: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 299.834626][ T6397] ffff888028c9a480: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 299.842781][ T6397] ================================================================== [ 299.850846][ T6397] Disabling lock debugging due to kernel taint [ 300.191126][ T6397] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 300.198341][ T6397] CPU: 0 PID: 6397 Comm: syz.3.556 Tainted: G B 5.15.183-syzkaller #0 [ 300.207793][ T6397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 300.217840][ T6397] Call Trace: [ 300.221110][ T6397] [ 300.224025][ T6397] dump_stack_lvl+0x168/0x230 [ 300.228689][ T6397] ? show_regs_print_info+0x20/0x20 [ 300.233875][ T6397] ? load_image+0x3b0/0x3b0 [ 300.238372][ T6397] panic+0x2c9/0x7f0 [ 300.242267][ T6397] ? bpf_jit_dump+0xd0/0xd0 [ 300.246771][ T6397] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 300.252666][ T6397] ? _raw_spin_unlock+0x40/0x40 [ 300.257503][ T6397] ? print_memory_metadata+0x314/0x400 [ 300.262954][ T6397] ? count_subheaders+0x69/0xf0 [ 300.267793][ T6397] check_panic_on_warn+0x80/0xa0 [ 300.272723][ T6397] ? count_subheaders+0x69/0xf0 [ 300.277563][ T6397] end_report+0x6d/0xf0 [ 300.281717][ T6397] kasan_report+0x102/0x130 [ 300.286228][ T6397] ? count_subheaders+0x69/0xf0 [ 300.291067][ T6397] count_subheaders+0x69/0xf0 [ 300.295732][ T6397] unregister_sysctl_table+0x5b/0x130 [ 300.301090][ T6397] ax25_unregister_dev_sysctl+0x79/0xa0 [ 300.306620][ T6397] ax25_dev_device_down+0x5b/0x520 [ 300.311730][ T6397] ax25_device_event+0x4b4/0x4f0 [ 300.316658][ T6397] raw_notifier_call_chain+0xcb/0x160 [ 300.322016][ T6397] dev_close_many+0x28d/0x400 [ 300.326690][ T6397] ? _raw_spin_unlock+0x40/0x40 [ 300.331527][ T6397] ? __dev_open+0x420/0x420 [ 300.336011][ T6397] ? bond_netdev_event+0x159/0xea0 [ 300.341105][ T6397] ? try_to_del_timer_sync+0x165/0x1b0 [ 300.346550][ T6397] dev_close+0x14c/0x200 [ 300.350801][ T6397] ? __dev_close_many+0x2a0/0x2a0 [ 300.355898][ T6397] ? macvlan_device_event+0x10b/0x930 [ 300.361258][ T6397] bpq_device_event+0x2f4/0x9c0 [ 300.366094][ T6397] ? lockdep_rtnl_is_held+0x22/0x30 [ 300.371277][ T6397] ? team_device_event+0x11b/0x9e0 [ 300.376374][ T6397] raw_notifier_call_chain+0xcb/0x160 [ 300.381732][ T6397] dev_close_many+0x28d/0x400 [ 300.386398][ T6397] ? __dev_open+0x420/0x420 [ 300.390889][ T6397] ? lock_chain_count+0x20/0x20 [ 300.395726][ T6397] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 300.401698][ T6397] dev_close+0x14c/0x200 [ 300.405930][ T6397] ? __dev_close_many+0x2a0/0x2a0 [ 300.410936][ T6397] ? __local_bh_enable_ip+0x12a/0x1b0 [ 300.416289][ T6397] ? _local_bh_enable+0xa0/0xa0 [ 300.421124][ T6397] bond_setup_by_slave+0x61/0x3a0 [ 300.426141][ T6397] bond_enslave+0x77c/0x3a40 [ 300.430724][ T6397] ? rcu_force_quiescent_state+0x230/0x230 [ 300.436521][ T6397] ? verify_lock_unused+0x140/0x140 [ 300.441804][ T6397] ? bond_lower_state_changed+0x150/0x150 [ 300.447513][ T6397] ? __schedule+0x11c0/0x43b0 [ 300.452183][ T6397] ? apparmor_capable+0x12c/0x190 [ 300.457189][ T6397] ? bpf_lsm_capable+0x5/0x10 [ 300.461850][ T6397] ? full_name_hash+0x8e/0xe0 [ 300.466517][ T6397] bond_do_ioctl+0x2a2/0x8c0 [ 300.471108][ T6397] ? bond_eth_ioctl+0x200/0x200 [ 300.475942][ T6397] ? __rwlock_init+0x140/0x140 [ 300.480706][ T6397] ? __mutex_lock_common+0x14d8/0x2390 [ 300.486151][ T6397] ? full_name_hash+0x8e/0xe0 [ 300.490812][ T6397] ? dev_siocbond+0xcf/0x100 [ 300.495385][ T6397] dev_ifsioc+0xc01/0xe70 [ 300.499695][ T6397] ? dev_ioctl+0x54e/0xe50 [ 300.504094][ T6397] ? dev_ioctl+0xe50/0xe50 [ 300.508494][ T6397] ? full_name_hash+0x8e/0xe0 [ 300.513173][ T6397] dev_ioctl+0x55f/0xe50 [ 300.517405][ T6397] ? _copy_from_user+0x111/0x170 [ 300.522335][ T6397] sock_do_ioctl+0x222/0x2f0 [ 300.526912][ T6397] ? sock_show_fdinfo+0xb0/0xb0 [ 300.531749][ T6397] sock_ioctl+0x4ed/0x6e0 [ 300.536065][ T6397] ? sock_poll+0x3f0/0x3f0 [ 300.540471][ T6397] ? bpf_lsm_file_ioctl+0x5/0x10 [ 300.545395][ T6397] ? security_file_ioctl+0x7c/0xa0 [ 300.550489][ T6397] ? sock_poll+0x3f0/0x3f0 [ 300.554891][ T6397] __se_sys_ioctl+0xfa/0x170 [ 300.559472][ T6397] do_syscall_64+0x4c/0xa0 [ 300.563870][ T6397] ? clear_bhb_loop+0x15/0x70 [ 300.568545][ T6397] ? clear_bhb_loop+0x15/0x70 [ 300.573206][ T6397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 300.579083][ T6397] RIP: 0033:0x7f9cceb50969 [ 300.583481][ T6397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.603069][ T6397] RSP: 002b:00007f9ccc997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.611465][ T6397] RAX: ffffffffffffffda RBX: 00007f9cced78080 RCX: 00007f9cceb50969 [ 300.619425][ T6397] RDX: 0000200000000180 RSI: 0000000000008990 RDI: 0000000000000008 [ 300.627380][ T6397] RBP: 00007f9ccebd2ab1 R08: 0000000000000000 R09: 0000000000000000 [ 300.635342][ T6397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.643296][ T6397] R13: 0000000000000000 R14: 00007f9cced78080 R15: 00007fff95200448 [ 300.651258][ T6397] [ 300.654554][ T6397] Kernel Offset: disabled [ 300.669186][ T6397] Rebooting in 86400 seconds..