last executing test programs: 5.426345383s ago: executing program 3 (id=184): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) recvfrom(r4, &(0x7f0000000400)=""/70, 0x480, 0x0, 0x0, 0x0) r7 = dup2(r1, r0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x7, 0x4, 0x1, 0x5}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) 5.411745383s ago: executing program 3 (id=185): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000001c0)={0x0, 0x400, 0x1, 0x3, 0x4, 0x4, 0x9d8}) 5.381758803s ago: executing program 3 (id=186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) 5.310399564s ago: executing program 3 (id=187): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(r2, 0x40045431, 0xfffffffffffc) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000000c0)="04", 0x1, 0x20050847, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 5.305424224s ago: executing program 3 (id=188): r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x1, 0x0) 5.210222944s ago: executing program 3 (id=190): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x8, [0xd485], 0x5}, 0x10) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x4, 0x1}, 0x6) mkdir(&(0x7f0000000540)='./file0\x00', 0xd0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x159084, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(&(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xfffc, [0xfffffffc, 0xffffffff], 0x8000}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x18) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x5}]}}]}, 0x48}}, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 5.210008644s ago: executing program 2 (id=191): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = dup2(r1, r0) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, 0x0, 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.147410094s ago: executing program 2 (id=192): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) 5.116647495s ago: executing program 2 (id=193): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000b87e", @ANYBLOB], 0x50) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000780)={@mcast2, 0x0, 0x0, 0xff, 0x1, 0x697, 0x6}, 0x20) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) unshare(0x44040000) 3.632808852s ago: executing program 2 (id=201): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x3, {0x3, 0x22, "a7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 1.746328921s ago: executing program 1 (id=216): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.314707063s ago: executing program 4 (id=218): setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001140)=@int=0x40000000, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.189905604s ago: executing program 1 (id=220): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0xa7fd1099076aa00c}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8000000}, {0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) 1.179299174s ago: executing program 4 (id=221): syz_open_dev$vim2m(0x0, 0xfff, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x20, r2, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) 1.079313814s ago: executing program 1 (id=222): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000001c0)="ba30a945e46b03d7dd459192252b6e3c518d8badd03bee30080487b36c9dc92d57f60c92e675acf419e99d5ca8758bdc1e0ddc04ee8d370e9e5c1faa5b4fefed59d0931c498f0c7a38aeae2c26014b38"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000600)=[@dead_binder_done={0x40086310, 0x1000000}], 0x0, 0x0, 0x0}) 1.022396705s ago: executing program 0 (id=223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[], 0x54}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3ff, 0x51}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x30}}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0], 0x14f8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1.022253125s ago: executing program 1 (id=224): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000000b00)=""/102368, 0x18fe0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 981.220865ms ago: executing program 0 (id=225): syz_emit_ethernet(0x32, &(0x7f0000000440)={@local, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x3, 0x24, 0x65, 0x0, 0xb, 0x21, 0x0, @private=0xa010100, @local}, {{0x4e23, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x6, 0x3, "fa0504", 0xf7, '!(\x00'}}}}}}, 0x0) 958.896455ms ago: executing program 2 (id=226): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001414ffff"], 0x10}, 0x1, 0x0, 0x0, 0x44810}, 0x200040c0) 402.498228ms ago: executing program 0 (id=227): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 398.237478ms ago: executing program 2 (id=228): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f0000000080)=[{r0, 0xad0}], 0x1, 0x0, 0x0, 0x0) 346.618308ms ago: executing program 0 (id=229): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000000056a8850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r1, 0x25, 0x2, @val=@tracing}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 218.357799ms ago: executing program 0 (id=230): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041094}, 0x4000080) 218.065139ms ago: executing program 4 (id=231): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) 194.130629ms ago: executing program 1 (id=232): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000680)="7bcfd08b2a0021946fe9857f5e68c87102fef110fa2b4da8ac099995510cd7386616adbd0b9e3835c497fb004983457febfd94e5e9fc0ff8a947b28e5ce42a1130071ca16d531813bdfa2044103e18820934b1f433626b0f78a8ceb6422033314ac3187900ccd4e741855d8c5978185699954dbae7417f4424a2d913652df56b89", 0x81}], 0x1) 164.410829ms ago: executing program 0 (id=233): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x5, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 94.418069ms ago: executing program 4 (id=234): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 94.307519ms ago: executing program 1 (id=235): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88b59edace0000033e8283f2305e02000002ff02000000000000000000000000000104004e20004d03"], 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000003380)=""/4067, 0xfe3}], 0x1}, 0x0) 26.70595ms ago: executing program 4 (id=236): r0 = io_uring_setup(0x8fd, &(0x7f0000000000)={0x0, 0x949f, 0x100, 0xffffffff, 0x2b}) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 0s ago: executing program 4 (id=237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x8, 0x0, 0x2, 0x10001, 0x4, 0x7, 0xc, 0x0, 0x0, 0x0, 0x7, 0xec1, 0x20000, 0x400000, 0xfffffffffffffffd], 0x1, 0x60002}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x2, 0x3, 0x13, '\x00', 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. [ 44.073388][ T4155] cgroup: Unknown subsys name 'net' [ 44.208951][ T4155] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 45.430832][ T4155] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 47.125960][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 47.163195][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 47.198419][ T4173] chnl_net:caif_netlink_parms(): no params data found [ 47.271149][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 47.342392][ T4179] chnl_net:caif_netlink_parms(): no params data found [ 47.362838][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.370039][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.378660][ T4167] device bridge_slave_0 entered promiscuous mode [ 47.397737][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.405004][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.412850][ T4176] device bridge_slave_0 entered promiscuous mode [ 47.422957][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.430055][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.438221][ T4173] device bridge_slave_0 entered promiscuous mode [ 47.446884][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.454332][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.461953][ T4167] device bridge_slave_1 entered promiscuous mode [ 47.474214][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.481274][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.489771][ T4176] device bridge_slave_1 entered promiscuous mode [ 47.499527][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.506967][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.514827][ T4173] device bridge_slave_1 entered promiscuous mode [ 47.569046][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.590149][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.603071][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.627367][ T4173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.637939][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.663107][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.670300][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.678369][ T4166] device bridge_slave_0 entered promiscuous mode [ 47.687333][ T4173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.711684][ T4176] team0: Port device team_slave_0 added [ 47.718037][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.725400][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.733627][ T4166] device bridge_slave_1 entered promiscuous mode [ 47.750382][ T4167] team0: Port device team_slave_0 added [ 47.765271][ T4176] team0: Port device team_slave_1 added [ 47.791203][ T4167] team0: Port device team_slave_1 added [ 47.804321][ T4179] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.811393][ T4179] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.819223][ T4179] device bridge_slave_0 entered promiscuous mode [ 47.841421][ T4173] team0: Port device team_slave_0 added [ 47.855033][ T4179] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.862133][ T4179] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.869999][ T4179] device bridge_slave_1 entered promiscuous mode [ 47.877648][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.884936][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.911113][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.924453][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.933836][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.940765][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.967423][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.979568][ T4173] team0: Port device team_slave_1 added [ 47.992792][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.999784][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.025860][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.045748][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.066030][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.072981][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.099544][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.121039][ T4179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.145507][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.152463][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.179112][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.195700][ T4179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.218932][ T4166] team0: Port device team_slave_0 added [ 48.227052][ T4166] team0: Port device team_slave_1 added [ 48.233184][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.240163][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.266617][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.320854][ T4179] team0: Port device team_slave_0 added [ 48.346068][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.353039][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.379550][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.398477][ T4179] team0: Port device team_slave_1 added [ 48.407466][ T4167] device hsr_slave_0 entered promiscuous mode [ 48.414606][ T4167] device hsr_slave_1 entered promiscuous mode [ 48.424586][ T4176] device hsr_slave_0 entered promiscuous mode [ 48.433018][ T4176] device hsr_slave_1 entered promiscuous mode [ 48.440043][ T4176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.448170][ T4176] Cannot create hsr debugfs directory [ 48.456835][ T4173] device hsr_slave_0 entered promiscuous mode [ 48.464270][ T4173] device hsr_slave_1 entered promiscuous mode [ 48.470780][ T4173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.478377][ T4173] Cannot create hsr debugfs directory [ 48.484367][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.491299][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.517638][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.565585][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.572541][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.599235][ T4179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.628054][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.635292][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.661823][ T4179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.714520][ T4166] device hsr_slave_0 entered promiscuous mode [ 48.721106][ T4166] device hsr_slave_1 entered promiscuous mode [ 48.728008][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.738407][ T4166] Cannot create hsr debugfs directory [ 48.797411][ T4179] device hsr_slave_0 entered promiscuous mode [ 48.804327][ T4179] device hsr_slave_1 entered promiscuous mode [ 48.810983][ T4179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.818597][ T4179] Cannot create hsr debugfs directory [ 48.844989][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 48.851787][ T4168] Bluetooth: hci0: command 0x0409 tx timeout [ 48.863868][ T4168] Bluetooth: hci1: command 0x0409 tx timeout [ 48.923869][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 48.924351][ T4168] Bluetooth: hci4: command 0x0409 tx timeout [ 49.044534][ T4176] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.056295][ T4176] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.069649][ T4176] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.079125][ T4176] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.125400][ T4167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.145580][ T4167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.154580][ T4167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.163226][ T4167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.211639][ T4173] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.226261][ T4173] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.245299][ T4173] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.254902][ T4173] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.266279][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.315818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.332433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.345003][ T4166] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 49.367273][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.381444][ T4166] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 49.390529][ T4166] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 49.400184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.409328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.418885][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.426113][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.435821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.445063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.453425][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.460511][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.479558][ T4166] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 49.494215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.503391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.551134][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.560499][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.570664][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.579459][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.600857][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.614192][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.623070][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.632202][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.641413][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.651430][ T4179] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.671339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.679141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.687278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.696256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.705903][ T4179] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.715538][ T4179] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.727595][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.741626][ T4179] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.759766][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.807877][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.819593][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.830112][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.837216][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.853841][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.860967][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.878425][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.887679][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.897513][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.904609][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.912476][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.952597][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.960149][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.968254][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.976918][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.987023][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.995928][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.009431][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.025093][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.041246][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.050967][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.058773][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.069418][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.078571][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.088027][ T3074] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.095116][ T3074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.103006][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.111719][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.120532][ T3074] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.127667][ T3074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.135415][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.166858][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.176602][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.186714][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.196048][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.205450][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.213979][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.226950][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.235677][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.245991][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.257742][ T4179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.278660][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.288575][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.299791][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.308845][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.334251][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.344749][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.352506][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.362716][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.379046][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.388404][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.398151][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.406998][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.415646][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.425115][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.433455][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.442128][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.450798][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.460395][ T3074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.469996][ T4176] device veth0_vlan entered promiscuous mode [ 50.479757][ T4179] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.490569][ T4173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.507884][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.528838][ T4176] device veth1_vlan entered promiscuous mode [ 50.537759][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.546595][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.555761][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.565153][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.573671][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.582954][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.590032][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.599051][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.608187][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.616862][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.623946][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.631672][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.640588][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.658426][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.677807][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.691142][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.701315][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.742818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.755612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.766760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.775388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.783668][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.790762][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.799122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.808102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.816974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.825711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.834208][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.841254][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.849833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.860084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.868526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.877654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.886284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.895232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.904287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.912636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.921255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.929851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.934234][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 50.941924][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.943614][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 50.957043][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 50.964480][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.975860][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.984808][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.993300][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.002094][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.010550][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 51.017035][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 51.017112][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.044598][ T4176] device veth0_macvtap entered promiscuous mode [ 51.054101][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.076291][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.092152][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.100466][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.110566][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.126140][ T4176] device veth1_macvtap entered promiscuous mode [ 51.147195][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.180711][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.189858][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.200820][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.209701][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.217762][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.241142][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.254116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.269585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.283219][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.300242][ T4167] device veth0_vlan entered promiscuous mode [ 51.317779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.332134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.340654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.357134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.366773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.375631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.385632][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.406965][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.422337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.432812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.462808][ T4176] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.481226][ T4176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.491594][ T4176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.506118][ T4176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.517947][ T4167] device veth1_vlan entered promiscuous mode [ 51.526115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.535351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.544515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.552746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.562887][ T4173] device veth0_vlan entered promiscuous mode [ 51.587394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.598236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.615225][ T4173] device veth1_vlan entered promiscuous mode [ 51.629225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.639210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.648705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.660448][ T4179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.713515][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.737345][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.746631][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.755927][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.764762][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.776197][ T4173] device veth0_macvtap entered promiscuous mode [ 51.797061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.808161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.817028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.826773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.835241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.844943][ T4173] device veth1_macvtap entered promiscuous mode [ 51.858652][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.866794][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.875714][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.885249][ T4179] device veth0_vlan entered promiscuous mode [ 51.909370][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.921068][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.933343][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.946333][ T4167] device veth0_macvtap entered promiscuous mode [ 51.960300][ T4179] device veth1_vlan entered promiscuous mode [ 51.976337][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.984871][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.992820][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.001891][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.012572][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.023155][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.035155][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.045535][ T4173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.057110][ T4173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.066196][ T4173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.074976][ T4173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.090596][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.090722][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.100491][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.115973][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.124349][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.140385][ T4167] device veth1_macvtap entered promiscuous mode [ 52.161002][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.173610][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.181813][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.191442][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.214979][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.226028][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.236303][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.247161][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.258451][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.276923][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.289401][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.299553][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.308499][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.321870][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.330486][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.339666][ T4166] device veth0_vlan entered promiscuous mode [ 52.348699][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.360083][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.372154][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.382919][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.394445][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.417806][ T4166] device veth1_vlan entered promiscuous mode [ 52.428413][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.437046][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.461804][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.470795][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.480568][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.489453][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.517089][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.525724][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.536948][ T4179] device veth0_macvtap entered promiscuous mode [ 52.547351][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.565406][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.568736][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.583939][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.590640][ T4166] device veth0_macvtap entered promiscuous mode [ 52.606628][ T4179] device veth1_macvtap entered promiscuous mode [ 52.632385][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.640489][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.649388][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.657435][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.665794][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.674320][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.682986][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.694913][ T4166] device veth1_macvtap entered promiscuous mode [ 52.727481][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.748560][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.759444][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.776869][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.787594][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.798325][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.810717][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.828307][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.840073][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.851915][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.862470][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.873151][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.883984][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.893951][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.904406][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.915775][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.926966][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.938417][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.948456][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.963995][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.980407][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.996077][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.012269][ T4208] Bluetooth: hci2: command 0x040f tx timeout [ 53.018173][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.018555][ T4208] Bluetooth: hci0: command 0x040f tx timeout [ 53.025976][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.032354][ T4208] Bluetooth: hci1: command 0x040f tx timeout [ 53.047365][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.056668][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.065808][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.074719][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.083283][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.092321][ T4208] Bluetooth: hci3: command 0x040f tx timeout [ 53.092746][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.098483][ T4208] Bluetooth: hci4: command 0x040f tx timeout [ 53.124980][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.128136][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.149385][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.157431][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.168509][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.180424][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.190603][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.201305][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.211432][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.223241][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.235826][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.247541][ T4166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.258141][ T4166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.267613][ T4166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.277116][ T4166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.292299][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.300498][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.309571][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.321498][ T4179] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.331022][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.334017][ T4207] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 53.341344][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.352330][ T4179] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.364669][ T4179] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.373536][ T4179] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.404417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.448141][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.457678][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.509478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.593479][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.601836][ T4207] usb 3-1: Using ep0 maxpacket: 32 [ 53.612754][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.654368][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.706093][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.724674][ T4207] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 53.739842][ T4207] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 53.755322][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.769747][ T4207] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 53.779407][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.793082][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.824907][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.840714][ T4207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 53.851869][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.867110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.872599][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.877976][ T4207] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 53.891359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.899666][ T4207] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 53.959218][ T4207] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 53.971510][ T4207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.038450][ T4207] usb 3-1: config 0 descriptor?? [ 54.318481][ T4271] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 54.319210][ T4207] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 54.455285][ T4207] usb 3-1: USB disconnect, device number 2 [ 54.505478][ T4207] usblp0: removed [ 54.913893][ T4207] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 55.085309][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 55.091406][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 55.141200][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 55.154048][ T4207] usb 3-1: Using ep0 maxpacket: 32 [ 55.167675][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 55.194000][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 55.201358][ T4296] netlink: 'syz.1.15': attribute type 12 has an invalid length. [ 55.277935][ T4207] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 55.306578][ T4207] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 55.333903][ T4207] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 55.367180][ T4207] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 55.393842][ T4207] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 55.459659][ T4207] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 55.540737][ T4207] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 55.573813][ T4207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.586817][ T4322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 55.629146][ T4207] usb 3-1: config 0 descriptor?? [ 55.895989][ T4207] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 56.106043][ T4206] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 56.313893][ T1106] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 56.346207][ T4207] usb 3-1: USB disconnect, device number 3 [ 56.361466][ T4207] usblp0: removed [ 56.374947][ T4206] usb 1-1: Using ep0 maxpacket: 8 [ 56.516399][ T4206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 56.528794][ T4206] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 56.543939][ T4206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.561037][ T4206] usb 1-1: config 0 descriptor?? [ 56.584818][ T1106] usb 5-1: Using ep0 maxpacket: 8 [ 56.739405][ T1106] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 56.751144][ T1106] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.771618][ T1106] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 56.781322][ T1106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.857292][ T1106] usbtmc 5-1:16.0: bulk endpoints not found [ 56.864787][ T4206] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 57.059587][ T4206] usb 1-1: USB disconnect, device number 2 [ 57.095636][ T4206] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 57.746103][ T4385] 9pnet_virtio: no channels available for device syz [ 57.968068][ T4394] device pim6reg1 entered promiscuous mode [ 58.078210][ T4396] syz.3.51 (4396) used greatest stack depth: 19544 bytes left [ 58.435296][ T4408] netlink: 'syz.2.56': attribute type 10 has an invalid length. [ 58.477261][ T4408] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 59.060234][ T2855] usb 5-1: USB disconnect, device number 2 [ 59.330434][ T4428] xt_hashlimit: size too large, truncated to 1048576 [ 59.654274][ T4439] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 61.571235][ T4450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 61.897824][ T4467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.937897][ T4464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.954687][ T4470] ieee802154 phy0 wpan0: encryption failed: -22 [ 62.602990][ T4492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.91'. [ 63.043677][ T2855] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.158707][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 63.189290][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.196708][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.237555][ T4514] device bridge_slave_0 left promiscuous mode [ 63.250394][ T4514] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.267339][ T4514] device bridge_slave_1 left promiscuous mode [ 63.281375][ T4514] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.302979][ T4514] bond0: (slave bond_slave_0): Releasing backup interface [ 63.305321][ T2855] usb 4-1: Using ep0 maxpacket: 32 [ 63.337925][ T4514] bond0: (slave bond_slave_1): Releasing backup interface [ 63.387495][ T4514] team0: Port device team_slave_0 removed [ 63.412224][ T4514] team0: Port device team_slave_1 removed [ 63.420924][ T4514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.435460][ T4514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.451560][ T2855] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 63.463153][ T4514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.466810][ T2855] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 63.476373][ T4514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.493149][ T2855] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 63.504907][ T2855] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 63.519277][ T2855] usb 4-1: config 0 interface 0 has no altsetting 0 [ 63.524875][ T4514] bond0: (slave wlan1): Releasing backup interface [ 63.682172][ T4329] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 63.691679][ T2855] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 63.704866][ T4329] Bluetooth: hci1: Injecting HCI hardware error event [ 63.716585][ T2855] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 63.734125][ T4174] Bluetooth: hci1: hardware error 0x00 [ 63.752899][ T2855] usb 4-1: Product: syz [ 63.760023][ T2855] usb 4-1: Manufacturer: syz [ 63.765493][ T2855] usb 4-1: SerialNumber: syz [ 63.773449][ T2855] usb 4-1: config 0 descriptor?? [ 63.820065][ T2855] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 63.841710][ T2855] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 63.912716][ T4175] Bluetooth: min 0 < 6 [ 64.667172][ T2855] usb 4-1: USB disconnect, device number 2 [ 64.684556][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 64.691608][ T4562] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 64.702532][ T2855] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 65.166399][ T4593] netlink: 19 bytes leftover after parsing attributes in process `syz.4.128'. [ 65.185844][ T4593] device geneve2 entered promiscuous mode [ 65.301084][ T4175] Bluetooth: hci1: unexpected event for opcode 0x0413 [ 65.536144][ T4601] kvm [4600]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x450000b0f8 [ 65.544064][ T4206] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 65.572079][ T4601] kvm [4600]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x490000aeb3 [ 65.595585][ T4601] kvm [4600]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x74000067c7 [ 65.720095][ T4601] kvm [4600]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1360000e194 [ 65.857241][ T4601] kvm [4600]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x1ba0000bbb8 [ 65.886652][ T4601] kvm [4600]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x1d40000916a [ 65.983363][ T4206] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 66.020663][ T4206] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 66.052790][ T4206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.074543][ T4328] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 66.098205][ T4328] Bluetooth: hci2: Injecting HCI hardware error event [ 66.127237][ T146] Bluetooth: hci2: hardware error 0x00 [ 66.127892][ T4595] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 66.332873][ T4646] xt_hashlimit: size too large, truncated to 1048576 [ 66.479220][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 67.722989][ T4209] usb 1-1: USB disconnect, device number 3 [ 67.880483][ T4678] syz.2.163 uses obsolete (PF_INET,SOCK_PACKET) [ 68.308440][ T4209] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 68.672413][ T2855] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.726133][ T4209] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 68.726381][ T4329] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 68.739819][ T4209] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 68.753833][ T4329] Bluetooth: hci0: Injecting HCI hardware error event [ 68.760155][ T4209] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 68.769257][ T4175] Bluetooth: hci0: hardware error 0x00 [ 68.780104][ T4209] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 68.821405][ T4209] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 68.928576][ T2855] usb 5-1: Using ep0 maxpacket: 8 [ 68.982303][ T4209] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 68.991399][ T4209] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 69.029196][ T4209] usb 1-1: Product: syz [ 69.033389][ T4209] usb 1-1: Manufacturer: syz [ 69.057143][ T2855] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.073326][ T2855] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.094045][ T2855] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.116916][ T4209] cdc_wdm 1-1:1.0: skipping garbage [ 69.121152][ T2855] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.122789][ T4209] cdc_wdm 1-1:1.0: skipping garbage [ 69.159991][ T2855] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 69.161522][ T4209] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 69.187146][ T2855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.191375][ T4209] cdc_wdm 1-1:1.0: Unknown control protocol [ 69.381023][ T4328] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.495281][ T2855] usb 5-1: GET_CAPABILITIES returned 0 [ 69.500883][ T2855] usbtmc 5-1:16.0: can't read capabilities [ 69.644909][ T4328] usb 2-1: Using ep0 maxpacket: 8 [ 69.773425][ T4328] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 69.782058][ T4328] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.792843][ T4328] usb 2-1: config 0 has no interface number 0 [ 69.799362][ T4328] usb 2-1: config 0 interface 52 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 69.810413][ T4172] Bluetooth: Wrong link type (-22) [ 69.816653][ T4328] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.829916][ T4328] usb 2-1: config 0 interface 52 has no altsetting 0 [ 69.836905][ T4328] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 69.846726][ T4328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.860167][ T4328] usb 2-1: config 0 descriptor?? [ 69.907299][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 70.024525][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 70.181995][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 70.257685][ T3074] Bluetooth: hci5: Frame reassembly failed (-84) [ 70.410570][ T4206] usb 2-1: USB disconnect, device number 2 [ 71.067776][ T4328] usb 1-1: USB disconnect, device number 4 [ 71.077529][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 71.084709][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 71.090798][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 71.136542][ T4207] usb 5-1: USB disconnect, device number 3 [ 71.300631][ T4744] Bluetooth: Wrong link type (-71) [ 71.893970][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.900299][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.422105][ T4328] Bluetooth: hci5: command 0x1003 tx timeout [ 72.430950][ T4744] Bluetooth: hci5: sending frame failed (-49) [ 72.595393][ T4328] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 72.717532][ T4781] usb usb4: usbfs: process 4781 (syz.0.207) did not claim interface 0 before use [ 72.851951][ T4328] usb 3-1: Using ep0 maxpacket: 8 [ 72.881344][ T4785] Cannot find set identified by id 0 to match [ 72.981271][ T4788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'. [ 72.987289][ T4790] 9pnet_virtio: no channels available for device syz [ 72.997743][ T4328] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.020939][ T4788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 73.022670][ T4328] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.101281][ T4328] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.111675][ T4328] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.125360][ T4328] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.135184][ T4328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.407980][ T4328] usb 3-1: GET_CAPABILITIES returned 0 [ 73.413709][ T4328] usbtmc 3-1:16.0: can't read capabilities [ 73.653851][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.663321][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.672602][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.681687][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.690777][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.699856][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.708932][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.718257][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.727337][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.736408][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.745490][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.754659][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.763743][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.772819][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.781989][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.791080][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.818192][ T4329] usb 3-1: USB disconnect, device number 4 [ 73.999438][ T4744] Bluetooth: hci0: unexpected event for opcode 0x202f [ 74.370251][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 74.627827][ T4207] Bluetooth: hci5: command 0x1001 tx timeout [ 74.635746][ T4174] Bluetooth: hci5: sending frame failed (-49) [ 74.692612][ T4833] dccp_invalid_packet: P.Data Offset(4) too small [ 75.281298][ T4853] tipc: Started in network mode [ 75.286490][ T4853] tipc: Node identity ac1414aa, cluster identity 4711 [ 75.311441][ T4853] tipc: Enabled bearer , priority 10 [ 75.421641][ T4859] ------------[ cut here ]------------ [ 75.427274][ T4859] WARNING: CPU: 1 PID: 4859 at arch/x86/kvm/vmx/vmx.c:1709 vmx_queue_exception+0x2d2/0x480 [ 75.437839][ T4859] Modules linked in: [ 75.442611][ T4859] CPU: 0 PID: 4859 Comm: syz.4.237 Not tainted 5.15.173-syzkaller #0 [ 75.451169][ T4859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.461715][ T4859] RIP: 0010:vmx_queue_exception+0x2d2/0x480 [ 75.467715][ T4859] Code: 9e 01 00 00 e8 2f 8e 5d 00 eb 0c e8 28 8e 5d 00 eb 05 e8 21 8e 5d 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f c3 e8 0e 8e 5d 00 <0f> 0b e9 a2 fe ff ff 89 f9 80 e1 07 38 c1 0f 8c 55 fd ff ff e8 05 [ 75.488125][ T4859] RSP: 0018:ffffc90003207558 EFLAGS: 00010283 [ 75.494514][ T4859] RAX: ffffffff8122e592 RBX: 0000000000000001 RCX: 0000000000080000 [ 75.503005][ T4859] RDX: ffffc90005142000 RSI: 0000000000000449 RDI: 000000000000044a [ 75.512320][ T4859] RBP: ffffc90003207c50 R08: ffffffff8122e42e R09: fffffbfff1bd2d3e [ 75.521184][ T4859] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801ec5c000 [ 75.529694][ T4859] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000080000803 [ 75.538111][ T4859] FS: 00007fae225de6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 75.547612][ T4859] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.554369][ T4859] CR2: 0000000000000000 CR3: 00000000558e8000 CR4: 00000000003526f0 [ 75.562782][ T4859] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.571286][ T4859] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.579660][ T4859] Call Trace: [ 75.583092][ T4859] [ 75.586107][ T4859] ? __warn+0x15b/0x300 [ 75.591605][ T4859] ? vmx_queue_exception+0x2d2/0x480 [ 75.597060][ T4859] ? report_bug+0x1b7/0x2e0 [ 75.601872][ T4859] ? handle_bug+0x3d/0x70 [ 75.606762][ T4859] ? exc_invalid_op+0x16/0x40 [ 75.611969][ T4859] ? asm_exc_invalid_op+0x16/0x20 [ 75.617088][ T4859] ? vmx_queue_exception+0x16e/0x480 [ 75.623542][ T4859] ? vmx_queue_exception+0x2d2/0x480 [ 75.628948][ T4859] ? vmx_queue_exception+0x2d2/0x480 [ 75.635431][ T4859] ? vmx_queue_exception+0x2d2/0x480 [ 75.640850][ T4859] ? kvm_inject_exception+0x16b/0x330 [ 75.646636][ T4859] vcpu_enter_guest+0x8f5/0x9850 [ 75.651684][ T4859] ? __lock_acquire+0x1ff0/0x1ff0 [ 75.658366][ T4859] ? unwind_next_frame+0x1437/0x1fa0 [ 75.664302][ T4859] ? deref_stack_reg+0xbe/0x110 [ 75.669328][ T4859] ? validate_chain+0x112/0x5930 [ 75.674676][ T4859] ? is_bpf_text_address+0x24f/0x260 [ 75.680113][ T4859] ? local_bh_enable+0x20/0x20 [ 75.685294][ T4859] ? stack_trace_save+0x1c0/0x1c0 [ 75.690403][ T4859] ? unwind_get_return_address+0x49/0x80 [ 75.696548][ T4859] ? stack_trace_snprint+0xe0/0xe0 [ 75.701723][ T4859] ? reacquire_held_locks+0x660/0x660 [ 75.708336][ T4859] ? kfree+0xf1/0x270 [ 75.712423][ T4859] ? kasan_set_track+0x62/0x80 [ 75.718164][ T4859] ? kasan_set_track+0x4b/0x80 [ 75.723129][ T4859] ? kasan_set_free_info+0x1f/0x40 [ 75.728779][ T4859] ? ____kasan_slab_free+0xd8/0x120 [ 75.734097][ T4859] ? slab_free_freelist_hook+0xdd/0x160 [ 75.741414][ T4859] ? mark_lock+0x98/0x340 [ 75.745934][ T4859] ? __lock_acquire+0x1295/0x1ff0 [ 75.751778][ T4859] ? mark_lock+0x98/0x340 [ 75.756170][ T4859] ? __lock_acquire+0x1295/0x1ff0 [ 75.761746][ T4859] ? __vmx_interrupt_blocked+0x163/0x1d0 [ 75.767446][ T4859] ? vmx_check_nested_events+0x16d2/0x24b0 [ 75.773728][ T4859] ? local_bh_enable+0x5/0x20 [ 75.778925][ T4859] ? _local_bh_enable+0xa0/0xa0 [ 75.784308][ T4859] ? handle_vmfunc+0xf30/0xf30 [ 75.789246][ T4859] kvm_arch_vcpu_ioctl_run+0xa5e/0x1f80 [ 75.795247][ T4859] kvm_vcpu_ioctl+0x7f0/0xcf0 [ 75.800020][ T4859] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 75.806205][ T4859] ? __fget_files+0x413/0x480 [ 75.810956][ T4859] ? bpf_lsm_file_ioctl+0x5/0x10 [ 75.816197][ T4859] ? security_file_ioctl+0x7d/0xa0 [ 75.821426][ T4859] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 75.828018][ T4859] __se_sys_ioctl+0xf1/0x160 [ 75.832764][ T4859] do_syscall_64+0x3b/0xb0 [ 75.837502][ T4859] ? clear_bhb_loop+0x15/0x70 [ 75.842261][ T4859] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.848685][ T4859] RIP: 0033:0x7fae24766819 [ 75.853193][ T4859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.874553][ T4859] RSP: 002b:00007fae225de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.883290][ T4859] RAX: ffffffffffffffda RBX: 00007fae2491dfa0 RCX: 00007fae24766819 [ 75.891746][ T4859] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 75.900151][ T4859] RBP: 00007fae247d975e R08: 0000000000000000 R09: 0000000000000000 [ 75.908256][ T4859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.927160][ T4859] R13: 0000000000000000 R14: 00007fae2491dfa0 R15: 00007ffcace0a098 [ 75.939575][ T4859] [ 75.942912][ T4859] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.950199][ T4859] CPU: 0 PID: 4859 Comm: syz.4.237 Not tainted 5.15.173-syzkaller #0 [ 75.958268][ T4859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.968319][ T4859] Call Trace: [ 75.971599][ T4859] [ 75.974517][ T4859] dump_stack_lvl+0x1e3/0x2d0 [ 75.979201][ T4859] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 75.984825][ T4859] ? panic+0x860/0x860 [ 75.989091][ T4859] ? vmx_queue_exception+0x240/0x480 [ 75.994461][ T4859] ? vmx_queue_exception+0x240/0x480 [ 75.999743][ T4859] panic+0x318/0x860 [ 76.003639][ T4859] ? __warn+0x16a/0x300 [ 76.007870][ T4859] ? fb_is_primary_device+0xd0/0xd0 [ 76.013120][ T4859] ? vmx_queue_exception+0x2d2/0x480 [ 76.018393][ T4859] __warn+0x2b2/0x300 [ 76.022366][ T4859] ? vmx_queue_exception+0x2d2/0x480 [ 76.027640][ T4859] report_bug+0x1b7/0x2e0 [ 76.031988][ T4859] handle_bug+0x3d/0x70 [ 76.036159][ T4859] exc_invalid_op+0x16/0x40 [ 76.041431][ T4859] asm_exc_invalid_op+0x16/0x20 [ 76.046285][ T4859] RIP: 0010:vmx_queue_exception+0x2d2/0x480 [ 76.052172][ T4859] Code: 9e 01 00 00 e8 2f 8e 5d 00 eb 0c e8 28 8e 5d 00 eb 05 e8 21 8e 5d 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f c3 e8 0e 8e 5d 00 <0f> 0b e9 a2 fe ff ff 89 f9 80 e1 07 38 c1 0f 8c 55 fd ff ff e8 05 [ 76.072049][ T4859] RSP: 0018:ffffc90003207558 EFLAGS: 00010283 [ 76.078152][ T4859] RAX: ffffffff8122e592 RBX: 0000000000000001 RCX: 0000000000080000 [ 76.086114][ T4859] RDX: ffffc90005142000 RSI: 0000000000000449 RDI: 000000000000044a [ 76.094095][ T4859] RBP: ffffc90003207c50 R08: ffffffff8122e42e R09: fffffbfff1bd2d3e [ 76.102122][ T4859] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801ec5c000 [ 76.110141][ T4859] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000080000803 [ 76.118131][ T4859] ? vmx_queue_exception+0x16e/0x480 [ 76.123416][ T4859] ? vmx_queue_exception+0x2d2/0x480 [ 76.128717][ T4859] ? vmx_queue_exception+0x2d2/0x480 [ 76.134004][ T4859] ? kvm_inject_exception+0x16b/0x330 [ 76.139426][ T4859] vcpu_enter_guest+0x8f5/0x9850 [ 76.144382][ T4859] ? __lock_acquire+0x1ff0/0x1ff0 [ 76.149424][ T4859] ? unwind_next_frame+0x1437/0x1fa0 [ 76.154719][ T4859] ? deref_stack_reg+0xbe/0x110 [ 76.159573][ T4859] ? validate_chain+0x112/0x5930 [ 76.164511][ T4859] ? is_bpf_text_address+0x24f/0x260 [ 76.169796][ T4859] ? local_bh_enable+0x20/0x20 [ 76.174542][ T4859] ? stack_trace_save+0x1c0/0x1c0 [ 76.179562][ T4859] ? unwind_get_return_address+0x49/0x80 [ 76.185215][ T4859] ? stack_trace_snprint+0xe0/0xe0 [ 76.190323][ T4859] ? reacquire_held_locks+0x660/0x660 [ 76.195717][ T4859] ? kfree+0xf1/0x270 [ 76.199706][ T4859] ? kasan_set_track+0x62/0x80 [ 76.204480][ T4859] ? kasan_set_track+0x4b/0x80 [ 76.209252][ T4859] ? kasan_set_free_info+0x1f/0x40 [ 76.214381][ T4859] ? ____kasan_slab_free+0xd8/0x120 [ 76.219585][ T4859] ? slab_free_freelist_hook+0xdd/0x160 [ 76.225160][ T4859] ? mark_lock+0x98/0x340 [ 76.229689][ T4859] ? __lock_acquire+0x1295/0x1ff0 [ 76.234727][ T4859] ? mark_lock+0x98/0x340 [ 76.239068][ T4859] ? __lock_acquire+0x1295/0x1ff0 [ 76.244142][ T4859] ? __vmx_interrupt_blocked+0x163/0x1d0 [ 76.249788][ T4859] ? vmx_check_nested_events+0x16d2/0x24b0 [ 76.255605][ T4859] ? local_bh_enable+0x5/0x20 [ 76.260294][ T4859] ? _local_bh_enable+0xa0/0xa0 [ 76.265154][ T4859] ? handle_vmfunc+0xf30/0xf30 [ 76.269947][ T4859] kvm_arch_vcpu_ioctl_run+0xa5e/0x1f80 [ 76.275517][ T4859] kvm_vcpu_ioctl+0x7f0/0xcf0 [ 76.280204][ T4859] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 76.285851][ T4859] ? __fget_files+0x413/0x480 [ 76.290557][ T4859] ? bpf_lsm_file_ioctl+0x5/0x10 [ 76.295513][ T4859] ? security_file_ioctl+0x7d/0xa0 [ 76.300635][ T4859] ? kvm_clear_stat_per_vcpu+0x1e0/0x1e0 [ 76.306281][ T4859] __se_sys_ioctl+0xf1/0x160 [ 76.310886][ T4859] do_syscall_64+0x3b/0xb0 [ 76.315308][ T4859] ? clear_bhb_loop+0x15/0x70 [ 76.319987][ T4859] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.325959][ T4859] RIP: 0033:0x7fae24766819 [ 76.330360][ T4859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.349972][ T4859] RSP: 002b:00007fae225de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.358399][ T4859] RAX: ffffffffffffffda RBX: 00007fae2491dfa0 RCX: 00007fae24766819 [ 76.366373][ T4859] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 76.374338][ T4859] RBP: 00007fae247d975e R08: 0000000000000000 R09: 0000000000000000 [ 76.382293][ T4859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.390257][ T4859] R13: 0000000000000000 R14: 00007fae2491dfa0 R15: 00007ffcace0a098 [ 76.398240][ T4859] [ 76.401483][ T4859] Kernel Offset: disabled [ 76.405970][ T4859] Rebooting in 86400 seconds..