last executing test programs: 6m4.184392016s ago: executing program 2 (id=3): openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$binder(&(0x7f00008d6000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x5) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSSOFTCAR(r3, 0x541a, 0x0) 6m2.975795605s ago: executing program 2 (id=7): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x2, 0x5004) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x1}, &(0x7f00000006c0)=0x8) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000440)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x40, 0x0, @fd_index=0x2, 0xc0f, 0x0, 0x8}) io_uring_enter(r4, 0x133d, 0x0, 0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 6m1.178543608s ago: executing program 2 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2720, 0x0, &(0x7f0000000080)) 5m55.822417458s ago: executing program 2 (id=23): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) 5m53.928566531s ago: executing program 2 (id=25): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 5m51.911657306s ago: executing program 2 (id=30): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x6f5f9e67baf3aa14, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00), 0x0, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 5m36.698894688s ago: executing program 32 (id=30): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x6f5f9e67baf3aa14, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00), 0x0, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 3m7.794183542s ago: executing program 4 (id=417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x75a, 0x8a280) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000480)={0x5, 0x4, 0x47, 0xfffffff4, &(0x7f0000000340)=[{}, {}, {}, {}]}) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, 0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x40014) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) wait4(r0, 0x0, 0x80000000, &(0x7f0000000540)) 3m6.594016831s ago: executing program 4 (id=420): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e3", 0xd}, {&(0x7f0000000f00)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80", 0x63}], 0x3}], 0x1, 0x40800) 3m5.471743139s ago: executing program 4 (id=423): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x1, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 3m5.238284901s ago: executing program 4 (id=427): unshare(0x8040480) r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f0000000640)='/', 0x1, 0xe) copy_file_range(r0, 0x0, r0, &(0x7f0000000080)=0x1e0, 0xff, 0x0) 3m5.087198082s ago: executing program 4 (id=429): syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010104, @dev={0xac, 0x14, 0x14, 0x42}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x6, 0xf989, "cf09"}, @md5sig={0x13, 0x12, "c140c2ba3d3f09659390e45c2a2b031e"}]}}}}}}}, 0x0) 3m4.843742653s ago: executing program 4 (id=430): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80800) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4) socket$kcm(0x10, 0x2, 0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, 0x0, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600000fa0070"], 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001cc0), r3) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d00)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x5, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000290000003e000000000010"], 0x18}}], 0x1, 0x8804) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001080)=ANY=[], 0x1a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, 0x0, 0x0) 2m49.584072466s ago: executing program 33 (id=430): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80800) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4) socket$kcm(0x10, 0x2, 0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, 0x0, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600000fa0070"], 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001cc0), r3) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d00)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x5, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000290000003e000000000010"], 0x18}}], 0x1, 0x8804) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001080)=ANY=[], 0x1a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, 0x0, 0x0) 14.309505304s ago: executing program 1 (id=926): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/60, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x11) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000680)=""/102400, 0x19000) 12.181760599s ago: executing program 6 (id=931): syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x21408, 0x0, 0x3, 0x0, &(0x7f0000006380)) listen(0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) sched_setscheduler(0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\/:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) 11.583779103s ago: executing program 3 (id=933): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext2\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}]}, 0x1, 0x559, &(0x7f0000000100)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = openat$mice(0xffffffffffffff9c, &(0x7f00000006c0), 0x88000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000700)={@remote, 0x40, 0x2, 0xff, 0x6, 0x0, 0x3}, 0x20) sendmsg$key(r4, &(0x7f0000000740)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x8001, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, &(0x7f0000002700)=0x23, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008401b0000"], 0x30}}, 0x0) 10.003961084s ago: executing program 3 (id=937): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x100000000000000, &(0x7f0000001040)="b2"}) 8.683544872s ago: executing program 3 (id=940): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48) 8.362592184s ago: executing program 0 (id=941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x49f, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0xff, 0x2}, 0x6621350e9d60fd79}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x1, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 8.285440085s ago: executing program 1 (id=942): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="93378e66cf9b48cb59638401fcd1730172853a9fa89527996042ab60ae29f9c1", 0x4e) socket$kcm(0x1e, 0x5, 0x0) socket(0x2, 0x3, 0xff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/85, 0x55}], 0x1}}], 0x1, 0x220, 0x0) 7.46002119s ago: executing program 3 (id=944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) write$binfmt_aout(r8, &(0x7f0000000f40)={{0x107, 0x5, 0xf2, 0x34c, 0x266, 0x5, 0x28d, 0x9}, "b3f4a8ad6783ea22250e8595a9a71367f16e66ebb313da013d96bbdb2d265da8dbb2bab4ba05317ae2f5a13329f435285ea3f7ad59d2153cd2ffb2d6d7287d3ae31342a026a36e8238e95af6c25b4113a969db2d7a130a9cfbb74eda3d8dbcb5432abab88fc827a77a0eedb8aafcc06b4f619814c156f2dd00c35996ce06c4de91fdccb6fe31fcdf05992781a2f29e993ecf5ba5828676d99394475f355924c1b808", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9c2) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000380)={0x1, r9, r7}) 6.891206054s ago: executing program 0 (id=945): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r4 = accept(r3, 0x0, 0x0) sendmsg$SOCK_DESTROY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0xdc}, 0x1, 0x0, 0x0, 0x4a754b7e665668ee}, 0x20004001) recvmmsg$unix(r4, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1}}], 0x1, 0x20c0, 0x0) 6.702746965s ago: executing program 1 (id=946): prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) creat(&(0x7f0000001340)='./file0\x00', 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x34, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) 6.162700189s ago: executing program 1 (id=948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_get$pid(0x1, r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) finit_module(0xffffffffffffffff, &(0x7f0000000080)='-\x00', 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x4000080) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socket(0x25, 0x5, 0x0) io_uring_setup(0x789f, &(0x7f00000001c0)={0x0, 0xba65, 0x40, 0x1, 0x21b}) 6.11562209s ago: executing program 6 (id=949): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setresgid(0xee01, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r4, &(0x7f0000003d40), 0x0, 0x8800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES64=r6, @ANYRESDEC=r3, @ANYRES32=r3, @ANYBLOB="3dfa1352c7ffc5fb0adb3607ce9fcb615c42dbcea72f61f29f6a48818d4c686a3c4593f27615f85d162e9687325d17d92d257775931126"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10, 0xffffffffffffffff}, 0x94) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000009c0)={0x2, 0x0, {&(0x7f00000008c0)=""/199, 0xc7, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f0000000600)=""/13, 0xd, 0x0, 0x3, 0x1}}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200900) 5.579182723s ago: executing program 0 (id=950): socket$unix(0x1, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)={0x18, 0x40, 0x107, 0x70bd2b, 0x1, {0x1, 0x7c}, [@nested={0x4, 0x1c2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 4.912967687s ago: executing program 1 (id=952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r1}, 0x18) r2 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0xc576, 0x400, 0xa, 0xffffff}, 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x207fff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.604120229s ago: executing program 1 (id=953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000000)={0x19980330}, 0x0) ioctl$TIOCGSOFTCAR(r5, 0x4b46, &(0x7f0000000140)) 4.5209653s ago: executing program 6 (id=954): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 3.402252268s ago: executing program 6 (id=955): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext2\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}]}, 0x1, 0x559, &(0x7f0000000100)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = openat$mice(0xffffffffffffff9c, 0x0, 0x88000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000700)={@remote, 0x40, 0x2, 0xff, 0x6, 0x0, 0x3}, 0x20) sendmsg$key(r4, &(0x7f0000000740)={0x500, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x8001, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 3.372978517s ago: executing program 5 (id=956): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="93378e66cf9b48cb59638401fcd1730172853a9fa89527996042ab60ae29f9c1", 0x4e) socket$kcm(0x1e, 0x5, 0x0) socket(0x2, 0x3, 0xff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/85, 0x55}], 0x1}}], 0x1, 0x220, 0x0) 3.04972528s ago: executing program 0 (id=957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_get$pid(0x1, r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r4, &(0x7f0000000080)='-\x00', 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x4000080) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socket(0x25, 0x5, 0x0) io_uring_setup(0x789f, &(0x7f00000001c0)={0x0, 0xba65, 0x40, 0x1, 0x21b}) 1.887050158s ago: executing program 5 (id=958): syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x21408, 0x0, 0x3, 0x0, &(0x7f0000006380)) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) sched_setscheduler(0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, 0x0, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) close(0x3) mount(0x0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)='ceph\x00', 0x0, &(0x7f0000000500)='acl') r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) 1.860211858s ago: executing program 0 (id=959): prctl$PR_MCE_KILL(0x35, 0x1, 0x8) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) creat(&(0x7f0000001340)='./file0\x00', 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x34, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) 1.5761269s ago: executing program 6 (id=960): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x1a7, 0x4003}, 0x8, 0xd7f, 0x0, 0x0, 0x1ff, 0x4000000000, 0x2, 0xb}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409}, 0x8) 718.556965ms ago: executing program 5 (id=961): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) 713.476205ms ago: executing program 6 (id=962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_get$pid(0x1, r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) finit_module(0xffffffffffffffff, &(0x7f0000000080)='-\x00', 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x4000080) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socket(0x25, 0x5, 0x0) io_uring_setup(0x789f, &(0x7f00000001c0)={0x0, 0xba65, 0x40, 0x1, 0x21b}) 708.296356ms ago: executing program 3 (id=963): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r1}, 0x18) r2 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0xc576, 0x400, 0xa, 0xffffff}, 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x207fff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 562.785636ms ago: executing program 0 (id=964): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setresgid(0xee01, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r4, &(0x7f0000003d40), 0x0, 0x8800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES64=r6, @ANYRESDEC=r3, @ANYRES32=r3, @ANYBLOB="3dfa1352c7ffc5fb0adb3607ce9fcb615c42dbcea72f61f29f6a48818d4c686a3c4593f27615f85d162e9687325d17d92d257775931126"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10, 0xffffffffffffffff}, 0x94) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000009c0)={0x2, 0x0, {&(0x7f00000008c0)=""/199, 0xc7, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f0000000600)=""/13, 0xd, 0x0, 0x3, 0x1}}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200900) 275.578338ms ago: executing program 3 (id=965): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7fc) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xc}, {0x7, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x1}, {0x4, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 274.905478ms ago: executing program 5 (id=975): preadv(0xffffffffffffffff, 0x0, 0x0, 0x800000000000009, 0x0) r0 = semget(0x0, 0x1, 0x281) semctl$IPC_RMID(r0, 0x0, 0x0) semop(r0, 0x0, 0x0) 177.916799ms ago: executing program 5 (id=966): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r0, 0x0) 0s ago: executing program 5 (id=967): syz_emit_ethernet(0x3a, &(0x7f0000000140)={@broadcast, @remote, @val, {@ipv4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.109' (ED25519) to the list of known hosts. [ 59.885225][ T4171] cgroup: Unknown subsys name 'net' [ 60.050474][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.699766][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.638749][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 63.754582][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 63.776937][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 63.854506][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 63.874085][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 63.897540][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.904793][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.913003][ T4188] device bridge_slave_0 entered promiscuous mode [ 63.941174][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.948349][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.956834][ T4191] device bridge_slave_0 entered promiscuous mode [ 63.964774][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.972031][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.979937][ T4188] device bridge_slave_1 entered promiscuous mode [ 64.002143][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.009246][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.018474][ T4191] device bridge_slave_1 entered promiscuous mode [ 64.090433][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.101767][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.115875][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.125154][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.133152][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.141359][ T4181] device bridge_slave_0 entered promiscuous mode [ 64.154425][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.174326][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.181593][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.189409][ T4181] device bridge_slave_1 entered promiscuous mode [ 64.256151][ T4188] team0: Port device team_slave_0 added [ 64.264673][ T4188] team0: Port device team_slave_1 added [ 64.276813][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.284290][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.292465][ T4183] device bridge_slave_0 entered promiscuous mode [ 64.302352][ T4191] team0: Port device team_slave_0 added [ 64.308398][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.315751][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.323800][ T4183] device bridge_slave_1 entered promiscuous mode [ 64.330937][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.338022][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.346211][ T4190] device bridge_slave_0 entered promiscuous mode [ 64.370465][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.380685][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.387653][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.413910][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.427556][ T4191] team0: Port device team_slave_1 added [ 64.441958][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.449160][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.457767][ T4190] device bridge_slave_1 entered promiscuous mode [ 64.466427][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.476246][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.483610][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.509813][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.570396][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.603988][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.611140][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.637215][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.650751][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.660293][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.667524][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.693569][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.706653][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.717946][ T4181] team0: Port device team_slave_0 added [ 64.727968][ T4188] device hsr_slave_0 entered promiscuous mode [ 64.735535][ T4188] device hsr_slave_1 entered promiscuous mode [ 64.761406][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.773215][ T4181] team0: Port device team_slave_1 added [ 64.822910][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.829983][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.856875][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.893870][ T4183] team0: Port device team_slave_0 added [ 64.903288][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.910429][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.937010][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.951059][ T4191] device hsr_slave_0 entered promiscuous mode [ 64.958000][ T4191] device hsr_slave_1 entered promiscuous mode [ 64.965229][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.973215][ T4191] Cannot create hsr debugfs directory [ 64.981240][ T4190] team0: Port device team_slave_0 added [ 64.988637][ T4183] team0: Port device team_slave_1 added [ 65.025620][ T4190] team0: Port device team_slave_1 added [ 65.057661][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.064774][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.091125][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.114733][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.121771][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.148227][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.175500][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.182975][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.209007][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.224012][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.231045][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.257056][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.284833][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 65.304182][ T4181] device hsr_slave_0 entered promiscuous mode [ 65.312066][ T4181] device hsr_slave_1 entered promiscuous mode [ 65.318853][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.326901][ T4181] Cannot create hsr debugfs directory [ 65.361038][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 65.361094][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 65.373513][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 65.377340][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 65.402766][ T4183] device hsr_slave_0 entered promiscuous mode [ 65.409678][ T4183] device hsr_slave_1 entered promiscuous mode [ 65.416965][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.424813][ T4183] Cannot create hsr debugfs directory [ 65.480454][ T4190] device hsr_slave_0 entered promiscuous mode [ 65.487448][ T4190] device hsr_slave_1 entered promiscuous mode [ 65.494121][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.502082][ T4190] Cannot create hsr debugfs directory [ 65.747160][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.768256][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.778794][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.794263][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.823174][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.834912][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.859823][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.869459][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.953139][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.977380][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.987628][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.997325][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.049519][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.077338][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.087832][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.110275][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.118777][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.128417][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.137643][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.148335][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.162613][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.190970][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.201873][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.212731][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.220048][ T4221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.249028][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.258819][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.268265][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.277190][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.286779][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.295568][ T4221] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.302907][ T4221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.311908][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.325277][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.335941][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.351516][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.364921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.378647][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.389344][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.418885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.432331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.441388][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.448586][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.458083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.467309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.477047][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.484270][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.492487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.501450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.540277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.550233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.563957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.574321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.583048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.593333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.604576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.613994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.644629][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.654691][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.664428][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.691413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.700106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.710393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.719881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.743028][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.762818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.772936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.797500][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.814657][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.827480][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.836818][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.847137][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.856566][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.864576][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.875699][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.893891][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.905550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.915431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.949655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.962875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.972864][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.979964][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.989114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.999760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.009547][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.016791][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.031669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.041755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.050318][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.057488][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.067558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.081623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.092905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.102009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.110414][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.117525][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.135942][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.160411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.173156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.192355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.226066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.243803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.262276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.271671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.280414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.290279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.304065][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.313480][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.327664][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.343094][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.351276][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.359039][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.367631][ T4245] Bluetooth: hci0: command 0x041b tx timeout [ 67.368115][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.383681][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.393902][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.403032][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.411997][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.419056][ T4262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.426878][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.436579][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.445294][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 67.446919][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.451509][ T4229] Bluetooth: hci3: command 0x041b tx timeout [ 67.465912][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 67.472303][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 67.477657][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.486925][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.494050][ T4262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.507104][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.515566][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.524823][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.562056][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.572738][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.591839][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.599468][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.607404][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.615649][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.623768][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.632944][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.643300][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.653029][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.662064][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.670932][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.680274][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.692681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.703162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.714247][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.740237][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.752155][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.783351][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.799333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.808273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.820468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.829846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.851639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.865780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.875889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.885012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.897861][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.939879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.951877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.021722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.032337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.067496][ T4191] device veth0_vlan entered promiscuous mode [ 68.102399][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.116456][ T4188] device veth0_vlan entered promiscuous mode [ 68.133914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.149158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.158297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.179456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.190193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.201122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.216092][ T4191] device veth1_vlan entered promiscuous mode [ 68.236103][ T4188] device veth1_vlan entered promiscuous mode [ 68.245946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.254763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.263979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.274617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.283581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.295495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.306822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.315493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.349124][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.361491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.372701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.382264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.389763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.414720][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.440098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.455971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.467601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.477219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.489040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.499983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.516626][ T4188] device veth0_macvtap entered promiscuous mode [ 68.526849][ T4191] device veth0_macvtap entered promiscuous mode [ 68.549494][ T4188] device veth1_macvtap entered promiscuous mode [ 68.563782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.573367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.581909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.590122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.598871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.610255][ T4191] device veth1_macvtap entered promiscuous mode [ 68.642497][ T4183] device veth0_vlan entered promiscuous mode [ 68.649558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.658896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.667779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.676090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.685230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.698311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.707519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.729385][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.741152][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.754465][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.766288][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.777757][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.787344][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.796485][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.808429][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.822541][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.834350][ T4181] device veth0_vlan entered promiscuous mode [ 68.845177][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.856665][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.868108][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.883981][ T4183] device veth1_vlan entered promiscuous mode [ 68.892686][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.901988][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.911069][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.919306][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.928124][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.937652][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.946698][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.956435][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.972972][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.982685][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.991712][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.000431][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.019719][ T4181] device veth1_vlan entered promiscuous mode [ 69.048150][ T4190] device veth0_vlan entered promiscuous mode [ 69.059832][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.069027][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.081476][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.090210][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.101876][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.109964][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.118874][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.129239][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.138093][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.153574][ T4190] device veth1_vlan entered promiscuous mode [ 69.199006][ T4181] device veth0_macvtap entered promiscuous mode [ 69.227658][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.241803][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.249973][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.260063][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.271393][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.280208][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.289987][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.299083][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.312417][ T4181] device veth1_macvtap entered promiscuous mode [ 69.333127][ T4183] device veth0_macvtap entered promiscuous mode [ 69.375519][ T4183] device veth1_macvtap entered promiscuous mode [ 69.385733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.394315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.404048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.412592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.421828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.441423][ T4245] Bluetooth: hci0: command 0x040f tx timeout [ 69.448602][ T4190] device veth0_macvtap entered promiscuous mode [ 69.456754][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.468083][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.478601][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.489400][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.501738][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.521891][ T4245] Bluetooth: hci2: command 0x040f tx timeout [ 69.524265][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 69.536261][ T4245] Bluetooth: hci3: command 0x040f tx timeout [ 69.542587][ T4245] Bluetooth: hci4: command 0x040f tx timeout [ 69.552613][ T4190] device veth1_macvtap entered promiscuous mode [ 69.559666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.568257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.577428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.586292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.600187][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.613114][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.623299][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.634097][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.645673][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.654774][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.663283][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.676129][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.692555][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.703023][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.713760][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.724469][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.735777][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.747087][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.761299][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.769554][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.778772][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.788071][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.798350][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.808291][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.817327][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.826303][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.835872][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.859661][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.871888][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.882218][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.893809][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.903967][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.914716][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.927036][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.937818][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.949071][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.958321][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.967467][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.978862][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.989802][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.999958][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.013565][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.023627][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.034209][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.046206][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.065260][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.076244][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.086913][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.098082][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.108269][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.119134][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.129707][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.140455][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.154044][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.171001][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.180895][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.191789][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.202012][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.212780][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.222052][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.231823][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.243090][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.264885][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.274542][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.283694][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.292650][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.310967][ T4262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.319014][ T4262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.356378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.374080][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.390104][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.426567][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.438156][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.459633][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.491905][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.577186][ T4262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.586206][ T4262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.596447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.624765][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.654260][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.676368][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.749371][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.759189][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.781357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.888188][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.897366][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.907432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.365808][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.375354][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.705370][ T4244] Bluetooth: hci0: command 0x0419 tx timeout [ 71.711896][ T4244] Bluetooth: hci4: command 0x0419 tx timeout [ 71.718203][ T4244] Bluetooth: hci3: command 0x0419 tx timeout [ 71.724664][ T4244] Bluetooth: hci2: command 0x0419 tx timeout [ 71.754649][ T4244] Bluetooth: hci1: command 0x0419 tx timeout [ 71.818710][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.827695][ T4221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.877242][ T4221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.916220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.970676][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.989596][ T4185] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 71.999511][ T4185] CPU: 1 PID: 4185 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 72.007093][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 72.017177][ T4185] Workqueue: hci4 hci_rx_work [ 72.021925][ T4185] Call Trace: [ 72.025239][ T4185] [ 72.028194][ T4185] dump_stack_lvl+0x168/0x230 [ 72.032993][ T4185] ? show_regs_print_info+0x20/0x20 [ 72.038224][ T4185] ? load_image+0x3b0/0x3b0 [ 72.042772][ T4185] sysfs_create_dir_ns+0x252/0x280 [ 72.047923][ T4185] ? __lock_acquire+0x7c60/0x7c60 [ 72.052974][ T4185] ? sysfs_warn_dup+0xa0/0xa0 [ 72.057674][ T4185] ? le_conn_complete_evt+0xcbc/0x1590 [ 72.063228][ T4185] ? hci_event_packet+0xe05/0x12f0 [ 72.068552][ T4185] ? process_one_work+0x863/0x1000 [ 72.073699][ T4185] ? do_raw_spin_unlock+0x11d/0x230 [ 72.078981][ T4185] kobject_add_internal+0x662/0xd00 [ 72.084315][ T4185] kobject_add+0x152/0x210 [ 72.088769][ T4185] ? kobject_init+0x1d0/0x1d0 [ 72.093507][ T4185] ? klist_children_get+0x50/0x50 [ 72.098579][ T4185] ? get_device_parent+0x121/0x3f0 [ 72.103731][ T4185] device_add+0x483/0xfb0 [ 72.108157][ T4185] hci_conn_add_sysfs+0xd1/0x1e0 [ 72.113143][ T4185] le_conn_complete_evt+0xcbc/0x1590 [ 72.118482][ T4185] ? cs_le_create_conn+0x5e0/0x5e0 [ 72.123643][ T4185] ? __mutex_trylock_common+0x14f/0x250 [ 72.129244][ T4185] hci_le_meta_evt+0x289/0x3b80 [ 72.134133][ T4185] ? hci_event_packet+0x36d/0x12f0 [ 72.139292][ T4185] ? hci_event_packet+0x2e2/0x12f0 [ 72.144467][ T4185] ? __lock_acquire+0x7c60/0x7c60 [ 72.149541][ T4185] ? hci_remote_host_features_evt+0x280/0x280 [ 72.155638][ T4185] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 72.161307][ T4185] ? mark_lock+0x94/0x320 [ 72.165680][ T4185] ? mutex_unlock+0x10/0x10 [ 72.170221][ T4185] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 72.176239][ T4185] ? lock_chain_count+0x20/0x20 [ 72.181210][ T4185] ? __rwlock_init+0x140/0x140 [ 72.186006][ T4185] hci_event_packet+0xe05/0x12f0 [ 72.190991][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 72.196223][ T4185] ? rcu_lock_release+0x20/0x20 [ 72.201113][ T4185] ? hci_send_to_monitor+0x9c/0x4a0 [ 72.206336][ T4185] hci_rx_work+0x255/0xa10 [ 72.210797][ T4185] process_one_work+0x863/0x1000 [ 72.215774][ T4185] ? worker_detach_from_pool+0x240/0x240 [ 72.221431][ T4185] ? lockdep_hardirqs_off+0x70/0x100 [ 72.226755][ T4185] ? _raw_spin_lock_irq+0xab/0xe0 [ 72.231814][ T4185] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 72.237222][ T4185] ? wq_worker_running+0x97/0x170 [ 72.242394][ T4185] worker_thread+0xaa8/0x12a0 [ 72.247136][ T4185] kthread+0x436/0x520 [ 72.251230][ T4185] ? rcu_lock_release+0x20/0x20 [ 72.256101][ T4185] ? kthread_blkcg+0xd0/0xd0 [ 72.260721][ T4185] ret_from_fork+0x1f/0x30 [ 72.265200][ T4185] [ 72.315920][ T4185] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 72.330962][ T4185] Bluetooth: hci4: failed to register connection device [ 72.344983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.019473][ T4327] fuse: Bad value for 'fd' [ 75.122432][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 75.132467][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 75.141569][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.150987][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.160749][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.169837][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.183415][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.193961][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.251034][ T4331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 75.607197][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 75.616203][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 76.016893][ T4349] ptrace attach of "./syz-executor exec"[4191] was attempted by ""[4349] [ 77.143697][ T4360] syz.0.17 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 77.431139][ T4367] ubi31: attaching mtd0 [ 78.017488][ T4367] ubi31: scanning is finished [ 78.388302][ T4367] ubi31: empty MTD device detected [ 78.640818][ T4253] Bluetooth: hci4: command 0x0406 tx timeout [ 79.020696][ T4237] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.947194][ T4367] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 79.955023][ T4367] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 79.965197][ T4367] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 79.973070][ T4367] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 80.914641][ T4237] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 80.940879][ T4237] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.942958][ T4367] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 80.987424][ T4237] usb 4-1: config 0 has no interface number 0 [ 81.118808][ T4367] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 81.132101][ T4367] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4280630625 [ 81.168900][ T4237] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 255, changing to 11 [ 81.188119][ T4237] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid maxpacket 59391, setting to 1024 [ 81.199989][ T4237] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.221586][ T4367] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 81.237998][ T4386] ubi31: background thread "ubi_bgt31d" started, PID 4386 [ 81.286269][ T4396] device bridge0 entered promiscuous mode [ 81.293034][ T4396] device macsec1 entered promiscuous mode [ 81.301181][ T4396] bridge0: port 3(macsec1) entered blocking state [ 81.307917][ T4396] bridge0: port 3(macsec1) entered disabled state [ 81.351917][ T4396] device bridge0 left promiscuous mode [ 81.370776][ T4237] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 81.383137][ T4237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.392688][ T4237] usb 4-1: Product: syz [ 81.397069][ T4237] usb 4-1: Manufacturer: syz [ 81.401890][ T4237] usb 4-1: SerialNumber: syz [ 81.413862][ T4237] usb 4-1: config 0 descriptor?? [ 81.582622][ T4374] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.698437][ T4237] usb 4-1: can't set config #0, error -71 [ 82.426630][ T4237] usb 4-1: USB disconnect, device number 2 [ 85.637387][ T4437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 86.723626][ T1346] cfg80211: failed to load regulatory.db [ 87.959313][ T4456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.40'. [ 87.971625][ T4456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.40'. [ 88.938300][ T4464] vivid-000: disconnect [ 89.322261][ T4455] vivid-000: reconnect [ 89.766850][ T4469] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 89.773838][ T4469] PKCS7: Only support pkcs7_signedData type [ 94.569600][ T4504] Can't find ip_set type h [ 95.829295][ T4517] netlink: 'syz.1.57': attribute type 1 has an invalid length. [ 97.293439][ T4531] vivid-000: disconnect [ 97.969105][ T4524] vivid-000: reconnect [ 99.894459][ T4539] chnl_net:caif_netlink_parms(): no params data found [ 100.149205][ T4552] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.640921][ T4253] Bluetooth: hci5: command 0x0409 tx timeout [ 100.993856][ T4539] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.030855][ T4539] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.072031][ T4539] device bridge_slave_0 entered promiscuous mode [ 101.263214][ T4566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 101.386803][ T4539] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.398974][ T4539] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.407475][ T4539] device bridge_slave_1 entered promiscuous mode [ 101.677095][ T4539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.523110][ T4539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.810307][ T4335] Bluetooth: hci5: command 0x041b tx timeout [ 103.405383][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.474738][ T4539] team0: Port device team_slave_0 added [ 103.515461][ T4539] team0: Port device team_slave_1 added [ 103.554577][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.701180][ T4539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.721920][ T4539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.801405][ T4601] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 104.807920][ T4601] PKCS7: Only support pkcs7_signedData type [ 104.880639][ T4335] Bluetooth: hci5: command 0x040f tx timeout [ 105.148538][ T4539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.344564][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.411520][ T4539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.418721][ T4539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.486514][ T4539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.613880][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.664514][ T4539] device hsr_slave_0 entered promiscuous mode [ 105.693695][ T4539] device hsr_slave_1 entered promiscuous mode [ 105.708224][ T4539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.715992][ T4539] Cannot create hsr debugfs directory [ 107.098963][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 109.228946][ T4539] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.248990][ T4539] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.287681][ T4539] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.361326][ T4539] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.689663][ T4657] vivid-000: disconnect [ 110.710193][ T4644] vivid-000: reconnect [ 111.157793][ T4665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.90'. [ 111.244179][ T4539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.314537][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.326375][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.391119][ T4539] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.533862][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.551906][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.570340][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.577510][ T4299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.678472][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.528254][ T4690] Zero length message leads to an empty skb [ 114.285848][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.310684][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.351489][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.358652][ T4334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.367236][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.703560][ T4699] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 114.710114][ T4699] PKCS7: Only support pkcs7_signedData type [ 114.723228][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.937119][ T4701] vivid-000: disconnect [ 115.459686][ T4697] vivid-000: reconnect [ 115.623312][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.107325][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.370800][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.389351][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.421557][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.440966][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.459810][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.566326][ T4539] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.680753][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.747249][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.775551][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.830000][ T4721] netlink: 'syz.4.106': attribute type 1 has an invalid length. [ 118.121674][ T4721] device bond1 entered promiscuous mode [ 118.148371][ T4721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.072302][ T4724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.079355][ T4724] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 119.253050][ T4724] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 119.287003][ T4724] bond1: (slave gre1): making interface the new active one [ 119.298697][ T4724] device gre1 entered promiscuous mode [ 119.309960][ T4724] bond1: (slave gre1): Enslaving as an active interface with an up link [ 119.328583][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 119.350324][ T9] device hsr_slave_0 left promiscuous mode [ 119.363800][ T9] device hsr_slave_1 left promiscuous mode [ 119.539058][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.571137][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.639966][ T4746] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 119.646494][ T4746] PKCS7: Only support pkcs7_signedData type [ 120.716527][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.457518][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.494123][ T9] device bridge_slave_1 left promiscuous mode [ 121.522138][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.581642][ T9] device bridge_slave_0 left promiscuous mode [ 121.608399][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.873839][ T4763] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 121.880423][ T4763] PKCS7: Only support pkcs7_signedData type [ 122.147652][ T9] device veth1_macvtap left promiscuous mode [ 122.195859][ T9] device veth0_macvtap left promiscuous mode [ 122.202112][ T9] device veth1_vlan left promiscuous mode [ 122.208229][ T9] device veth0_vlan left promiscuous mode [ 124.939347][ T9] team0 (unregistering): Port device team_slave_1 removed [ 124.971124][ T9] team0 (unregistering): Port device team_slave_0 removed [ 125.335160][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.396420][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.611717][ T9] bond0 (unregistering): Released all slaves [ 127.058045][ T4801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.122'. [ 127.153735][ T4781] netlink: 'syz.3.119': attribute type 1 has an invalid length. [ 127.164791][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.123'. [ 127.403764][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.421995][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.477952][ T4539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.670496][ C0] sched: RT throttling activated [ 130.368918][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.393165][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.481078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.500113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.552512][ T4539] device veth0_vlan entered promiscuous mode [ 130.561343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.600022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.646767][ T4539] device veth1_vlan entered promiscuous mode [ 130.768955][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 130.791624][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 130.837452][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.877335][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.914755][ T4539] device veth0_macvtap entered promiscuous mode [ 130.952511][ T4539] device veth1_macvtap entered promiscuous mode [ 131.034689][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.154703][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.201188][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.303744][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.355168][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.456611][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.516357][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.608209][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.740955][ T4539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.812154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 131.835634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.976904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.173366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.531272][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.610017][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.683170][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.814435][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.820860][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.900660][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.933499][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.076678][ T4858] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 133.083362][ T4858] PKCS7: Only support pkcs7_signedData type [ 133.880722][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.122824][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.279086][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.569153][ T4539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.865480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.313941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.467190][ T4539] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.711077][ T4539] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.750192][ T4539] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.130928][ T4872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 136.177441][ T4539] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.974468][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.043472][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.056276][ T4593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.077698][ T4593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.099829][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 138.309615][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 138.468457][ T4897] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 138.475000][ T4897] PKCS7: Only support pkcs7_signedData type [ 138.711929][ T4899] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 138.718753][ T4899] PKCS7: Only support pkcs7_signedData type [ 139.567240][ T4912] vivid-000: disconnect [ 140.020060][ T4903] vivid-000: reconnect [ 141.628089][ T4939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.149'. [ 143.812246][ T4960] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 143.819033][ T4960] PKCS7: Only support pkcs7_signedData type [ 144.333955][ T4962] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 144.340433][ T4962] PKCS7: Only support pkcs7_signedData type [ 147.825440][ T4989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.164'. [ 149.143294][ T5003] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 149.149816][ T5003] PKCS7: Only support pkcs7_signedData type [ 150.517935][ T5015] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 150.524776][ T5015] PKCS7: Only support pkcs7_signedData type [ 153.793583][ T5057] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 153.800374][ T5057] PKCS7: Only support pkcs7_signedData type [ 154.278621][ T5059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 155.673907][ T5069] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 155.680382][ T5069] PKCS7: Only support pkcs7_signedData type [ 158.804458][ T5114] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 158.811137][ T5114] PKCS7: Only support pkcs7_signedData type [ 159.839823][ T5126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.195'. [ 159.904948][ T5125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.196'. [ 160.468500][ T5129] capability: warning: `syz.5.197' uses 32-bit capabilities (legacy support in use) [ 164.072174][ T5186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.208'. [ 164.300489][ T5188] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 164.306972][ T5188] PKCS7: Only support pkcs7_signedData type [ 164.941134][ T5196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'. [ 165.967209][ T5220] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 165.973912][ T5220] PKCS7: Only support pkcs7_signedData type [ 169.041614][ T5256] netlink: 12 bytes leftover after parsing attributes in process `syz.5.222'. [ 170.123897][ T5269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'. [ 171.252408][ T5291] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 171.258962][ T5291] PKCS7: Only support pkcs7_signedData type [ 172.157280][ T5303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.234'. [ 173.061894][ T5313] vivid-000: disconnect [ 173.731432][ T5306] vivid-000: reconnect [ 174.649679][ T5333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 175.510523][ T5350] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 175.526334][ T5350] PKCS7: Only support pkcs7_signedData type [ 177.175211][ T5372] vivid-000: disconnect [ 177.426750][ T5359] vivid-000: reconnect [ 178.915333][ T5392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'. [ 179.992210][ T5400] netlink: 16 bytes leftover after parsing attributes in process `syz.5.257'. [ 182.008141][ T5432] vivid-000: disconnect [ 182.637948][ T5422] vivid-000: reconnect [ 183.808989][ T5447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'. [ 184.877381][ T5452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.267'. [ 186.127689][ T4315] Bluetooth: hci4: command 0x0406 tx timeout [ 186.133860][ T4315] Bluetooth: hci0: command 0x0406 tx timeout [ 186.141143][ T4315] Bluetooth: hci1: command 0x0406 tx timeout [ 186.147249][ T4315] Bluetooth: hci3: command 0x0406 tx timeout [ 186.991677][ T5490] vivid-000: disconnect [ 187.532993][ T5482] vivid-000: reconnect [ 189.199053][ T5510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.277'. [ 191.448687][ T5527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 194.117284][ T5556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.290'. [ 194.262081][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.273823][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.403271][ T5583] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 196.409778][ T5583] PKCS7: Only support pkcs7_signedData type [ 199.045579][ T5608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 203.795631][ T5657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 206.584125][ T5681] sctp: failed to load transform for md5: -2 [ 207.006524][ T5698] process 'syz.1.324' launched '/dev/fd/4' with NULL argv: empty string added [ 207.145096][ T5702] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 207.151680][ T5702] PKCS7: Only support pkcs7_signedData type [ 209.567837][ T5715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.327'. [ 216.816536][ T5776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 220.988832][ T5815] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 220.995411][ T5815] PKCS7: Only support pkcs7_signedData type [ 222.054774][ T4230] Bluetooth: hci5: command 0x0406 tx timeout [ 225.570274][ T5872] vivid-000: disconnect [ 226.574043][ T5865] vivid-000: reconnect [ 230.280797][ T4315] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 230.537415][ T5938] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 230.544180][ T5938] PKCS7: Only support pkcs7_signedData type [ 231.582235][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 231.748322][ T4315] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 231.928343][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.267358][ T4315] usb 5-1: config 0 descriptor?? [ 232.311488][ T5914] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 233.015111][ T5962] vivid-000: disconnect [ 233.647931][ T5956] vivid-000: reconnect [ 234.011223][ T4315] usbhid 5-1:0.0: can't add hid device: -71 [ 234.018364][ T4315] usbhid: probe of 5-1:0.0 failed with error -71 [ 234.631528][ T4315] usb 5-1: USB disconnect, device number 2 [ 235.873819][ T5989] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 235.880311][ T5989] PKCS7: Only support pkcs7_signedData type [ 239.290644][ T4315] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 239.354787][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.399'. [ 239.530620][ T4315] usb 4-1: Using ep0 maxpacket: 16 [ 239.661201][ T4315] usb 4-1: config 0 has no interfaces? [ 239.821152][ T4315] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 239.998430][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 240.027305][ T4315] usb 4-1: Product: syz [ 240.034525][ T4315] usb 4-1: Manufacturer: syz [ 240.049390][ T4315] usb 4-1: SerialNumber: syz [ 240.058513][ T4315] usb 4-1: config 0 descriptor?? [ 241.593008][ T1346] usb 4-1: USB disconnect, device number 3 [ 242.845860][ T6052] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 242.943708][ T6056] ptrace attach of "./syz-executor exec"[4181] was attempted by ""[6056] [ 246.710601][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.414'. [ 249.386785][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.423'. [ 249.524802][ T26] audit: type=1326 audit(1762254872.367:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4579976c9 code=0x7ffc0000 [ 249.601267][ T26] audit: type=1326 audit(1762254872.387:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fb4579976c9 code=0x7ffc0000 [ 249.623404][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.652013][ T26] audit: type=1326 audit(1762254872.387:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4579976c9 code=0x7ffc0000 [ 249.674163][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.682681][ T26] audit: type=1326 audit(1762254872.387:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4579976c9 code=0x7ffc0000 [ 249.704814][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.016493][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 250.220823][ T7] usb 6-1: device descriptor read/64, error -71 [ 250.500613][ T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 250.970564][ T7] usb 6-1: device descriptor read/64, error -71 [ 251.928461][ T7] usb usb6-port1: attempt power cycle [ 252.621971][ T6146] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready [ 252.665984][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready [ 255.914409][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.920864][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.287753][ T6190] ptrace attach of "./syz-executor exec"[4191] was attempted by ""[6190] [ 258.403145][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.440061][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.461670][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.865980][ T6212] netlink: 36 bytes leftover after parsing attributes in process `syz.5.456'. [ 262.459414][ T6249] binder: 6243:6249 ioctl c0306201 200000000580 returned -14 [ 263.650131][ T6259] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 263.657176][ T6259] PKCS7: Only support pkcs7_signedData type [ 264.833944][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.469'. [ 265.570507][ T1323] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 265.990670][ T1323] usb 4-1: unable to get BOS descriptor or descriptor too short [ 266.071117][ T1323] usb 4-1: config 254 has an invalid interface number: 81 but max is 0 [ 266.081276][ T1323] usb 4-1: config 254 has no interface number 0 [ 266.087584][ T1323] usb 4-1: config 254 interface 81 has no altsetting 0 [ 266.189094][ T4426] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.289700][ T1323] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=ce.85 [ 266.306424][ T1323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.369803][ T1323] usb 4-1: Product: syz [ 266.406395][ T1323] usb 4-1: Manufacturer: syz [ 266.427607][ T1323] usb 4-1: SerialNumber: syz [ 266.507697][ T4426] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.590847][ T6273] chnl_net:caif_netlink_parms(): no params data found [ 266.669673][ T4426] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.784952][ T1323] xr_serial 4-1:254.81: skipping garbage [ 266.814805][ T1323] usb 4-1: USB disconnect, device number 4 [ 267.062741][ T4426] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.151390][ T6290] binder: 6283:6290 ioctl c0306201 200000000580 returned -14 [ 267.354938][ T6291] netlink: 88 bytes leftover after parsing attributes in process `syz.1.479'. [ 267.935861][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 268.202376][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.251305][ T6273] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.327936][ T6273] device bridge_slave_0 entered promiscuous mode [ 268.346808][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.364659][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.5.480'. [ 268.412922][ T6304] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 268.419314][ T6304] PKCS7: Only support pkcs7_signedData type [ 268.735049][ T6273] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.747353][ T6273] device bridge_slave_1 entered promiscuous mode [ 268.891706][ T6273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.937673][ T6273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.961344][ T6301] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 269.390908][ T6314] ptrace attach of "./syz-executor exec"[4539] was attempted by ""[6314] [ 269.801839][ T6273] team0: Port device team_slave_0 added [ 269.837920][ T6273] team0: Port device team_slave_1 added [ 270.110939][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 270.328783][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.522413][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.820597][ T6273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.835415][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.842569][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.899753][ T6273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.160702][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 272.188672][ T6348] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 272.195215][ T6348] PKCS7: Only support pkcs7_signedData type [ 272.234887][ T6273] device hsr_slave_0 entered promiscuous mode [ 272.277141][ T6273] device hsr_slave_1 entered promiscuous mode [ 272.642532][ T6356] netlink: 'syz.3.496': attribute type 1 has an invalid length. [ 272.731888][ T6356] device bond1 entered promiscuous mode [ 272.753286][ T6356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.443688][ T4426] bond1: (slave gre1): Releasing backup interface [ 273.612342][ T4426] device gre1 left promiscuous mode [ 273.835805][ T4426] bond1: Destroying bond [ 273.916353][ T6372] ptrace attach of "./syz-executor exec"[4191] was attempted by ""[6372] [ 274.124007][ T4426] bond1 (unregistering): Released all slaves [ 274.250635][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 274.568117][ T6273] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 274.606533][ T6273] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 274.674304][ T6273] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 274.719599][ T6273] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 274.917161][ T4426] device hsr_slave_0 left promiscuous mode [ 274.958667][ T4426] device hsr_slave_1 left promiscuous mode [ 274.979252][ T4426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.012185][ T4426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.037291][ T4426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.170615][ T4426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.377648][ T4426] device bridge_slave_1 left promiscuous mode [ 275.388731][ T4426] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.516871][ T4426] device bridge_slave_0 left promiscuous mode [ 275.608350][ T4426] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.170670][ T4426] device veth1_macvtap left promiscuous mode [ 276.176745][ T4426] device veth0_macvtap left promiscuous mode [ 276.379612][ T4426] device veth1_vlan left promiscuous mode [ 276.453285][ T6409] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 276.459742][ T6409] PKCS7: Only support pkcs7_signedData type [ 276.741945][ T4426] device veth0_vlan left promiscuous mode [ 278.767732][ T4426] team0 (unregistering): Port device team_slave_1 removed [ 278.803899][ T4426] team0 (unregistering): Port device team_slave_0 removed [ 278.839869][ T4426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.943661][ T4426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.451678][ T4426] bond0 (unregistering): Released all slaves [ 280.074507][ T6442] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 280.081124][ T6442] PKCS7: Only support pkcs7_signedData type [ 280.289414][ T6273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.422451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.434586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.558160][ T6273] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.575443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 280.626259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.746892][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.754153][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.003231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.183027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 281.732378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.741237][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.748365][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.760808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 282.151352][ T6273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 282.198107][ T6273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.261333][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.281134][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 282.323580][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 282.337370][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 282.351798][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 282.377975][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 282.607807][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 282.767558][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 282.931681][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.014786][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 283.061486][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.091537][ T6468] netlink: 'syz.5.524': attribute type 1 has an invalid length. [ 283.377458][ T26] audit: type=1326 audit(1762254906.177:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.1.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebcfe36c9 code=0x7fc00000 [ 283.995704][ T26] audit: type=1326 audit(1762254906.837:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.1.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ebcfe36c9 code=0x7fc00000 [ 284.380540][ T26] audit: type=1326 audit(1762254906.867:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.1.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebcfe36c9 code=0x7fc00000 [ 284.498055][ T6273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.587128][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.613295][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.684404][ T6507] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 284.690948][ T6507] PKCS7: Only support pkcs7_signedData type [ 284.722742][ T26] audit: type=1326 audit(1762254906.867:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.1.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebcfe36c9 code=0x7fc00000 [ 284.780507][ T26] audit: type=1326 audit(1762254906.867:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.1.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebcfe36c9 code=0x7fc00000 [ 285.036822][ T26] audit: type=1326 audit(1762254906.867:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.1.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebcfe36c9 code=0x7fc00000 [ 285.473793][ T26] audit: type=1326 audit(1762254906.867:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.1.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebcfe36c9 code=0x7fc00000 [ 285.926927][ T26] audit: type=1326 audit(1762254906.867:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.1.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebcfe36c9 code=0x7fc00000 [ 286.123826][ T6528] netlink: 'syz.5.535': attribute type 1 has an invalid length. [ 286.170846][ T26] audit: type=1326 audit(1762254906.867:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.1.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebcfe36c9 code=0x7fc00000 [ 286.449845][ T26] audit: type=1326 audit(1762254906.867:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.1.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebcfe36c9 code=0x7fc00000 [ 286.728394][ T6528] device bond1 entered promiscuous mode [ 286.741124][ T6528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.792350][ T6531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.808751][ T6531] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 286.844110][ T6531] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 286.957328][ T6531] bond1: (slave gre1): making interface the new active one [ 286.964940][ T6531] device gre1 entered promiscuous mode [ 287.022751][ T6531] bond1: (slave gre1): Enslaving as an active interface with an up link [ 287.840733][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 290.148237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 290.168036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.237726][ T6273] device veth0_vlan entered promiscuous mode [ 290.273103][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 290.300018][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.330328][ T6273] device veth1_vlan entered promiscuous mode [ 290.404533][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.421968][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.430238][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 290.474791][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 290.493617][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 290.507730][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.608394][ T6273] device veth0_macvtap entered promiscuous mode [ 290.644065][ T6581] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 290.650723][ T6581] PKCS7: Only support pkcs7_signedData type [ 290.652809][ T6273] device veth1_macvtap entered promiscuous mode [ 290.815310][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.870630][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.925195][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.980513][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.036921][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.091851][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.145389][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.198829][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.299154][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.310293][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 291.321628][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 291.329866][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 291.361716][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 291.413262][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.441754][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.460479][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.490548][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.627034][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.684751][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.695428][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.706889][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.719580][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.733174][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 291.795846][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.843079][ T6273] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.852420][ T6273] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.863655][ T6273] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.873881][ T6273] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.955483][ T6594] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 291.962125][ T6594] PKCS7: Only support pkcs7_signedData type [ 293.471213][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.479407][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.501439][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.639488][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.677826][ T6609] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 293.692315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 293.766914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 295.087190][ T6639] ptrace attach of "./syz-executor exec"[4191] was attempted by ""[6639] [ 295.676993][ T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 295.980626][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 296.411537][ T23] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 296.592993][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.602068][ T23] usb 7-1: Product: syz [ 296.606357][ T23] usb 7-1: Manufacturer: syz [ 296.611332][ T23] usb 7-1: SerialNumber: syz [ 296.617812][ T23] usb 7-1: config 0 descriptor?? [ 296.906504][ T6667] capability: warning: `syz.1.562' uses deprecated v2 capabilities in a way that may be insecure [ 296.945270][ T23] snd-usb-6fire 7-1:0.0: unable to receive device firmware state. [ 296.959497][ T23] snd-usb-6fire: probe of 7-1:0.0 failed with error -71 [ 297.295981][ T23] usb 7-1: USB disconnect, device number 2 [ 297.725798][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 298.020495][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 298.155106][ T7] usb 4-1: config 0 has no interfaces? [ 298.340844][ T7] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 298.351168][ T6690] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 298.357538][ T6690] PKCS7: Only support pkcs7_signedData type [ 298.586612][ T7] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 298.793335][ T7] usb 4-1: Product: syz [ 298.840442][ T7] usb 4-1: Manufacturer: syz [ 298.845104][ T7] usb 4-1: SerialNumber: syz [ 298.958092][ T7] usb 4-1: config 0 descriptor?? [ 299.110171][ T7] usb 4-1: can't set config #0, error -71 [ 299.136898][ T7] usb 4-1: USB disconnect, device number 5 [ 301.292525][ T1323] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 301.929596][ T6746] netlink: 'syz.0.584': attribute type 1 has an invalid length. [ 301.973735][ T1323] usb 4-1: Using ep0 maxpacket: 16 [ 302.001724][ T6746] device bond1 entered promiscuous mode [ 302.020089][ T6746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 302.087870][ T6751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 302.090865][ T1323] usb 4-1: config 0 has no interfaces? [ 302.191211][ T6751] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 302.250792][ T1323] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 302.261996][ T6751] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 302.276199][ T1323] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 302.330497][ T1323] usb 4-1: Product: syz [ 302.334724][ T1323] usb 4-1: Manufacturer: syz [ 302.349669][ T6751] bond1: (slave gre1): making interface the new active one [ 302.360560][ T6751] device gre1 entered promiscuous mode [ 302.368039][ T1323] usb 4-1: SerialNumber: syz [ 302.389421][ T1323] usb 4-1: config 0 descriptor?? [ 302.410337][ T6751] bond1: (slave gre1): Enslaving as an active interface with an up link [ 302.490734][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 302.876147][ T1323] usb 4-1: USB disconnect, device number 6 [ 308.178649][ T6819] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 308.185221][ T6819] PKCS7: Only support pkcs7_signedData type [ 310.707856][ T6846] netlink: 'syz.5.604': attribute type 1 has an invalid length. [ 310.764523][ T6846] device bond2 entered promiscuous mode [ 310.786179][ T6846] 8021q: adding VLAN 0 to HW filter on device bond2 [ 314.134291][ T6891] netlink: 'syz.6.615': attribute type 1 has an invalid length. [ 317.130987][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.137385][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.561783][ T6963] netlink: 12 bytes leftover after parsing attributes in process `syz.6.629'. [ 322.281637][ T6975] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 322.288034][ T6975] PKCS7: Only support pkcs7_signedData type [ 325.449499][ T23] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 326.472906][ T7022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.641'. [ 327.078987][ T7028] ptrace attach of "./syz-executor exec"[4539] was attempted by ""[7028] [ 334.164109][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz.6.653'. [ 334.848348][ T4315] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 335.200537][ T4315] usb 1-1: Using ep0 maxpacket: 16 [ 335.336063][ T7114] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 335.344148][ T7114] PKCS7: Only support pkcs7_signedData type [ 335.354205][ T4315] usb 1-1: config 0 has no interfaces? [ 336.840061][ T4315] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 336.946976][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 337.226083][ T4315] usb 1-1: Product: syz [ 337.360268][ T4315] usb 1-1: Manufacturer: syz [ 337.464514][ T4315] usb 1-1: SerialNumber: syz [ 337.742226][ T4315] usb 1-1: config 0 descriptor?? [ 337.770600][ T4315] usb 1-1: can't set config #0, error -71 [ 337.790615][ T4315] usb 1-1: USB disconnect, device number 2 [ 339.203743][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.667'. [ 339.882819][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 348.590684][ T7279] netlink: 'syz.0.694': attribute type 1 has an invalid length. [ 348.688666][ T7279] device bond2 entered promiscuous mode [ 348.718479][ T7279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 348.783187][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.6.693'. [ 352.266193][ T7330] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 352.272941][ T7330] PKCS7: Only support pkcs7_signedData type [ 352.422285][ T7338] netlink: 'syz.5.709': attribute type 1 has an invalid length. [ 352.603767][ T7338] device bond3 entered promiscuous mode [ 352.657946][ T7338] 8021q: adding VLAN 0 to HW filter on device bond3 [ 352.740634][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.708'. [ 354.361365][ T7358] netlink: 12 bytes leftover after parsing attributes in process `syz.5.711'. [ 356.947699][ T7385] netlink: 'syz.5.717': attribute type 21 has an invalid length. [ 356.955596][ T7385] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.717'. [ 357.829423][ T7390] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 357.835906][ T7390] PKCS7: Only support pkcs7_signedData type [ 358.128886][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.720'. [ 358.485789][ T7402] netlink: 'syz.5.722': attribute type 1 has an invalid length. [ 358.785947][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.723'. [ 359.116067][ T7402] device bond4 entered promiscuous mode [ 359.155415][ T7402] 8021q: adding VLAN 0 to HW filter on device bond4 [ 360.705301][ T7440] netlink: 'syz.3.730': attribute type 21 has an invalid length. [ 360.713211][ T7440] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.730'. [ 361.561267][ T7449] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 361.567662][ T7449] PKCS7: Only support pkcs7_signedData type [ 362.017040][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.734'. [ 362.286486][ T7461] netlink: 'syz.6.736': attribute type 1 has an invalid length. [ 362.514397][ T7461] device bond1 entered promiscuous mode [ 362.522226][ T7461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 362.589755][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.735'. [ 363.937352][ T7466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.993441][ T7466] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 364.028687][ T7466] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 364.065937][ T7466] bond1: (slave gre1): making interface the new active one [ 364.123405][ T7466] device gre1 entered promiscuous mode [ 364.134301][ T7466] bond1: (slave gre1): Enslaving as an active interface with an up link [ 364.163536][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 364.678502][ T7500] netlink: 'syz.6.744': attribute type 21 has an invalid length. [ 364.678642][ T7500] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.744'. [ 365.997145][ T7516] netlink: 16 bytes leftover after parsing attributes in process `syz.5.747'. [ 367.120563][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.6.750'. [ 367.400624][ T7520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.749'. [ 368.885190][ T7540] netlink: 'syz.5.755': attribute type 1 has an invalid length. [ 369.069339][ T7540] device bond5 entered promiscuous mode [ 369.111110][ T7540] 8021q: adding VLAN 0 to HW filter on device bond5 [ 369.220600][ T7549] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 369.227901][ T7549] PKCS7: Only support pkcs7_signedData type [ 370.316189][ T7559] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 370.558452][ T7563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.761'. [ 370.926111][ T7559] pim6reg1: linktype set to 774 [ 371.011115][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.6.763'. [ 373.413084][ T7584] netlink: 'syz.6.769': attribute type 1 has an invalid length. [ 374.013634][ T7597] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 374.020228][ T7597] PKCS7: Only support pkcs7_signedData type [ 374.112370][ T7584] device bond2 entered promiscuous mode [ 374.277044][ T7584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 374.742439][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.774'. [ 375.314657][ T7613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.775'. [ 378.436111][ T7645] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 378.443220][ T7645] PKCS7: Only support pkcs7_signedData type [ 378.565948][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.573280][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.407129][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.788'. [ 381.106548][ T7662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.789'. [ 382.356642][ T7671] device pim6reg1 entered promiscuous mode [ 382.724701][ T7682] netlink: 'syz.1.799': attribute type 1 has an invalid length. [ 382.845696][ T7682] device bond1 entered promiscuous mode [ 382.851810][ T7682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.910341][ T7684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.925341][ T7684] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 382.946444][ T7684] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 382.969544][ T7684] bond1: (slave gre1): making interface the new active one [ 383.013586][ T7684] device gre1 entered promiscuous mode [ 383.059884][ T7684] bond1: (slave gre1): Enslaving as an active interface with an up link [ 383.113908][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 383.491722][ T7690] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 383.498363][ T7690] PKCS7: Only support pkcs7_signedData type [ 384.305624][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'. [ 386.099963][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.806'. [ 386.744539][ T7724] netlink: 'syz.0.811': attribute type 1 has an invalid length. [ 386.992872][ T7724] device bond3 entered promiscuous mode [ 387.033346][ T7724] 8021q: adding VLAN 0 to HW filter on device bond3 [ 387.072707][ T7730] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 387.079238][ T7730] PKCS7: Only support pkcs7_signedData type [ 388.390902][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 391.022055][ T7766] netlink: 12 bytes leftover after parsing attributes in process `syz.6.822'. [ 391.689032][ T4315] Bluetooth: hci2: command 0x0406 tx timeout [ 391.942291][ T7782] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 391.948966][ T7782] PKCS7: Only support pkcs7_signedData type [ 392.975176][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.6.832'. [ 395.113284][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.838'. [ 395.524132][ T7823] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 395.530911][ T7823] PKCS7: Only support pkcs7_signedData type [ 396.171758][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.844'. [ 396.910475][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.5.846'. [ 397.468066][ T7854] netlink: 'syz.6.853': attribute type 1 has an invalid length. [ 397.728795][ T7854] device bond3 entered promiscuous mode [ 397.796965][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.5.852'. [ 398.054103][ T7869] loop1: detected capacity change from 0 to 16 [ 398.385726][ T7854] 8021q: adding VLAN 0 to HW filter on device bond3 [ 399.307895][ T7869] ======================================================= [ 399.307895][ T7869] WARNING: The mand mount option has been deprecated and [ 399.307895][ T7869] and is ignored by this kernel. Remove the mand [ 399.307895][ T7869] option from the mount to silence this warning. [ 399.307895][ T7869] ======================================================= [ 399.384712][ T7869] erofs: (device loop1): mounted with root inode @ nid 36. [ 399.441259][ T7869] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 399.450758][ T7869] erofs: (device loop1): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 399.461038][ T7869] attempt to access beyond end of device [ 399.461038][ T7869] loop1: rw=524288, want=1048592, limit=16 [ 399.489042][ T7869] attempt to access beyond end of device [ 399.489042][ T7869] loop1: rw=0, want=1048592, limit=16 [ 399.670421][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 399.670441][ T26] audit: type=1800 audit(1762255022.347:30): pid=7869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.855" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 401.727636][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'. [ 402.333379][ T7902] syz.6.864 uses obsolete (PF_INET,SOCK_PACKET) [ 403.289042][ T7918] loop5: detected capacity change from 0 to 512 [ 403.493701][ T7918] EXT4-fs (loop5): Ignoring removed bh option [ 403.500487][ T7918] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 403.727769][ T7918] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 403.966940][ T7918] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 404.233911][ T7918] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 404.345323][ T7918] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006] [ 404.356557][ T7918] System zones: 0-2, 18-18, 34-35 [ 404.384233][ T7918] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,bh,barrier,,errors=continue. Quota mode: none. [ 404.496057][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 404.750480][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 404.910625][ T13] usb 4-1: config 0 has no interfaces? [ 405.173068][ T13] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 405.182649][ T13] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 405.196673][ T13] usb 4-1: Product: syz [ 405.201350][ T13] usb 4-1: Manufacturer: syz [ 405.205990][ T13] usb 4-1: SerialNumber: syz [ 405.227425][ T13] usb 4-1: config 0 descriptor?? [ 405.300656][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.6.876'. [ 406.077450][ T5723] usb 4-1: USB disconnect, device number 7 [ 406.127394][ T7959] vivid-000: disconnect [ 406.829018][ T7954] vivid-000: reconnect [ 408.120653][ T7965] loop6: detected capacity change from 0 to 32768 [ 408.188338][ T7965] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.879 (7965) [ 408.420050][ T7965] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 408.510179][ T7965] BTRFS info (device loop6): using free space tree [ 408.558214][ T7965] BTRFS info (device loop6): has skinny extents [ 409.225152][ T8001] loop0: detected capacity change from 0 to 2048 [ 409.336233][ T4195] loop0: p1 < > p3 [ 409.394757][ T4195] loop0: p3 size 54016 extends beyond EOD, truncated [ 409.414496][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'. [ 409.711901][ T8001] loop0: p1 < > p3 [ 409.737289][ T8001] loop0: p3 size 54016 extends beyond EOD, truncated [ 409.757529][ T7965] BTRFS info (device loop6): enabling ssd optimizations [ 410.203484][ T4195] udevd[4195]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 410.227560][ T4173] udevd[4173]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 410.323624][ T4173] udevd[4173]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 410.338237][ T8029] udevd[8029]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 410.397156][ T4173] udevd[4173]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 410.418229][ T8029] udevd[8029]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 410.561920][ T4335] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 411.621595][ T4335] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 411.785457][ T4335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.837533][ T4335] usb 1-1: Product: syz [ 411.892472][ T4335] usb 1-1: Manufacturer: syz [ 411.967170][ T4335] usb 1-1: SerialNumber: syz [ 412.248219][ T4335] usb 1-1: config 0 descriptor?? [ 412.831208][ T4335] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 413.386824][ T8077] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 413.395830][ T8077] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 413.428332][ T8071] loop6: detected capacity change from 0 to 32768 [ 413.555921][ T8071] [ 413.555921][ T8071] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 413.555921][ T8071] [ 413.672660][ T8071] ERROR: (device loop6): diWrite: ixpxd invalid [ 413.672660][ T8071] [ 413.740873][ T8071] ERROR: (device loop6): txCommit: [ 413.740873][ T8071] [ 414.038704][ T6273] [ 414.038704][ T6273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 414.038704][ T6273] [ 414.140840][ T6273] [ 414.140840][ T6273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 414.140840][ T6273] [ 414.358209][ T8098] vivid-000: disconnect [ 414.998457][ T8095] vivid-000: reconnect [ 415.580829][ T4335] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 415.629264][ T4335] usb 1-1: USB disconnect, device number 3 [ 417.272766][ T8128] loop3: detected capacity change from 0 to 512 [ 417.329435][ T8128] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 417.401298][ T8126] loop1: detected capacity change from 0 to 2048 [ 417.423620][ T8128] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.917: iget: bogus i_mode (5) [ 417.537051][ T8126] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 417.588099][ T8128] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.917: couldn't read orphan inode 15 (err -117) [ 417.736352][ T8128] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 417.825981][ T8128] ext2 filesystem being mounted at /179/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.248745][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.5.918'. [ 419.167477][ T8145] vivid-000: disconnect [ 419.869906][ T8141] vivid-000: reconnect [ 419.963493][ T8148] netlink: 'syz.3.920': attribute type 1 has an invalid length. [ 419.981586][ T8146] loop6: detected capacity change from 0 to 2048 [ 420.053397][ T8146] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 420.105512][ T8148] device bond2 entered promiscuous mode [ 420.114906][ T8146] UDF-fs: Scanning with blocksize 512 failed [ 420.147381][ T8148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 420.180511][ T8146] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 420.496011][ T8156] overlayfs: failed to resolve './bus': -2 [ 420.757577][ T8161] ptrace attach of "./syz-executor exec"[4539] was attempted by "./syz-executor exec"[8161] [ 421.577797][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.929'. [ 423.323042][ T8193] loop3: detected capacity change from 0 to 512 [ 423.386894][ T8193] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 423.470143][ T8193] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.933: iget: bogus i_mode (5) [ 423.493054][ T8193] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.933: couldn't read orphan inode 15 (err -117) [ 423.558083][ T8193] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 423.579037][ T8197] netlink: 'syz.0.935': attribute type 1 has an invalid length. [ 423.625870][ T8193] ext2 filesystem being mounted at /185/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.714817][ T8197] device bond4 entered promiscuous mode [ 423.720895][ T8197] 8021q: adding VLAN 0 to HW filter on device bond4 [ 425.912973][ T8217] binder: 8216:8217 ioctl c0306201 200000000500 returned -14 [ 426.280264][ T8219] ptrace attach of "./syz-executor exec"[4183] was attempted by "./syz-executor exec"[8219] [ 428.194478][ T8243] netlink: 'syz.1.946': attribute type 1 has an invalid length. [ 428.339037][ T8243] device bond2 entered promiscuous mode [ 428.375685][ T8243] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.676834][ T8268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.735357][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.786282][ T8268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.822376][ T8268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.481926][ T8284] loop6: detected capacity change from 0 to 512 [ 431.720108][ T8284] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 431.844693][ T8284] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.955: iget: bogus i_mode (5) [ 431.891025][ T8284] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.955: couldn't read orphan inode 15 (err -117) [ 431.968502][ T8284] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 432.003565][ T8284] ext2 filesystem being mounted at /79/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.231606][ T8300] netlink: 'syz.0.959': attribute type 1 has an invalid length. [ 433.386528][ T8304] ceph: No source [ 433.975129][ T8300] device bond5 entered promiscuous mode [ 434.049061][ T8300] 8021q: adding VLAN 0 to HW filter on device bond5 [ 434.670083][ T8319] kvm: vcpu 2044: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 434.728477][ T8326] ------------[ cut here ]------------ [ 434.764764][ T8326] WARNING: CPU: 1 PID: 8326 at arch/x86/kvm/x86.c:10370 kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 434.808181][ T8326] Modules linked in: [ 434.822988][ T8326] CPU: 1 PID: 8326 Comm: syz.3.965 Not tainted syzkaller #0 [ 434.843744][ T8326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 434.875220][ T8326] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 434.905967][ T8326] Code: e8 51 44 ad 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 36 44 ad 00 e9 c8 ed ff ff e8 3c dc 68 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 434.960495][ T8326] RSP: 0018:ffffc9000376fc30 EFLAGS: 00010283 [ 434.974119][ T8326] RAX: ffffffff810eefd4 RBX: ffff88806173c000 RCX: 0000000000080000 [ 435.002894][ T8326] RDX: ffffc9000e1ea000 RSI: 000000000000041e RDI: 000000000000041f [ 435.020565][ T8326] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad33a6 [ 435.029845][ T8326] R10: fffffbfff1ad33a6 R11: 1ffffffff1ad33a5 R12: ffff88802a6d3001 [ 435.048533][ T8326] R13: 1ffff1100c2e781e R14: ffff88806173c0f0 R15: ffff88802a6d3000 [ 435.065203][ T8326] FS: 00007fb455bdd6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 435.086528][ T8326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 435.103990][ T8326] CR2: 000000110c402a62 CR3: 0000000023e3e000 CR4: 00000000003526e0 [ 435.131181][ T8326] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 435.148868][ T8326] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 435.179591][ T8326] Call Trace: [ 435.184108][ T8326] [ 435.195240][ T8326] ? __lock_acquire+0x7c60/0x7c60 [ 435.217351][ T8326] kvm_vcpu_ioctl+0x887/0xb80 [ 435.228998][ T8326] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 435.248669][ T8326] ? bpf_lsm_file_ioctl+0x5/0x10 [ 435.311823][ T8326] ? security_file_ioctl+0x7c/0xa0 [ 435.327713][ T8326] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 435.339344][ T8326] __se_sys_ioctl+0xfa/0x170 [ 435.349518][ T8326] do_syscall_64+0x4c/0xa0 [ 435.354398][ T8326] ? clear_bhb_loop+0x30/0x80 [ 435.359331][ T8326] ? clear_bhb_loop+0x30/0x80 [ 435.369975][ T8326] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 435.378084][ T8326] RIP: 0033:0x7fb4579976c9 [ 435.397705][ T8326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.438382][ T8326] RSP: 002b:00007fb455bdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 435.475220][ T8326] RAX: ffffffffffffffda RBX: 00007fb457bee090 RCX: 00007fb4579976c9 [ 435.491295][ T8326] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 435.499334][ T8326] RBP: 00007fb457a19f91 R08: 0000000000000000 R09: 0000000000000000 [ 435.522256][ T8326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.535279][ T8326] R13: 00007fb457bee128 R14: 00007fb457bee090 R15: 00007fffb056e168 [ 435.544529][ T8326] [ 435.547622][ T8326] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 435.555020][ T8326] CPU: 0 PID: 8326 Comm: syz.3.965 Not tainted syzkaller #0 [ 435.562333][ T8326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 435.572421][ T8326] Call Trace: [ 435.575722][ T8326] [ 435.578675][ T8326] dump_stack_lvl+0x168/0x230 [ 435.583395][ T8326] ? show_regs_print_info+0x20/0x20 [ 435.588632][ T8326] ? load_image+0x3b0/0x3b0 [ 435.593181][ T8326] panic+0x2c9/0x7f0 [ 435.597115][ T8326] ? bpf_jit_dump+0xd0/0xd0 [ 435.601662][ T8326] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 435.607505][ T8326] __warn+0x248/0x2b0 [ 435.611517][ T8326] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 435.617368][ T8326] report_bug+0x1b7/0x2e0 [ 435.621746][ T8326] handle_bug+0x3a/0x70 [ 435.625924][ T8326] exc_invalid_op+0x16/0x40 [ 435.630551][ T8326] asm_exc_invalid_op+0x16/0x20 [ 435.635438][ T8326] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 435.641893][ T8326] Code: e8 51 44 ad 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 36 44 ad 00 e9 c8 ed ff ff e8 3c dc 68 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c [ 435.661531][ T8326] RSP: 0018:ffffc9000376fc30 EFLAGS: 00010283 [ 435.667642][ T8326] RAX: ffffffff810eefd4 RBX: ffff88806173c000 RCX: 0000000000080000 [ 435.675653][ T8326] RDX: ffffc9000e1ea000 RSI: 000000000000041e RDI: 000000000000041f [ 435.683657][ T8326] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad33a6 [ 435.691811][ T8326] R10: fffffbfff1ad33a6 R11: 1ffffffff1ad33a5 R12: ffff88802a6d3001 [ 435.699818][ T8326] R13: 1ffff1100c2e781e R14: ffff88806173c0f0 R15: ffff88802a6d3000 [ 435.707916][ T8326] ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40 [ 435.713868][ T8326] ? __lock_acquire+0x7c60/0x7c60 [ 435.719051][ T8326] kvm_vcpu_ioctl+0x887/0xb80 [ 435.723749][ T8326] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 435.729578][ T8326] ? bpf_lsm_file_ioctl+0x5/0x10 [ 435.734524][ T8326] ? security_file_ioctl+0x7c/0xa0 [ 435.739648][ T8326] ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0 [ 435.745319][ T8326] __se_sys_ioctl+0xfa/0x170 [ 435.749952][ T8326] do_syscall_64+0x4c/0xa0 [ 435.754373][ T8326] ? clear_bhb_loop+0x30/0x80 [ 435.759059][ T8326] ? clear_bhb_loop+0x30/0x80 [ 435.763743][ T8326] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 435.769733][ T8326] RIP: 0033:0x7fb4579976c9 [ 435.774168][ T8326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.793792][ T8326] RSP: 002b:00007fb455bdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 435.802216][ T8326] RAX: ffffffffffffffda RBX: 00007fb457bee090 RCX: 00007fb4579976c9 [ 435.810281][ T8326] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 435.818257][ T8326] RBP: 00007fb457a19f91 R08: 0000000000000000 R09: 0000000000000000 [ 435.826233][ T8326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.834205][ T8326] R13: 00007fb457bee128 R14: 00007fb457bee090 R15: 00007fffb056e168 [ 435.842193][ T8326] [ 435.845515][ T8326] Kernel Offset: disabled [ 435.850056][ T8326] Rebooting in 86400 seconds..