last executing test programs: 11.093985346s ago: executing program 0 (id=215): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x9, @empty, 0x6}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b0009008000", 0x2c}], 0x1) syz_pidfd_open(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) setrlimit(0xf, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) gettid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xb, &(0x7f0000000380)={0x7, 0x7fffffffffffffff}, &(0x7f00000003c0)) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@mcast2, @empty, @dev, 0x0, 0x0, 0x0, 0x400, 0xfffffffffffffffd, 0x80600087, r5}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000300)) 9.616088798s ago: executing program 4 (id=220): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x3, 0x800000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) writev(r2, &(0x7f0000004900), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$alg(0x26, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESOCT=r5, @ANYRESDEC=r5], 0x68}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000002280)={0x90000004}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) syz_open_dev$mouse(&(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0xfea, &(0x7f0000000780)={0x0, 0xe317, 0x1000, 0xfffffffe}, 0x0, 0x0) write$char_usb(r8, &(0x7f0000000040)="e2", 0x918) 9.313068732s ago: executing program 2 (id=221): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffff7fffe, 0x20840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0x4c010) syz_usb_connect(0x1, 0x4f, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x40) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0xf0, 0x6c, 0x0, 0x0, 0x0, 0x1d0, 0x258, 0x258, 0x1d0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0xfd}, [0xff], [0xffffff00], 'wlan1\x00', 'veth1\x00', {}, {0xff}, 0x3b, 0x0, 0x7}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xa, 0x6, 0x10, '\x00', {0xe12}}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x4, 0x3}, {0xffff, 0x0, 0x3}, 0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x354) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000936000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x1) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 6.09465466s ago: executing program 0 (id=222): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000140)={0xb45, 0x1, 0x7fffffff, 0xbf0e, 0xc, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0xfffffffe, 0xafb}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0xff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x6a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 5.546933708s ago: executing program 2 (id=224): r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) 5.071221395s ago: executing program 4 (id=225): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$poke(0x4, r3, &(0x7f00000000c0), 0x7ff) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x34, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x34}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x4}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="780000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300"], 0x78}}, 0x0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r8, 0x11, 0x1, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r8, &(0x7f0000005d40)=[{{&(0x7f0000000600)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="10000000000000000000c0"], 0x10}}], 0x1, 0x400c0) sendfile(r8, r7, 0x0, 0x20000023893) socket$inet_smc(0x2b, 0x1, 0x0) 5.066719155s ago: executing program 2 (id=226): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x11a8, 0x11a8, 0x11a8, 0xffffffff, 0xffffffff, 0x1390, 0x1390, 0x1390, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 4.904312768s ago: executing program 2 (id=227): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000dd4ecc33d4ae0a235b7f329b0e96144e3ff293750a0d03fd968f962874ee9855b08db619a0fb9b11006c31677e7431846901bae1687612c8b3"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) r7 = creat(0x0, 0x19d) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8d9b33fb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xa8) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000000000027a0f000000ff00000000000000001000007be40000000000"]) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRESHEX=r7, @ANYRES64], &(0x7f0000000300)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 4.820408699s ago: executing program 0 (id=228): r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000bc0)=@multiplanar_mmap={0x8, 0xa, 0x4, 0xfc403e1edacccf1, 0x6, {0x0, 0x2710}, {0x1, 0x0, 0x0, 0x6, 0x75, 0xf, "54d2a2c0"}, 0x7, 0x1, {0x0}, 0x71b}) 4.135285039s ago: executing program 3 (id=229): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x1d, r0, 0x0, {0x0, 0x0, 0xc8b62d3fe5059a85}}, 0x18, &(0x7f0000000180)={0x0}}, 0xee) 3.845154623s ago: executing program 0 (id=230): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) semget$private(0x0, 0x4000000009, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x5424, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x80002b1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) clock_getres(0x0, 0x0) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) writev(r8, &(0x7f0000001480)=[{0x0}], 0x1) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) pipe(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r11, r10, 0x0, 0x24) r12 = semget(0x2, 0x1, 0x204) semtimedop(r12, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}, {0x2, 0x40, 0x1c00}], 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0x7, 0xfe, 0x401, 0x7, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 3.804401384s ago: executing program 2 (id=231): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006c0000006a0a00ff01180000260000000019e1b6950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x3, &(0x7f0000000180)=""/149, 0x0, 0x2c, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x2c, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) 3.660006546s ago: executing program 3 (id=232): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x28) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e20, @private=0xa010100}], 0x10) 3.552864508s ago: executing program 2 (id=233): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x10000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e22, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="449067578ed280c5b23964d4484fece516316a50fbe8e53ece36cb8145e5af72", 0x20}], 0x1}, 0x2008010) ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, 0x0) r10 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r10, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.475804799s ago: executing program 3 (id=235): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0x7, 0x10}, &(0x7f0000000040)=0x8) 3.270358562s ago: executing program 3 (id=236): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x44, 0x6, 0x450, 0xb0, 0xb0, 0x0, 0x298, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0xff, 'ip6tnl0\x00', 'nr0\x00', {0xff}, {}, 0x11, 0x2, 0x4a}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x7, @ipv4=@private=0xa010100, 0x4e21}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xc, 0x2, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xfc}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x9, @ipv6=@local, 0x4e20}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0xe07, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) 3.057502755s ago: executing program 3 (id=238): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000130001052dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0200010030000000080013"], 0x30}, 0x1, 0x0, 0x0, 0x20000018}, 0xc000) 2.70911414s ago: executing program 3 (id=240): r0 = socket(0x400000000010, 0x3, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='#!.\x00', 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$evdev(&(0x7f00000003c0), 0x742, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x642000, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "bc06bbf4"}]}}, 0x0}, 0x0) syz_open_dev$media(0x0, 0x8, 0x10b482) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)=0x2) r5 = socket$kcm(0x10, 0x2, 0x4) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a010100000000000000000100000073797a30000000000900030073797a320000000090000000060a95bde591f3318fcb5f0b349b1c010400000000000000000100000008000b400000000068000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000300001800c000100626974776973650020000280080003400000000208000140000000140800024000000012040007800900010073797a300000000014000000110001"], 0x104}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/fscaps', 0x42, 0x80) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_pts(r7, 0x141601) read$FUSE(r7, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x900, 0x12) 2.329245826s ago: executing program 1 (id=241): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x7, 0x0, 0x4}) 2.098589559s ago: executing program 1 (id=242): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000dd4ecc33d4ae0a235b7f329b0e96144e3ff293750a0d03fd968f962874ee9855b08db619a0fb9b11006c31677e7431846901bae1687612c8b3"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) r7 = creat(0x0, 0x19d) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8d9b33fb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xa8) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000000000027a0f000000ff00000000000000001000007be40000000000"]) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRESHEX=r7, @ANYRES64], &(0x7f0000000300)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 983.571676ms ago: executing program 1 (id=243): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x1d, r0, 0x0, {0x0, 0x0, 0xc8b62d3fe5059a85}}, 0x18, &(0x7f0000000180)={0x0}}, 0xee) 927.615197ms ago: executing program 4 (id=244): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40004) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4090, 0xffa}, {&(0x7f0000001580)=""/238, 0xee}], 0x2}}], 0x1, 0x2, 0x0) 787.225459ms ago: executing program 4 (id=245): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e20, @private=0xa010100}], 0x10) 777.092829ms ago: executing program 1 (id=246): socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000002300)={[], [{@obj_role={'obj_role', 0x3d, 'fus\x97\xdcC\x1f\x88\xe1\x01HR\xbd\xc20l\x99\x7f\x8d\xf7\xa0'}}, {@audit}, {@appraise_type}, {@seclabel}, {@fsname={'fsname', 0x3d, 'group_id'}}, {@dont_hash}]}, 0x0, 0x75f, &(0x7f0000002380)="$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") connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) 553.244672ms ago: executing program 0 (id=247): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0x7, 0x10}, &(0x7f0000000040)=0x8) 525.031863ms ago: executing program 4 (id=248): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x44, 0x6, 0x450, 0xb0, 0xb0, 0x0, 0x298, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0xff, 'ip6tnl0\x00', 'nr0\x00', {0xff}, {}, 0x11, 0x2, 0x4a}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x7, @ipv4=@private=0xa010100, 0x4e21}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xc, 0x2, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xfc}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x9, @ipv6=@local, 0x4e20}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0xe07, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) 247.511807ms ago: executing program 1 (id=249): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) process_vm_writev(0x0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 104.922999ms ago: executing program 0 (id=250): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x7645, &(0x7f0000000140)={0x0, 0xfac6, 0x800, 0x3, 0x287}, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_of_msg(r4, &(0x7f0000000440)={@icresp={{0x1, 0x4, 0x80, 0x4, 0x5}, 0x0, 0x0, 0x0, 0x800}, @void}, 0x80, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff00"/108]}, 0xe4) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000680)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, 0x0}, 0x108) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x47}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006bc0)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xf}, {0xf}, {0x7, 0xfff3}}}, 0x24}}, 0x24040084) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 104.490979ms ago: executing program 1 (id=251): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) 0s ago: executing program 4 (id=252): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc00000009"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$rxrpc(0x21, 0x2, 0xa) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r3, 0x80000000000c, 0xffffffff, 0x8000000002}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. [ 73.703895][ T4239] cgroup: Unknown subsys name 'net' [ 73.837167][ T4239] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.369400][ T4239] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.512986][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.521362][ T4265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.527415][ T4266] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.529197][ T4265] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.536773][ T4266] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.545621][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.551221][ T4266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.557794][ T4265] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.564601][ T4266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.572953][ T4265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.578258][ T4266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.586046][ T4265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.599081][ T4265] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.606893][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.609117][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.614118][ T4266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.622173][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.629720][ T4265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.636858][ T4268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.649453][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.657114][ T4268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.664525][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.670689][ T4265] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.681317][ T4265] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.694901][ T4269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.702457][ T4265] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.709857][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.717480][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.747464][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.754871][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.212996][ T4252] chnl_net:caif_netlink_parms(): no params data found [ 78.227518][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 78.338267][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 78.355676][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 78.412931][ T4256] chnl_net:caif_netlink_parms(): no params data found [ 78.463856][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.471908][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.480189][ T4252] device bridge_slave_0 entered promiscuous mode [ 78.493484][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.500732][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.508763][ T4249] device bridge_slave_0 entered promiscuous mode [ 78.524894][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.532496][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.541241][ T4252] device bridge_slave_1 entered promiscuous mode [ 78.557936][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.565108][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.573712][ T4249] device bridge_slave_1 entered promiscuous mode [ 78.669958][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.677339][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.685380][ T4250] device bridge_slave_0 entered promiscuous mode [ 78.696251][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.715333][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.724593][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.732744][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.741251][ T4251] device bridge_slave_0 entered promiscuous mode [ 78.757213][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.764809][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.773197][ T4250] device bridge_slave_1 entered promiscuous mode [ 78.782308][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.793087][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.802606][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.809726][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.817828][ T4251] device bridge_slave_1 entered promiscuous mode [ 78.828510][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.835744][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.844078][ T4256] device bridge_slave_0 entered promiscuous mode [ 78.885558][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.892873][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.900963][ T4256] device bridge_slave_1 entered promiscuous mode [ 78.950879][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.963227][ T4252] team0: Port device team_slave_0 added [ 78.973017][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.985004][ T4249] team0: Port device team_slave_0 added [ 78.993367][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.013374][ T4252] team0: Port device team_slave_1 added [ 79.022201][ T4256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.039979][ T4249] team0: Port device team_slave_1 added [ 79.048010][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.073599][ T4256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.136879][ T4250] team0: Port device team_slave_0 added [ 79.146168][ T4251] team0: Port device team_slave_0 added [ 79.161347][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.168428][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.194604][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.217227][ T4250] team0: Port device team_slave_1 added [ 79.225344][ T4251] team0: Port device team_slave_1 added [ 79.240807][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.247923][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.274470][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.286324][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.293645][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.319736][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.333502][ T4256] team0: Port device team_slave_0 added [ 79.358381][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.365473][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.391411][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.408981][ T4256] team0: Port device team_slave_1 added [ 79.422910][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.429991][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.456926][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.494597][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.501827][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.528101][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.539914][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.547367][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.573453][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.603153][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.610140][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.636485][ T4256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.648565][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.655963][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.682239][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.713264][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.720720][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.741639][ T4263] Bluetooth: hci2: command 0x0409 tx timeout [ 79.746854][ T4256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.752910][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 79.783930][ T4252] device hsr_slave_0 entered promiscuous mode [ 79.791326][ T4252] device hsr_slave_1 entered promiscuous mode [ 79.801546][ T4249] device hsr_slave_0 entered promiscuous mode [ 79.808801][ T4249] device hsr_slave_1 entered promiscuous mode [ 79.815509][ T4249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.820712][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 79.829390][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 79.829568][ T4249] Cannot create hsr debugfs directory [ 79.835780][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 79.862295][ T4250] device hsr_slave_0 entered promiscuous mode [ 79.869196][ T4250] device hsr_slave_1 entered promiscuous mode [ 79.876523][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.884573][ T4250] Cannot create hsr debugfs directory [ 79.990253][ T4251] device hsr_slave_0 entered promiscuous mode [ 79.997343][ T4251] device hsr_slave_1 entered promiscuous mode [ 80.004191][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.011920][ T4251] Cannot create hsr debugfs directory [ 80.026285][ T4256] device hsr_slave_0 entered promiscuous mode [ 80.033273][ T4256] device hsr_slave_1 entered promiscuous mode [ 80.040161][ T4256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.048632][ T4256] Cannot create hsr debugfs directory [ 80.388770][ T4250] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.409200][ T4250] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.426702][ T4250] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.440837][ T4250] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.476233][ T4249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.498262][ T4249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.508079][ T4249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.519090][ T4249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.600310][ T4252] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.613084][ T4252] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.644556][ T4252] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.683046][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.690015][ T4252] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.730391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.742736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.752503][ T4256] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.765836][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.791132][ T4256] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.814464][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.831661][ T4256] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.841194][ T4256] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.865897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.875130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.884883][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.892242][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.923291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.931922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.941626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.950073][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.957230][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.966475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.984971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.993434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.014034][ T4251] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.024774][ T4251] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.043774][ T4251] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.056845][ T4251] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.074010][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.087062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.096518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.107127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.116176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.136005][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.146020][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.185292][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.195852][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.205284][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.212730][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.225016][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.234713][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.244655][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.251976][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.263962][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.291735][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.300441][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.309744][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.320009][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.329971][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.342652][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.360169][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.397564][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.413898][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.437414][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.446849][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.455615][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.467381][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.497492][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.509269][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.524802][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.540640][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.559512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.569739][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.577027][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.660950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.668979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.682527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.696741][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.705944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.719962][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.727150][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.735829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.745566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.760733][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.769329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.820915][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 81.822010][ T4257] Bluetooth: hci2: command 0x041b tx timeout [ 81.848745][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.860814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.869782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.901037][ T4257] Bluetooth: hci3: command 0x041b tx timeout [ 81.901057][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 81.907083][ T4257] Bluetooth: hci1: command 0x041b tx timeout [ 81.937085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.957320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.981971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.016719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.044365][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.074742][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.089179][ T4252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.107795][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.116724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.132833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.148487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.191315][ T4256] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.208095][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.251643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.281253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.298719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.320102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.329621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.351830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.371022][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.378174][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.401795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.411431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.430705][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.437879][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.462953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.471231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.498780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.510228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.530309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.539944][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.547179][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.563055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.575210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.586167][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.593364][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.605126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.616564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.629947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.648726][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.659033][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.692122][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.709273][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.721338][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.730211][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.745314][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.756900][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.769528][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.817505][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.826845][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.837809][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.847547][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.857021][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.866458][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.875600][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.883368][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.919008][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.929147][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.938164][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.948801][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.957819][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.966339][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.975783][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.984775][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.993389][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.006825][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.035829][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.053393][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.063178][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.071314][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.078858][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.088667][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.097715][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.106502][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.116111][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.124591][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.151424][ T4250] device veth0_vlan entered promiscuous mode [ 83.184893][ T4252] device veth0_vlan entered promiscuous mode [ 83.211488][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.220139][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.243558][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.270145][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.327451][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.341921][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.364104][ T4250] device veth1_vlan entered promiscuous mode [ 83.394466][ T4252] device veth1_vlan entered promiscuous mode [ 83.403114][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.424812][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.442007][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.456350][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.465790][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.480324][ T4249] device veth0_vlan entered promiscuous mode [ 83.546172][ T4249] device veth1_vlan entered promiscuous mode [ 83.559696][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.577541][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.594668][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.606711][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.623473][ T4250] device veth0_macvtap entered promiscuous mode [ 83.650049][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.674339][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.687231][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.717012][ T4250] device veth1_macvtap entered promiscuous mode [ 83.728165][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.736541][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.749156][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.758473][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.768892][ T4249] device veth0_macvtap entered promiscuous mode [ 83.777152][ T4252] device veth0_macvtap entered promiscuous mode [ 83.805381][ T4252] device veth1_macvtap entered promiscuous mode [ 83.815459][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.825219][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.834225][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.842542][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.849961][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.866046][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.879704][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.897655][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.901026][ T4257] Bluetooth: hci2: command 0x040f tx timeout [ 83.907142][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 83.925274][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.934277][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.948391][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.964930][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.975826][ T4249] device veth1_macvtap entered promiscuous mode [ 83.982349][ T4263] Bluetooth: hci1: command 0x040f tx timeout [ 83.990884][ T4263] Bluetooth: hci0: command 0x040f tx timeout [ 83.992411][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 84.015081][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.042770][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.059460][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.079038][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.086889][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.095559][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.104491][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.115586][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.126089][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.148687][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.161930][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.179254][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.188585][ T4250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.198508][ T4250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.207666][ T4250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.216714][ T4250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.247615][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.261308][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.274613][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.285480][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.297505][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.306327][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.316277][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.327885][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.337123][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.346543][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.355622][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.370022][ T4252] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.378987][ T4252] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.388594][ T4252] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.397979][ T4252] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.428067][ T4251] device veth0_vlan entered promiscuous mode [ 84.436024][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.447121][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.458547][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.470006][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.482166][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.507667][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.517566][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.532762][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.546879][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.569448][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.577760][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.599096][ T4251] device veth1_vlan entered promiscuous mode [ 84.612504][ T4249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.623739][ T4249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.632972][ T4249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.641965][ T4249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.742757][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.752011][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.761449][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.770101][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.819674][ T4256] device veth0_vlan entered promiscuous mode [ 84.827631][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.837975][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.846977][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.856252][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.865656][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.874053][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.899488][ T4251] device veth0_macvtap entered promiscuous mode [ 84.924575][ T4256] device veth1_vlan entered promiscuous mode [ 84.957219][ T4251] device veth1_macvtap entered promiscuous mode [ 85.002821][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.023364][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.041154][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.049190][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.059687][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.069395][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.077983][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.086484][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.096291][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.105507][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.123267][ T4256] device veth0_macvtap entered promiscuous mode [ 85.132418][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.144458][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.156344][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.167102][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.177286][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.189052][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.202482][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.227535][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.240123][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.249294][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.261842][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.271119][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.293214][ T4256] device veth1_macvtap entered promiscuous mode [ 85.314104][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.323905][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.329776][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.333865][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.350391][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.361345][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.371336][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.382246][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.394100][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.403737][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.419725][ T4251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.429963][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.431859][ T4251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.446373][ T4251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.455832][ T4251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.466474][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.477693][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.486796][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.496412][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.519594][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.532378][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.573687][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.593976][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.604492][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.615580][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.625629][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.636873][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.646850][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.658193][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.674579][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.682171][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.698505][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.707455][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.729136][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.746724][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.758695][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.770087][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.780014][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.790685][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.800624][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.811124][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.825464][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.857122][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.879335][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.929139][ T4256] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.938566][ T4256] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.947582][ T4256] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.958100][ T4256] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.981995][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 85.982007][ T4263] Bluetooth: hci4: command 0x0419 tx timeout [ 86.013830][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.048946][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.060904][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 86.060943][ T4257] Bluetooth: hci3: command 0x0419 tx timeout [ 86.066967][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 86.419776][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.466712][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.495958][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.569979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.640694][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.648835][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.685187][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.702268][ T27] cfg80211: failed to load regulatory.db [ 86.732031][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.761572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.778349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.823817][ T4312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.848840][ T4312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.906387][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.219437][ T4357] netlink: 'syz.2.3': attribute type 29 has an invalid length. [ 87.236524][ T4357] netlink: 'syz.2.3': attribute type 29 has an invalid length. [ 88.320130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.328470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 88.336790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 88.345004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 88.353322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 88.361534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 88.369842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 88.378097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 88.387822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 88.404827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.514629][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.525631][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.533292][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.600663][ T4303] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.780620][ T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.844300][ T4303] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 89.950462][ T4303] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 89.970468][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 89.987915][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.020979][ T4303] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 90.045590][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.055704][ T4303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.071508][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.088797][ T14] usb 4-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 90.103968][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.152930][ T14] usb 4-1: config 0 descriptor?? [ 90.370111][ T4404] netlink: 60 bytes leftover after parsing attributes in process `syz.4.23'. [ 90.399095][ T14] usbhid 4-1:0.0: can't add hid device: -71 [ 90.410583][ T14] usbhid: probe of 4-1:0.0 failed with error -71 [ 90.453616][ T14] usb 4-1: USB disconnect, device number 2 [ 90.576550][ T4387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.606025][ T4387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.067669][ T4417] loop0: detected capacity change from 0 to 512 [ 92.187938][ T4417] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 92.244621][ T4417] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.122771][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 94.675581][ T27] usb 3-1: USB disconnect, device number 2 [ 95.482181][ T4480] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.370620][ T4502] mmap: syz.1.58 (4502) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.141331][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.151108][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.158763][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.647804][ T4461] tipc: Subscription rejected, illegal request [ 102.135863][ T4568] Zero length message leads to an empty skb [ 109.638800][ T4643] usb usb8: usbfs: process 4643 (syz.3.103) did not claim interface 0 before use [ 112.105787][ T4674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 112.280554][ T4254] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.490547][ T4254] usb 5-1: Using ep0 maxpacket: 8 [ 112.503725][ T4254] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.514916][ T4254] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.524900][ T4254] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.840078][ T4254] usb 5-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 112.849523][ T4254] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.867096][ T4254] usb 5-1: config 0 descriptor?? [ 113.079841][ T4254] usbhid 5-1:0.0: can't add hid device: -71 [ 113.090639][ T4254] usbhid: probe of 5-1:0.0 failed with error -71 [ 113.118655][ T4254] usb 5-1: USB disconnect, device number 2 [ 114.625540][ T4713] tipc: Started in network mode [ 114.641181][ T4713] tipc: Node identity 7f000001, cluster identity 4711 [ 114.649166][ T4713] tipc: Enabled bearer , priority 10 [ 115.786771][ T4254] tipc: Node number set to 2130706433 [ 116.339789][ T4740] ptrace attach of "./syz-executor exec"[4256] was attempted by "./syz-executor exec"[4740] [ 116.610804][ T4743] syz.3.135 uses obsolete (PF_INET,SOCK_PACKET) [ 119.960765][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.970528][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.978153][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.974579][ T4776] netlink: 'syz.3.147': attribute type 1 has an invalid length. [ 121.390484][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.622193][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.655466][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.670706][ T27] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 121.679905][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.719056][ T27] usb 2-1: config 0 descriptor?? [ 122.169772][ T27] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 122.356607][ T27] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 122.376787][ T27] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0001/input/input8 [ 124.086780][ T27] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 124.109207][ T27] usb 2-1: USB disconnect, device number 2 [ 124.455293][ T4810] fido_id[4810]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 124.712127][ T4826] loop3: detected capacity change from 0 to 512 [ 124.775780][ T4826] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 124.791760][ T4826] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.970994][ T4835] Cannot find del_set index 0 as target [ 127.100650][ T4304] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 127.160712][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 127.581141][ T4304] usb 2-1: Using ep0 maxpacket: 32 [ 127.604930][ T4304] usb 2-1: unable to get BOS descriptor or descriptor too short [ 127.661240][ T4304] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.689512][ T4875] Cannot find del_set index 0 as target [ 127.719890][ T4304] usb 2-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 127.946195][ T4304] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.974887][ T4304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.018937][ T4304] usb 2-1: Product: syz [ 128.031352][ T4304] usb 2-1: Manufacturer: syz [ 128.068433][ T4304] usb 2-1: SerialNumber: syz [ 128.854280][ T4882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.907138][ T4882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.479429][ T4304] usb 2-1: 2:0 : UAC_AS_GENERAL descriptor not found [ 131.478595][ T4304] usb 2-1: USB disconnect, device number 3 [ 132.794254][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.801116][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.030753][ T4304] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 134.441184][ T4304] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 134.551807][ T4304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.677293][ T4304] usb 4-1: Product: syz [ 134.751087][ T4304] usb 4-1: Manufacturer: syz [ 134.795573][ T4304] usb 4-1: SerialNumber: syz [ 135.009311][ T4304] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 135.275274][ T125] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 135.555310][ T27] usb 4-1: USB disconnect, device number 3 [ 136.390537][ T125] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 136.838764][ T125] ath9k_htc: Failed to initialize the device [ 136.846544][ T27] usb 4-1: ath9k_htc: USB layer deinitialized [ 137.420556][ T27] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 137.632561][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.656596][ T27] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.695650][ T27] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 137.705872][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.715559][ T27] usb 5-1: Product: syz [ 137.764063][ T27] usb 5-1: Manufacturer: syz [ 137.782255][ T27] usb 5-1: SerialNumber: syz [ 137.811061][ T27] usb 5-1: config 0 descriptor?? [ 138.321630][ T125] usb 5-1: USB disconnect, device number 3 [ 138.494891][ T4970] Cannot find add_set index 0 as target [ 138.781254][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 140.724248][ T27] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 140.753283][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.781762][ T27] usb 1-1: Product: syz [ 140.807082][ T27] usb 1-1: Manufacturer: syz [ 140.833908][ T27] usb 1-1: SerialNumber: syz [ 140.888434][ T27] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 140.935745][ T4981] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 140.962374][ T4254] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 141.064573][ T4979] x_tables: duplicate underflow at hook 1 [ 141.175014][ T4971] usb 1-1: USB disconnect, device number 2 [ 141.660434][ T4337] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 141.892187][ T4337] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.919422][ T4337] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 142.008598][ T4337] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 142.165689][ T4254] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 142.183853][ T4254] ath9k_htc: Failed to initialize the device [ 142.197487][ T4971] usb 1-1: ath9k_htc: USB layer deinitialized [ 142.212890][ T4337] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 142.244264][ T4337] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 142.298241][ T4337] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.330929][ T4337] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.350472][ T4337] usb 2-1: Product: syz [ 142.367555][ T4337] usb 2-1: Manufacturer: syz [ 142.446260][ T4337] cdc_wdm 2-1:1.0: skipping garbage [ 142.488864][ T4337] cdc_wdm 2-1:1.0: skipping garbage [ 142.660714][ T4337] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 142.666756][ T4337] cdc_wdm 2-1:1.0: Unknown control protocol [ 143.258529][ T27] usb 2-1: USB disconnect, device number 4 [ 144.151030][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 144.366809][ T27] usb 1-1: config 0 has no interfaces? [ 144.404131][ T27] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 144.429021][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.479730][ T27] usb 1-1: Product: syz [ 144.520911][ T27] usb 1-1: Manufacturer: syz [ 144.558680][ T27] usb 1-1: SerialNumber: syz [ 144.616700][ T27] usb 1-1: config 0 descriptor?? [ 145.548061][ T4254] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 147.697583][ T4254] usb 5-1: config 0 has no interfaces? [ 147.784633][ T4254] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 147.820465][ T5040] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 147.843944][ T4254] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.876783][ T4254] usb 5-1: Product: syz [ 147.898529][ T4254] usb 5-1: Manufacturer: syz [ 147.960928][ T4254] usb 5-1: SerialNumber: syz [ 147.975084][ T4254] usb 5-1: config 0 descriptor?? [ 148.034461][ T5040] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 148.047030][ T5040] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.074643][ T5040] usb 3-1: Product: syz [ 148.089164][ T5040] usb 3-1: Manufacturer: syz [ 148.099263][ T5040] usb 3-1: SerialNumber: syz [ 148.153165][ T5040] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 148.275048][ T5040] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 148.522535][ T4971] usb 3-1: USB disconnect, device number 3 [ 148.578244][ T4254] usb 1-1: USB disconnect, device number 3 [ 149.340414][ T5040] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 149.533383][ T5040] ath9k_htc: Failed to initialize the device [ 149.540019][ T4971] usb 3-1: ath9k_htc: USB layer deinitialized [ 149.567715][ T4304] usb 5-1: USB disconnect, device number 4 [ 150.931029][ T5056] netlink: 88 bytes leftover after parsing attributes in process `syz.4.225'. [ 151.131844][ T5021] syz.1.217 (5021): drop_caches: 1 [ 151.567237][ T5082] process 'syz.2.233' launched './file2' with NULL argv: empty string added [ 151.720684][ T5084] use of bytesused == 0 is deprecated and will be removed in the future, [ 151.769142][ T5084] use the actual size instead. [ 151.792661][ T5087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 152.550487][ T5040] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 152.880475][ T5040] usb 4-1: Using ep0 maxpacket: 32 [ 152.892111][ T5040] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.972677][ T5040] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.767780][ T5040] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 153.783271][ T5040] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.807398][ T5040] usb 4-1: config 0 descriptor?? [ 154.465589][ T5040] hid-u2fzero 0003:10C4:8ACF.0002: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.3-1/input0 [ 155.494171][ T5040] hid-u2fzero 0003:10C4:8ACF.0002: U2F Zero LED initialised [ 155.523753][ T5094] netlink: 24 bytes leftover after parsing attributes in process `syz.3.240'. [ 155.538074][ T5040] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 155.549834][ T5040] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 155.558295][ T5040] CPU: 1 PID: 5040 Comm: kworker/1:8 Not tainted 6.1.138-syzkaller #0 [ 155.566482][ T5040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 155.576644][ T5040] Workqueue: usb_hub_wq hub_event [ 155.581694][ T5040] RIP: 0010:u2fzero_rng_read+0x26c/0x6f0 [ 155.587434][ T5040] Code: 03 43 80 3c 2c 00 74 08 48 89 df e8 4e de 2d fa 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 a6 de 2d fa 48 8d 84 24 80 00 00 00 [ 155.607077][ T5040] RSP: 0018:ffffc9000d0fe7c0 EFLAGS: 00010202 [ 155.613158][ T5040] RAX: 0000000000000015 RBX: ffff888052f92030 RCX: dffffc0000000000 [ 155.621137][ T5040] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff88807436a569 [ 155.629125][ T5040] RBP: ffffc9000d0fe970 R08: 0000000000000001 R09: ffff88807436a52e [ 155.637200][ T5040] R10: ffffed100e86d4ad R11: 1ffff1100e86d4a5 R12: 1ffff1100a5f2406 [ 155.645180][ T5040] R13: dffffc0000000000 R14: 1ffff1100a5f2405 R15: 00000000000000a8 [ 155.653189][ T5040] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 155.662132][ T5040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.668803][ T5040] CR2: 000020000009e030 CR3: 000000005bff5000 CR4: 00000000003526e0 [ 155.676781][ T5040] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 155.684938][ T5040] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 155.692908][ T5040] Call Trace: [ 155.696201][ T5040] [ 155.699143][ T5040] ? rcu_is_watching+0x11/0xa0 [ 155.703929][ T5040] ? u2fzero_brightness_set+0x2c0/0x2c0 [ 155.709571][ T5040] ? mutex_lock_nested+0x10/0x10 [ 155.714525][ T5040] ? u2fzero_brightness_set+0x2c0/0x2c0 [ 155.720173][ T5040] add_early_randomness+0x7a/0x150 [ 155.725295][ T5040] hwrng_register+0x398/0x440 [ 155.729984][ T5040] devm_hwrng_register+0x43/0xb0 [ 155.734954][ T5040] u2fzero_probe+0x355/0x470 [ 155.739556][ T5040] ? twinhan_input_mapping+0x2210/0x2210 [ 155.745294][ T5040] hid_device_probe+0x25c/0x350 [ 155.750155][ T5040] ? hid_uevent+0x340/0x340 [ 155.754663][ T5040] really_probe+0x2aa/0xc70 [ 155.759164][ T5040] ? pm_runtime_barrier+0x147/0x1c0 [ 155.764372][ T5040] __driver_probe_device+0x18c/0x330 [ 155.769678][ T5040] driver_probe_device+0x4f/0x420 [ 155.774705][ T5040] __device_attach_driver+0x2c6/0x510 [ 155.780106][ T5040] ? coredump_store+0x90/0x90 [ 155.784791][ T5040] bus_for_each_drv+0x175/0x200 [ 155.789648][ T5040] ? _raw_spin_unlock+0x40/0x40 [ 155.794512][ T5040] ? subsys_find_device_by_id+0x350/0x350 [ 155.800244][ T5040] __device_attach+0x29b/0x460 [ 155.805018][ T5040] ? device_attach+0x20/0x20 [ 155.809612][ T5040] ? __kmem_cache_free+0xb6/0x1f0 [ 155.814641][ T5040] ? kobject_uevent_env+0x35f/0x8a0 [ 155.819842][ T5040] bus_probe_device+0xbc/0x1e0 [ 155.824618][ T5040] ? device_add+0x97c/0xfb0 [ 155.829127][ T5040] device_add+0xa00/0xfb0 [ 155.833466][ T5040] hid_add_device+0x389/0x530 [ 155.838150][ T5040] usbhid_probe+0xc09/0xfe0 [ 155.842664][ T5040] usb_probe_interface+0x5a0/0xaf0 [ 155.847871][ T5040] ? usb_register_driver+0x3d0/0x3d0 [ 155.853159][ T5040] really_probe+0x2aa/0xc70 [ 155.857703][ T5040] ? pm_runtime_barrier+0x147/0x1c0 [ 155.862907][ T5040] __driver_probe_device+0x18c/0x330 [ 155.868208][ T5040] driver_probe_device+0x4f/0x420 [ 155.873284][ T5040] __device_attach_driver+0x2c6/0x510 [ 155.878658][ T5040] ? coredump_store+0x90/0x90 [ 155.883337][ T5040] bus_for_each_drv+0x175/0x200 [ 155.888192][ T5040] ? _raw_spin_unlock+0x40/0x40 [ 155.893053][ T5040] ? subsys_find_device_by_id+0x350/0x350 [ 155.898785][ T5040] __device_attach+0x29b/0x460 [ 155.903564][ T5040] ? device_attach+0x20/0x20 [ 155.908163][ T5040] ? kobject_uevent_env+0x35f/0x8a0 [ 155.913374][ T5040] bus_probe_device+0xbc/0x1e0 [ 155.918155][ T5040] ? device_add+0x97c/0xfb0 [ 155.922673][ T5040] device_add+0xa00/0xfb0 [ 155.927021][ T5040] usb_set_configuration+0x1991/0x1fd0 [ 155.932531][ T5040] usb_generic_driver_probe+0x89/0x150 [ 155.938003][ T5040] usb_probe_device+0x139/0x270 [ 155.942878][ T5040] ? usb_register_device_driver+0x230/0x230 [ 155.948796][ T5040] really_probe+0x2aa/0xc70 [ 155.953300][ T5040] ? pm_runtime_barrier+0x147/0x1c0 [ 155.958521][ T5040] __driver_probe_device+0x18c/0x330 [ 155.963823][ T5040] driver_probe_device+0x4f/0x420 [ 155.968850][ T5040] __device_attach_driver+0x2c6/0x510 [ 155.974220][ T5040] ? coredump_store+0x90/0x90 [ 155.978894][ T5040] bus_for_each_drv+0x175/0x200 [ 155.983793][ T5040] ? _raw_spin_unlock+0x40/0x40 [ 155.988650][ T5040] ? subsys_find_device_by_id+0x350/0x350 [ 155.994406][ T5040] __device_attach+0x29b/0x460 [ 155.999242][ T5040] ? device_attach+0x20/0x20 [ 156.003850][ T5040] ? __kmem_cache_free+0xb6/0x1f0 [ 156.008895][ T5040] ? kobject_uevent_env+0x35f/0x8a0 [ 156.014131][ T5040] bus_probe_device+0xbc/0x1e0 [ 156.018933][ T5040] ? device_add+0x97c/0xfb0 [ 156.023444][ T5040] device_add+0xa00/0xfb0 [ 156.027803][ T5040] usb_new_device+0xd4d/0x1620 [ 156.032581][ T5040] ? lock_chain_count+0x20/0x20 [ 156.037434][ T5040] ? usb_disconnect+0x8a0/0x8a0 [ 156.042294][ T5040] ? _raw_spin_unlock_irq+0x1f/0x40 [ 156.047493][ T5040] ? lockdep_hardirqs_on+0x94/0x140 [ 156.052740][ T5040] hub_event+0x2b02/0x5210 [ 156.057170][ T5040] ? led_work+0x6e0/0x6e0 [ 156.061515][ T5040] ? read_lock_is_recursive+0x10/0x10 [ 156.066890][ T5040] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 156.072790][ T5040] ? _raw_spin_unlock+0x40/0x40 [ 156.077760][ T5040] ? _raw_spin_unlock_irq+0x1f/0x40 [ 156.082964][ T5040] ? process_one_work+0x7a1/0x1160 [ 156.088083][ T5040] process_one_work+0x898/0x1160 [ 156.093049][ T5040] ? worker_detach_from_pool+0x240/0x240 [ 156.098693][ T5040] ? _raw_spin_lock_irq+0xab/0xe0 [ 156.103731][ T5040] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 156.109127][ T5040] ? kthread_data+0x4b/0xc0 [ 156.113647][ T5040] worker_thread+0xaa2/0x1250 [ 156.118380][ T5040] ? __kthread_parkme+0x162/0x1c0 [ 156.123508][ T5040] kthread+0x29d/0x330 [ 156.127599][ T5040] ? worker_clr_flags+0x1a0/0x1a0 [ 156.132633][ T5040] ? kthread_blkcg+0xd0/0xd0 [ 156.137239][ T5040] ret_from_fork+0x1f/0x30 [ 156.141679][ T5040] [ 156.144714][ T5040] Modules linked in: [ 156.194237][ T5095] block device autoloading is deprecated and will be removed. [ 156.205609][ T5095] PM: Image not found (code -5) [ 156.239781][ T5040] ---[ end trace 0000000000000000 ]--- [ 156.245485][ T5040] RIP: 0010:u2fzero_rng_read+0x26c/0x6f0 [ 156.253077][ T5040] Code: 03 43 80 3c 2c 00 74 08 48 89 df e8 4e de 2d fa 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 a6 de 2d fa 48 8d 84 24 80 00 00 00 [ 156.277429][ T5040] RSP: 0018:ffffc9000d0fe7c0 EFLAGS: 00010202 [ 156.283831][ T5040] RAX: 0000000000000015 RBX: ffff888052f92030 RCX: dffffc0000000000 [ 156.303975][ T5040] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff88807436a569 [ 156.314160][ T5040] RBP: ffffc9000d0fe970 R08: 0000000000000001 R09: ffff88807436a52e [ 156.323519][ T5040] R10: ffffed100e86d4ad R11: 1ffff1100e86d4a5 R12: 1ffff1100a5f2406 [ 156.333115][ T5040] R13: dffffc0000000000 R14: 1ffff1100a5f2405 R15: 00000000000000a8 [ 156.342163][ T5040] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 156.353933][ T5040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.361174][ T5040] CR2: 000000110c428486 CR3: 000000005bcb5000 CR4: 00000000003526e0 [ 156.369524][ T5040] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 156.387292][ T5040] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 156.407325][ T5040] Kernel panic - not syncing: Fatal exception [ 156.413724][ T5040] Kernel Offset: disabled [ 156.418052][ T5040] Rebooting in 86400 seconds..