last executing test programs: 7.116979698s ago: executing program 3 (id=182): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2) ioctl$CEC_ADAP_G_PHYS_ADDR(r0, 0x80026101, &(0x7f0000000040)) 6.96126721s ago: executing program 3 (id=183): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="911091000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES8=r1], 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000005, 0x10, r0, 0xdbc94000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r6 = openat$cgroup_ro(r5, &(0x7f0000000480)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 6.030928204s ago: executing program 3 (id=186): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 5.058534157s ago: executing program 3 (id=189): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0xa, {0x2, 0x0, @broadcast}, 'lo\x00'}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) dup3(r5, r6, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r8, &(0x7f0000000080)='./file2\x00', 0x10, 0x1) renameat2(r8, &(0x7f0000000180)='./file1\x00', r8, &(0x7f0000000040)='./file0\x00', 0x5) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r9, &(0x7f00000000c0)='./file1\x00', 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002080)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) close_range(r7, 0xffffffffffffffff, 0x0) 4.332025658s ago: executing program 4 (id=196): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="911091000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES8=r1], 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000005, 0x10, r0, 0xdbc94000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r6 = openat$cgroup_ro(r5, &(0x7f0000000480)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 3.600752129s ago: executing program 1 (id=202): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001a00)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x2, 0x2000, 0x14}, @eth={@broadcast, @multicast, @void, {@mpls_mc={0x8848, {[], @ipv6=@gre_packet={0xe, 0x6, "1ec0c6", 0xf8a, 0x2f, 0x1, @remote, @loopback, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xd8f, 0x3, [], "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"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "94c029f48bc3e9b28e4b6ca6aada3645557bb7022989fcb5050ea66bfe914094acafe9b334f7d2b478471dd677c458e5655f070cf576aa1773831406f887cc0c2fb66f19ef66cf91e79db0617ac45402365d7b6e8ab17c9386e7db06c311b4411c7e52425fb7aa2e79c7b0809f0a3180823e21211246d5cfe8f4d4e8b04863d29af0013209493c36ec98f1e9d0757a5fb6d735c0305f1393c565272ef4a10ff966b5292a20afa08b51a63cb866cf0ed3f9728ba02acb296269a35a0336c280cf296f42bd0f84a0b2cc4daa834d5bb07761b87a2ad9b083594655cd91fd09d9891d40bc40b5"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x8], "017b98813334c2fe2e49130c683f1a59ef9f7e3db291339d791a133718cf39f2fd9c7fe6444f3c259ea83cb12c857387133c5c089605573ad3ee93fdb5cf5e33225c0df4229e39b47feb0cb74feb8b197f0bb38be0c77e0ca990ffbfb51f3eec382f56bafde57ce44d9cc27c412e3b8704f301c0caffc5e9440d7ace563bb8485e74c82c15b66795bc26f7856342dc886c413be219ea44e0b02bf7"}, {0x8, 0x88be, 0x4, {{0x5, 0x1, 0x7, 0x0, 0x1, 0x2, 0x4, 0xff}, 0x1, {0x55}}}, {0x8, 0x22eb, 0x3, {{0x6, 0x2, 0x6, 0x0, 0x1, 0x1, 0x1, 0x67}, 0x2, {0x80000000, 0x0, 0x1, 0x2, 0x1, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "313203568a847c525c1c2c6840e5115630f06220dcf9222756e87911cd4722b39fa5a7f75cc5c33233a82810984769c8cd833f443d"}}}}}}}}}, 0xfce) 3.376540792s ago: executing program 4 (id=203): unshare(0x6020400) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) 3.230317283s ago: executing program 4 (id=204): syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x10, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9, 0x5, 0x3, 0x3, 0xc, 0xc1a7, 0x9d}]}}}}, 0x1d) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a30000000005e000740"], 0x1f4}}, 0x0) 3.109864355s ago: executing program 1 (id=205): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x190) 2.955985087s ago: executing program 4 (id=207): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950"], 0x15) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e0f30fa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f00005a1000/0x4000)=nil, 0x4000}, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0xdb}], 0x1, 0x61, 0x0) 2.79847548s ago: executing program 1 (id=208): openat$kvm(0xffffffffffffff9c, 0x0, 0xc2601, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007740), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x5c, 0xb1, 0xab, 0x20, 0xbfd, 0x126, 0x1f89, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x20, 0x8, 0x2, 0x28, 0xf4, 0xff, 0x4, [], [{{0x9, 0x5, 0x2, 0x2, 0x10, 0x5, 0x3, 0x6}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x80, 0xb1, 0x4}}]}}]}}]}}, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) 2.306424107s ago: executing program 4 (id=209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.234657878s ago: executing program 3 (id=210): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r2}, &(0x7f0000000a40), &(0x7f0000000a80)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 2.017859331s ago: executing program 3 (id=212): r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xcd, 0x2d, 0x27, 0x20, 0x421, 0x420, 0xb6e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x5, 0x0, 0x2, 0x2, 0xff, 0x6}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) 1.814401474s ago: executing program 4 (id=213): r0 = socket(0x400000000010, 0x3, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='#!.\x00', 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$evdev(&(0x7f00000003c0), 0x742, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x642000, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "bc06bbf4"}]}}, 0x0}, 0x0) syz_open_dev$media(0x0, 0x8, 0x10b482) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)=0x2) r5 = socket$kcm(0x10, 0x2, 0x4) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000c5b000/0x3000)=nil) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/fscaps', 0x42, 0x80) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_pts(r7, 0x141601) read$FUSE(r7, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x900, 0x12) 1.780256904s ago: executing program 0 (id=214): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r1 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000140)=0x7, 0x5, 0x5) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x3}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x1, 0x1}, 0x20) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, 0x0) write$FUSE_NOTIFY_RESEND(r6, &(0x7f00000001c0)={0x14}, 0x14) fsopen(&(0x7f0000000480)='selinuxfs\x00', 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, 0x0) write$dsp(r0, &(0x7f0000000100)="94b4a9", 0x3) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.346609681s ago: executing program 2 (id=215): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000280)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x80000000, 0x3a, '#$\xd8.}', 0x3a, '^,.', 0x3a, './file0', 0x3a, [0x4f, 0x50]}, 0x31) 1.288582782s ago: executing program 2 (id=216): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) 1.169072693s ago: executing program 2 (id=217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a30000000005e000740"], 0x1f4}}, 0x0) 1.037385365s ago: executing program 2 (id=218): add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x3, 0xfffffffffffffffc) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0) 884.554377ms ago: executing program 2 (id=219): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x268}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x5, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0xf404, 0x0, 0x0, 0x0) 738.664879ms ago: executing program 0 (id=220): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xfffffffffffffcc9, 0x1000000, 0x0}) 700.10517ms ago: executing program 0 (id=221): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 549.147552ms ago: executing program 0 (id=222): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r2}, &(0x7f0000000a40), &(0x7f0000000a80)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 420.672194ms ago: executing program 0 (id=223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 369.211695ms ago: executing program 1 (id=224): syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb250d6707540288a83e0088641100feff44080021"], 0x0) 226.979487ms ago: executing program 1 (id=225): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 226.296617ms ago: executing program 2 (id=226): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 18.17508ms ago: executing program 0 (id=227): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=228): bind$inet6(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r5, 0x1}, 0x18) writev(0xffffffffffffffff, &(0x7f0000002940)=[{&(0x7f0000002640)}], 0x1) syz_usb_connect(0x5, 0x51, &(0x7f0000000140)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63000000000009050300000000000009050cf2000002060209050f0000004000000905"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000440)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts. syzkaller login: [ 65.536745][ T4158] cgroup: Unknown subsys name 'net' [ 65.644360][ T4158] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.188865][ T4158] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.098864][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 69.189033][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 69.203731][ T4179] chnl_net:caif_netlink_parms(): no params data found [ 69.287834][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 69.315971][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.323604][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.333233][ T4168] device bridge_slave_0 entered promiscuous mode [ 69.346079][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.353327][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.361558][ T4168] device bridge_slave_1 entered promiscuous mode [ 69.438376][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 69.470392][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.487575][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.496882][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.504813][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.514851][ T4169] device bridge_slave_0 entered promiscuous mode [ 69.523245][ T4179] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.530742][ T4179] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.539434][ T4179] device bridge_slave_0 entered promiscuous mode [ 69.578068][ T4168] team0: Port device team_slave_0 added [ 69.584810][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.592635][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.601312][ T4169] device bridge_slave_1 entered promiscuous mode [ 69.608811][ T4179] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.615885][ T4179] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.624190][ T4179] device bridge_slave_1 entered promiscuous mode [ 69.635697][ T4168] team0: Port device team_slave_1 added [ 69.707642][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.714748][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.740949][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.768897][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.780044][ T4179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.789841][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.796959][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.823487][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.835093][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.842516][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.850627][ T4170] device bridge_slave_0 entered promiscuous mode [ 69.865007][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.875860][ T4179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.900073][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.907521][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.915561][ T4170] device bridge_slave_1 entered promiscuous mode [ 69.958809][ T4169] team0: Port device team_slave_0 added [ 69.992294][ T4179] team0: Port device team_slave_0 added [ 70.001437][ T4169] team0: Port device team_slave_1 added [ 70.031235][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.038538][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.046701][ T4171] device bridge_slave_0 entered promiscuous mode [ 70.056110][ T4179] team0: Port device team_slave_1 added [ 70.072426][ T4168] device hsr_slave_0 entered promiscuous mode [ 70.079984][ T4168] device hsr_slave_1 entered promiscuous mode [ 70.088775][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.101374][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.117429][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.124607][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.132912][ T4171] device bridge_slave_1 entered promiscuous mode [ 70.150556][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.157812][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.183840][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.243912][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.251046][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.278384][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.295991][ T4170] team0: Port device team_slave_0 added [ 70.312402][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.319716][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.346514][ T4179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.367302][ T4170] team0: Port device team_slave_1 added [ 70.374807][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.385511][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.392887][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.419288][ T4179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.455356][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.532704][ T4179] device hsr_slave_0 entered promiscuous mode [ 70.540469][ T4179] device hsr_slave_1 entered promiscuous mode [ 70.547352][ T4179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.555230][ T4179] Cannot create hsr debugfs directory [ 70.569714][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.576815][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.603719][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.619802][ T4171] team0: Port device team_slave_0 added [ 70.626778][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.635233][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.663796][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.695486][ T4169] device hsr_slave_0 entered promiscuous mode [ 70.704041][ T4169] device hsr_slave_1 entered promiscuous mode [ 70.711507][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.719279][ T4169] Cannot create hsr debugfs directory [ 70.726693][ T4171] team0: Port device team_slave_1 added [ 70.768073][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 70.773973][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 70.781101][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 70.788020][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 70.795260][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 70.852076][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.859127][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.887837][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.904819][ T4170] device hsr_slave_0 entered promiscuous mode [ 70.912192][ T4170] device hsr_slave_1 entered promiscuous mode [ 70.919486][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.927071][ T4170] Cannot create hsr debugfs directory [ 70.950120][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.958398][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.984773][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.104461][ T4171] device hsr_slave_0 entered promiscuous mode [ 71.111603][ T4171] device hsr_slave_1 entered promiscuous mode [ 71.118647][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.126217][ T4171] Cannot create hsr debugfs directory [ 71.289056][ T4168] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.310048][ T4168] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.321026][ T4168] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.331988][ T4168] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.386240][ T4169] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.399071][ T4169] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.412051][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.418927][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.434530][ T4169] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.472380][ T4169] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.494048][ T4170] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.504863][ T4170] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.529367][ T4170] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.539636][ T4170] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.605697][ T4179] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.617989][ T4179] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.634041][ T4179] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.644104][ T4179] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.660580][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.736048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.746384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.759453][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.780510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.790567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.800688][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.808272][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.818013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.873108][ T4168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.884308][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.902563][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.910237][ T4171] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.920606][ T4171] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.929885][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.939240][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.949123][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.958067][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.966028][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.978198][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.987900][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.998399][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.009109][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.018828][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.030042][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.038710][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.048762][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.059277][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.098311][ T4171] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.110831][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.124192][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.149711][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.158951][ T4171] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.189227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.202715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.226048][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.244336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.258239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.271662][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.304011][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.314670][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.329385][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.337135][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.345636][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.356232][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.365335][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.372840][ T400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.382578][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.413076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.429218][ T4179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.451811][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.462577][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.471566][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.479088][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.489911][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.500138][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.509553][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.516681][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.524700][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.534782][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.548187][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.555916][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.585272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.595681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.611136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.621795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.631498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.640472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.650637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.659817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.671177][ T4179] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.699532][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.715456][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.724841][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.734099][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.746508][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.755533][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.765199][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.772431][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.784047][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.792484][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.801996][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.819789][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.834485][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.843632][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.852162][ T4216] Bluetooth: hci0: command 0x041b tx timeout [ 72.854544][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.865286][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.874311][ T4227] Bluetooth: hci2: command 0x041b tx timeout [ 72.880311][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.880833][ T4227] Bluetooth: hci3: command 0x041b tx timeout [ 72.894448][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.895662][ T4227] Bluetooth: hci4: command 0x041b tx timeout [ 72.909597][ T4227] Bluetooth: hci1: command 0x041b tx timeout [ 72.912802][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.925833][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.942646][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.952372][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.963113][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.971987][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.987062][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.002543][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.031402][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.044091][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.054799][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.063087][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.071910][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.083638][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.094248][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.103520][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.110664][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.120225][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.132074][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.140989][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.150733][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.159776][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.168818][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.178110][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.187782][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.207791][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.216653][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.226272][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.235149][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.244595][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.254959][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.270792][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.297582][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.308293][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.326472][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.333621][ T400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.393925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.408486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.432545][ T4168] device veth0_vlan entered promiscuous mode [ 73.475328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.495550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.508957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.524947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.534353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.544068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.553192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.561424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.569803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.578019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.585901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.604381][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.626696][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.642316][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.673838][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.695053][ T4168] device veth1_vlan entered promiscuous mode [ 73.708344][ T4171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.729157][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.744594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.754717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.763855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.772569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.780887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.802910][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.812873][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.822105][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.841865][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.857589][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.914803][ T4179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.933362][ T4169] device veth0_vlan entered promiscuous mode [ 73.960005][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.969530][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.978322][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.988135][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.997523][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.005612][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.016837][ T4168] device veth0_macvtap entered promiscuous mode [ 74.032995][ T4169] device veth1_vlan entered promiscuous mode [ 74.050688][ T4168] device veth1_macvtap entered promiscuous mode [ 74.105128][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.114332][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.126601][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.148450][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.165855][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.174506][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.184921][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.193856][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.202992][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.230880][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.248449][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.258437][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.274059][ T4179] device veth0_vlan entered promiscuous mode [ 74.287653][ T4168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.296752][ T4168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.309793][ T4168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.319487][ T4168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.338302][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.347740][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.356196][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.365912][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.382985][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.395201][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.403614][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.411670][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.421927][ T4179] device veth1_vlan entered promiscuous mode [ 74.435977][ T4169] device veth0_macvtap entered promiscuous mode [ 74.457213][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.465481][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.474949][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.485814][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.508756][ T4169] device veth1_macvtap entered promiscuous mode [ 74.529573][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.572458][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.581101][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.592131][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.606383][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.632783][ T4170] device veth0_vlan entered promiscuous mode [ 74.642153][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.652805][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.661847][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.672002][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.681015][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.690519][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.704206][ T4179] device veth0_macvtap entered promiscuous mode [ 74.713539][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.725583][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.740112][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.768591][ T4179] device veth1_macvtap entered promiscuous mode [ 74.777371][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.786198][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.796311][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.807672][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.821636][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.833182][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.846413][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.856165][ T4170] device veth1_vlan entered promiscuous mode [ 74.876752][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.886983][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.896904][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.906392][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.915734][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.924851][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.928031][ T4219] Bluetooth: hci2: command 0x040f tx timeout [ 74.934396][ T4172] Bluetooth: hci1: command 0x040f tx timeout [ 74.946014][ T4219] Bluetooth: hci0: command 0x040f tx timeout [ 74.951997][ T4169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.964935][ T4169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.964992][ T4172] Bluetooth: hci4: command 0x040f tx timeout [ 74.975320][ T4169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.981522][ T4172] Bluetooth: hci3: command 0x040f tx timeout [ 74.997990][ T4169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.042185][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.051746][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.067823][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.079587][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.091018][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.103728][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.116459][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.125165][ T4171] device veth0_vlan entered promiscuous mode [ 75.159058][ T400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.170169][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.170652][ T400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.189133][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.200353][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.214033][ T4171] device veth1_vlan entered promiscuous mode [ 75.234275][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.246862][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.259163][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.269933][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.282589][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.297502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.306918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.315986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.325152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.336961][ T4170] device veth0_macvtap entered promiscuous mode [ 75.359565][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.368913][ T4179] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.378751][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.381051][ T4179] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.396817][ T4179] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.405978][ T4179] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.430667][ T4170] device veth1_macvtap entered promiscuous mode [ 75.446634][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.455968][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.464978][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.512034][ T4171] device veth0_macvtap entered promiscuous mode [ 75.544918][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.555536][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.568489][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.592389][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.609169][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.620306][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.631629][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.643629][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.654723][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.666343][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.705866][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.725994][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.749117][ T4171] device veth1_macvtap entered promiscuous mode [ 75.766627][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.779499][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.793228][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.804186][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.815132][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.825936][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.837935][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.850148][ T4170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.859402][ T4170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.868514][ T4170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.877610][ T4170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.893595][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.902206][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.911463][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.934687][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.957427][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.994412][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.009977][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.020351][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.031554][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.041749][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.052887][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.066582][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.078730][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.090415][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.121029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.130243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.138503][ T4172] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.139972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.162015][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.173220][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.184996][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.198050][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.208889][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.219936][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.230444][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.241269][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.252759][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.274786][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.285904][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.289423][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.306735][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.316662][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.329623][ T4171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.339220][ T4171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.349575][ T4171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.358877][ T4171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.375489][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.385211][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.389371][ T4172] usb 2-1: Using ep0 maxpacket: 32 [ 76.420488][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.511205][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.524297][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.544793][ T4172] usb 2-1: config 0 has no interfaces? [ 76.583768][ T4258] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.609135][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.632011][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.651293][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.673623][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.699302][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.703157][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.715618][ T4172] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 76.732287][ T4172] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 76.741541][ T4172] usb 2-1: Product: syz [ 76.745725][ T4172] usb 2-1: Manufacturer: syz [ 76.755487][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.826990][ T4172] usb 2-1: config 0 descriptor?? [ 76.845235][ T400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.885596][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.885717][ T400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.909353][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.925723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.942695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.017407][ T4172] Bluetooth: hci3: command 0x0419 tx timeout [ 77.024435][ T4172] Bluetooth: hci4: command 0x0419 tx timeout [ 77.039358][ T4172] Bluetooth: hci1: command 0x0419 tx timeout [ 77.065288][ T4172] Bluetooth: hci0: command 0x0419 tx timeout [ 77.073491][ T4172] Bluetooth: hci2: command 0x0419 tx timeout [ 77.108501][ T4255] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 77.258508][ T4266] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 77.477332][ T4255] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.590071][ T4255] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.592023][ T4212] usb 2-1: USB disconnect, device number 2 [ 77.622558][ T4255] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.640398][ T4255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.694027][ T4270] device veth1_macvtap left promiscuous mode [ 77.723660][ T4270] device macsec0 entered promiscuous mode [ 77.907821][ T4281] device veth1_macvtap entered promiscuous mode [ 77.931524][ T4281] device macsec0 left promiscuous mode [ 77.949586][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.957545][ T4255] usb 4-1: GET_CAPABILITIES returned 0 [ 77.964011][ T4255] usbtmc 4-1:16.0: can't read capabilities [ 78.173101][ T4212] usb 4-1: USB disconnect, device number 2 [ 78.301408][ T4283] device team0 entered promiscuous mode [ 78.329531][ T4283] device team_slave_0 entered promiscuous mode [ 78.356417][ T4283] device team_slave_1 entered promiscuous mode [ 78.393947][ T4283] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 78.435103][ T4283] device team0 left promiscuous mode [ 78.450813][ T4283] device team_slave_0 left promiscuous mode [ 78.462255][ T4283] device team_slave_1 left promiscuous mode [ 79.570654][ T4301] process 'syz.0.12' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 79.712505][ T4300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10'. [ 79.971642][ T4301] xt_hashlimit: size too large, truncated to 1048576 [ 81.517179][ T4172] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.797188][ T4172] usb 3-1: Using ep0 maxpacket: 32 [ 81.918072][ T4172] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 81.949315][ T4172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.996108][ T4172] usb 3-1: config 0 descriptor?? [ 82.277372][ T4172] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 82.328397][ T4172] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 82.377966][ T4172] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 82.414938][ T4172] usb 3-1: media controller created [ 82.475338][ T4172] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.587295][ T4172] az6027: usb out operation failed. (-71) [ 82.607454][ T4172] az6027: usb out operation failed. (-71) [ 82.613415][ T4172] stb0899_attach: Driver disabled by Kconfig [ 82.641986][ T4172] az6027: no front-end attached [ 82.641986][ T4172] [ 82.707324][ T4172] az6027: usb out operation failed. (-71) [ 82.713462][ T4172] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 82.774000][ T4172] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 82.867491][ T4172] dvb-usb: schedule remote query interval to 400 msecs. [ 82.908348][ T4172] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 82.981505][ T4172] usb 3-1: USB disconnect, device number 2 [ 86.771548][ T1111] cfg80211: failed to load regulatory.db [ 87.282478][ T4172] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 87.358942][ T26] audit: type=1800 audit(1747180596.847:2): pid=4387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.34" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 87.807365][ T4172] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.289962][ T4390] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 88.374209][ T4399] tipc: Failed to remove unknown binding: 66,1,1/0:118571127/118571129 [ 88.397259][ T4399] tipc: Failed to remove unknown binding: 66,1,1/0:118571127/118571129 [ 89.067258][ T4255] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 89.112981][ T4416] tmpfs: Unknown parameter 'fÿ' [ 89.404232][ T4420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 89.488562][ T4255] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.508440][ T4255] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.568625][ T4255] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.587557][ T4255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.877324][ T4255] usb 4-1: GET_CAPABILITIES returned 0 [ 89.883543][ T4255] usbtmc 4-1:16.0: can't read capabilities [ 90.107427][ T23] usb 4-1: USB disconnect, device number 3 [ 90.217356][ T4255] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.471539][ T4216] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 90.647372][ T4255] usb 5-1: config 0 has no interfaces? [ 90.807192][ T23] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 90.833385][ T4255] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 90.847963][ T4255] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 90.869775][ T4255] usb 5-1: Product: syz [ 90.881138][ T4255] usb 5-1: Manufacturer: syz [ 90.894348][ T4255] usb 5-1: SerialNumber: syz [ 90.924345][ T4216] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.942005][ T4255] usb 5-1: config 0 descriptor?? [ 90.961734][ T4216] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 91.017437][ T4172] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.025074][ T4216] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.045541][ T4216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.086431][ T4216] usb 3-1: config 0 descriptor?? [ 91.142999][ T4216] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 91.174376][ T23] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 91.187329][ T23] usb 1-1: config 0 has no interface number 0 [ 91.193686][ T23] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 91.205160][ T23] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 91.216684][ T23] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 91.227848][ T23] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 91.242634][ T23] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 91.255597][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.277196][ T4172] usb 4-1: Using ep0 maxpacket: 32 [ 91.292830][ T23] usb 1-1: config 0 descriptor?? [ 91.303186][ T4446] Zero length message leads to an empty skb [ 91.327921][ T4437] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.336268][ T4437] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.385753][ T23] ldusb 1-1:0.55: Interrupt in endpoint not found [ 91.397304][ T4172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.434613][ T4172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.461899][ T4172] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 91.473497][ T4172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.509747][ T4172] usb 4-1: config 0 descriptor?? [ 91.548554][ T4172] hub 4-1:0.0: USB hub found [ 91.594993][ T23] usb 1-1: USB disconnect, device number 2 [ 91.630466][ T4216] usb 3-1: USB disconnect, device number 4 [ 91.767475][ T4172] hub 4-1:0.0: 1 port detected [ 92.163833][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 92.174937][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 92.207551][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 92.254797][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 92.267147][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 92.276486][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 92.285439][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 92.294541][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 92.304140][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 92.313484][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 92.408351][ T4216] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.438179][ T4439] udc-core: couldn't find an available UDC or it's busy [ 92.445445][ T4439] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 92.506476][ T4473] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.937609][ T4172] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 93.302773][ T4172] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 93.434715][ T4255] usb 5-1: USB disconnect, device number 2 [ 93.447508][ T4216] usb 2-1: Using ep0 maxpacket: 8 [ 93.450890][ T4172] usbhid 4-1:0.0: can't add hid device: -71 [ 93.461951][ T4172] usbhid: probe of 4-1:0.0 failed with error -71 [ 93.516736][ T4479] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.543501][ T4172] usb 4-1: USB disconnect, device number 4 [ 93.567314][ T4216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.610758][ T4216] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 93.650909][ T4216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.674637][ T4216] usb 2-1: config 0 descriptor?? [ 93.838952][ T4492] syz.2.71 sent an empty control message without MSG_MORE. [ 94.190195][ T4216] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 94.671016][ T4509] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 95.333321][ T4503] usb 2-1: USB disconnect, device number 3 [ 95.337358][ T4172] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.597585][ T4172] usb 5-1: Using ep0 maxpacket: 16 [ 95.611842][ T4537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 95.747312][ T4172] usb 5-1: config 0 has no interfaces? [ 95.755108][ T4172] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 95.775698][ T4172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.800178][ T4172] usb 5-1: config 0 descriptor?? [ 96.067523][ T4172] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.345490][ T4556] netlink: 100 bytes leftover after parsing attributes in process `syz.3.94'. [ 96.457602][ T4172] usb 2-1: config 0 has no interfaces? [ 96.667560][ T4172] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 96.680967][ T4172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.759620][ T4172] usb 2-1: Product: syz [ 96.829195][ T4172] usb 2-1: Manufacturer: syz [ 96.884383][ T4172] usb 2-1: SerialNumber: syz [ 96.961527][ T4172] usb 2-1: config 0 descriptor?? [ 97.037198][ T4503] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.073760][ T4541] udc-core: couldn't find an available UDC or it's busy [ 98.107199][ T4503] usb 1-1: Using ep0 maxpacket: 8 [ 98.117348][ T4541] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 98.135094][ T4541] overlayfs: missing 'lowerdir' [ 98.176341][ T4216] usb 2-1: USB disconnect, device number 4 [ 98.267637][ T4503] usb 1-1: unable to get BOS descriptor or descriptor too short [ 98.387493][ T4503] usb 1-1: config 8 has an invalid interface number: 24 but max is 1 [ 98.407568][ T4503] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 98.477012][ T4503] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 98.530739][ T4503] usb 1-1: config 8 has no interface number 0 [ 98.557836][ T4503] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 98.597270][ T4503] usb 1-1: config 8 interface 24 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.685049][ T4503] usb 1-1: config 8 interface 24 has no altsetting 0 [ 98.944114][ T4503] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 98.961760][ T4172] usb 5-1: USB disconnect, device number 3 [ 98.979730][ T4503] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.026384][ T4503] usb 1-1: Product: syz [ 99.057388][ T4503] usb 1-1: Manufacturer: syz [ 99.062245][ T4503] usb 1-1: SerialNumber: syz [ 99.316065][ T4594] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.060320][ T4595] binder: 4591:4595 unknown command 1074553619 [ 100.066921][ T4595] binder: 4591:4595 ioctl c0306201 200000000640 returned -22 [ 101.407429][ T4503] usb 1-1: can't set config #8, error -71 [ 101.447410][ T4503] usb 1-1: USB disconnect, device number 3 [ 103.309719][ T4633] loop3: detected capacity change from 0 to 164 [ 103.440417][ T4640] netlink: 'syz.3.118': attribute type 21 has an invalid length. [ 103.452382][ T4640] netlink: 156 bytes leftover after parsing attributes in process `syz.3.118'. [ 103.817260][ T4503] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 104.097488][ T4503] usb 3-1: Using ep0 maxpacket: 8 [ 105.629276][ T4667] batman_adv: batadv0: Adding interface: dummy0 [ 105.659744][ T4667] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.686520][ T13] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 105.707215][ T4667] batman_adv: batadv0: Interface activated: dummy0 [ 105.863440][ T4669] batadv0: mtu less than device minimum [ 105.902381][ T4669] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 105.914744][ T4669] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 105.927417][ T4669] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 105.939730][ T4669] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 105.952901][ T4669] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 105.965623][ T4669] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 105.978373][ T4669] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 105.990990][ T4669] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.003834][ T4669] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 106.057560][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.117431][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.178063][ T13] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 106.217278][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.250217][ T13] usb 5-1: config 0 descriptor?? [ 106.730185][ T13] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 107.597251][ T13] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 107.607295][ T13] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 107.736691][ T13] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 107.789234][ T13] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 107.815726][ T13] elan 0003:04F3:0755.0001: failed to start in urb: -90 [ 107.857282][ T4680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'. [ 107.866752][ T13] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 107.916189][ T13] usb 5-1: USB disconnect, device number 4 [ 107.923418][ T4680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'. [ 108.003318][ T4680] netlink: 'syz.0.130': attribute type 7 has an invalid length. [ 108.020728][ T4503] usb 3-1: unable to get BOS descriptor or descriptor too short [ 108.107324][ T4503] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 108.125137][ T4503] usb 3-1: can't read configurations, error -71 [ 108.316042][ T4684] fido_id[4684]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 108.342923][ T4686] kvm [4685]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 108.398112][ T4686] kvm [4685]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 108.527591][ T1108] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 109.489343][ T4706] program syz.4.138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.687395][ T1108] usb 4-1: config 0 has no interfaces? [ 109.847402][ T1108] usb 4-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 110.614057][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.627556][ T1108] usb 4-1: Product: syz [ 110.637494][ T1108] usb 4-1: Manufacturer: syz [ 110.642540][ T1108] usb 4-1: SerialNumber: syz [ 110.649448][ T1108] usb 4-1: config 0 descriptor?? [ 110.684664][ T4727] loop4: detected capacity change from 0 to 164 [ 110.798678][ T4728] netlink: 'syz.4.144': attribute type 21 has an invalid length. [ 110.806849][ T4728] netlink: 156 bytes leftover after parsing attributes in process `syz.4.144'. [ 111.404487][ T4381] usb 4-1: USB disconnect, device number 5 [ 111.619688][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.887478][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 112.017742][ T21] usb 2-1: config 0 has an invalid interface number: 221 but max is 0 [ 112.017775][ T21] usb 2-1: config 0 has no interface number 0 [ 112.017801][ T21] usb 2-1: config 0 interface 221 has no altsetting 0 [ 112.197423][ T21] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=34.88 [ 112.197457][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.197478][ T21] usb 2-1: Product: syz [ 112.197494][ T21] usb 2-1: Manufacturer: syz [ 112.197510][ T21] usb 2-1: SerialNumber: syz [ 112.199401][ T21] usb 2-1: config 0 descriptor?? [ 113.109642][ T21] qmi_wwan: probe of 2-1:0.221 failed with error -22 [ 113.153490][ T21] usb 2-1: USB disconnect, device number 5 [ 113.384777][ T26] audit: type=1326 audit(1747180622.867:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4758 comm="syz.4.154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd377c66969 code=0x0 [ 113.607172][ T21] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 113.857166][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 113.977335][ T21] usb 2-1: config 2 has an invalid interface number: 157 but max is 0 [ 113.996632][ T21] usb 2-1: config 2 has no interface number 0 [ 114.187968][ T21] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 114.281676][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.297332][ T21] usb 2-1: Product: syz [ 114.311359][ T21] usb 2-1: Manufacturer: syz [ 114.335068][ T21] usb 2-1: SerialNumber: syz [ 114.379092][ T21] imon 2-1:2.157: unable to register, err -19 [ 114.997341][ T4782] udc-core: couldn't find an available UDC or it's busy [ 115.018466][ T4782] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 115.140974][ T4779] kvm [4778]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 115.398449][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 115.585719][ T4794] netlink: 76 bytes leftover after parsing attributes in process `syz.3.166'. [ 115.668421][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 115.787706][ T23] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 115.787754][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.787779][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.787805][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.787829][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.787873][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.787897][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.047328][ T23] usb 5-1: GET_CAPABILITIES returned 0 [ 116.047366][ T23] usbtmc 5-1:16.0: can't read capabilities [ 116.047402][ T1108] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 116.254592][ T4785] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 116.300514][ T1108] usb 3-1: Using ep0 maxpacket: 16 [ 116.323494][ T13] usb 5-1: USB disconnect, device number 5 [ 116.440623][ T1108] usb 3-1: config index 0 descriptor too short (expected 1828, got 36) [ 116.506368][ T1108] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 116.639907][ T1108] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 116.710675][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 116.816149][ T4381] usb 2-1: USB disconnect, device number 6 [ 116.839264][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 117.107394][ T1108] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 117.130006][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.146880][ T1108] usb 3-1: Product: syz [ 117.147532][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.165996][ T1108] usb 3-1: Manufacturer: syz [ 117.183924][ T1108] usb 3-1: SerialNumber: syz [ 117.238938][ T1108] usb 3-1: config 0 descriptor?? [ 117.302745][ T1108] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 117.327417][ T1108] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 117.345472][ T1108] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 117.367325][ T4381] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 117.396157][ T1108] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 117.397539][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 117.460978][ T1108] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 117.492989][ T1108] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 117.500707][ T1108] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 117.517543][ T1108] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 117.527530][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.534052][ T1108] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 117.551727][ T1108] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 117.557195][ T21] usb 4-1: config 0 has no interfaces? [ 117.566296][ T1108] keyspan 3-1:0.0: unsupported endpoint type 0 [ 117.572747][ T1108] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 117.595709][ T1108] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 117.615954][ T1108] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 117.645908][ T1108] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 117.703499][ T1108] usb 3-1: USB disconnect, device number 7 [ 117.727829][ T21] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 117.737343][ T4381] usb 5-1: config 0 has no interfaces? [ 117.784111][ T1108] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 117.788463][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.826043][ T1108] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 117.835917][ T21] usb 4-1: Product: syz [ 117.856159][ T21] usb 4-1: Manufacturer: syz [ 117.872722][ T21] usb 4-1: SerialNumber: syz [ 117.874355][ T1108] keyspan 3-1:0.0: device disconnected [ 117.897509][ T4381] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 117.919530][ T21] usb 4-1: config 0 descriptor?? [ 117.927431][ T4381] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.970170][ T4381] usb 5-1: Product: syz [ 117.974431][ T4381] usb 5-1: Manufacturer: syz [ 117.997338][ T4381] usb 5-1: SerialNumber: syz [ 118.022758][ T4381] usb 5-1: config 0 descriptor?? [ 118.213018][ T4815] udc-core: couldn't find an available UDC or it's busy [ 118.243362][ T4815] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 118.262452][ T4815] udc-core: couldn't find an available UDC or it's busy [ 118.287269][ T4820] udc-core: couldn't find an available UDC or it's busy [ 118.294454][ T4815] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 118.327340][ T4820] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 118.346388][ T4815] udc-core: couldn't find an available UDC or it's busy [ 118.378576][ T4815] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 118.380282][ T4820] overlayfs: missing 'lowerdir' [ 118.451763][ T1108] usb 5-1: USB disconnect, device number 6 [ 118.522509][ T4503] usb 4-1: USB disconnect, device number 6 [ 118.708084][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.007658][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 119.147500][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 120.188104][ T13] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 120.199353][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.208608][ T13] usb 1-1: Product: syz [ 120.213430][ T13] usb 1-1: Manufacturer: syz [ 120.218431][ T13] usb 1-1: SerialNumber: syz [ 120.248105][ T13] usb 1-1: config 0 descriptor?? [ 120.288077][ T13] hub 1-1:0.0: bad descriptor, ignoring hub [ 120.294124][ T13] hub: probe of 1-1:0.0 failed with error -5 [ 120.327411][ T13] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 121.510377][ T4503] usb 1-1: USB disconnect, device number 4 [ 122.441815][ T4870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.697297][ T4503] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 122.906508][ T4878] kvm [4877]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x250000000000 [ 122.940580][ T4878] kvm [4877]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0x250000000000 [ 122.957263][ T4212] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.107272][ T4503] usb 4-1: config 0 has no interfaces? [ 123.267421][ T4503] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 123.277181][ T4212] usb 1-1: Using ep0 maxpacket: 32 [ 123.296219][ T4503] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.319927][ T4503] usb 4-1: Product: syz [ 123.328887][ T4503] usb 4-1: Manufacturer: syz [ 123.341222][ T4503] usb 4-1: SerialNumber: syz [ 123.355008][ T4503] usb 4-1: config 0 descriptor?? [ 123.467528][ T4212] usb 1-1: unable to get BOS descriptor or descriptor too short [ 123.557428][ T4212] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.610244][ T4212] usb 1-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 123.837473][ T4212] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.876427][ T4904] device syzkaller1 entered promiscuous mode [ 123.888322][ T4212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.950578][ T4212] usb 1-1: Product: syz [ 123.954860][ T4212] usb 1-1: Manufacturer: syz [ 123.990192][ T4212] usb 1-1: SerialNumber: syz [ 124.249690][ T4910] netlink: 188 bytes leftover after parsing attributes in process `syz.4.204'. [ 124.531039][ T4919] syz.0.195 uses obsolete (PF_INET,SOCK_PACKET) [ 124.602504][ T4919] udc-core: couldn't find an available UDC or it's busy [ 124.611055][ T4919] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 124.967233][ T4172] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 125.077794][ T4503] usb 4-1: USB disconnect, device number 7 [ 125.287273][ T4172] usb 2-1: Using ep0 maxpacket: 32 [ 125.311413][ T4212] usb 1-1: 2:0 : UAC_AS_GENERAL descriptor not found [ 125.417289][ T4172] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 125.437205][ T4172] usb 2-1: config 0 has no interface number 0 [ 125.463061][ T4172] usb 2-1: config 0 interface 32 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 16 [ 125.503887][ T4212] usb 1-1: USB disconnect, device number 5 [ 125.513869][ T4172] usb 2-1: config 0 interface 32 altsetting 8 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 125.556187][ T4172] usb 2-1: config 0 interface 32 has no altsetting 0 [ 125.587616][ T4172] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0126, bcdDevice=1f.89 [ 125.617228][ T4172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.679523][ T4172] usb 2-1: config 0 descriptor?? [ 125.697984][ T4923] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 125.717183][ T4503] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 125.829100][ T4162] udevd[4162]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.977161][ T4503] usb 4-1: Using ep0 maxpacket: 32 [ 126.017247][ T4381] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 126.097441][ T4503] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 126.146466][ T4503] usb 4-1: config 0 has no interface number 0 [ 126.224486][ T4503] usb 4-1: config 0 interface 12 has no altsetting 0 [ 126.238082][ T4951] netlink: 188 bytes leftover after parsing attributes in process `syz.2.217'. [ 126.267389][ T4172] usb 2-1: string descriptor 0 read error: -71 [ 126.277316][ T4381] usb 5-1: Using ep0 maxpacket: 32 [ 126.290988][ T4172] kvaser_usb 2-1:0.32: Cannot get usb endpoint(s) [ 126.335661][ T4172] usb 2-1: USB disconnect, device number 7 [ 126.397235][ T4381] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.419023][ T4381] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.471002][ T4381] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 126.498615][ T4381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.507387][ T4503] usb 4-1: New USB device found, idVendor=0421, idProduct=0420, bcdDevice=b6.e8 [ 126.526573][ T4381] usb 5-1: config 0 descriptor?? [ 126.571290][ T4503] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.575752][ T4957] binder: 4956:4957 unknown command 1074553619 [ 126.586840][ T4957] binder: 4956:4957 ioctl c0306201 200000000540 returned -22 [ 126.648011][ T4503] usb 4-1: Product: syz [ 126.693798][ T4503] usb 4-1: Manufacturer: syz [ 126.716182][ T4503] usb 4-1: SerialNumber: syz [ 126.735399][ T4503] usb 4-1: config 0 descriptor?? [ 127.077772][ T4503] usb 4-1: bad CDC descriptors [ 127.084438][ T4503] usb 4-1: bad CDC descriptors [ 127.115148][ T4503] cdc_acm 4-1:0.12: Zero length descriptor references [ 127.148384][ T4503] cdc_acm: probe of 4-1:0.12 failed with error -22 [ 127.173725][ T4503] usb 4-1: USB disconnect, device number 8 [ 127.294247][ T4381] hid-u2fzero 0003:10C4:8ACF.0002: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 127.354854][ T4381] hid-u2fzero 0003:10C4:8ACF.0002: U2F Zero LED initialised [ 127.395837][ T4381] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 127.407593][ T4381] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 127.416120][ T4381] CPU: 1 PID: 4381 Comm: kworker/1:8 Not tainted 5.15.182-syzkaller #0 [ 127.424367][ T4381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 127.434506][ T4381] Workqueue: usb_hub_wq hub_event [ 127.439567][ T4381] RIP: 0010:u2fzero_rng_read+0x1fc/0x680 [ 127.445297][ T4381] Code: 43 80 7c 3d 00 00 74 08 48 89 df e8 1e dd 60 fa 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 76 dd 60 fa 48 8d 44 24 60 49 89 07 [ 127.464913][ T4381] RSP: 0018:ffffc90003346800 EFLAGS: 00010202 [ 127.470983][ T4381] RAX: 0000000000000015 RBX: ffff88802ae3a030 RCX: dffffc0000000000 [ 127.479040][ T4381] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888060ecc869 [ 127.487034][ T4381] RBP: ffffc90003346998 R08: 0000000000000001 R09: ffff888060ecc82e [ 127.495012][ T4381] R10: ffffed100c1d990d R11: 1ffff1100c1d9905 R12: ffff88802ae3a388 [ 127.503075][ T4381] R13: 1ffff110055c7406 R14: 1ffff110055c7405 R15: 00000000000000a8 [ 127.511062][ T4381] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 127.520002][ T4381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.526585][ T4381] CR2: 00002000000a9000 CR3: 000000005a6fc000 CR4: 00000000003506e0 [ 127.534560][ T4381] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.543320][ T4381] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.551295][ T4381] Call Trace: [ 127.554574][ T4381] [ 127.557508][ T4381] ? u2fzero_brightness_set+0x290/0x290 [ 127.563067][ T4381] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 127.569093][ T4381] ? mutex_lock_io_nested+0x60/0x60 [ 127.574309][ T4381] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 127.579965][ T4381] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 127.585917][ T4381] ? _raw_spin_unlock+0x40/0x40 [ 127.590781][ T4381] ? u2fzero_brightness_set+0x290/0x290 [ 127.596331][ T4381] add_early_randomness+0x7a/0x150 [ 127.601447][ T4381] hwrng_register+0x42d/0x4b0 [ 127.606124][ T4381] devm_hwrng_register+0x43/0xb0 [ 127.611064][ T4381] u2fzero_probe+0x26e/0x2f0 [ 127.615654][ T4381] ? twinhan_input_mapping+0x2210/0x2210 [ 127.621287][ T4381] hid_device_probe+0x271/0x360 [ 127.626140][ T4381] ? hid_uevent+0x340/0x340 [ 127.630639][ T4381] really_probe+0x284/0xc80 [ 127.635154][ T4381] __driver_probe_device+0x18c/0x330 [ 127.640670][ T4381] driver_probe_device+0x4f/0x420 [ 127.647018][ T4381] __device_attach_driver+0x2b0/0x500 [ 127.652410][ T4381] ? deferred_probe_work_func+0x230/0x230 [ 127.658147][ T4381] bus_for_each_drv+0x175/0x200 [ 127.663097][ T4381] ? _raw_spin_unlock+0x40/0x40 [ 127.667965][ T4381] ? subsys_find_device_by_id+0x350/0x350 [ 127.673687][ T4381] __device_attach+0x29b/0x460 [ 127.678454][ T4381] ? device_attach+0x20/0x20 [ 127.683340][ T4381] ? kobject_uevent_env+0x371/0x890 [ 127.688561][ T4381] bus_probe_device+0xbc/0x1e0 [ 127.693552][ T4381] ? device_add+0x97c/0xfb0 [ 127.698076][ T4381] device_add+0xa00/0xfb0 [ 127.702551][ T4381] hid_add_device+0x389/0x530 [ 127.707562][ T4381] usbhid_probe+0xb92/0xf40 [ 127.712086][ T4381] usb_probe_interface+0x5a0/0xaf0 [ 127.717273][ T4381] ? usb_register_driver+0x3d0/0x3d0 [ 127.722653][ T4381] really_probe+0x284/0xc80 [ 127.727259][ T4381] __driver_probe_device+0x18c/0x330 [ 127.733634][ T4381] driver_probe_device+0x4f/0x420 [ 127.738668][ T4381] __device_attach_driver+0x2b0/0x500 [ 127.744392][ T4381] ? deferred_probe_work_func+0x230/0x230 [ 127.750138][ T4381] bus_for_each_drv+0x175/0x200 [ 127.755006][ T4381] ? _raw_spin_unlock+0x40/0x40 [ 127.759863][ T4381] ? subsys_find_device_by_id+0x350/0x350 [ 127.765633][ T4381] __device_attach+0x29b/0x460 [ 127.770566][ T4381] ? kobject_uevent_env+0x371/0x890 [ 127.775900][ T4381] ? device_attach+0x20/0x20 [ 127.780534][ T4381] ? kobject_uevent_env+0x371/0x890 [ 127.785759][ T4381] bus_probe_device+0xbc/0x1e0 [ 127.790579][ T4381] ? device_add+0x97c/0xfb0 [ 127.795100][ T4381] device_add+0xa00/0xfb0 [ 127.799761][ T4381] usb_set_configuration+0x1991/0x1fd0 [ 127.805289][ T4381] usb_generic_driver_probe+0x89/0x150 [ 127.810850][ T4381] usb_probe_device+0x139/0x270 [ 127.815872][ T4381] ? usb_register_device_driver+0x230/0x230 [ 127.821777][ T4381] really_probe+0x284/0xc80 [ 127.826288][ T4381] __driver_probe_device+0x18c/0x330 [ 127.831580][ T4381] driver_probe_device+0x4f/0x420 [ 127.836615][ T4381] __device_attach_driver+0x2b0/0x500 [ 127.841991][ T4381] ? deferred_probe_work_func+0x230/0x230 [ 127.847711][ T4381] bus_for_each_drv+0x175/0x200 [ 127.852794][ T4381] ? _raw_spin_unlock+0x40/0x40 [ 127.857644][ T4381] ? subsys_find_device_by_id+0x350/0x350 [ 127.863373][ T4381] ? lockdep_hardirqs_on+0x94/0x140 [ 127.868573][ T4381] __device_attach+0x29b/0x460 [ 127.873338][ T4381] ? device_attach+0x20/0x20 [ 127.877966][ T4381] ? kobject_uevent_env+0x371/0x890 [ 127.883251][ T4381] bus_probe_device+0xbc/0x1e0 [ 127.888015][ T4381] ? device_add+0x97c/0xfb0 [ 127.892524][ T4381] device_add+0xa00/0xfb0 [ 127.897049][ T4381] usb_new_device+0xd53/0x1640 [ 127.901925][ T4381] ? lock_chain_count+0x20/0x20 [ 127.906880][ T4381] ? usb_disconnect+0x8a0/0x8a0 [ 127.911755][ T4381] ? _raw_spin_unlock_irq+0x1f/0x40 [ 127.917022][ T4381] ? lockdep_hardirqs_on+0x94/0x140 [ 127.922231][ T4381] hub_event+0x295c/0x4fa0 [ 127.926670][ T4381] ? led_work+0x6e0/0x6e0 [ 127.931001][ T4381] ? read_lock_is_recursive+0x10/0x10 [ 127.936376][ T4381] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 127.942274][ T4381] ? _raw_spin_unlock+0x40/0x40 [ 127.947229][ T4381] ? _raw_spin_unlock_irq+0x1f/0x40 [ 127.952629][ T4381] process_one_work+0x863/0x1000 [ 127.957589][ T4381] ? worker_detach_from_pool+0x240/0x240 [ 127.963234][ T4381] ? lockdep_hardirqs_off+0x70/0x100 [ 127.968536][ T4381] ? _raw_spin_lock_irq+0xab/0xe0 [ 127.973580][ T4381] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 127.978959][ T4381] ? wq_worker_running+0x97/0x170 [ 127.983983][ T4381] worker_thread+0xaa8/0x12a0 [ 127.988665][ T4381] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 127.994758][ T4381] ? lockdep_hardirqs_on+0x94/0x140 [ 127.999983][ T4381] ? lockdep_hardirqs_on+0x94/0x140 [ 128.005189][ T4381] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 128.011121][ T4381] kthread+0x436/0x520 [ 128.015199][ T4381] ? rcu_lock_release+0x20/0x20 [ 128.020048][ T4381] ? kthread_blkcg+0xd0/0xd0 [ 128.024749][ T4381] ret_from_fork+0x1f/0x30 [ 128.029192][ T4381] [ 128.032232][ T4381] Modules linked in: [ 128.190244][ T4381] ---[ end trace ce1ce517e6672b9a ]--- [ 128.195891][ T4381] RIP: 0010:u2fzero_rng_read+0x1fc/0x680 [ 128.265140][ T4381] Code: 43 80 7c 3d 00 00 74 08 48 89 df e8 1e dd 60 fa 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 76 dd 60 fa 48 8d 44 24 60 49 89 07 [ 128.286587][ T4381] RSP: 0018:ffffc90003346800 EFLAGS: 00010202 [ 128.292894][ T4381] RAX: 0000000000000015 RBX: ffff88802ae3a030 RCX: dffffc0000000000 [ 128.313626][ T4381] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888060ecc869 [ 128.339480][ T4381] RBP: ffffc90003346998 R08: 0000000000000001 R09: ffff888060ecc82e [ 128.363732][ T4381] R10: ffffed100c1d990d R11: 1ffff1100c1d9905 R12: ffff88802ae3a388 [ 128.385810][ T4381] R13: 1ffff110055c7406 R14: 1ffff110055c7405 R15: 00000000000000a8 [ 128.407431][ T4381] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 128.431876][ T4381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.455110][ T4381] CR2: 0000200000131030 CR3: 000000005bdc7000 CR4: 00000000003506e0 [ 128.480584][ T4381] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.507529][ T4381] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.533066][ T4381] Kernel panic - not syncing: Fatal exception [ 128.539535][ T4381] Kernel Offset: disabled [ 128.543864][ T4381] Rebooting in 86400 seconds..