last executing test programs: 9.750535737s ago: executing program 1 (id=101): r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 9.390904081s ago: executing program 1 (id=104): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102387, 0x18ff3, 0x100008) socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x1, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa08, 0x0) read$FUSE(r3, &(0x7f0000000fc0)={0x2020}, 0x2020) 8.426210824s ago: executing program 4 (id=105): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000280)) 8.390326327s ago: executing program 1 (id=106): semop(0x0, &(0x7f00000000c0)=[{0x4, 0xb}, {0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) shutdown(r0, 0x1) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xb8}}, 0x0) syz_emit_ethernet(0x134, &(0x7f00000005c0)={@empty, @dev, @void, {@ipv6={0x86dd, @generic={0xe, 0x6, "44eb15", 0xfe, 0xc, 0xff, @mcast1, @remote, {[@fragment={0x87, 0x0, 0xb, 0x1, 0x0, 0xc, 0x64}, @hopopts={0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @fragment={0xe2, 0x0, 0x2, 0x1, 0x0, 0x7, 0x64}, @routing={0x5c, 0x0, 0x1, 0x9}, @dstopts={0x89, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x930}]}, @srh={0x2b, 0x0, 0x4, 0x0, 0xff, 0x0, 0x100}], "0daab7d2b28ef00d83e4b460441001f11cf15c9005ba6ce12dfecc0ee12b143adfaddb00aedcb7d6c7f8e2834df7f15ed8e7f35248015307898fda9788281241e22a0333c2a86865657f3a60a1a99b8c85cc98860b287d769a01a74dae9856ace78c411f851571c97f3ac06410068deb781da8ae49af0ae2af57b577db1d9f7e12c36c1a73e207f8d16c07043c725b3cf3d4de712e8498e5e7f6632ee4066e372713bff02e7f8eb11707eab7f20d"}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x81) r7 = socket$inet(0x10, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) preadv(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x43, 0x4) 7.623059848s ago: executing program 2 (id=107): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f00000000c0)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x8, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 7.43593528s ago: executing program 4 (id=108): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0xffffffffffffffff, &(0x7f00000002c0)=0x49) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vbi(0x0, 0x0, 0x2) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x67, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c77086d578392f81c669f9b0578538b41faa64481c8fe1f043d56f3203ca184bdaf84f9d6f14d361b23c1d6ee71bfe0e705f9a8e61c4ffefc0ada1d224410ec6bdf884ee7ff"}], 0x1}) 6.475111013s ago: executing program 3 (id=109): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000029a000/0x2000)=nil, &(0x7f00005e3000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0x0, 0x3, 0x0, 0x9}, 0x18, [0x24000, 0xfffffffe, 0x2, 0x85, 0x3661, 0x328915d7, 0x8, 0x9, 0x0, 0x9, 0x8, 0xff, 0x2, 0x6, 0xf, 0x456562ec, 0x100, 0x6, 0x0, 0x4, 0x10, 0x8000, 0xc4fb, 0x4, 0x6, 0x6, 0x5, 0x1003, 0x3, 0x7fff, 0x5, 0x4, 0x4, 0x0, 0x4, 0x5, 0x10001, 0xac, 0xf, 0x3, 0x4, 0x7, 0x9, 0x5, 0x1, 0x800, 0xff, 0x7fff, 0x9, 0x8fb9, 0xffffffc0, 0x7, 0x4, 0x82, 0xff, 0x5, 0xba8, 0x6993780d, 0xffffffff, 0x81, 0x7, 0x8, 0xd92c, 0x7fffffff], [0x4, 0xfffff001, 0x90, 0x5d21, 0x6, 0x4, 0x0, 0x9, 0x6, 0x8a58, 0x7fffffff, 0xb1f3, 0x7, 0x1, 0x3, 0x1, 0x5, 0x0, 0x1, 0x97, 0x7, 0xa8c1, 0x4, 0x4, 0x4, 0xfffff001, 0x5, 0xb6f, 0x7d, 0x0, 0x80000001, 0x0, 0xffffffff, 0x404428, 0x2, 0x400, 0x1, 0x3, 0x6, 0xbd, 0x6, 0xa1, 0x1, 0x1, 0xa, 0x6, 0x2, 0x4, 0x117, 0x1ec63b7d, 0x9, 0x4, 0x1, 0x2, 0x9f8, 0x9, 0x4, 0x1, 0x4, 0x4, 0x1, 0x5, 0x0, 0x5], [0xf, 0x2, 0x0, 0x6, 0x2, 0xc2, 0x0, 0x800000, 0x6, 0x0, 0xa, 0x80, 0x80200000, 0x0, 0x9, 0x80, 0x4, 0x2, 0x800, 0x9, 0x7, 0x1, 0x9, 0x5, 0xfff, 0xda, 0x4, 0x1, 0x9, 0x5, 0x40, 0x7, 0x7, 0x9, 0x3ff, 0x5, 0x2, 0x6, 0x6, 0x8, 0x9b8a, 0x10000, 0x1, 0x80, 0xd5, 0x1, 0x2, 0x68, 0x7dcc, 0x4, 0x5, 0x0, 0xefb, 0x0, 0x2, 0x0, 0x800, 0x8, 0x2, 0x6, 0x1, 0x200003, 0x1, 0x2], [0x9853, 0x0, 0xd01, 0xfffffa17, 0x3, 0xfffffff9, 0x3, 0xffff, 0x1, 0x40, 0x4, 0xdd9b, 0x9, 0x0, 0xc, 0x80, 0xf92, 0x0, 0x2c0, 0xffffffff, 0x2, 0x3, 0x5, 0x100, 0x80000000, 0x9, 0xffff51c5, 0x0, 0x0, 0x80000000, 0x1, 0x5ca, 0x200, 0x6, 0xf, 0x8, 0x2, 0x0, 0x5, 0x9, 0x2, 0xffffff99, 0xfffffe00, 0x0, 0x7a8957d8, 0x5, 0x9, 0x3, 0x3, 0x401, 0x8, 0xfc000000, 0x74, 0x9, 0x9, 0x3d1, 0xffffffff, 0x0, 0x5, 0x9, 0x5, 0xfff, 0x0, 0x5]}, 0x45c) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000002c0)={0x1e0, 0xa0, 0x320, 0x30, 0x80000000, 0xffff, 0x2, 0x2, {0x6}, {0x0, 0xf, 0x1}, {0xa3, 0x6}, {0x10001, 0x3}, 0x2, 0x10, 0x6, 0x2, 0x1, 0x3, 0x2, 0x0, 0x3, 0x101, 0xfffffff8, 0xffffff00, 0x7, 0x100, 0x1, 0x8}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78f3d4fcd9173dee890df05eeb79618efa372cfb8d2addd01c8c1c2c57f657a625a688871958b0a40088fca4f15e71a6dac908872ebd91f0dc", @ANYRESHEX, @ANYBLOB=',rootmode=000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0xee00, @ANYBLOB=',']) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.998444974s ago: executing program 0 (id=110): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc00", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 5.7631438s ago: executing program 3 (id=111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x8, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.742764241s ago: executing program 0 (id=112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000020100c0000000000618"]) 5.382090565s ago: executing program 2 (id=113): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.239071965s ago: executing program 0 (id=114): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4], 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x1, 0x8000001, 0x7, 0x2}], 0x10, 0xab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x5) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0xf, 0x8, 0x7, {0x4e24, 0x4e22, [0x3, 0x31, 0xffffff01, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0xde, 0x7fffffff]}, 0x2, 0x3}}, 0x4c}, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsopen(0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) socket(0x3, 0x1, 0x8) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, &(0x7f0000000180)) 5.01180729s ago: executing program 3 (id=115): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$tipc(0x1e, 0x2, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 4.966435003s ago: executing program 4 (id=116): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7fff, @loopback, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x54) 4.423213078s ago: executing program 4 (id=117): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0xfe, 0x7fff0000}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040), 0x0) recvmmsg(r3, &(0x7f0000002ec0), 0x0, 0x2, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) dup(r3) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0xfdef) read$FUSE(0xffffffffffffffff, &(0x7f0000002540)={0x2020}, 0xfdef) syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="66643de3dbd6a4f3fe431f0186e6f6356b303091c69957eeb92a6ebfe4d3ee02580e76844fbd67e13c24bd25e0a32e50923d2d530ccc51622c1acd303ec9cbb6c0617537100e41d0ce5d41c861c6d3f04d39c9d7355f52ef88bcb369d110331355", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000006,allow_other,blksize=0x0000000000000c'], 0x1, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) getitimer(0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f0000000200)=[{0x6}]}) 4.333346744s ago: executing program 2 (id=118): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x6, 0x30}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) r2 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x45) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x24000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x7) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$getregset(0x4204, r5, 0x200, &(0x7f0000000000)={&(0x7f0000000440)=""/176, 0xb0}) sched_setaffinity(r5, 0x8, &(0x7f0000000100)=0x4140478c) 4.161512316s ago: executing program 3 (id=119): syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002413b88400819151300000000000109022d00000000000009040000026bb22b000904fffffd1b070000091b40a10a14aa990809"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x1}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) 4.107146119s ago: executing program 1 (id=120): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r1, 0x0, 0xeffd) 3.158311492s ago: executing program 1 (id=121): setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000400)=0xffffffff, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000100)) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "b97ad606944eb94e", "4d36cef51ca13ebb3a9bc9793d6eb58c6f57e100", "069ea282", "27cc9aa51273fcd7"}, 0x38) r2 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x5712, 0x10000, 0x0, 0x1}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x45c, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x42c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x30}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xcb}, @TCA_ROUTE4_TO={0x8, 0x2, 0xd9}, @TCA_ROUTE4_TO={0x8, 0x2, 0x77}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x400, 0x6, [@m_ife={0x104, 0x0, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}]}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xdc7}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x81000, 0x14, 0xb, 0x24c}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x7, 0x6, 0x34}, 0x1}}]}, {0x3a, 0x6, "0ea71806f3e871fb2ea67b70aaf51cbd3a1b032a918b53df4ec82a4245c188246a2668940f5557b8f8f50f098e26f772f791aa3ff0d9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xa8, 0xd, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7fffffff}]}, {0x61, 0x6, "55969814655b83225fb1b01058b504f5d42c17a6a81a416c3fc247c00069ca993c18a79ddbdc6262faeecb2159c1e8d10bad60d0f9c8cc95aa832d29894ac19cf5dd5c3b0b10e9beb22351f326014dbccf41ab0c19cb73c3a430a36d5d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x14c, 0x13, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffd, 0x10001, 0xffffffffdffffff8, 0x4, 0x9}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x3, 0x16ce8f27, 0x3}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x5, 0xffffffffffffffff, 0x4, 0xbc}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x0, 0x40cf, 0x5}, 0x1}}]}, {0xa9, 0x6, "8393ee2cb5d471dfd2617bad01c301e557bab9c54ec85b250567e712216ec78f954056b3d370a6d8fa91e7b8cf16571000bb8bb539d51c7d02535e285d630c47f5ce57953874bc2860c9b843b4504742eee6f27e87823f7d48d20c5c721b7d1630762009b7be7147753b2e65917813c7bc227855360167f58a10f1c0d4e3a7fb0d4a99aa8ee8cdcabc896f4fc8b871370867331daa5d5a29b49a6954452f62f73a5aa4253a"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x104, 0x10, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x401}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "bccbb9d74753fdd2505d2cbd8f41cb33"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "494a7b305693eca430aba99ef6780a96"}, @TCA_CT_MARK={0x8, 0x5, 0xc}, @TCA_CT_LABELS_MASK={0x14, 0x8, "8369b65ab69a189ba57c5439ca8aaf84"}]}, {0x7b, 0x6, "d6cbfada3d5f6e111b162f98e8f458e2f444fed36de384b677f577e65c44aece8239ae88c765f268ddda03f733f147439d1c71289b0eb58b48096144cb43477fcb92c0240cf2e42226bcb818877fe3d52bf5b73537127d51491e33be6085204cd14e743d1afc7c4234696620b36722a6a94cee51bb419c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, 0x0) close_range(r2, r3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa17"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x880) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000040)={0x2, 0x4, 0xa, 0x0, 0x11}) 3.115425145s ago: executing program 2 (id=122): connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffc, 0x40000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendfile(r5, r4, 0x0, 0x578410eb) 2.72792113s ago: executing program 0 (id=123): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 2.239257832s ago: executing program 4 (id=124): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x3d) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc25c4110, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 2.238198272s ago: executing program 3 (id=125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x8, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.50631955s ago: executing program 3 (id=126): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0xffffffffffffffff, &(0x7f00000002c0)=0x49) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vbi(0x0, 0x0, 0x2) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x67, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c77086d578392f81c669f9b0578538b41faa64481c8fe1f043d56f3203ca184bdaf84f9d6f14d361b23c1d6ee71bfe0e705f9a8e61c4ffefc0ada1d224410ec6bdf884ee7ff"}, {0x6, 0x1a01, 0x0, 0x0}], 0x2}) 1.05911423s ago: executing program 0 (id=127): socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x3f3, 0x101000) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000140)) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 986.123104ms ago: executing program 1 (id=128): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, 0x0, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 582.016461ms ago: executing program 2 (id=129): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, 0x0, 0x0, 0x0) 243.119324ms ago: executing program 2 (id=130): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$tipc(0x1e, 0x2, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 43.919547ms ago: executing program 4 (id=131): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, &(0x7f00000012c0)=""/231, 0xe7) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) 0s ago: executing program 0 (id=132): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0xfffffffffffffff7, 0x28a440) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. [ 73.182274][ T4253] cgroup: Unknown subsys name 'net' [ 73.345897][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.848032][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.367133][ T4269] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.375463][ T4269] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.383569][ T4269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.391452][ T4269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.399317][ T4269] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.408601][ T4269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.415988][ T4269] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.418368][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.423470][ T4269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.431090][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.444903][ T4269] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.452693][ T4269] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.453118][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.459842][ T4269] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.467176][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.476322][ T4269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.489224][ T4269] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.496744][ T4269] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.504225][ T4269] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.511557][ T4269] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.518183][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.518939][ T4269] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.526510][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.533325][ T4269] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.539959][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.559252][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.598850][ T4269] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.606232][ T4269] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.632701][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.640165][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.024808][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 77.151440][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 77.219431][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 77.245361][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.253443][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.262249][ T4272] device bridge_slave_0 entered promiscuous mode [ 77.275768][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.283046][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.291300][ T4272] device bridge_slave_1 entered promiscuous mode [ 77.330642][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 77.342352][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.358144][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.386682][ T4263] chnl_net:caif_netlink_parms(): no params data found [ 77.435498][ T4272] team0: Port device team_slave_0 added [ 77.481236][ T4272] team0: Port device team_slave_1 added [ 77.487146][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.494830][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.503588][ T4275] device bridge_slave_0 entered promiscuous mode [ 77.523042][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.530230][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.538665][ T4264] device bridge_slave_0 entered promiscuous mode [ 77.554925][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.562373][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.570561][ T4275] device bridge_slave_1 entered promiscuous mode [ 77.585838][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.593143][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.602030][ T4264] device bridge_slave_1 entered promiscuous mode [ 77.651250][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.658394][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.684462][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.725765][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.732964][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.762650][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.775648][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.784988][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.792209][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.800666][ T4265] device bridge_slave_0 entered promiscuous mode [ 77.817200][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.833410][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.845029][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.853591][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.861645][ T4265] device bridge_slave_1 entered promiscuous mode [ 77.878613][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.925911][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.933318][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.941646][ T4263] device bridge_slave_0 entered promiscuous mode [ 77.973746][ T4275] team0: Port device team_slave_0 added [ 77.992050][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.002515][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.009927][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.018136][ T4263] device bridge_slave_1 entered promiscuous mode [ 78.028050][ T4264] team0: Port device team_slave_0 added [ 78.042782][ T4275] team0: Port device team_slave_1 added [ 78.059543][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.078308][ T4264] team0: Port device team_slave_1 added [ 78.096946][ T4272] device hsr_slave_0 entered promiscuous mode [ 78.104005][ T4272] device hsr_slave_1 entered promiscuous mode [ 78.146583][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.160783][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.167897][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.194266][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.227320][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.236929][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.244329][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.270770][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.292228][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.299585][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.325574][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.339454][ T4265] team0: Port device team_slave_0 added [ 78.358109][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.365104][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.391763][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.412732][ T4265] team0: Port device team_slave_1 added [ 78.453830][ T4263] team0: Port device team_slave_0 added [ 78.490950][ T4275] device hsr_slave_0 entered promiscuous mode [ 78.499106][ T4275] device hsr_slave_1 entered promiscuous mode [ 78.505782][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.513765][ T4275] Cannot create hsr debugfs directory [ 78.522390][ T4263] team0: Port device team_slave_1 added [ 78.529062][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.536039][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.562333][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.590863][ T4264] device hsr_slave_0 entered promiscuous mode [ 78.597810][ T4264] device hsr_slave_1 entered promiscuous mode [ 78.604456][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.613102][ T4270] Bluetooth: hci0: command 0x0409 tx timeout [ 78.613102][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 78.620267][ T4264] Cannot create hsr debugfs directory [ 78.650437][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.657450][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.683728][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.694465][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 78.701092][ T4270] Bluetooth: hci1: command 0x0409 tx timeout [ 78.701112][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 78.763526][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.770957][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.797429][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.837684][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.844819][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.871124][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.899531][ T4265] device hsr_slave_0 entered promiscuous mode [ 78.906546][ T4265] device hsr_slave_1 entered promiscuous mode [ 78.913673][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.921533][ T4265] Cannot create hsr debugfs directory [ 78.983947][ T4263] device hsr_slave_0 entered promiscuous mode [ 78.991244][ T4263] device hsr_slave_1 entered promiscuous mode [ 78.998027][ T4263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.005612][ T4263] Cannot create hsr debugfs directory [ 79.145147][ T4272] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.177088][ T4272] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.187010][ T4272] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.197026][ T4272] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.359960][ T4275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.370079][ T4275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.403815][ T4275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.414256][ T4275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.452750][ T4264] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.464810][ T4264] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.497501][ T4264] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.514152][ T4264] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.567622][ T4265] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.582567][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.598427][ T4265] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.611633][ T4265] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.640202][ T4265] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.674552][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.685337][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.700703][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.756476][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.765577][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.775333][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.782730][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.793108][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.806144][ T4263] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.836180][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.847345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.856987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.865726][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.872856][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.885149][ T4263] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.894337][ T4263] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.917915][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.926756][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.938329][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.946223][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.966817][ T4263] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.978582][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.015957][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.026442][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.036790][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.046133][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.055530][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.064743][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.073632][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.080815][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.089214][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.098143][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.108048][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.115156][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.126715][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.147975][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.156045][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.164830][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.175184][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.186561][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.202404][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.214164][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.225200][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.244921][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.252228][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.262234][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.270989][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.279071][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.286945][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.296932][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.305015][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.334201][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.382356][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.400429][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.414974][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.424558][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.439831][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.447338][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.460127][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.470356][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.479253][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.486350][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.494580][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.503964][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.513490][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.522121][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.531262][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.540218][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.553413][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.562572][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.571816][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.581855][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.591997][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.599183][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.609302][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.632766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.643057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.656340][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.663547][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.688683][ T4270] Bluetooth: hci0: command 0x041b tx timeout [ 80.694787][ T4270] Bluetooth: hci3: command 0x041b tx timeout [ 80.703431][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.731085][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.742440][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.768654][ T4270] Bluetooth: hci2: command 0x041b tx timeout [ 80.774901][ T4270] Bluetooth: hci1: command 0x041b tx timeout [ 80.781049][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 80.826997][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.835772][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.850154][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.859334][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.869195][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.878362][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.886943][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.896198][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.905039][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.913883][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.931891][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.940964][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.973522][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.984786][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.994692][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.009520][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.032313][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.058409][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.079760][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.104276][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.117106][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.127046][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.137131][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.153561][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.160792][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.176409][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.184662][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.229901][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.246246][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.256071][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.266069][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.275025][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.294071][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.302993][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.310204][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.325045][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.364263][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.384490][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.396963][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.428777][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.447871][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.458646][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.467577][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.476923][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.486167][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.506391][ T4263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.523028][ T4263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.555605][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.565043][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.589118][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.614953][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.634092][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.644352][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.660092][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.684904][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.706642][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.720954][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.759410][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.804945][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.837537][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.856828][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.878124][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.894509][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.934987][ T4272] device veth0_vlan entered promiscuous mode [ 81.943688][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.959631][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.043209][ T4272] device veth1_vlan entered promiscuous mode [ 82.078021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.091573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.120655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.148587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.169352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.186170][ T4264] device veth0_vlan entered promiscuous mode [ 82.214943][ T4275] device veth0_vlan entered promiscuous mode [ 82.230105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.241999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.250885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.259669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.283390][ T4264] device veth1_vlan entered promiscuous mode [ 82.314075][ T4275] device veth1_vlan entered promiscuous mode [ 82.337578][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.352594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.364784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.381271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.389856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.399562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.407628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.416359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.424272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.443648][ T4272] device veth0_macvtap entered promiscuous mode [ 82.507592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.525873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.536647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.552004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.566451][ T4272] device veth1_macvtap entered promiscuous mode [ 82.595361][ T4264] device veth0_macvtap entered promiscuous mode [ 82.611581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.635642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.654946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.678110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.687284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.699995][ T4264] device veth1_macvtap entered promiscuous mode [ 82.719895][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.732857][ T4275] device veth0_macvtap entered promiscuous mode [ 82.744877][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.753279][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.768478][ T4270] Bluetooth: hci3: command 0x040f tx timeout [ 82.774580][ T4270] Bluetooth: hci0: command 0x040f tx timeout [ 82.786605][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.795904][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.804598][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.813524][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.826203][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.837378][ T4275] device veth1_macvtap entered promiscuous mode [ 82.847882][ T4270] Bluetooth: hci2: command 0x040f tx timeout [ 82.854345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.858206][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 82.868339][ T4270] Bluetooth: hci1: command 0x040f tx timeout [ 82.875279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.887218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.910216][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.924804][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.934673][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.943809][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.967547][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.985074][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.004633][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.015597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.031064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.039191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.048218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.073384][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.083847][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.094695][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.106521][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.125759][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.140388][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.157062][ T4264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.166454][ T4264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.175879][ T4264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.185921][ T4264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.225296][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.246868][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.258483][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.269493][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.281827][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.292565][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.302493][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.334072][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.346888][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.360016][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.370725][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.382632][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.436779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.452597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.482446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.492247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.508507][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.517269][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.527171][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.536254][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.551751][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.560454][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.598273][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.610932][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.621371][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.636839][ T4263] device veth0_vlan entered promiscuous mode [ 83.670211][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.682685][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.693128][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.702685][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.746962][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.766806][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.812493][ T4263] device veth1_vlan entered promiscuous mode [ 83.826928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.840420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.849190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.857640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.866691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.879382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.892085][ T4265] device veth0_vlan entered promiscuous mode [ 83.928532][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.936687][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.950242][ T4265] device veth1_vlan entered promiscuous mode [ 83.962212][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.988929][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.994711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.997030][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.007876][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.021322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.030670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.039183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.047059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.055731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.064755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.114420][ T4263] device veth0_macvtap entered promiscuous mode [ 84.131796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.143391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.161870][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.180010][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.195980][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.196215][ T4263] device veth1_macvtap entered promiscuous mode [ 84.210755][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.225660][ T4265] device veth0_macvtap entered promiscuous mode [ 84.241789][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.252231][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.261159][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.273920][ T4265] device veth1_macvtap entered promiscuous mode [ 84.300143][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.329593][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.367966][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.381966][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.397131][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.407392][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.424152][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.444020][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.487439][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.498697][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.509592][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.520426][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.531275][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.558068][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.587844][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.630248][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.660773][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.699360][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.708948][ T4388] process 'syz.3.4' launched './file1' with NULL argv: empty string added [ 84.730021][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.754239][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.786032][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.798846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.840117][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.850814][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 84.856837][ T4270] Bluetooth: hci3: command 0x0419 tx timeout [ 84.891248][ T4378] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.897900][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.909793][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.921195][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.933135][ T4270] Bluetooth: hci4: command 0x0419 tx timeout [ 84.939314][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 84.939364][ T4269] Bluetooth: hci2: command 0x0419 tx timeout [ 84.945644][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.969658][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.016332][ T4389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 85.045874][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.074474][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.099408][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.127825][ T4398] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.157938][ T4378] usb 2-1: Using ep0 maxpacket: 16 [ 85.188246][ T4378] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 85.200747][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.219727][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.253866][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.264477][ T4378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.284874][ T4378] usb 2-1: Product: syz [ 85.289391][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.289407][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.289423][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.294940][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.350093][ T4398] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 85.368843][ T4378] usb 2-1: Manufacturer: syz [ 85.373873][ T4378] usb 2-1: SerialNumber: syz [ 85.386011][ T4398] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 85.401030][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.433674][ T4398] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.444920][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.454370][ T4378] usb 2-1: config 0 descriptor?? [ 85.476338][ T4398] usb 4-1: Product: syz [ 85.486872][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.496465][ T4398] usb 4-1: Manufacturer: syz [ 85.502280][ T4378] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 85.512590][ T4398] usb 4-1: SerialNumber: syz [ 85.518600][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.534303][ T4398] usb 4-1: config 0 descriptor?? [ 85.556699][ T4265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.586664][ T4265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.600966][ T4265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.612190][ T4265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.643840][ T4263] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.656415][ T4263] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.686430][ T4263] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.698019][ T4263] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.055056][ T4391] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 86.247173][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.280856][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.298720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 86.307206][ T4378] gp8psk: usb in 128 operation failed. [ 86.327442][ T4378] gp8psk: usb in 137 operation failed. [ 86.362606][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.379847][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.407965][ T4378] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 86.418362][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.437551][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.475355][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.490655][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.507470][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.523988][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.524576][ T4378] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 86.543600][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.578966][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.606874][ T4378] usb 2-1: media controller created [ 86.668614][ T4378] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.693118][ T14] cfg80211: failed to load regulatory.db [ 86.754788][ T4378] gp8psk_fe: Frontend revision 1 attached [ 86.768708][ T4378] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 86.815321][ T4378] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 87.078700][ T4378] gp8psk: usb in 138 operation failed. [ 87.084237][ T4378] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 87.158163][ T4378] gp8psk: found Genpix USB device pID = 201 (hex) [ 87.264872][ T4378] usb 2-1: USB disconnect, device number 2 [ 87.385495][ T4378] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 87.462627][ T4421] Zero length message leads to an empty skb [ 88.040327][ T4421] ======================================================= [ 88.040327][ T4421] WARNING: The mand mount option has been deprecated and [ 88.040327][ T4421] and is ignored by this kernel. Remove the mand [ 88.040327][ T4421] option from the mount to silence this warning. [ 88.040327][ T4421] ======================================================= [ 88.127436][ T4423] loop6: detected capacity change from 0 to 524288000 [ 88.138260][ T4429] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7'. [ 88.151668][ T4421] fuse: Bad value for 'fd' [ 88.911760][ T4378] usb 4-1: USB disconnect, device number 2 [ 90.783513][ T4441] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.9' sets config #1 [ 91.197959][ T4378] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.208084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.412772][ T4378] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 91.526032][ T4378] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 91.625215][ T4378] usb 1-1: config 0 has no interfaces? [ 91.655783][ T4378] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 91.685356][ T4378] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.716413][ T4378] usb 1-1: config 0 descriptor?? [ 91.969905][ T4445] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.272571][ T4378] usb 1-1: USB disconnect, device number 2 [ 92.470510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.698736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.707196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.907904][ T4378] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.119575][ T4378] usb 4-1: Using ep0 maxpacket: 16 [ 93.132589][ T4378] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 93.191779][ T4378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.227011][ T4378] usb 4-1: Product: syz [ 93.283238][ T4378] usb 4-1: Manufacturer: syz [ 93.307904][ T4378] usb 4-1: SerialNumber: syz [ 93.349620][ T4378] usb 4-1: config 0 descriptor?? [ 93.412220][ T4378] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 94.147023][ T4378] gp8psk: usb in 128 operation failed. [ 94.164672][ T4378] gp8psk: usb in 137 operation failed. [ 94.197543][ T4378] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 94.239412][ T4378] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 94.269277][ T4378] usb 4-1: media controller created [ 94.323700][ T4378] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.363235][ T4378] gp8psk_fe: Frontend revision 1 attached [ 94.392084][ T4378] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 94.408942][ T4378] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 94.496878][ T4378] gp8psk: usb in 138 operation failed. [ 94.525251][ T4378] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 94.563851][ T4378] gp8psk: found Genpix USB device pID = 201 (hex) [ 94.672137][ T4378] usb 4-1: USB disconnect, device number 3 [ 94.937246][ T4378] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 95.287853][ T4398] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.295724][ T4329] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.403288][ T4503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.25'. [ 95.465484][ T4503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.25'. [ 95.499399][ T4398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.543366][ T4503] device bond0 entered promiscuous mode [ 95.549145][ T4398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.561462][ T4503] device bond_slave_0 entered promiscuous mode [ 95.568302][ T4398] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 95.577599][ T4503] device bond_slave_1 entered promiscuous mode [ 95.587583][ T4398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.604803][ T4398] usb 3-1: config 0 descriptor?? [ 95.612234][ T4503] device bond0 left promiscuous mode [ 95.617780][ T4503] device bond_slave_0 left promiscuous mode [ 95.630370][ T4503] device bond_slave_1 left promiscuous mode [ 95.647966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 95.656337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 95.664712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 95.682881][ T4329] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 95.710616][ T4329] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.764003][ T4329] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.831526][ T4329] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 95.855587][ T4329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.023445][ T4398] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 96.052952][ T4398] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 96.086064][ T4329] usb 2-1: invalid MIDI out EP 0 [ 96.185989][ T4329] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 96.217949][ T4398] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 96.337960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.418440][ T4398] cp2112 0003:10C4:EA90.0001: error requesting SMBus config [ 96.441616][ T4398] cp2112: probe of 0003:10C4:EA90.0001 failed with error -32 [ 96.585313][ T4379] udevd[4379]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.038936][ T129] usb 2-1: USB disconnect, device number 3 [ 98.137803][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.173475][ T129] usb 3-1: USB disconnect, device number 2 [ 98.349919][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 98.414147][ T22] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.483443][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.553733][ T22] usb 1-1: config 0 descriptor?? [ 98.598778][ T22] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 99.691220][ T129] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.732638][ T4550] netlink: 'syz.1.34': attribute type 1 has an invalid length. [ 99.836488][ T4550] device macvlan2 entered promiscuous mode [ 99.877784][ T129] usb 3-1: Using ep0 maxpacket: 8 [ 99.885715][ T129] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.911786][ T129] usb 3-1: config 0 has no interface number 0 [ 99.938423][ T129] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.986543][ T129] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 100.016612][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.067582][ T129] usb 3-1: config 0 descriptor?? [ 100.129729][ T129] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 100.682836][ T22] usb 3-1: USB disconnect, device number 3 [ 100.947420][ T22] usb 1-1: USB disconnect, device number 3 [ 101.483031][ T4565] device syzkaller0 entered promiscuous mode [ 101.778460][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.989579][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.025557][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.087329][ T7] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 102.119780][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.133026][ T7] usb 3-1: config 0 descriptor?? [ 102.514276][ T4581] device syzkaller0 entered promiscuous mode [ 102.578332][ T7] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 102.607124][ T7] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 102.779391][ T7] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 102.988684][ T7] cp2112 0003:10C4:EA90.0002: error requesting SMBus config [ 103.020583][ T7] cp2112: probe of 0003:10C4:EA90.0002 failed with error -32 [ 103.185851][ T4586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.46'. [ 103.233129][ T4586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.46'. [ 103.294187][ T4586] device bond0 entered promiscuous mode [ 103.328863][ T4586] device bond_slave_0 entered promiscuous mode [ 103.355632][ T4586] device bond_slave_1 entered promiscuous mode [ 103.404533][ T4586] device bond0 left promiscuous mode [ 103.433727][ T4586] device bond_slave_0 left promiscuous mode [ 103.484707][ T4586] device bond_slave_1 left promiscuous mode [ 103.997852][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.190286][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 104.208142][ T129] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.231761][ T7] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.276687][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.343797][ T7] usb 2-1: config 0 descriptor?? [ 104.372755][ T7] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 104.402508][ T129] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 104.426370][ T129] usb 1-1: config 0 has no interface number 0 [ 104.439688][ T4611] netlink: 40 bytes leftover after parsing attributes in process `syz.4.51'. [ 104.463119][ T129] usb 1-1: config 0 interface 34 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 30 [ 104.507142][ T129] usb 1-1: config 0 interface 34 has no altsetting 0 [ 104.519865][ T129] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 104.539331][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.564754][ T129] usb 1-1: config 0 descriptor?? [ 104.803605][ T7] usb 3-1: USB disconnect, device number 4 [ 105.057407][ T4615] device syzkaller0 entered promiscuous mode [ 106.132160][ T4627] tipc: Started in network mode [ 106.145674][ T4627] tipc: Node identity 3637a4f3f79f, cluster identity 4711 [ 106.155123][ T4627] tipc: Enabled bearer , priority 0 [ 106.244912][ T4627] tipc: Resetting bearer [ 106.413106][ T4624] tipc: Disabling bearer [ 106.835652][ T22] usb 2-1: USB disconnect, device number 4 [ 107.659413][ T4646] netlink: 'syz.1.59': attribute type 1 has an invalid length. [ 107.841654][ T4646] device macvlan2 entered promiscuous mode [ 107.883197][ T129] usb 1-1: string descriptor 0 read error: -71 [ 107.897981][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.914327][ T129] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 107.924893][ T129] gspca_cpia1: usb_control_msg 05, error -71 [ 107.931568][ T129] gspca_cpia1: usb_control_msg 01, error -71 [ 107.951201][ T129] cpia1 1-1:0.34: only firmware version 1 is supported (got: 0) [ 107.987137][ T129] usb 1-1: USB disconnect, device number 4 [ 108.128020][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 108.140705][ T7] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 108.199923][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.282014][ T7] usb 4-1: config 0 descriptor?? [ 108.377670][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.63'. [ 108.500178][ T7] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 108.538154][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.573583][ T7] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 108.591140][ T7] usb 4-1: media controller created [ 108.650234][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.601202][ T7] DVB: Unable to find symbol dib7000p_attach() [ 110.612852][ T7] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 110.887891][ T7] rc_core: IR keymap rc-dib0700-rc5 not found [ 110.894893][ T7] Registered IR keymap rc-empty [ 110.942340][ T7] dvb-usb: could not initialize remote control. [ 111.009992][ T7] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 111.058212][ T7] usb 4-1: USB disconnect, device number 4 [ 111.158652][ T7] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 112.547859][ T14] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 112.739690][ T14] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 112.770116][ T14] usb 2-1: can't read configurations, error -61 [ 112.958171][ T14] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 113.150047][ T14] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 113.158492][ T4398] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 113.176419][ T14] usb 2-1: can't read configurations, error -61 [ 113.215474][ T14] usb usb2-port1: attempt power cycle [ 113.378104][ T4398] usb 4-1: Using ep0 maxpacket: 32 [ 113.389053][ T4398] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 113.405733][ T4398] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.423104][ T4398] usb 4-1: config 0 descriptor?? [ 113.465589][ T4714] fuse: Bad value for 'fd' [ 113.478985][ T4714] loop6: detected capacity change from 0 to 524288000 [ 113.638406][ T4398] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 113.667865][ T14] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 113.675477][ T4398] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.706598][ T4398] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 113.717139][ T14] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 113.740981][ T14] usb 2-1: can't read configurations, error -61 [ 113.794979][ T4398] usb 4-1: media controller created [ 113.905715][ T4398] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.967880][ T14] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 114.021192][ T14] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 114.046866][ T14] usb 2-1: can't read configurations, error -61 [ 114.111930][ T14] usb usb2-port1: unable to enumerate USB device [ 114.201788][ T4398] DVB: Unable to find symbol dib7000p_attach() [ 114.231702][ T4398] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 114.787901][ T4398] rc_core: IR keymap rc-dib0700-rc5 not found [ 114.801932][ T4398] Registered IR keymap rc-empty [ 114.825726][ T4398] dvb-usb: could not initialize remote control. [ 114.860887][ T4398] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 114.938177][ T4398] usb 4-1: USB disconnect, device number 5 [ 115.109294][ T4398] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 115.292917][ T4726] tipc: Started in network mode [ 115.328004][ T4726] tipc: Node identity 2205890f9ae, cluster identity 4711 [ 115.428783][ T4726] tipc: Enabled bearer , priority 0 [ 115.478657][ T4726] tipc: Resetting bearer [ 115.591117][ T4725] tipc: Disabling bearer [ 116.617805][ T129] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.865268][ T129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 116.972537][ T129] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 117.014690][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.061622][ T129] usb 5-1: Product: syz [ 117.090508][ T129] usb 5-1: Manufacturer: syz [ 117.142901][ T129] usb 5-1: SerialNumber: syz [ 117.186282][ T129] usb 5-1: config 0 descriptor?? [ 118.827872][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.027808][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 119.035858][ T14] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 119.065647][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.110237][ T14] usb 1-1: config 0 descriptor?? [ 119.342148][ T14] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 119.393818][ T14] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 119.481554][ T14] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 119.537975][ T14] usb 1-1: media controller created [ 119.665858][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.934267][ T14] DVB: Unable to find symbol dib7000p_attach() [ 119.943011][ T14] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 120.318697][ T4398] usb 5-1: USB disconnect, device number 2 [ 120.327839][ T14] rc_core: IR keymap rc-dib0700-rc5 not found [ 120.348122][ T14] Registered IR keymap rc-empty [ 120.353127][ T14] dvb-usb: could not initialize remote control. [ 120.406077][ T14] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 120.457088][ T14] usb 1-1: USB disconnect, device number 5 [ 120.573145][ T14] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 120.773894][ T4788] tipc: Started in network mode [ 120.805661][ T4788] tipc: Node identity ea0fe94a59bd, cluster identity 4711 [ 120.832558][ T4788] tipc: Enabled bearer , priority 0 [ 120.853331][ T4791] device syzkaller0 entered promiscuous mode [ 120.945778][ T4787] tipc: Resetting bearer [ 121.026107][ T4787] tipc: Disabling bearer [ 121.090408][ T4798] fuse: Bad value for 'fd' [ 121.217961][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 121.286799][ T4798] loop6: detected capacity change from 0 to 524288000 [ 121.432632][ T14] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 121.474604][ T14] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.527775][ T4808] netlink: 'syz.4.103': attribute type 1 has an invalid length. [ 121.565980][ T14] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.602530][ T14] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.620959][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.632199][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.103'. [ 121.662472][ T14] usb 1-1: invalid MIDI out EP 0 [ 121.664909][ T4809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.103'. [ 121.701950][ T14] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 121.827196][ T4817] udevd[4817]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.864455][ T4808] bond1: (slave bridge1): making interface the new active one [ 121.912539][ T4808] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 121.976254][ T4809] device macvlan2 entered promiscuous mode [ 122.011943][ T4809] device bond1 entered promiscuous mode [ 122.025214][ T4809] device bridge1 entered promiscuous mode [ 122.047465][ T4809] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 122.069075][ T4809] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 122.090823][ T14] usb 1-1: USB disconnect, device number 6 [ 122.151233][ T4809] device bond1 left promiscuous mode [ 122.165311][ T4809] device bridge1 left promiscuous mode [ 123.467854][ T22] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 123.688716][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 123.754842][ T22] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 123.766472][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.790011][ T22] usb 2-1: Product: syz [ 123.797661][ T22] usb 2-1: Manufacturer: syz [ 123.809160][ T22] usb 2-1: SerialNumber: syz [ 123.833983][ T22] usb 2-1: config 0 descriptor?? [ 123.987796][ T4347] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 124.207800][ T4347] usb 5-1: Using ep0 maxpacket: 32 [ 124.215855][ T4347] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 124.266269][ T4347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.381138][ T4347] usb 5-1: config 0 descriptor?? [ 124.588998][ T4347] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 124.627310][ T4347] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.709859][ T4347] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 124.740400][ T4347] usb 5-1: media controller created [ 124.865395][ T4347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.006282][ T4841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.110'. [ 125.342737][ T4347] DVB: Unable to find symbol dib7000p_attach() [ 125.357851][ T4347] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 125.466696][ T4848] tipc: Enabled bearer , priority 0 [ 125.534368][ T4848] device syzkaller0 entered promiscuous mode [ 125.602312][ T4847] tipc: Resetting bearer [ 125.657857][ T4347] rc_core: IR keymap rc-dib0700-rc5 not found [ 125.666679][ T4347] Registered IR keymap rc-empty [ 125.684882][ T4347] dvb-usb: could not initialize remote control. [ 125.691666][ T4347] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 125.714722][ T4847] tipc: Disabling bearer [ 125.725770][ T4347] usb 5-1: USB disconnect, device number 3 [ 125.836766][ T4347] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 126.709490][ T4347] usb 2-1: USB disconnect, device number 9 [ 126.807218][ T4867] fuse: Bad value for 'fd' [ 126.956967][ T4867] loop6: detected capacity change from 0 to 524288000 [ 127.217918][ T26] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.420644][ T26] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 127.465992][ T26] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 127.501775][ T26] usb 4-1: config 0 has no interfaces? [ 127.526640][ T26] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 127.576618][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.639298][ T26] usb 4-1: config 0 descriptor?? [ 128.083499][ T4347] usb 4-1: USB disconnect, device number 6 [ 128.507811][ T14] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 128.715668][ T14] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 128.736505][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.773971][ T14] usb 1-1: Product: syz [ 128.795214][ T14] usb 1-1: Manufacturer: syz [ 128.802916][ T14] usb 1-1: SerialNumber: syz [ 128.811194][ T4895] tipc: Enabled bearer , priority 0 [ 128.834418][ T14] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 128.891032][ T4897] device syzkaller0 entered promiscuous mode [ 128.991546][ T14] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 129.121416][ T4894] tipc: Resetting bearer [ 129.214594][ T4398] usb 1-1: USB disconnect, device number 7 [ 129.269113][ T4894] tipc: Disabling bearer [ 129.867833][ T4378] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 130.057796][ T4378] usb 4-1: Using ep0 maxpacket: 32 [ 130.072611][ T4378] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 130.107028][ T4378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.127899][ T14] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 130.150385][ T14] ath9k_htc: Failed to initialize the device [ 130.181351][ T4378] usb 4-1: config 0 descriptor?? [ 130.194275][ T4398] usb 1-1: ath9k_htc: USB layer deinitialized [ 130.419003][ T4378] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 130.443222][ T4378] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 130.484073][ T4378] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 130.503086][ T4378] usb 4-1: media controller created [ 130.586641][ T4378] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.919774][ T4378] DVB: Unable to find symbol dib7000p_attach() [ 130.933966][ T4378] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 130.971274][ T4917] ------------[ cut here ]------------ [ 130.977658][ T4917] usb 4-1: BOGUS control dir, pipe 80000780 doesn't match bRequestType c0 [ 130.997616][ T4917] WARNING: CPU: 0 PID: 4917 at drivers/usb/core/urb.c:413 usb_submit_urb+0x11a5/0x1910 [ 131.007639][ T4917] Modules linked in: [ 131.012056][ T4917] CPU: 0 PID: 4917 Comm: syz.3.126 Not tainted syzkaller #0 [ 131.019451][ T4917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 131.029788][ T4917] RIP: 0010:usb_submit_urb+0x11a5/0x1910 [ 131.035495][ T4917] Code: ff df 0f b6 44 05 00 84 c0 0f 85 6f 06 00 00 45 0f b6 07 48 c7 c7 60 3f 2e 8b 48 8b 74 24 18 4c 89 e2 44 89 f1 e8 9b 41 37 fb <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 93 f3 ff ff 89 e9 80 e1 07 [ 131.055225][ T4917] RSP: 0018:ffffc9000e4d7868 EFLAGS: 00010246 [ 131.061473][ T4917] RAX: b1bf2845addf4300 RBX: ffff88802843b100 RCX: 0000000000080000 [ 131.069559][ T4917] RDX: ffffc9000f1ec000 RSI: 00000000000041e3 RDI: 00000000000041e4 [ 131.077723][ T4917] RBP: 1ffff11003a483e0 R08: dffffc0000000000 R09: fffff52001c9ae9d [ 131.085749][ T4917] R10: fffff52001c9ae9d R11: 1ffff92001c9ae9c R12: ffff888076bbfbe0 [ 131.093814][ T4917] R13: ffff88805509e0f8 R14: 0000000080000780 R15: ffff88801d241f00 [ 131.101973][ T4917] FS: 00007f825bbfc6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 131.110994][ T4917] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.117629][ T4917] CR2: 00007f825bbfbf98 CR3: 00000000748ce000 CR4: 00000000003506f0 [ 131.125726][ T4917] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 131.133820][ T4917] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 131.141896][ T4917] Call Trace: [ 131.145216][ T4917] [ 131.148261][ T4917] usb_start_wait_urb+0x111/0x4b0 [ 131.153367][ T4917] ? usb_api_blocking_completion+0xb0/0xb0 [ 131.159290][ T4917] ? __kmalloc+0xe1/0x240 [ 131.163693][ T4917] usb_control_msg+0x22f/0x3e0 [ 131.168566][ T4917] dib0700_i2c_xfer+0xbbd/0xf80 [ 131.173513][ T4917] ? rt_mutex_slowlock+0x35a/0x710 [ 131.178749][ T4917] ? dib0700_set_gpio+0x1f0/0x1f0 [ 131.183845][ T4917] __i2c_transfer+0x864/0x2260 [ 131.188743][ T4917] ? i2c_cmd+0x110/0x110 [ 131.193049][ T4917] ? __might_fault+0xa6/0x120 [ 131.197849][ T4917] ? i2c_transfer+0x117/0x390 [ 131.202587][ T4917] i2c_transfer+0x24c/0x390 [ 131.207155][ T4917] ? __i2c_transfer+0x2260/0x2260 [ 131.212286][ T4917] ? __might_fault+0xc2/0x120 [ 131.217035][ T4917] ? __might_fault+0xa6/0x120 [ 131.221847][ T4917] ? _copy_from_user+0x10b/0x170 [ 131.226854][ T4917] i2cdev_ioctl_rdwr+0x3da/0x6c0 [ 131.231924][ T4917] i2cdev_ioctl+0x5ba/0x750 [ 131.236511][ T4917] ? i2cdev_write+0x120/0x120 [ 131.241333][ T4917] ? bpf_lsm_file_ioctl+0x5/0x10 [ 131.246329][ T4917] ? security_file_ioctl+0x7c/0xa0 [ 131.251547][ T4917] ? i2cdev_write+0x120/0x120 [ 131.256298][ T4917] __se_sys_ioctl+0xfa/0x170 [ 131.261020][ T4917] do_syscall_64+0x4c/0xa0 [ 131.265514][ T4917] ? clear_bhb_loop+0x60/0xb0 [ 131.270298][ T4917] ? clear_bhb_loop+0x60/0xb0 [ 131.275033][ T4917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.281036][ T4917] RIP: 0033:0x7f825ad8eec9 [ 131.285522][ T4917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.305265][ T4917] RSP: 002b:00007f825bbfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.313792][ T4917] RAX: ffffffffffffffda RBX: 00007f825afe6090 RCX: 00007f825ad8eec9 [ 131.321888][ T4917] RDX: 00002000000002c0 RSI: 0000000000000707 RDI: 0000000000000005 [ 131.330224][ T4917] RBP: 00007f825ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 131.338320][ T4917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.346346][ T4917] R13: 00007f825afe6128 R14: 00007f825afe6090 R15: 00007ffc57944958 [ 131.354462][ T4917] [ 131.357549][ T4917] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 131.364878][ T4917] CPU: 0 PID: 4917 Comm: syz.3.126 Not tainted syzkaller #0 [ 131.372211][ T4917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 131.382310][ T4917] Call Trace: [ 131.385643][ T4917] [ 131.388641][ T4917] dump_stack_lvl+0x168/0x22e [ 131.393369][ T4917] ? memcpy+0x3c/0x60 [ 131.397420][ T4917] ? show_regs_print_info+0x12/0x12 [ 131.402672][ T4917] ? load_image+0x3b0/0x3b0 [ 131.407253][ T4917] panic+0x2c9/0x710 [ 131.411223][ T4917] ? bpf_jit_dump+0xd0/0xd0 [ 131.415784][ T4917] __warn+0x2f8/0x4f0 [ 131.419799][ T4917] ? usb_submit_urb+0x11a5/0x1910 [ 131.424847][ T4917] ? usb_submit_urb+0x11a5/0x1910 [ 131.429897][ T4917] report_bug+0x2ba/0x4f0 [ 131.434253][ T4917] ? usb_submit_urb+0x11a5/0x1910 [ 131.439301][ T4917] handle_bug+0x3a/0x70 [ 131.443491][ T4917] exc_invalid_op+0x16/0x40 [ 131.448020][ T4917] asm_exc_invalid_op+0x16/0x20 [ 131.452924][ T4917] RIP: 0010:usb_submit_urb+0x11a5/0x1910 [ 131.458585][ T4917] Code: ff df 0f b6 44 05 00 84 c0 0f 85 6f 06 00 00 45 0f b6 07 48 c7 c7 60 3f 2e 8b 48 8b 74 24 18 4c 89 e2 44 89 f1 e8 9b 41 37 fb <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 93 f3 ff ff 89 e9 80 e1 07 [ 131.478272][ T4917] RSP: 0018:ffffc9000e4d7868 EFLAGS: 00010246 [ 131.484369][ T4917] RAX: b1bf2845addf4300 RBX: ffff88802843b100 RCX: 0000000000080000 [ 131.492370][ T4917] RDX: ffffc9000f1ec000 RSI: 00000000000041e3 RDI: 00000000000041e4 [ 131.500368][ T4917] RBP: 1ffff11003a483e0 R08: dffffc0000000000 R09: fffff52001c9ae9d [ 131.508363][ T4917] R10: fffff52001c9ae9d R11: 1ffff92001c9ae9c R12: ffff888076bbfbe0 [ 131.516353][ T4917] R13: ffff88805509e0f8 R14: 0000000080000780 R15: ffff88801d241f00 [ 131.524358][ T4917] ? usb_submit_urb+0x11a5/0x1910 [ 131.529417][ T4917] usb_start_wait_urb+0x111/0x4b0 [ 131.534469][ T4917] ? usb_api_blocking_completion+0xb0/0xb0 [ 131.540302][ T4917] ? __kmalloc+0xe1/0x240 [ 131.544763][ T4917] usb_control_msg+0x22f/0x3e0 [ 131.549553][ T4917] dib0700_i2c_xfer+0xbbd/0xf80 [ 131.554453][ T4917] ? rt_mutex_slowlock+0x35a/0x710 [ 131.559606][ T4917] ? dib0700_set_gpio+0x1f0/0x1f0 [ 131.564657][ T4917] __i2c_transfer+0x864/0x2260 [ 131.569454][ T4917] ? i2c_cmd+0x110/0x110 [ 131.573725][ T4917] ? __might_fault+0xa6/0x120 [ 131.578440][ T4917] ? i2c_transfer+0x117/0x390 [ 131.583146][ T4917] i2c_transfer+0x24c/0x390 [ 131.587682][ T4917] ? __i2c_transfer+0x2260/0x2260 [ 131.592733][ T4917] ? __might_fault+0xc2/0x120 [ 131.597451][ T4917] ? __might_fault+0xa6/0x120 [ 131.602159][ T4917] ? _copy_from_user+0x10b/0x170 [ 131.607123][ T4917] i2cdev_ioctl_rdwr+0x3da/0x6c0 [ 131.612095][ T4917] i2cdev_ioctl+0x5ba/0x750 [ 131.616630][ T4917] ? i2cdev_write+0x120/0x120 [ 131.621346][ T4917] ? bpf_lsm_file_ioctl+0x5/0x10 [ 131.626318][ T4917] ? security_file_ioctl+0x7c/0xa0 [ 131.631450][ T4917] ? i2cdev_write+0x120/0x120 [ 131.636243][ T4917] __se_sys_ioctl+0xfa/0x170 [ 131.640860][ T4917] do_syscall_64+0x4c/0xa0 [ 131.645298][ T4917] ? clear_bhb_loop+0x60/0xb0 [ 131.649996][ T4917] ? clear_bhb_loop+0x60/0xb0 [ 131.654694][ T4917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.660608][ T4917] RIP: 0033:0x7f825ad8eec9 [ 131.665041][ T4917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.684669][ T4917] RSP: 002b:00007f825bbfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.693103][ T4917] RAX: ffffffffffffffda RBX: 00007f825afe6090 RCX: 00007f825ad8eec9 [ 131.701265][ T4917] RDX: 00002000000002c0 RSI: 0000000000000707 RDI: 0000000000000005 [ 131.709252][ T4917] RBP: 00007f825ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 131.717241][ T4917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.725242][ T4917] R13: 00007f825afe6128 R14: 00007f825afe6090 R15: 00007ffc57944958 [ 131.733252][ T4917] [ 131.736655][ T4917] Kernel Offset: disabled [ 131.741053][ T4917] Rebooting in 86400 seconds..