last executing test programs: 1m57.616648464s ago: executing program 4 (id=5): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) getgid() 1m57.464109184s ago: executing program 4 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc6081, 0xcc) mmap(&(0x7f000062e000/0x1000)=nil, 0x1000, 0x2000001, 0x50, r0, 0xb4b40000) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0xfffa, @fixed, 0x9}, 0xe) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x82200, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@nobarrier}, {@noload}]}, 0x1, 0x50a, &(0x7f0000001700)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000000) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x10, 0x2, 0x4) sendfile(r1, r2, 0x0, 0x20fffe85) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) creat(&(0x7f0000000040)='./bus\x00', 0x0) 1m53.921511593s ago: executing program 4 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) connect$netrom(r4, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 1m51.361435084s ago: executing program 4 (id=20): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) 1m49.874521986s ago: executing program 4 (id=24): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="9feb010018000000000000008400000084000000060000000200000000000008020000000e0000000000000c0400000000000000000000030000000002000000010000000a000000090000000000000a050000000500000002000013060000000600000005000000010000000d000000000400000900000001"], &(0x7f0000001080)=""/152, 0xa2, 0x98, 0x0, 0x80000001}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) pipe2$watch_queue(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000000000), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{r3}, &(0x7f0000000e40), &(0x7f0000000e80)='%+9llu \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001200)={&(0x7f0000001000)='net_dev_xmit_timeout\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000280)={0x2, 'macvlan0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'xfrm0\x00', 0x2}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x4002) 1m48.584212693s ago: executing program 4 (id=30): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000008000006000000080000000000"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 1m32.767278171s ago: executing program 32 (id=30): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000008000006000000080000000000"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 16.588149932s ago: executing program 5 (id=230): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) syz_emit_vhci(&(0x7f00000012c0)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setregid(0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x80800) openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x40400) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 15.132489071s ago: executing program 5 (id=232): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009405, &(0x7f0000000180)) 15.007863007s ago: executing program 1 (id=234): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x4000) r5 = syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1208c02, &(0x7f0000000c40)={[{@mblk_io_submit}, {@noauto_da_alloc}, {@debug}, {@jqfmt_vfsv0}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nobarrier}, {@data_writeback}, {@stripe={'stripe', 0x3d, 0xbd}}, {@orlov}]}, 0x1, 0x606, &(0x7f0000000600)="$eJzs3c1vVFUbAPDnTD9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFoIUaGiNFk0oCW5MjBtjTFy5EP8LJbJlpW5cuHFlSIgaliaOudM7pdPeaenH9Fbm90uGnnvu3J5zpzxzzj1zzp0A2tZg9k8lYn9ETKeI/jS/uK8z8p2DC8978OeHZ7NHimr1td9TpDyv/vyU/+zLD+6JiB++T7GvY2W5M3PXLo5PTU1ezbeHZy9ND8/MXTt84dL4+cnzk5dHXxg9cfzY8RMjRzZ0XtcL8k7ffOe9/o/H3vz6y7/SyDe/jKU4GS/nT1x6HltlMAZrr0lauavvxFYXVqLOZdtpeQY7Vkf+9+uKiCeiPzqW/DX746NXSq0c0FLVFFEF2lRaR/xnvYVW1gXYTvV+QP3afvl1cKWUXgmwHe6fWhgAWBn/nQtjg9FTGxvY/SA1jPOkiNjYyFyjPRFx987YzXN3xm5Gi8bhgGLzNyLiyaL4T7X4H4ieGKjFf6Uh/rN+wZn8Z5b/6gZ7CsuHisU/bJ+F+O9ZNf6jSfy/tST+395EHfJLkeu9DfHf6+oDAAAAAAAA1un2qYh4vujz/8ri/J8omP/TFxEnt6D8wWXbKz//r9zbgmKAAvdPRbxUOP+3Uv/8faAjT/2nNh+gK527MDV5JCL+GxGHomtXtj2yShmHP9n3RbN9g/n8v/ojK/9uPhcwr8e9zl2Nx0yMD45v9ryBiPs3Ip4qnP+bFtv/VND+Z+8H049Yxr5nb51ptm/t+AdapfpVxMHC9v/hXSvS6vfnGK71B4brvYKVnv7g02+blb/R+HeLCdi8rP3fvXr8D6Sl9+uZWfXXzRdlHp3rrDY7YGP9/9nx7vR67a5C3Xne++Ozs1dHIrrT6Y4styF/dK1XAR4zPxVn1+OhHi9Z/B96ZvXxv6L+f29BsKc/GtcU1/3/775fm1VT/x/Kk8X/xLra//UnRm8NfNes/Edr/4/V2vpDeU7W/rfuFYF/j8/rYdrdmF8Qjp1Fu7a7vgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOKhExJ5IlaHFdKUyNBTRFxH/i92VqSszs8+du/Lu5YlsX+37/yv1b/rtX9hOte//r2Tph9uj0bh9NCL2RsRnHb217aGzV6Ymyj55AAAAAAAAAAAAAAAAAAAA2CH6mqz/z/zWUXbtgJbrLLsCQGkK4v/HMuoBbD/tP7SvDcV/mt/6igDbTvsP7Uv8Q/sS/9C+xD+0L/EP7WrZOH4qqx4AAAAAAMAW2Xvg9s8pIuZf7K09Mt35vq5Sawa0WqXsCgClcYsfaF+m/kH7co0PrDXrt6fpQZuZLzx9dhMHAwAAAAAAAAAAAEDbObjf+n9oV9b/Q/uy/h/aV339/4GS6wFsP9f4QKyxkr9w/f+aRwEAAAAAAAAAAAAAW2mmuitiamry6szctYvjLUt0R0SLi9h04o2dUY2iRG+LfnO1Wr2e/S8o/QQfj0R9KvxOqc+yRH2t36MdVd57EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0OifAAAA//8sxicA") r6 = openat(r5, &(0x7f0000000340)='./file0\x00', 0x101000, 0x0) fsetxattr$system_posix_acl(r6, &(0x7f00000000c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) 14.043104031s ago: executing program 5 (id=235): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 13.068135468s ago: executing program 2 (id=236): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) ioctl$TCXONC(r1, 0x540a, 0x2) 12.480220254s ago: executing program 1 (id=237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) 12.348977491s ago: executing program 2 (id=239): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x5) 12.256297003s ago: executing program 3 (id=240): r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x109042, 0x0) write$P9_RSTATu(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="330200007d02000005f2000000040000000001000000050000000000000000000000000000000000000000000000000000001b00046e6f6465767b48766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500002b595fcb14034354b9fd9ef196a51cd5157adc8103b494e10f00cfc26dd7c5b499bfb42b93807e8b5a5d00f8f669fb716dcf315ecaf385409ac65b9408678c2c3ba61d52c36cde7b07dbdab2884baf05007e04e69db0c3ca00000000000047ec21cabff20f9c1cbe36f4fd1a4cc29e953fa5e052157480e8000000000000000000000081ffffff002c016f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f455daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff0000000000000000000000000000000000a0f4421de5e0aff337c670531e55c0cb164833a744fcc6e4915fa9aad8081d79e94ca745f42f40531ed2b33b1e49211fad639ec314e795f0ea47c2ef78e3a565839ef4ab8140f730c0640ff4510fa6c7c5269fcf5710398b4698b6e69c1b8179965541d1a8ba524199fce3716820b6e9b4936087f70d2ccde1e71afc2672c5c6f4afb7dc809f4c35802cea8d46bdd9dc3fd44eac373e2eac902b06bf5b71", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0], 0x233) 11.405481033s ago: executing program 2 (id=241): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004800010024bd7000fcdbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0a000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x20040000) 11.378468686s ago: executing program 1 (id=242): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x2, 0x58864b00}], '\x00'}, @datasec={0x4, 0x0, 0x0, 0xf, 0x3, [], "e0ea94"}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000001f80)=""/4094, 0x44, 0xffe, 0x1}, 0x28) 11.176219612s ago: executing program 1 (id=243): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x82040480, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11.150063996s ago: executing program 3 (id=244): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) connect$unix(r3, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) 11.04029253s ago: executing program 2 (id=245): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009405, &(0x7f0000000180)) 8.684229895s ago: executing program 1 (id=246): sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = getpid() syz_pidfd_open(r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) getgroups(0x0, 0x0) 8.590047878s ago: executing program 0 (id=247): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e21, 0x100, @mcast1, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0x9, 0xe, 0x3]}}, 0x5c) 7.476162872s ago: executing program 2 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x98, &(0x7f0000000940)=""/152}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) 7.296170565s ago: executing program 0 (id=249): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000001836000001000000000000000000000018170000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x44}, 0x94) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r5, 0xdffaa000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x2, 0x0, 'syz1\x00', &(0x7f0000000180)=['-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0x14}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, 0x0, 0x4000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000038c0), 0x0) 7.25569602s ago: executing program 5 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) 7.170547332s ago: executing program 3 (id=251): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 5.454887493s ago: executing program 5 (id=252): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000640)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000740)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0}) 5.443736465s ago: executing program 0 (id=253): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x2a2, &(0x7f0000000f40)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x40000) writev(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) r5 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) dup3(r5, r4, 0x80000) finit_module(r5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) truncate(&(0x7f0000000080)='./file1\x00', 0x2) 5.189422738s ago: executing program 3 (id=254): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r0, 0x0, 0x233) 4.656204907s ago: executing program 3 (id=255): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0xda, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.164632491s ago: executing program 0 (id=256): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) setresgid(0x0, 0xee01, 0x0) setfsgid(0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x9002}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x4}, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$TCSETA(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002dbd7000ffdbdf250900020070797a310000000008004100736977001400330076657468305f746f5f627269646765006b9a8e035b14a54ea9d85595f3c17e0282f52c2d066148b59c153ab241e4926ef835a097b52937e4689947bbc0131d7cd772b559502f52f58b573d114e1be328affd3db3c42696c418b8f5775ef2cc20f18b753b7b11c27b6adc8f71a00be4fac69cc6e9a99ae0580675463b3996ad3cf566611621aa30a113de2a6d79e7eaf57e48811cd58f64bed0772655ca4192f76861900038b0c0218698afca2ab06973e326d269ce"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 2.569486207s ago: executing program 2 (id=257): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000280)={0x0, 0x1c2e, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 2.292143943s ago: executing program 0 (id=258): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000000180)) 1.07655408s ago: executing program 1 (id=259): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0003}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.009316979s ago: executing program 0 (id=260): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="636f6465706167653d63703733372c756d61736b3d30303030303030303030303030303030303030373737372c696f636861727365743d6d6163726f6d616e2c00c132f7d36481fcf97dccf78cfa7daf6825ef665eb163db201d6c13cd72fa3afa91aafaf54e6ba6969d3641b1831dfe26a89b1b2820620e55fbf859a609e57f2aab8ea8a7915d75fb4dc53bc4ac3dd3102fbf2571578726077b2b7577f55dfaa53a5bab2258b97b01aff1526a0ab78dcbb8d7485f3f185aaaa507641d3db038d754c159bb71dafcfa23b22342ed24e54f97b9092408b1de3725bb0cd01b4980d46bd9c0556fecbeebdd2a797c89f8813caeba7c23190d8579f163348658aae1293cb6006b75dc26f0c7ea572750dc7eec935f7362cdd102f0b16f49574aea3b0a043c17a15474892db70ec3059bef026cf9e747c50c93e9d6143cabb7be2bd09760a46ca5ccd4c703656453f46409e7a96a02907400"/356], 0x4, 0x33c, &(0x7f0000000700)="$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") mkdir(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x24) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 200.375144ms ago: executing program 5 (id=261): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f00000003c0)}], 0x2}], 0x1, 0x40800) recvmsg(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='io\x00') lseek(r4, 0x9, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1, 0x40002, 0x803a0, 0x1, 0x101}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r7, &(0x7f0000000080), 0x0}, 0x20) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44080) socket(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=262): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) timer_create(0x2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000340)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x200000, 0x9, "00000000020000000900", "00004702", "03000800", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff"]}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804df000000000000010902"], 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.218' (ED25519) to the list of known hosts. [ 52.856228][ T4253] cgroup: Unknown subsys name 'net' [ 53.014482][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.288026][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.668765][ T4269] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.677046][ T4269] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.685154][ T4269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.693002][ T4269] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.700492][ T4269] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.707972][ T4269] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.715368][ T4269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.724399][ T4269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.732168][ T4269] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.739963][ T4269] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.747446][ T4269] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.747612][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.754746][ T4269] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.763711][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.776660][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.777916][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.791417][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.799279][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.806824][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.814389][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.817495][ T4269] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.822694][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.837495][ T4267] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.846860][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.854516][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.854673][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.862568][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.870367][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.884234][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.892498][ T4271] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.248554][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 56.377310][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 56.396077][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 56.432501][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.441144][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.452958][ T4276] device bridge_slave_0 entered promiscuous mode [ 56.494036][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.502517][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.519381][ T4276] device bridge_slave_1 entered promiscuous mode [ 56.558051][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 56.581815][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.589177][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.597250][ T4273] device bridge_slave_0 entered promiscuous mode [ 56.617461][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.634674][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 56.645253][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.652762][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.660966][ T4273] device bridge_slave_1 entered promiscuous mode [ 56.683745][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.726188][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.733370][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.741823][ T4266] device bridge_slave_0 entered promiscuous mode [ 56.753936][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.761209][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.769478][ T4266] device bridge_slave_1 entered promiscuous mode [ 56.778035][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.790584][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.834469][ T4276] team0: Port device team_slave_0 added [ 56.845478][ T4276] team0: Port device team_slave_1 added [ 56.878701][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.889897][ T4273] team0: Port device team_slave_0 added [ 56.917575][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.928583][ T4273] team0: Port device team_slave_1 added [ 56.942592][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.949985][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.957728][ T4277] device bridge_slave_0 entered promiscuous mode [ 56.974900][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.982053][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.012046][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.041445][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.048747][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.059731][ T4277] device bridge_slave_1 entered promiscuous mode [ 57.074689][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.081991][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.108265][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.141545][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.148719][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.156604][ T4265] device bridge_slave_0 entered promiscuous mode [ 57.170401][ T4266] team0: Port device team_slave_0 added [ 57.177247][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.184395][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.210384][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.231057][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.238501][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.247637][ T4265] device bridge_slave_1 entered promiscuous mode [ 57.274027][ T4266] team0: Port device team_slave_1 added [ 57.281773][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.288861][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.317596][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.343535][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.354517][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.390437][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.406789][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.428863][ T4276] device hsr_slave_0 entered promiscuous mode [ 57.436272][ T4276] device hsr_slave_1 entered promiscuous mode [ 57.443871][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.451018][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.477622][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.520817][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.527957][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.554220][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.591778][ T4273] device hsr_slave_0 entered promiscuous mode [ 57.598528][ T4273] device hsr_slave_1 entered promiscuous mode [ 57.605743][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.613982][ T4273] Cannot create hsr debugfs directory [ 57.625553][ T4277] team0: Port device team_slave_0 added [ 57.634212][ T4265] team0: Port device team_slave_0 added [ 57.657520][ T4277] team0: Port device team_slave_1 added [ 57.664935][ T4265] team0: Port device team_slave_1 added [ 57.744385][ T4266] device hsr_slave_0 entered promiscuous mode [ 57.751134][ T4266] device hsr_slave_1 entered promiscuous mode [ 57.757771][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.766563][ T4266] Cannot create hsr debugfs directory [ 57.782482][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.792629][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.818913][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.830918][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.837879][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.864105][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.879868][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 57.893028][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.900601][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.927029][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.950055][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.957015][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.983085][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 57.989171][ T4272] Bluetooth: hci1: command 0x0409 tx timeout [ 57.989355][ T4272] Bluetooth: hci4: command 0x0409 tx timeout [ 57.995356][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 58.007221][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.099253][ T4277] device hsr_slave_0 entered promiscuous mode [ 58.108647][ T4277] device hsr_slave_1 entered promiscuous mode [ 58.115383][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.123597][ T4277] Cannot create hsr debugfs directory [ 58.162028][ T4265] device hsr_slave_0 entered promiscuous mode [ 58.168738][ T4265] device hsr_slave_1 entered promiscuous mode [ 58.175863][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.183794][ T4265] Cannot create hsr debugfs directory [ 58.343863][ T4276] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.365823][ T4276] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.391643][ T4276] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.410294][ T4276] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.448724][ T4266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.457804][ T4266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.476085][ T4266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.503889][ T4266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.557699][ T4273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.569307][ T4273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.578820][ T4273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.600297][ T4273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.671617][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.698553][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.708584][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.734231][ T4277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.749547][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.761781][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.779978][ T4277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.797056][ T4277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.813879][ T4277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.822642][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.832393][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.840932][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.850599][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.859811][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.867086][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.875797][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.886712][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.895415][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.902518][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.910426][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.922440][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.941329][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.967538][ T4265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.984046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.993046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.002561][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.009663][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.020026][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.028570][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.051467][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.072762][ T4265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.086336][ T4265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.097640][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.107608][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.117605][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.126294][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.134975][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.143489][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.152270][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.161437][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.173182][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.180576][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.188442][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.198032][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.207729][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.233604][ T4265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.246427][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.255333][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.264609][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.273821][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.282995][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.291957][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.305100][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.321326][ T4266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.333295][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.350837][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.358666][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.368078][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.377618][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.390551][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.400032][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.440535][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.476792][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.515409][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.551278][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.568794][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.578994][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.586102][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.600939][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.610219][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.618757][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.625916][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.634248][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.643772][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.656619][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.685236][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.703880][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.730254][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.749911][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.758831][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.778482][ T4273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.803687][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.834706][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.870033][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.880101][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.890917][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.904623][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.914395][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.934507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.944721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.959543][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 59.970548][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.981217][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.007680][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.018046][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.039183][ T4269] Bluetooth: hci2: command 0x041b tx timeout [ 60.039570][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 60.045222][ T4269] Bluetooth: hci1: command 0x041b tx timeout [ 60.051319][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 60.069486][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.089500][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.096941][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.111048][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.118578][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.139177][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.148588][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.157555][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.164794][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.173118][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.196623][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.207349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.218223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.232027][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.239300][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.255603][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.287464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.296132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.306187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.317027][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.324214][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.333552][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.342972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.352211][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.362268][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.369423][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.377812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.387663][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.419564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.429307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.438230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.452364][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.463290][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.472674][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.487303][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.496463][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.506173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.514846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.525572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.536195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.544331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.574839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.583721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.593001][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.603195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.612551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.621647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.630581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.639268][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.664150][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.683910][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.696198][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.710609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.718344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.734992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.743598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.758717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.767975][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.776719][ T4266] device veth0_vlan entered promiscuous mode [ 60.802406][ T4266] device veth1_vlan entered promiscuous mode [ 60.811711][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.868836][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.885608][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.915953][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.935167][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.965199][ T4266] device veth0_macvtap entered promiscuous mode [ 60.994633][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.004482][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.034637][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.065198][ T4266] device veth1_macvtap entered promiscuous mode [ 61.131944][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.141863][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.166580][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.181389][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.195553][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.214944][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.241412][ T4273] device veth0_vlan entered promiscuous mode [ 61.253140][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.262360][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.275137][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.286246][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.308805][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.334397][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.344388][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.353887][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.362607][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.372086][ T4276] device veth0_vlan entered promiscuous mode [ 61.382098][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.391784][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.401788][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.410562][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.427762][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.437081][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.445683][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.454351][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.462913][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.472990][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.482482][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.493000][ T4273] device veth1_vlan entered promiscuous mode [ 61.504653][ T4276] device veth1_vlan entered promiscuous mode [ 61.513859][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.596849][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.606548][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.615638][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.625123][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.658662][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.676675][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.693819][ T4273] device veth0_macvtap entered promiscuous mode [ 61.711367][ T4265] device veth0_vlan entered promiscuous mode [ 61.725635][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.734060][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.744035][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.753008][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.761885][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.770535][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.778666][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.787673][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.795780][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.805089][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.813879][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.835485][ T4277] device veth0_vlan entered promiscuous mode [ 61.851152][ T4276] device veth0_macvtap entered promiscuous mode [ 61.863656][ T4265] device veth1_vlan entered promiscuous mode [ 61.884686][ T4273] device veth1_macvtap entered promiscuous mode [ 61.895560][ T4276] device veth1_macvtap entered promiscuous mode [ 61.921592][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.930651][ T4277] device veth1_vlan entered promiscuous mode [ 61.938302][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.972132][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.981222][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.990172][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.998042][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.006839][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.015261][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.023623][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.036255][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.047033][ T4269] Bluetooth: hci0: command 0x040f tx timeout [ 62.055272][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.066906][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.078621][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.081684][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.098262][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.104803][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.118266][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.126269][ T4272] Bluetooth: hci3: command 0x040f tx timeout [ 62.126289][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 62.132348][ T4272] Bluetooth: hci2: command 0x040f tx timeout [ 62.132434][ T4272] Bluetooth: hci1: command 0x040f tx timeout [ 62.151167][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.162149][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.172282][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.182819][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.194108][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.202087][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.211552][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.220584][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.229304][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.237937][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.248341][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.257602][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.266466][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.295818][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.306207][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.316980][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.326120][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.346541][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.358076][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.369359][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.379922][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.391427][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.413218][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.424655][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.435519][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.445250][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.457975][ T4277] device veth0_macvtap entered promiscuous mode [ 62.494862][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.511600][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.541530][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.550961][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.565832][ T4265] device veth0_macvtap entered promiscuous mode [ 62.573955][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.583663][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.593008][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.606547][ T4277] device veth1_macvtap entered promiscuous mode [ 62.631994][ T4265] device veth1_macvtap entered promiscuous mode [ 62.724048][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.743593][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.754725][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.782197][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.792241][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.803209][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.821203][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.850175][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.886125][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.896781][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.912805][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.932632][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.944102][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.954115][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.967019][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.980971][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.294568][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.359777][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.436760][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.478128][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.553280][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.574573][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.587537][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.597682][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.609827][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.619995][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.631346][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.644441][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.702150][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.729624][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.744292][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.756063][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.769882][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.782109][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.794171][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.806309][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.819274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.831166][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.887462][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.963743][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.975220][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.988640][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.119420][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 64.199659][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 64.199685][ T4272] Bluetooth: hci2: command 0x0419 tx timeout [ 64.200464][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 64.219353][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 64.315592][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.365133][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.380613][ T4277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.390184][ T4277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.399234][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.409020][ T4277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.409472][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.428119][ T4277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.440985][ T4265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.450543][ T4265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.459544][ T4265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.468370][ T4265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.489529][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.499479][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.519256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 64.630796][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.638781][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.649236][ T4390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.657328][ T4390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.696279][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.707502][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.793912][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.794770][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.806169][ T4392] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 64.823115][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.832923][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.843690][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.893501][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.953685][ T4392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 65.000349][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.008463][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.056500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.092781][ T4390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.114111][ T4390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.236743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.382681][ T4398] loop4: detected capacity change from 0 to 32768 [ 65.396021][ T22] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.640070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 65.648377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 65.656634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 65.664886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 65.673093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 65.681336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 65.689703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 65.698972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 66.724514][ T4410] sched: RT throttling activated [ 68.700262][ T22] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 68.719033][ T22] usb 3-1: can't read configurations, error -71 [ 70.729446][ T4311] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.055019][ T4311] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 71.085408][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.145422][ T4311] usb 1-1: Product: syz [ 71.174911][ T4311] usb 1-1: Manufacturer: syz [ 71.188538][ T4311] usb 1-1: SerialNumber: syz [ 71.327214][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.333875][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.429646][ T4446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 71.671584][ T4311] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 72.548095][ T4456] netlink: 75 bytes leftover after parsing attributes in process `syz.2.17'. [ 73.433607][ T4461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.26'. [ 73.577893][ T4467] IPVS: stopping backup sync thread 4468 ... [ 73.596096][ T4468] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 73.627687][ T4467] netlink: 'syz.4.24': attribute type 10 has an invalid length. [ 73.763036][ T4467] team0: Port device dummy0 added [ 73.980288][ T4311] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 74.022987][ T4311] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 74.087389][ T4311] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -32 [ 74.307326][ T4311] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 74.372150][ T4311] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 74.413075][ T4311] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 74.429695][ T4311] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 74.443060][ T4311] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 74.456503][ T4311] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 74.463656][ T4479] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.468652][ T4311] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 74.499889][ T4311] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 74.511752][ T4311] lan78xx: probe of 1-1:1.0 failed with error -71 [ 74.525649][ T4311] usb 1-1: USB disconnect, device number 2 [ 74.966689][ T4486] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 75.963951][ T4504] netlink: 32 bytes leftover after parsing attributes in process `syz.1.35'. [ 76.552773][ T14] cfg80211: failed to load regulatory.db [ 77.666194][ T4518] loop2: detected capacity change from 0 to 512 [ 77.776106][ T4518] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.849459][ T4518] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.007875][ T4518] EXT4-fs (loop2): 1 truncate cleaned up [ 78.029298][ T4518] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 78.253384][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 79.391839][ T4541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.44'. [ 79.626984][ T4545] tmpfs: Unknown parameter 'usrquota' [ 84.011858][ T4579] netlink: 'syz.1.49': attribute type 12 has an invalid length. [ 85.207876][ T26] audit: type=1326 audit(1768538003.763:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.3.57" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb48118f749 code=0x0 [ 85.352474][ T4585] loop2: detected capacity change from 0 to 1024 [ 85.393406][ T4585] hfsplus: unable to parse mount options [ 85.577330][ T4585] loop2: detected capacity change from 0 to 2048 [ 85.642223][ T4585] NILFS (loop2): unrecognized mount option "./file1" [ 88.148366][ T4620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'. [ 88.198863][ T4620] device bridge_slave_1 left promiscuous mode [ 88.206772][ T4620] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.230470][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.327686][ T4620] device bridge_slave_0 left promiscuous mode [ 88.345042][ T26] audit: type=1326 audit(2000000002.620:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm=297D5922 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48118f749 code=0x7ffc0000 [ 88.359204][ T4620] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.387691][ T26] audit: type=1326 audit(2000000002.620:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm=297D5922 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48118f749 code=0x7ffc0000 [ 88.421289][ T26] audit: type=1326 audit(2000000002.660:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48118f749 code=0x7ffc0000 [ 88.443557][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 88.453787][ T26] audit: type=1326 audit(2000000002.660:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48118f749 code=0x7ffc0000 [ 88.482366][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 88.514626][ T7] usb 1-1: config 8 has an invalid interface number: 255 but max is 0 [ 88.528331][ T7] usb 1-1: config 8 has no interface number 0 [ 88.540075][ T7] usb 1-1: config 8 interface 255 has no altsetting 0 [ 88.546924][ T26] audit: type=1326 audit(2000000002.660:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm=297D5922 exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb48118f749 code=0x7ffc0000 [ 88.587361][ T7] usb 1-1: string descriptor 0 read error: -22 [ 88.615498][ T7] usb 1-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 88.627082][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.635301][ T26] audit: type=1326 audit(2000000002.660:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm=297D5922 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48118f749 code=0x7ffc0000 [ 88.664589][ T26] audit: type=1326 audit(2000000002.660:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm=297D5922 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48118f749 code=0x7ffc0000 [ 88.696997][ T26] audit: type=1326 audit(2000000002.660:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb48118f749 code=0x7ffc0000 [ 88.723126][ T26] audit: type=1326 audit(2000000002.660:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4622 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb48118f749 code=0x7ffc0000 [ 91.220339][ T7] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.0-1, 00:00:00:00:00:00. [ 91.296357][ T7] usb 1-1: USB disconnect, device number 3 [ 91.408175][ T4283] Bluetooth: Wrong link type (-22) [ 92.519605][ T4272] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.528433][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.536647][ T4272] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.547126][ T4279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.554816][ T4272] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.562260][ T4279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.795352][ T4646] loop0: detected capacity change from 0 to 32768 [ 93.313841][ T4646] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.78 (4646) [ 93.397740][ T4646] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 93.430532][ T4646] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 93.466569][ T4646] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 93.478072][ T4646] BTRFS info (device loop0): use zstd compression, level 3 [ 93.504523][ T4646] BTRFS info (device loop0): using free space tree [ 93.602592][ T4655] chnl_net:caif_netlink_parms(): no params data found [ 94.955997][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 95.107262][ T4646] BTRFS error (device loop0): open_ctree failed: -22 [ 95.529809][ T4655] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.632621][ T4655] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.700286][ T4655] device bridge_slave_0 entered promiscuous mode [ 95.778840][ T4655] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.974979][ T4655] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.020527][ T4655] device bridge_slave_1 entered promiscuous mode [ 96.989672][ T4655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.999189][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 97.080991][ T4655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.416707][ T4655] team0: Port device team_slave_0 added [ 99.119631][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 99.230174][ T4655] team0: Port device team_slave_1 added [ 99.334957][ T4726] loop0: detected capacity change from 0 to 64 [ 99.411828][ T4655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.490291][ T4655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.651217][ T4655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.686490][ T4655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.697249][ T4655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.725994][ T4655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.966682][ T4731] loop2: detected capacity change from 0 to 32768 [ 99.973811][ T4731] ======================================================= [ 99.973811][ T4731] WARNING: The mand mount option has been deprecated and [ 99.973811][ T4731] and is ignored by this kernel. Remove the mand [ 99.973811][ T4731] option from the mount to silence this warning. [ 99.973811][ T4731] ======================================================= [ 100.994590][ T4746] loop0: detected capacity change from 0 to 40427 [ 101.005954][ T4746] F2FS-fs (loop0): invalid crc value [ 101.031130][ T4746] F2FS-fs (loop0): Found nat_bits in checkpoint [ 101.076795][ T4746] F2FS-fs (loop0): Start checkpoint disabled! [ 101.089748][ T4731] XFS (loop2): Mounting V5 Filesystem [ 101.096871][ T4746] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 101.159225][ T4272] Bluetooth: hci5: command 0x0419 tx timeout [ 101.212514][ T4655] device hsr_slave_0 entered promiscuous mode [ 101.323730][ T4731] XFS (loop2): Ending clean mount [ 101.337029][ T4731] XFS (loop2): Quotacheck needed: Please wait. [ 102.586103][ T4655] device hsr_slave_1 entered promiscuous mode [ 102.716057][ T4655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.758547][ T4655] Cannot create hsr debugfs directory [ 102.854181][ T4731] XFS (loop2): Quotacheck: Done. [ 102.919322][ T4353] kworker/u4:6: attempt to access beyond end of device [ 102.919322][ T4353] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 103.068593][ T4273] XFS (loop2): Unmounting Filesystem [ 104.322828][ T26] audit: type=1326 audit(2000000018.590:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4767 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfff78f749 code=0x7ffc0000 [ 104.348899][ T26] audit: type=1326 audit(2000000018.590:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4767 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfff78f749 code=0x7ffc0000 [ 104.372609][ T26] audit: type=1326 audit(2000000018.590:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4767 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fdfff78f749 code=0x7ffc0000 [ 104.504551][ T26] audit: type=1326 audit(2000000018.590:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4767 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfff78f749 code=0x7ffc0000 [ 104.897704][ T26] audit: type=1326 audit(2000000018.590:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4767 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfff78f749 code=0x7ffc0000 [ 104.926383][ T26] audit: type=1326 audit(2000000018.590:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4767 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfff78f749 code=0x7ffc0000 [ 105.045020][ T26] audit: type=1326 audit(2000000018.590:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4767 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfff78f749 code=0x7ffc0000 [ 105.073544][ T26] audit: type=1326 audit(2000000018.590:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4767 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfff78f749 code=0x7ffc0000 [ 105.095736][ T26] audit: type=1326 audit(2000000018.590:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4767 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfff78f749 code=0x7ffc0000 [ 105.133328][ T26] audit: type=1326 audit(2000000018.590:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4767 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfff78f749 code=0x7ffc0000 [ 105.205521][ T4655] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.293802][ T4655] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.369914][ T4655] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.393395][ T4655] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.838916][ T4655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.865428][ T4792] loop2: detected capacity change from 0 to 128 [ 105.992649][ T4792] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 106.045588][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.075838][ T4792] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.116133][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.145462][ T4655] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.191643][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.202070][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.273165][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.280402][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.592377][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.714829][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.777279][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.858426][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 106.991640][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.998717][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.422505][ T4807] loop3: detected capacity change from 0 to 40427 [ 107.474880][ T4807] F2FS-fs (loop3): invalid crc value [ 107.513615][ T4807] F2FS-fs (loop3): Found nat_bits in checkpoint [ 107.548471][ T4807] F2FS-fs (loop3): Start checkpoint disabled! [ 107.568465][ T4807] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 107.765855][ T4661] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.086300][ T4819] syz.3.110: attempt to access beyond end of device [ 108.086300][ T4819] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 108.133161][ T4820] syz.3.110: attempt to access beyond end of device [ 108.133161][ T4820] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 108.149849][ T4820] syz.3.110: attempt to access beyond end of device [ 108.149849][ T4820] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 108.432786][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.149212][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.303360][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.373626][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.480956][ T4661] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.560735][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.572759][ T4507] kworker/u4:11: attempt to access beyond end of device [ 109.572759][ T4507] loop3: rw=1, sector=45104, nr_sectors = 56 limit=40427 [ 109.588589][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.636554][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.645428][ T4507] kworker/u4:11: attempt to access beyond end of device [ 109.645428][ T4507] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 109.671221][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.696156][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.779999][ T4507] kworker/u4:11: attempt to access beyond end of device [ 109.779999][ T4507] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 109.797147][ T4661] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.849243][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.865234][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.895749][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.946515][ T4661] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.164125][ T4843] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 116.230282][ T4256] kernel write not supported for file /vcs (pid: 4256 comm: kworker/0:3) [ 116.430121][ T4655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.437223][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.469055][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.601968][ T4890] loop0: detected capacity change from 0 to 40427 [ 117.619934][ T4890] F2FS-fs (loop0): invalid crc value [ 117.645340][ T4890] F2FS-fs (loop0): Found nat_bits in checkpoint [ 117.681151][ T4890] F2FS-fs (loop0): Start checkpoint disabled! [ 117.699094][ T4890] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 117.881204][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 117.881244][ T26] audit: type=1800 audit(2000000032.160:39): pid=4898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.125" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 117.925840][ T4898] syz.0.125: attempt to access beyond end of device [ 117.925840][ T4898] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 117.977236][ T4899] syz.0.125: attempt to access beyond end of device [ 117.977236][ T4899] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 117.991469][ T4899] syz.0.125: attempt to access beyond end of device [ 117.991469][ T4899] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 118.237284][ T4900] loop1: detected capacity change from 0 to 64 [ 118.520735][ T32] kworker/u4:2: attempt to access beyond end of device [ 118.520735][ T32] loop0: rw=1, sector=45104, nr_sectors = 56 limit=40427 [ 118.774313][ T26] audit: type=1804 audit(2000000033.040:40): pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.126" name="/newroot/39/file1/bus" dev="loop1" ino=21 res=1 errno=0 [ 118.828126][ T32] kworker/u4:2: attempt to access beyond end of device [ 118.828126][ T32] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 119.440059][ T4430] kworker/u4:10: attempt to access beyond end of device [ 119.440059][ T4430] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 120.695739][ T4916] Device name cannot be null; rc = [-22] [ 121.707480][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.754276][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.817265][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.890286][ T4964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.133'. [ 123.489665][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.899416][ T4655] device veth0_vlan entered promiscuous mode [ 123.911130][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.913354][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.933243][ T4979] binder: 4976:4979 ioctl 400c620e 0 returned -14 [ 124.959671][ T4655] device veth1_vlan entered promiscuous mode [ 124.997134][ T4661] device hsr_slave_0 left promiscuous mode [ 124.997530][ T4661] device hsr_slave_1 left promiscuous mode [ 125.002036][ T4661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.002117][ T4661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.010556][ T4661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.010575][ T4661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.010904][ T4661] device bridge_slave_1 left promiscuous mode [ 125.012179][ T4661] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.095108][ T4661] device bridge_slave_0 left promiscuous mode [ 126.095220][ T4661] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.203778][ T4661] device veth1_macvtap left promiscuous mode [ 126.204066][ T4661] device veth0_macvtap left promiscuous mode [ 126.204183][ T4661] device veth1_vlan left promiscuous mode [ 126.204382][ T4661] device veth0_vlan left promiscuous mode [ 126.499714][ T4963] tty tty3: ldisc open failed (-12), clearing slot 2 [ 126.518996][ T4960] tty tty1: ldisc open failed (-12), clearing slot 0 [ 130.509431][ T5008] loop2: detected capacity change from 0 to 40427 [ 130.521838][ T5009] loop1: detected capacity change from 0 to 8 [ 130.579096][ T5009] SQUASHFS error: zlib decompression failed, data probably corrupt [ 130.587425][ T5009] SQUASHFS error: Failed to read block 0x9b: -5 [ 130.593792][ T5009] SQUASHFS error: Unable to read metadata cache entry [99] [ 130.601270][ T5009] SQUASHFS error: Unable to read inode 0x127 [ 131.157798][ T5008] F2FS-fs (loop2): invalid crc value [ 131.165374][ T5008] F2FS-fs (loop2): Found nat_bits in checkpoint [ 131.227631][ T5008] F2FS-fs (loop2): Start checkpoint disabled! [ 131.237785][ T5008] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 131.749675][ T4661] team0 (unregistering): Port device team_slave_1 removed [ 131.954722][ T4661] team0 (unregistering): Port device team_slave_0 removed [ 132.014757][ T4661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.109692][ T4661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.120624][ T46] kworker/u4:3: attempt to access beyond end of device [ 132.120624][ T46] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 132.219239][ T5021] loop1: detected capacity change from 0 to 256 [ 132.256181][ T5021] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.286304][ T5021] mmap: syz.1.150 (5021) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 132.769845][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.776535][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.293345][ T4661] team0 (unregistering): Port device dummy0 removed [ 133.725349][ T5030] loop1: detected capacity change from 0 to 32768 [ 133.739071][ T5030] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.153 (5030) [ 133.762346][ T5030] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.772629][ T5030] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 133.781353][ T5030] BTRFS info (device loop1): using free space tree [ 133.843582][ T4661] bond0 (unregistering): Released all slaves [ 133.859305][ T5030] BTRFS info (device loop1): enabling ssd optimizations [ 134.306679][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.335641][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.717322][ T4655] device veth0_macvtap entered promiscuous mode [ 135.736372][ T4655] device veth1_macvtap entered promiscuous mode [ 135.759354][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.789622][ T5060] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 135.839548][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.892659][ T5029] Process accounting resumed [ 135.931886][ T4655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.097906][ T4655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.108258][ T4655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.119947][ T4655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.133043][ T4655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.143950][ T4655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.154222][ T4655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.584730][ T4655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.752575][ T4655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.071364][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.120120][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.261321][ T4655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.779364][ T4655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.857871][ T4266] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 137.898988][ T4655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.973130][ T4655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.993548][ T4655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.051284][ T4655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.061752][ T4655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.072902][ T4655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.098807][ T4655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.118354][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.152389][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.205937][ T4655] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.255797][ T4655] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.316715][ T4655] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.378649][ T4655] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.682204][ T5108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 138.802280][ T5108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.932575][ T5114] bond1: (slave ip6tnl1): refused to change device type [ 139.071059][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.121280][ T5082] loop2: detected capacity change from 0 to 40427 [ 139.130848][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.188699][ T5082] F2FS-fs (loop2): build fault injection attr: rate: 174, type: 0x3ffff [ 139.860042][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.930383][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.187538][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.304793][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.300422][ T5174] loop0: detected capacity change from 0 to 8 [ 144.422218][ T5174] SQUASHFS error: zlib decompression failed, data probably corrupt [ 144.430448][ T5174] SQUASHFS error: Failed to read block 0x9b: -5 [ 144.437044][ T5174] SQUASHFS error: Unable to read metadata cache entry [99] [ 144.444617][ T5174] SQUASHFS error: Unable to read inode 0x127 [ 146.947619][ T5193] loop1: detected capacity change from 0 to 128 [ 146.961735][ T5195] netlink: 14 bytes leftover after parsing attributes in process `syz.3.186'. [ 148.362134][ T5195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.394323][ T5195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.418848][ T5195] bond0 (unregistering): Released all slaves [ 148.456876][ T5197] netlink: 'syz.5.174': attribute type 1 has an invalid length. [ 148.567016][ T5199] device veth3 entered promiscuous mode [ 148.621858][ T5223] random: crng reseeded on system resumption [ 149.573366][ T5242] netlink: 20 bytes leftover after parsing attributes in process `syz.5.196'. [ 150.623160][ T5236] loop0: detected capacity change from 0 to 32768 [ 150.672445][ T5261] qrtr: Invalid version 8 [ 151.483547][ T5236] XFS (loop0): Mounting V5 Filesystem [ 152.435504][ T5236] XFS (loop0): Torn write (CRC failure) detected at log block 0x10. Truncating head block from 0x51. [ 152.481288][ T5236] XFS (loop0): Corruption warning: Metadata has LSN (1:48) ahead of current LSN (1:16). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 152.604533][ T5236] XFS (loop0): log mount/recovery failed: error -22 [ 152.690161][ T5288] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 152.734595][ T5288] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 152.819147][ T5236] XFS (loop0): log mount failed [ 153.158234][ T5299] loop3: detected capacity change from 0 to 40427 [ 153.191972][ T5299] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x3ffff [ 153.301056][ T4257] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 154.574775][ T5314] loop2: detected capacity change from 0 to 64 [ 155.033127][ T5318] Invalid ELF header magic: != ELF [ 156.472344][ T26] audit: type=1804 audit(2000000069.280:41): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.211" name="/newroot/38/file1/bus" dev="loop2" ino=21 res=1 errno=0 [ 156.725008][ T26] audit: type=1800 audit(2000000069.620:42): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.211" name="file1" dev="loop2" ino=22 res=0 errno=0 [ 159.096962][ T5344] loop3: detected capacity change from 0 to 32768 [ 159.267610][ T5344] XFS (loop3): Mounting V5 Filesystem [ 159.315996][ T5344] XFS (loop3): Ending clean mount [ 159.428681][ T5344] XFS (loop3): Quotacheck needed: Please wait. [ 159.618263][ T5344] XFS (loop3): Quotacheck: Done. [ 159.751967][ T26] audit: type=1800 audit(2000000074.030:43): pid=5344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.218" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 159.918685][ T5378] loop5: detected capacity change from 0 to 8192 [ 160.175020][ T4265] XFS (loop3): Unmounting Filesystem [ 163.705470][ T5437] loop5: detected capacity change from 0 to 8 [ 164.360861][ T5437] SQUASHFS error: zlib decompression failed, data probably corrupt [ 164.368838][ T5437] SQUASHFS error: Failed to read block 0x9b: -5 [ 164.375831][ T5437] SQUASHFS error: Unable to read metadata cache entry [99] [ 164.383072][ T5437] SQUASHFS error: Unable to read inode 0x127 [ 164.470463][ T4849] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.935060][ T5448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.227'. [ 167.448567][ T5463] loop3: detected capacity change from 0 to 1024 [ 168.704856][ T5471] loop0: detected capacity change from 0 to 40427 [ 168.715702][ T5471] F2FS-fs (loop0): invalid crc value [ 168.797943][ T5471] F2FS-fs (loop0): Found nat_bits in checkpoint [ 168.825742][ T5471] F2FS-fs (loop0): Start checkpoint disabled! [ 168.833399][ T5471] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 168.968593][ T5475] loop1: detected capacity change from 0 to 1024 [ 168.981029][ T5475] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.987757][ T5475] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.994670][ T5475] EXT4-fs: Ignoring removed orlov option [ 169.452701][ T5475] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 169.461810][ T5475] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 169.949363][ T5463] hfsplus: xattr search failed [ 170.366495][ T4613] hfsplus: b-tree write err: -5, ino 4 [ 170.405466][ T9] kworker/u4:0: attempt to access beyond end of device [ 170.405466][ T9] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 171.260145][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 173.782246][ T5506] tty tty2: ldisc open failed (-12), clearing slot 1 [ 176.982512][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.251'. [ 177.170461][ T5541] loop0: detected capacity change from 0 to 64 [ 177.471581][ T14] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 177.623742][ T5547] Invalid ELF header magic: != ELF [ 177.632224][ T26] audit: type=1804 audit(2000000091.900:44): pid=5547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.253" name="/newroot/50/file1/bus" dev="loop0" ino=21 res=1 errno=0 [ 177.679224][ T14] usb 6-1: Using ep0 maxpacket: 32 [ 177.693168][ T14] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 177.797567][ T14] usb 6-1: config 0 has no interface number 0 [ 178.296465][ T14] usb 6-1: config 0 interface 89 has no altsetting 0 [ 178.466185][ T14] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 178.475758][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.479260][ T26] audit: type=1800 audit(2000000091.910:45): pid=5547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.253" name="file1" dev="loop0" ino=22 res=0 errno=0 [ 178.485310][ T14] usb 6-1: Product: syz [ 178.544890][ T14] usb 6-1: Manufacturer: syz [ 178.569417][ T14] usb 6-1: SerialNumber: syz [ 178.628739][ T14] usb 6-1: config 0 descriptor?? [ 178.660109][ T14] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 178.747553][ T5562] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 178.759464][ T5562] infiniband pyz1: RDMA CMA: cma_listen_on_dev, error -98 [ 178.800960][ T14] em28xx 6-1:0.89: Video interface 89 found: bulk [ 180.368299][ T14] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 181.541881][ T14] em28xx 6-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 181.582345][ T14] em28xx 6-1:0.89: board has no eeprom [ 181.763511][ T26] audit: type=1326 audit(2000000096.040:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5576 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711538f749 code=0x7ffc0000 [ 181.809164][ T14] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 181.816455][ T14] em28xx 6-1:0.89: analog set to bulk mode. [ 181.869396][ T26] audit: type=1326 audit(2000000096.040:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5576 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711538f749 code=0x7ffc0000 [ 181.870312][ T7] em28xx 6-1:0.89: Registering V4L2 extension [ 181.946815][ T14] usb 6-1: USB disconnect, device number 2 [ 181.969125][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 181.975323][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 181.981531][ T4272] Bluetooth: hci1: command 0x0406 tx timeout [ 182.011439][ T14] em28xx 6-1:0.89: Disconnecting em28xx [ 182.044003][ T26] audit: type=1326 audit(2000000096.040:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5576 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711538f749 code=0x7ffc0000 [ 182.250492][ T7] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 182.258025][ T7] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 182.279027][ T26] audit: type=1326 audit(2000000096.040:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5576 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711538f749 code=0x7ffc0000 [ 182.279034][ T7] em28xx 6-1:0.89: No AC97 audio processor [ 182.423812][ T26] audit: type=1326 audit(2000000096.040:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5576 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f711538f749 code=0x7ffc0000 [ 182.492379][ T7] usb 6-1: Decoder not found [ 182.497020][ T7] em28xx 6-1:0.89: failed to create media graph [ 182.580073][ T26] audit: type=1326 audit(2000000096.040:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5576 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711538f749 code=0x7ffc0000 [ 182.637041][ T7] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 182.841529][ T5591] ================================================================== [ 182.849621][ T5591] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 182.856687][ T5591] Read of size 8 at addr ffff88801ebc4738 by task v4l_id/5591 [ 182.864127][ T5591] [ 182.866450][ T5591] CPU: 0 PID: 5591 Comm: v4l_id Not tainted syzkaller #0 [ 182.873545][ T5591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.883596][ T5591] Call Trace: [ 182.886872][ T5591] [ 182.889789][ T5591] dump_stack_lvl+0x168/0x22e [ 182.894477][ T5591] ? __lock_acquire+0x7c50/0x7c50 [ 182.899500][ T5591] ? show_regs_print_info+0x12/0x12 [ 182.904698][ T5591] ? load_image+0x3b0/0x3b0 [ 182.909194][ T5591] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 182.914555][ T5591] ? __virt_addr_valid+0x188/0x540 [ 182.919668][ T5591] ? __virt_addr_valid+0x465/0x540 [ 182.924775][ T5591] ? v4l2_fh_open+0xc6/0x430 [ 182.929369][ T5591] print_report+0xa8/0x210 [ 182.929785][ T26] audit: type=1326 audit(2000000096.040:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5576 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711538f749 code=0x7ffc0000 [ 182.933795][ T5591] kasan_report+0x10b/0x140 [ 182.933825][ T5591] ? v4l2_fh_open+0xc6/0x430 [ 182.933844][ T5591] v4l2_fh_open+0xc6/0x430 [ 182.933862][ T5591] em28xx_v4l2_open+0x152/0x990 [ 182.974307][ T5591] ? __lock_acquire+0x7c50/0x7c50 [ 182.979429][ T5591] v4l2_open+0x20b/0x360 [ 182.983700][ T5591] chrdev_open+0x597/0x670 [ 182.988114][ T5591] ? cd_forget+0x160/0x160 [ 182.992546][ T5591] ? tomoyo_file_open+0xe9/0x170 [ 182.997509][ T5591] ? fsnotify_perm+0x39b/0x550 [ 183.002298][ T5591] ? cd_forget+0x160/0x160 [ 183.006730][ T5591] do_dentry_open+0x7e9/0x10d0 [ 183.011514][ T5591] path_openat+0x25c6/0x2e70 [ 183.016134][ T5591] ? do_sys_openat2+0xcf/0x490 [ 183.020913][ T5591] ? __x64_sys_openat+0x135/0x160 [ 183.025951][ T5591] ? do_syscall_64+0x4c/0xa0 [ 183.030564][ T5591] ? do_filp_open+0x3c0/0x3c0 [ 183.035294][ T5591] do_filp_open+0x1c1/0x3c0 [ 183.039788][ T5591] ? vfs_tmpfile+0x480/0x480 [ 183.044387][ T5591] ? _raw_spin_unlock+0x24/0x40 [ 183.049226][ T5591] ? alloc_fd+0x58f/0x630 [ 183.053544][ T5591] do_sys_openat2+0x142/0x490 [ 183.058224][ T5591] ? up_read+0x20/0x20 [ 183.062272][ T5591] ? do_faccessat+0x681/0xa40 [ 183.066937][ T5591] ? kmem_cache_free+0xf7/0x290 [ 183.069063][ T5099] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 183.071766][ T5591] ? do_sys_open+0xe0/0xe0 [ 183.083630][ T5591] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 183.089709][ T5591] ? lock_chain_count+0x20/0x20 [ 183.094675][ T5591] __x64_sys_openat+0x135/0x160 [ 183.099524][ T5591] do_syscall_64+0x4c/0xa0 [ 183.103934][ T5591] ? clear_bhb_loop+0x60/0xb0 [ 183.108614][ T5591] ? clear_bhb_loop+0x60/0xb0 [ 183.113304][ T5591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.119190][ T5591] RIP: 0033:0x7f6d8e6a7407 [ 183.123597][ T5591] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 183.143299][ T5591] RSP: 002b:00007ffc4c5a2830 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 183.151716][ T5591] RAX: ffffffffffffffda RBX: 00007f6d8ee15880 RCX: 00007f6d8e6a7407 [ 183.159958][ T5591] RDX: 0000000000000000 RSI: 00007ffc4c5a2f1c RDI: ffffffffffffff9c [ 183.167928][ T5591] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 183.175894][ T5591] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 183.183858][ T5591] R13: 00007ffc4c5a2a80 R14: 00007f6d8ef74000 R15: 0000563d308db4d8 [ 183.191824][ T5591] [ 183.194829][ T5591] [ 183.197130][ T5591] Allocated by task 7: [ 183.201175][ T5591] kasan_set_track+0x4b/0x70 [ 183.205847][ T5591] __kasan_kmalloc+0x8e/0xa0 [ 183.210418][ T5591] em28xx_v4l2_init+0x107/0x2e70 [ 183.215427][ T5591] em28xx_init_extension+0x118/0x1b0 [ 183.220697][ T5591] process_one_work+0x898/0x1160 [ 183.225969][ T5591] worker_thread+0xaa2/0x1250 [ 183.230628][ T5591] kthread+0x29d/0x330 [ 183.234683][ T5591] ret_from_fork+0x1f/0x30 [ 183.239082][ T5591] [ 183.241391][ T5591] Freed by task 7: [ 183.245093][ T5591] kasan_set_track+0x4b/0x70 [ 183.249664][ T5591] kasan_save_free_info+0x2d/0x50 [ 183.254677][ T5591] ____kasan_slab_free+0x126/0x1e0 [ 183.259858][ T5591] slab_free_freelist_hook+0x131/0x1a0 [ 183.265302][ T5591] __kmem_cache_free+0xb6/0x1f0 [ 183.270136][ T5591] em28xx_v4l2_init+0x166c/0x2e70 [ 183.275145][ T5591] em28xx_init_extension+0x118/0x1b0 [ 183.280412][ T5591] process_one_work+0x898/0x1160 [ 183.285330][ T5591] worker_thread+0xaa2/0x1250 [ 183.290013][ T5591] kthread+0x29d/0x330 [ 183.294155][ T5591] ret_from_fork+0x1f/0x30 [ 183.298555][ T5591] [ 183.300876][ T5591] The buggy address belongs to the object at ffff88801ebc4000 [ 183.300876][ T5591] which belongs to the cache kmalloc-8k of size 8192 [ 183.314945][ T5591] The buggy address is located 1848 bytes inside of [ 183.314945][ T5591] 8192-byte region [ffff88801ebc4000, ffff88801ebc6000) [ 183.328378][ T5591] [ 183.330782][ T5591] The buggy address belongs to the physical page: [ 183.337200][ T5591] page:ffffea00007af000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ebc0 [ 183.347348][ T5591] head:ffffea00007af000 order:3 compound_mapcount:0 compound_pincount:0 [ 183.355668][ T5591] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 183.363677][ T5591] raw: 00fff00000010200 ffffea0001e76e00 dead000000000005 ffff888017442280 [ 183.372266][ T5591] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 183.380833][ T5591] page dumped because: kasan: bad access detected [ 183.387248][ T5591] page_owner tracks the page as allocated [ 183.392975][ T5591] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5330, tgid 5323 (syz.2.214), ts 160089490075, free_ts 160079740969 [ 183.415110][ T5591] post_alloc_hook+0x173/0x1a0 [ 183.419888][ T5591] get_page_from_freelist+0x1a26/0x1ac0 [ 183.425427][ T5591] __alloc_pages+0x1df/0x4e0 [ 183.430004][ T5591] alloc_slab_page+0x5d/0x160 [ 183.434661][ T5591] new_slab+0x87/0x2c0 [ 183.439243][ T5591] ___slab_alloc+0xbc6/0x1230 [ 183.443903][ T5591] __kmem_cache_alloc_node+0x1a0/0x260 [ 183.449354][ T5591] __kmalloc_node_track_caller+0x9e/0x230 [ 183.455056][ T5591] __alloc_skb+0x22a/0x7e0 [ 183.459467][ T5591] pfkey_send_acquire+0x5fb/0x2d70 [ 183.464588][ T5591] km_query+0x10e/0x200 [ 183.468729][ T5591] xfrm_state_find+0x1fd2/0x2bd0 [ 183.473682][ T5591] xfrm_resolve_and_create_bundle+0x731/0x2c30 [ 183.479819][ T5591] xfrm_lookup_with_ifid+0x26a/0x1ff0 [ 183.485274][ T5591] xfrm_lookup_route+0x38/0x1b0 [ 183.490123][ T5591] udp_sendmsg+0x15fb/0x2390 [ 183.494701][ T5591] page last free stack trace: [ 183.499363][ T5591] free_unref_page_prepare+0x8b4/0x9a0 [ 183.504805][ T5591] free_unref_page+0x2e/0x3f0 [ 183.509470][ T5591] __unfreeze_partials+0x1a5/0x200 [ 183.514583][ T5591] put_cpu_partial+0x17c/0x250 [ 183.519422][ T5591] qlist_free_all+0x76/0xe0 [ 183.524024][ T5591] kasan_quarantine_reduce+0x144/0x160 [ 183.529477][ T5591] __kasan_slab_alloc+0x1e/0x80 [ 183.534409][ T5591] slab_post_alloc_hook+0x4b/0x480 [ 183.539505][ T5591] kmem_cache_alloc+0x123/0x2f0 [ 183.544346][ T5591] vm_area_dup+0x23/0x1a0 [ 183.548659][ T5591] __split_vma+0xb9/0x500 [ 183.552980][ T5591] do_mas_align_munmap+0x762/0x1220 [ 183.558162][ T5591] do_mas_munmap+0x240/0x2b0 [ 183.563169][ T5591] mmap_region+0x6e5/0x1c70 [ 183.567655][ T5591] do_mmap+0x958/0xfd0 [ 183.571732][ T5591] vm_mmap_pgoff+0x1b2/0x2b0 [ 183.576311][ T5591] [ 183.578617][ T5591] Memory state around the buggy address: [ 183.584316][ T5591] ffff88801ebc4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 183.592455][ T5591] ffff88801ebc4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 183.600505][ T5591] >ffff88801ebc4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 183.608549][ T5591] ^ [ 183.614513][ T5591] ffff88801ebc4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 183.622558][ T5591] ffff88801ebc4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 183.630601][ T5591] ================================================================== [ 183.641278][ T7] em28xx 6-1:0.89: Registering snapshot button... [ 183.693093][ T7] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input7 [ 183.817856][ T26] audit: type=1326 audit(2000000096.040:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5576 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711538f749 code=0x7ffc0000 [ 183.843252][ T7] em28xx 6-1:0.89: Remote control support is not available for this card. [ 183.855698][ T14] em28xx 6-1:0.89: Closing input extension [ 183.868119][ T14] em28xx 6-1:0.89: Deregistering snapshot button [ 183.899045][ T5099] usb 4-1: Using ep0 maxpacket: 16 [ 183.913678][ T5099] usb 4-1: config 0 has no interfaces? [ 183.968074][ T5099] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 183.992743][ T5606] loop0: detected capacity change from 0 to 64 [ 184.049989][ T5099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.075096][ T26] audit: type=1326 audit(2000000096.040:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5576 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711538f749 code=0x7ffc0000 [ 184.175845][ T26] audit: type=1326 audit(2000000096.040:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5576 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f711538f749 code=0x7ffc0000 [ 184.187229][ T5099] usb 4-1: config 0 descriptor?? [ 184.209694][ T5606] hfs: request for non-existent node 131072 in B*Tree [ 184.226402][ T5606] hfs: request for non-existent node 131072 in B*Tree [ 184.294567][ T26] audit: type=1326 audit(2000000096.040:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5576 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711538f749 code=0x7ffc0000 [ 184.418812][ T26] audit: type=1326 audit(2000000096.040:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5576 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711538f749 code=0x7ffc0000 [ 184.453563][ T5099] usb 4-1: USB disconnect, device number 2 [ 184.540437][ T26] audit: type=1326 audit(2000000096.120:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5576 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711538f749 code=0x7ffc0000 [ 184.647264][ T26] audit: type=1326 audit(2000000096.120:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5576 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711538f749 code=0x7ffc0000 [ 184.756781][ T26] audit: type=1326 audit(2000000096.180:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5576 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711538f749 code=0x7ffc0000 [ 184.869009][ T26] audit: type=1326 audit(2000000096.180:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5576 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f711538f783 code=0x7ffc0000 [ 185.474744][ T5591] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 185.481977][ T5591] CPU: 1 PID: 5591 Comm: v4l_id Not tainted syzkaller #0 [ 185.489011][ T5591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.499152][ T5591] Call Trace: [ 185.502416][ T5591] [ 185.505327][ T5591] dump_stack_lvl+0x168/0x22e [ 185.510006][ T5591] ? memcpy+0x3c/0x60 [ 185.513964][ T5591] ? show_regs_print_info+0x12/0x12 [ 185.519147][ T5591] ? load_image+0x3b0/0x3b0 [ 185.523648][ T5591] panic+0x2c9/0x710 [ 185.527521][ T5591] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 185.533688][ T5591] ? bpf_jit_dump+0xd0/0xd0 [ 185.538269][ T5591] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 185.544149][ T5591] ? _raw_spin_unlock+0x40/0x40 [ 185.548992][ T5591] check_panic_on_warn+0x80/0xa0 [ 185.553917][ T5591] ? v4l2_fh_open+0xc6/0x430 [ 185.558497][ T5591] end_report+0x66/0x110 [ 185.562728][ T5591] kasan_report+0x118/0x140 [ 185.567298][ T5591] ? v4l2_fh_open+0xc6/0x430 [ 185.571864][ T5591] v4l2_fh_open+0xc6/0x430 [ 185.576274][ T5591] em28xx_v4l2_open+0x152/0x990 [ 185.581212][ T5591] ? __lock_acquire+0x7c50/0x7c50 [ 185.586241][ T5591] v4l2_open+0x20b/0x360 [ 185.590517][ T5591] chrdev_open+0x597/0x670 [ 185.595017][ T5591] ? cd_forget+0x160/0x160 [ 185.599435][ T5591] ? tomoyo_file_open+0xe9/0x170 [ 185.604366][ T5591] ? fsnotify_perm+0x39b/0x550 [ 185.609129][ T5591] ? cd_forget+0x160/0x160 [ 185.613540][ T5591] do_dentry_open+0x7e9/0x10d0 [ 185.618302][ T5591] path_openat+0x25c6/0x2e70 [ 185.622878][ T5591] ? do_sys_openat2+0xcf/0x490 [ 185.627623][ T5591] ? __x64_sys_openat+0x135/0x160 [ 185.632648][ T5591] ? do_syscall_64+0x4c/0xa0 [ 185.637374][ T5591] ? do_filp_open+0x3c0/0x3c0 [ 185.642044][ T5591] do_filp_open+0x1c1/0x3c0 [ 185.646640][ T5591] ? vfs_tmpfile+0x480/0x480 [ 185.651227][ T5591] ? _raw_spin_unlock+0x24/0x40 [ 185.656063][ T5591] ? alloc_fd+0x58f/0x630 [ 185.660378][ T5591] do_sys_openat2+0x142/0x490 [ 185.665061][ T5591] ? up_read+0x20/0x20 [ 185.669110][ T5591] ? do_faccessat+0x681/0xa40 [ 185.673804][ T5591] ? kmem_cache_free+0xf7/0x290 [ 185.678720][ T5591] ? do_sys_open+0xe0/0xe0 [ 185.683135][ T5591] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 185.689149][ T5591] ? lock_chain_count+0x20/0x20 [ 185.694017][ T5591] __x64_sys_openat+0x135/0x160 [ 185.698897][ T5591] do_syscall_64+0x4c/0xa0 [ 185.703334][ T5591] ? clear_bhb_loop+0x60/0xb0 [ 185.708030][ T5591] ? clear_bhb_loop+0x60/0xb0 [ 185.712745][ T5591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.718628][ T5591] RIP: 0033:0x7f6d8e6a7407 [ 185.723038][ T5591] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 185.742732][ T5591] RSP: 002b:00007ffc4c5a2830 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 185.751151][ T5591] RAX: ffffffffffffffda RBX: 00007f6d8ee15880 RCX: 00007f6d8e6a7407 [ 185.759128][ T5591] RDX: 0000000000000000 RSI: 00007ffc4c5a2f1c RDI: ffffffffffffff9c [ 185.767100][ T5591] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 185.775084][ T5591] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 185.783064][ T5591] R13: 00007ffc4c5a2a80 R14: 00007f6d8ef74000 R15: 0000563d308db4d8 [ 185.791063][ T5591] [ 185.794203][ T5591] Kernel Offset: disabled [ 185.798518][ T5591] Rebooting in 86400 seconds..