last executing test programs: 6.021995116s ago: executing program 2 (id=171): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085000000a0000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="b9ffa1e85ac50345b6eef3506b93", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.75872434s ago: executing program 2 (id=174): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000005c0)={0x13, 0x10, 0xfa00, {0x0, r2, 0x1}}, 0x18) 5.51665958s ago: executing program 0 (id=176): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) read$dsp(r1, &(0x7f0000000280)=""/79, 0x4f) fsmount(0xffffffffffffffff, 0x0, 0x2) 5.466570038s ago: executing program 2 (id=177): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100085dfd46901040000000000000000dd88fadf54f6d382aa945b2f79065d3031ccda42f65798928185d15880d4cf8adb5591bd955aeb2cfd0c8dfbb96cbb6f6bb2"], 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x44050) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[0x0], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r1], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 5.272057841s ago: executing program 4 (id=179): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x100000000000026d, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 4.521786676s ago: executing program 2 (id=180): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc-aes-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000001680)=[{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000000c0)="063b56cfd3", 0x5}], 0x1, 0x0, 0x0, 0x4040000}], 0x1, 0x4008800) 4.510329428s ago: executing program 0 (id=182): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x4, 0x2801e}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x38}}, 0x480d0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 4.397966836s ago: executing program 1 (id=183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0xc}, {0x8}, {0x8, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x4, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x7, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 4.397586007s ago: executing program 0 (id=184): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000100000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000400), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) 4.222512466s ago: executing program 4 (id=186): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@cgroup, 0x16, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 4.050055865s ago: executing program 0 (id=187): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x43) acct(&(0x7f0000000140)='./file0\x00') 4.049763124s ago: executing program 3 (id=188): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) capset(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001540)=""/4097, 0x1001}], 0x1}, 0x6}], 0x1, 0x40000020, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x800}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c}, 0x38) 4.004544152s ago: executing program 1 (id=189): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000006c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 3.989237315s ago: executing program 4 (id=190): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100085dfd46901040000000000000000dd88fadf54f6d382aa945b2f79065d3031ccda42f65798928185d15880d4cf8adb5591bd955aeb2cfd0c8dfbb96cbb6f6bb2"], 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x44050) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[0x0], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 2.930842731s ago: executing program 3 (id=191): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x18) tee(r1, r0, 0x8, 0xb) 2.929304162s ago: executing program 1 (id=192): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) read$dsp(r1, &(0x7f0000000280)=""/79, 0x4f) fsmount(0xffffffffffffffff, 0x0, 0x2) 2.822135929s ago: executing program 2 (id=193): syz_emit_ethernet(0x76, &(0x7f0000000880)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x800006, {0xc, 0x6, "f6cd53", 0x200, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, [@routing={0x2f, 0x0, 0x0, 0x1}], "13d86558da0a7f6b"}}}}}}}, 0x0) 2.782550336s ago: executing program 4 (id=194): bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000013d3800091117c000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 1.852983651s ago: executing program 1 (id=195): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f0000000540)={[{@overriderock}, {@overriderock}, {@map_off}, {@map_off}, {@nocompress}, {@unhide}]}, 0x0, 0x3ff, &(0x7f0000000140)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffff) 1.781942793s ago: executing program 2 (id=196): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x1, 0x100, 0x0, 0x18316, 0x6, "03e1ff00001e000000000000000000435ec2ba", 0x18001, 0x5}) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) read(r0, &(0x7f0000000100)=""/137, 0x89) 1.781673733s ago: executing program 3 (id=197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, r1, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') gettid() r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000000d}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close_range(r0, 0xffffffffffffffff, 0x0) 1.694204568s ago: executing program 3 (id=198): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 1.656071074s ago: executing program 4 (id=199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, 0xffffffffffffffff, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) getsockopt$inet_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000180), 0x0, &(0x7f0000000140), 0x0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x8000c61) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) 1.218164537s ago: executing program 3 (id=200): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x100, 0x25}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.209348379s ago: executing program 1 (id=201): r0 = socket(0x2b, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c64d2, 0x0) dup3(r0, r4, 0x0) 1.171605975s ago: executing program 0 (id=202): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) capset(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001540)=""/4097, 0x1001}], 0x1}, 0x6}], 0x1, 0x40000020, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x800}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c}, 0x38) 991.717155ms ago: executing program 1 (id=203): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r3, 0x0) read$FUSE(r0, &(0x7f0000001b00)={0x2020}, 0x136a) 961.28131ms ago: executing program 3 (id=204): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100085dfd46901040000000000000000dd88fadf54f6d382aa945b2f79065d3031ccda42f65798928185d15880d4cf8adb5591bd955aeb2cfd0c8dfbb96cbb6f6bb2"], 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x44050) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[0x0], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 10.721078ms ago: executing program 0 (id=205): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) read$dsp(r1, &(0x7f0000000280)=""/79, 0x4f) fsmount(0xffffffffffffffff, 0x0, 0x2) 0s ago: executing program 4 (id=206): syz_open_dev$tty1(0xc, 0x4, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts. [ 64.467265][ T4253] cgroup: Unknown subsys name 'net' [ 64.567533][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.097585][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.544497][ T4273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.552934][ T4273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.561001][ T4273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.561996][ T4276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.568943][ T4273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.584187][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.592218][ T4273] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.596027][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.607071][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.617913][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.627072][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.630489][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.634829][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.650205][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.658697][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.666041][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.675114][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.680146][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.682630][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.697211][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.704697][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.712444][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.712928][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.720301][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.727234][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.734736][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.780738][ T4273] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.788664][ T4273] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.796940][ T4273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.810626][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.196202][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 68.248384][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 68.276876][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 68.353962][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 68.367832][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 68.447930][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.455606][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.463791][ T4267] device bridge_slave_0 entered promiscuous mode [ 68.504631][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.513091][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.522956][ T4267] device bridge_slave_1 entered promiscuous mode [ 68.530645][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.537824][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.546401][ T4277] device bridge_slave_0 entered promiscuous mode [ 68.584137][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.591646][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.599567][ T4277] device bridge_slave_1 entered promiscuous mode [ 68.646508][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.653775][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.664750][ T4271] device bridge_slave_0 entered promiscuous mode [ 68.674397][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.689619][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.696878][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.708095][ T4274] device bridge_slave_0 entered promiscuous mode [ 68.722240][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.729459][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.741280][ T4271] device bridge_slave_1 entered promiscuous mode [ 68.750058][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.759520][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.767076][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.775712][ T4272] device bridge_slave_0 entered promiscuous mode [ 68.783896][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.791815][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.802749][ T4274] device bridge_slave_1 entered promiscuous mode [ 68.811406][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.835148][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.842601][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.850566][ T4272] device bridge_slave_1 entered promiscuous mode [ 68.865041][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.899262][ T4267] team0: Port device team_slave_0 added [ 68.921323][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.940009][ T4267] team0: Port device team_slave_1 added [ 68.947529][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.959548][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.972546][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.988950][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.015521][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.031655][ T4277] team0: Port device team_slave_0 added [ 69.061506][ T4277] team0: Port device team_slave_1 added [ 69.068114][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.075436][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.104886][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.128887][ T4271] team0: Port device team_slave_0 added [ 69.143871][ T4274] team0: Port device team_slave_0 added [ 69.157013][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.164264][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.190445][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.205393][ T4272] team0: Port device team_slave_0 added [ 69.213178][ T4271] team0: Port device team_slave_1 added [ 69.220362][ T4272] team0: Port device team_slave_1 added [ 69.233973][ T4274] team0: Port device team_slave_1 added [ 69.267611][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.275339][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.304639][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.333832][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.341584][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.368049][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.386741][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.394240][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.420801][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.434029][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.441281][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.467469][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.484325][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.491727][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.517820][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.529368][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.537027][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.563606][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.595869][ T4267] device hsr_slave_0 entered promiscuous mode [ 69.603153][ T4267] device hsr_slave_1 entered promiscuous mode [ 69.610519][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.617493][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.644217][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.655874][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.666145][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.692924][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.760808][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 69.774902][ T4277] device hsr_slave_0 entered promiscuous mode [ 69.782682][ T4277] device hsr_slave_1 entered promiscuous mode [ 69.789383][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.797586][ T4277] Cannot create hsr debugfs directory [ 69.806817][ T4272] device hsr_slave_0 entered promiscuous mode [ 69.814795][ T4272] device hsr_slave_1 entered promiscuous mode [ 69.821378][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.828931][ T4272] Cannot create hsr debugfs directory [ 69.834499][ T4269] Bluetooth: hci2: command 0x0409 tx timeout [ 69.834516][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 69.839975][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 69.863701][ T4271] device hsr_slave_0 entered promiscuous mode [ 69.870749][ T4271] device hsr_slave_1 entered promiscuous mode [ 69.877748][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.885562][ T4271] Cannot create hsr debugfs directory [ 69.910553][ T4274] device hsr_slave_0 entered promiscuous mode [ 69.917616][ T4274] device hsr_slave_1 entered promiscuous mode [ 69.920190][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 69.931272][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.938894][ T4274] Cannot create hsr debugfs directory [ 70.311048][ T4267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.322869][ T4267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.337899][ T4267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.347688][ T4267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.404537][ T4271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.414168][ T4271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.435112][ T4271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.464732][ T4271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.507190][ T4272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.525532][ T4272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.535625][ T4272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.556453][ T4272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.617657][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.631779][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.646469][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.655911][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.676571][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.725134][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.735080][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.752535][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.784624][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.796461][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.806580][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.814050][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.836231][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.858490][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.866987][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.876972][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.885887][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.893070][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.901884][ T4277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.915267][ T4277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.940778][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.947842][ T4277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.962982][ T4277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.974579][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.984054][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.992369][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.015994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.025121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.034914][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.042148][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.062686][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.091519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.099536][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.113122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.122865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.132932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.142132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.151316][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.158495][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.168319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.177065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.185870][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.207629][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.215750][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.241961][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.258124][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.272775][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.282560][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.291737][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.301057][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.309381][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.317967][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.326728][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.335646][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.344495][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.356841][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.367306][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.393829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.409379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.419449][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.426656][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.444283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.455771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.468134][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.475369][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.491708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.507332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.515840][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.522757][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.568638][ T4271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.581573][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.600835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.619124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.637079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.647660][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.657594][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.670785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.705145][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.741039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.761059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.776909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.786654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.803065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.815722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.827099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.840831][ T4269] Bluetooth: hci0: command 0x041b tx timeout [ 71.855534][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.879591][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.903995][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.911355][ T4269] Bluetooth: hci2: command 0x041b tx timeout [ 71.920499][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 71.926527][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.926635][ T4284] Bluetooth: hci4: command 0x041b tx timeout [ 71.948018][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.966996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.977297][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.000736][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 72.013172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.023197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.032344][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.039517][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.057956][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.089314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.099339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.126030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.136136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.149350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.178290][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.204858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.222405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.238159][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.246037][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.255178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.264209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.272869][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.280197][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.288597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.298629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.307690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.317191][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.324481][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.333445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.341594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.350392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.397423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.414233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.428368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.443617][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.479977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.489003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.518719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.528552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.537985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.547117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.557457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.567068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.576363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.586478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.596178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.605383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.614485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.627389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.636975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.645798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.665206][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.685421][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.725285][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.743733][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.772012][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.781137][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.797731][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.806827][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.824668][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.864419][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.876923][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.898568][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.916103][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.941688][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.961384][ T4267] device veth0_vlan entered promiscuous mode [ 72.994377][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.023793][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.064975][ T4267] device veth1_vlan entered promiscuous mode [ 73.109557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.131315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.153610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.173633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.191565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.210854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.225508][ T4272] device veth0_vlan entered promiscuous mode [ 73.288597][ T4272] device veth1_vlan entered promiscuous mode [ 73.316003][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.342117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.381091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.435349][ T4267] device veth0_macvtap entered promiscuous mode [ 73.451664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.468100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.477382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.492812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.504687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.514476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.524246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.532751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.560940][ T4272] device veth0_macvtap entered promiscuous mode [ 73.573879][ T4272] device veth1_macvtap entered promiscuous mode [ 73.585382][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.595016][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.603764][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.614484][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.622291][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.630321][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.642820][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.651787][ T4271] device veth0_vlan entered promiscuous mode [ 73.658971][ T4267] device veth1_macvtap entered promiscuous mode [ 73.697252][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.707276][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.715502][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.726295][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.735011][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.747166][ T4271] device veth1_vlan entered promiscuous mode [ 73.768585][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.778016][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.789173][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.804692][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.812513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.824496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.834598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.851354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.881150][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.898831][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.910210][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 73.911629][ T2918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.934114][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.945218][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.954702][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.967401][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.991255][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 73.996943][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 73.997314][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 74.016691][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.028573][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.040338][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.067258][ T4277] device veth0_vlan entered promiscuous mode [ 74.074121][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 74.081316][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.092476][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.102555][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.111588][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.120172][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.128102][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.139033][ T4267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.148115][ T4267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.157160][ T4267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.166108][ T4267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.184506][ T4277] device veth1_vlan entered promiscuous mode [ 74.205385][ T4271] device veth0_macvtap entered promiscuous mode [ 74.219118][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.227935][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.240633][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.249209][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.282365][ T4271] device veth1_macvtap entered promiscuous mode [ 74.340768][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.351660][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.362006][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.372682][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.387843][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.400786][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.418525][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.426974][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.436217][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.445530][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.455027][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.477571][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.491533][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.502601][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.513238][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.526703][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.549594][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.561739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.571022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.579584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.588962][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.597151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.607553][ T4274] device veth0_vlan entered promiscuous mode [ 74.621721][ T4271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.636154][ T4271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.645404][ T4271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.654931][ T4271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.699347][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.709248][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.723872][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.732497][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.743892][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.753286][ T4277] device veth0_macvtap entered promiscuous mode [ 74.783420][ T4274] device veth1_vlan entered promiscuous mode [ 74.798467][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.814712][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.826944][ T4277] device veth1_macvtap entered promiscuous mode [ 74.842807][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.858696][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.874588][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.885608][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.894334][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.902898][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.911550][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.973099][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.996855][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.007402][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.019132][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.029626][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.040858][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.051280][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.062352][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.075085][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.090221][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.111246][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.122687][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.133455][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.142907][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.151089][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.159598][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.179717][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.188870][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.203292][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.215373][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.226573][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.237604][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.247671][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.258327][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.272063][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.331955][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.352047][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.373599][ T4277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.397273][ T4277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.413666][ T4277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.425199][ T4277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.441710][ T4274] device veth0_macvtap entered promiscuous mode [ 75.460677][ T4274] device veth1_macvtap entered promiscuous mode [ 75.482257][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.523913][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.545750][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.560196][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.569786][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.628633][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.654331][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.664684][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.676791][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.687234][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.698278][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.708493][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.719698][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.733953][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.754649][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.801496][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.853735][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.899540][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.928926][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.949421][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.959537][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.975852][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.988623][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.006244][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 76.012765][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.030481][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.056583][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.070401][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 76.070529][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 76.076497][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 76.089392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.107987][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.126087][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.152979][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.160139][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 76.178995][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.196738][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.216644][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.239737][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.347499][ T371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.391687][ T371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.431177][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.477473][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.508360][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.579006][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.615655][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.646877][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.681562][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.313828][ T4313] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 77.527611][ T4313] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 77.549299][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.590629][ T4313] usb 5-1: Product: syz [ 77.595056][ T4313] usb 5-1: Manufacturer: syz [ 77.607753][ T4313] usb 5-1: SerialNumber: syz [ 77.635387][ T4313] usb 5-1: config 0 descriptor?? [ 77.707786][ T4390] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15'. [ 77.717108][ T4390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'. [ 77.726408][ T4390] netlink: 55 bytes leftover after parsing attributes in process `syz.2.15'. [ 77.880683][ T4313] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 78.509688][ T4313] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 78.676391][ T4407] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 78.696230][ T4407] pim6reg0: linktype set to 825 [ 78.719851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 78.729843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 78.739838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 78.749837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 78.759836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 78.769854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 78.779846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 78.789845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 78.799848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 78.809841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.875908][ T4411] loop3: detected capacity change from 0 to 32768 [ 78.916782][ T4411] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.24 (4411) [ 78.937467][ T4411] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 78.948047][ T4411] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 78.957491][ T4411] BTRFS info (device loop3): force clearing of disk cache [ 80.033173][ T4411] BTRFS info (device loop3): enabling auto defrag [ 80.039727][ T4411] BTRFS info (device loop3): max_inline at 0 [ 80.045902][ T4411] BTRFS info (device loop3): enabling ssd optimizations [ 80.052880][ T4411] BTRFS info (device loop3): using spread ssd allocation scheme [ 80.060631][ T4411] BTRFS info (device loop3): using free space tree [ 80.206061][ T125] usb 5-1: USB disconnect, device number 2 [ 80.294600][ T4411] BTRFS info (device loop3): rebuilding free space tree [ 81.622260][ T4463] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.640169][ T11] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 82.468582][ T4274] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 83.201495][ T4488] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 83.414883][ T4488] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 83.439983][ T4488] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.468393][ T4488] usb 3-1: Product: syz [ 83.473312][ T4488] usb 3-1: Manufacturer: syz [ 83.510804][ T4488] usb 3-1: SerialNumber: syz [ 83.546105][ T4488] usb 3-1: config 0 descriptor?? [ 83.767503][ T4508] loop1: detected capacity change from 0 to 32768 [ 83.785576][ T4508] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.46 (4508) [ 83.820689][ T4488] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 83.850789][ T4508] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 83.861033][ T4508] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 83.869756][ T4508] BTRFS info (device loop1): force clearing of disk cache [ 83.877320][ T4508] BTRFS info (device loop1): enabling auto defrag [ 83.883937][ T4508] BTRFS info (device loop1): max_inline at 0 [ 83.890020][ T4508] BTRFS info (device loop1): enabling ssd optimizations [ 83.896983][ T4508] BTRFS info (device loop1): using spread ssd allocation scheme [ 83.904661][ T4508] BTRFS info (device loop1): using free space tree [ 84.475143][ T4488] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 84.570942][ T4508] BTRFS info (device loop1): rebuilding free space tree [ 86.589811][ C1] sched: RT throttling activated [ 86.641550][ T11] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 86.784612][ T4314] usb 3-1: USB disconnect, device number 2 [ 86.808680][ T4267] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 86.874402][ T7] cfg80211: failed to load regulatory.db [ 87.420716][ T4560] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 88.889926][ T4553] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 89.096130][ T4553] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 89.124383][ T4553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.168324][ T4553] usb 5-1: Product: syz [ 89.186205][ T4553] usb 5-1: Manufacturer: syz [ 89.206489][ T4599] Bluetooth: MGMT ver 1.22 [ 89.216353][ T4553] usb 5-1: SerialNumber: syz [ 89.243995][ T4553] usb 5-1: config 0 descriptor?? [ 89.496452][ T4553] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 90.020763][ T4616] syz.3.77 uses obsolete (PF_INET,SOCK_PACKET) [ 90.116983][ T4553] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 90.226050][ T4624] netlink: 56 bytes leftover after parsing attributes in process `syz.1.72'. [ 90.235105][ T4624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.72'. [ 90.244267][ T4624] netlink: 55 bytes leftover after parsing attributes in process `syz.1.72'. [ 90.493020][ T4628] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 90.509737][ T4616] device veth3 entered promiscuous mode [ 91.259912][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 91.339931][ T4313] usb 5-1: USB disconnect, device number 3 [ 91.694756][ T4661] device veth3 entered promiscuous mode [ 92.327183][ T4676] loop4: detected capacity change from 0 to 136 [ 92.534902][ T4679] loop3: detected capacity change from 0 to 164 [ 92.863534][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 92.910058][ T4268] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 93.159683][ T4268] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 93.202017][ T4268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.300462][ T4268] usb 2-1: Product: syz [ 93.359952][ T4268] usb 2-1: Manufacturer: syz [ 93.369145][ T4268] usb 2-1: SerialNumber: syz [ 93.382472][ T4268] usb 2-1: config 0 descriptor?? [ 93.614852][ T4268] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 93.782502][ T4704] device syzkaller0 entered promiscuous mode [ 94.237232][ T4268] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 95.079575][ T4736] loop0: detected capacity change from 0 to 136 [ 95.659345][ T4751] capability: warning: `syz.3.131' uses deprecated v2 capabilities in a way that may be insecure [ 95.965077][ T4487] usb 2-1: USB disconnect, device number 2 [ 96.676571][ T4764] loop2: detected capacity change from 0 to 136 [ 98.744819][ T4796] loop0: detected capacity change from 0 to 16 [ 98.751917][ T4797] loop2: detected capacity change from 0 to 136 [ 98.822017][ T4796] erofs: (device loop0): mounted with root inode @ nid 36. [ 98.844775][ T4801] loop4: detected capacity change from 0 to 16 [ 98.966804][ T4801] erofs: (device loop4): mounted with root inode @ nid 36. [ 98.994684][ T4801] erofs: (device loop4): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 99.061293][ T4801] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 99.090177][ T4807] netlink: 52 bytes leftover after parsing attributes in process `syz.2.158'. [ 99.153305][ T4284] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -20 in[4096, 0] out[8192] [ 99.166200][ T4801] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -20 in[4096, 0] out[4096] [ 99.268600][ T26] audit: type=1800 audit(1776155641.101:2): pid=4801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.155" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 100.783952][ T4823] loop1: detected capacity change from 0 to 16 [ 100.851368][ T4827] loop2: detected capacity change from 0 to 256 [ 100.865056][ T4825] ======================================================= [ 100.865056][ T4825] WARNING: The mand mount option has been deprecated and [ 100.865056][ T4825] and is ignored by this kernel. Remove the mand [ 100.865056][ T4825] option from the mount to silence this warning. [ 100.865056][ T4825] ======================================================= [ 100.880163][ T4823] erofs: (device loop1): mounted with root inode @ nid 36. [ 100.900187][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.122104][ T4825] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 101.236295][ T4835] loop2: detected capacity change from 0 to 136 [ 101.303435][ T4823] syz.1.164: attempt to access beyond end of device [ 101.303435][ T4823] loop1: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 101.360156][ T4823] syz.1.164: attempt to access beyond end of device [ 101.360156][ T4823] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 101.428842][ T26] audit: type=1800 audit(1776155643.261:3): pid=4823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.164" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 101.636430][ T4844] loop4: detected capacity change from 0 to 256 [ 103.015682][ T4860] loop3: detected capacity change from 0 to 136 [ 105.914345][ T4905] loop1: detected capacity change from 0 to 136 [ 107.513337][ T4921] page:ffffea00014b8500 refcount:4 mapcount:1 mapping:ffff88802712a2f8 index:0x1 pfn:0x52e14 [ 107.513541][ T4921] memcg:ffff88807cab2000 [ 107.513551][ T4921] aops:shmem_aops ino:411 [ 107.513577][ T4921] flags: 0xfff60000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 107.513606][ T4921] raw: 00fff60000080015 ffffea0001c48d88 ffffea0001c0a0c8 ffff88802712a2f8 [ 107.513623][ T4921] raw: 0000000000000001 0000000000000000 0000000400000000 ffff88807cab2000 [ 107.513633][ T4921] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 107.513643][ T4921] page_owner tracks the page as allocated [ 107.513753][ T4921] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 4922, tgid 4921 (syz.1.203), ts 107501246346, free_ts 107425477243 [ 107.513784][ T4921] post_alloc_hook+0x173/0x1a0 [ 107.513810][ T4921] get_page_from_freelist+0x1a1e/0x1ab0 [ 107.513835][ T4921] __alloc_pages+0x1ec/0x4f0 [ 107.513859][ T4921] __folio_alloc+0xe/0x30 [ 107.513883][ T4921] vma_alloc_folio+0x4a3/0x900 [ 107.513906][ T4921] shmem_alloc_and_acct_folio+0x463/0xbc0 [ 107.513930][ T4921] shmem_get_folio_gfp+0x1361/0x3400 [ 107.513953][ T4921] shmem_read_mapping_page_gfp+0x99/0x2b0 [ 107.513976][ T4921] udmabuf_create+0x99b/0xfc0 [ 107.513995][ T4921] udmabuf_ioctl+0x1f3/0x300 [ 107.514014][ T4921] __se_sys_ioctl+0xfa/0x170 [ 107.514038][ T4921] do_syscall_64+0x4c/0xa0 [ 107.514063][ T4921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.514085][ T4921] page last free stack trace: [ 107.514092][ T4921] free_unref_page_prepare+0x8b4/0x9a0 [ 107.514117][ T4921] free_unref_page_list+0xbb/0x8e0 [ 107.514140][ T4921] release_pages+0x1fa6/0x2220 [ 107.514163][ T4921] tlb_flush_mmu+0x105/0x220 [ 107.514186][ T4921] unmap_page_range+0x1f53/0x2500 [ 107.514211][ T4921] unmap_vmas+0x260/0x390 [ 107.514234][ T4921] exit_mmap+0x20d/0x960 [ 107.514256][ T4921] __mmput+0x118/0x3c0 [ 107.514273][ T4921] exit_mm+0x1fe/0x2d0 [ 107.514296][ T4921] do_exit+0x905/0x2480 [ 107.514328][ T4921] do_group_exit+0x217/0x2d0 [ 107.514352][ T4921] get_signal+0x1272/0x1350 [ 107.514376][ T4921] arch_do_signal_or_restart+0xc4/0x1350 [ 107.514398][ T4921] exit_to_user_mode_loop+0x70/0x110 [ 107.514423][ T4921] exit_to_user_mode_prepare+0xee/0x180 [ 107.514446][ T4921] syscall_exit_to_user_mode+0x16/0x40 [ 107.514557][ T4921] ------------[ cut here ]------------ [ 107.514563][ T4921] kernel BUG at mm/filemap.c:153! [ 107.514581][ T4921] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 107.514597][ T4921] CPU: 1 PID: 4921 Comm: syz.1.203 Not tainted syzkaller #0 [ 107.514614][ T4921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 107.514623][ T4921] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 107.514646][ T4921] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 ca f9 27 00 e9 0c fe ff ff e8 b0 ed d6 ff 48 89 df 48 c7 c6 a0 f6 94 8a e8 11 0d 12 00 <0f> 0b e8 9a ed d6 ff 48 89 df 48 c7 c6 00 fc 94 8a e8 fb 0c 12 00 [ 107.514661][ T4921] RSP: 0018:ffffc9000c927618 EFLAGS: 00010046 [ 107.514679][ T4921] RAX: 58b2fb36cbb11a00 RBX: ffffea00014b8500 RCX: 58b2fb36cbb11a00 [ 107.514693][ T4921] RDX: 0000000000000002 RSI: ffffffff8a8c2220 RDI: ffffffff8adf11a0 [ 107.514705][ T4921] RBP: ffffc9000c927778 R08: ffffffff8e1ff26f R09: 1ffffffff1c3fe4d [ 107.514717][ T4921] R10: dffffc0000000000 R11: fffffbfff1c3fe4e R12: dffffc0000000000 [ 107.514730][ T4921] R13: dffffc0000000000 R14: ffff88802712a2f8 R15: 1ffff92001924ed4 [ 107.514743][ T4921] FS: 0000555556cab500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 107.514759][ T4921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.514772][ T4921] CR2: 0000200000002000 CR3: 000000002e910000 CR4: 00000000003506e0 [ 107.514790][ T4921] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.514801][ T4921] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.514813][ T4921] Call Trace: [ 107.514819][ T4921] [ 107.514828][ T4921] __filemap_remove_folio+0xbc/0x8a0 [ 107.514849][ T4921] ? __rwlock_init+0x140/0x140 [ 107.514867][ T4921] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 107.514891][ T4921] ? _raw_spin_lock_irq+0xb7/0xf0 [ 107.514910][ T4921] ? _raw_spin_lock_irqsave+0x100/0x100 [ 107.514929][ T4921] ? __folio_cancel_dirty+0xc0/0x580 [ 107.514951][ T4921] filemap_remove_folio+0xed/0x2c0 [ 107.514972][ T4921] truncate_inode_folio+0x59/0x70 [ 107.514996][ T4921] shmem_undo_range+0x533/0x20c0 [ 107.515023][ T4921] ? shmem_truncate_range+0xb0/0xb0 [ 107.515054][ T4921] ? do_raw_spin_lock+0x128/0x2f0 [ 107.515072][ T4921] ? __rwlock_init+0x140/0x140 [ 107.515089][ T4921] shmem_evict_inode+0x25b/0xa80 [ 107.515114][ T4921] ? inode_wait_for_writeback+0x1df/0x220 [ 107.515139][ T4921] ? shmem_free_in_core_inode+0xb0/0xb0 [ 107.515162][ T4921] ? do_raw_spin_lock+0x128/0x2f0 [ 107.515179][ T4921] ? bit_waitqueue+0x30/0x30 [ 107.515203][ T4921] ? do_raw_spin_unlock+0x11d/0x230 [ 107.515221][ T4921] ? shmem_free_in_core_inode+0xb0/0xb0 [ 107.515243][ T4921] evict+0x4c9/0x8d0 [ 107.515267][ T4921] ? proc_nr_inodes+0x2f0/0x2f0 [ 107.515288][ T4921] ? do_raw_spin_unlock+0x11d/0x230 [ 107.515305][ T4921] ? _raw_spin_unlock+0x24/0x40 [ 107.515332][ T4921] ? iput+0x768/0x980 [ 107.515353][ T4921] __dentry_kill+0x431/0x650 [ 107.515381][ T4921] dentry_kill+0xb8/0x290 [ 107.515404][ T4921] ? dput+0x37/0x1d0 [ 107.515428][ T4921] dput+0xfa/0x1d0 [ 107.515451][ T4921] __fput+0x5e0/0x920 [ 107.515473][ T4921] task_work_run+0x1d0/0x260 [ 107.515495][ T4921] ? task_work_cancel+0x220/0x220 [ 107.515519][ T4921] ? exit_to_user_mode_loop+0x3b/0x110 [ 107.515545][ T4921] exit_to_user_mode_loop+0xe6/0x110 [ 107.515569][ T4921] exit_to_user_mode_prepare+0xee/0x180 [ 107.515595][ T4921] syscall_exit_to_user_mode+0x16/0x40 [ 107.515614][ T4921] do_syscall_64+0x58/0xa0 [ 107.515637][ T4921] ? clear_bhb_loop+0x60/0xb0 [ 107.515659][ T4921] ? clear_bhb_loop+0x60/0xb0 [ 107.515681][ T4921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.515702][ T4921] RIP: 0033:0x7f141959c819 [ 107.515716][ T4921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.515730][ T4921] RSP: 002b:00007ffdb672ba08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 107.515748][ T4921] RAX: 0000000000000000 RBX: 00007ffdb672baf0 RCX: 00007f141959c819 [ 107.515760][ T4921] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 107.515772][ T4921] RBP: 000000000001a387 R08: 0000000000000001 R09: 0000000000000000 [ 107.515782][ T4921] R10: 0000001b2e720000 R11: 0000000000000246 R12: 00007ffdb672bb30 [ 107.515795][ T4921] R13: 00007f1419815fac R14: 000000000001a3eb R15: 00007f1419815fa0 [ 107.515812][ T4921] [ 107.515818][ T4921] Modules linked in: [ 107.515828][ T4921] ---[ end trace 0000000000000000 ]--- [ 107.515837][ T4921] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 107.515858][ T4921] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 ca f9 27 00 e9 0c fe ff ff e8 b0 ed d6 ff 48 89 df 48 c7 c6 a0 f6 94 8a e8 11 0d 12 00 <0f> 0b e8 9a ed d6 ff 48 89 df 48 c7 c6 00 fc 94 8a e8 fb 0c 12 00 [ 107.515872][ T4921] RSP: 0018:ffffc9000c927618 EFLAGS: 00010046 [ 107.515886][ T4921] RAX: 58b2fb36cbb11a00 RBX: ffffea00014b8500 RCX: 58b2fb36cbb11a00 [ 107.515900][ T4921] RDX: 0000000000000002 RSI: ffffffff8a8c2220 RDI: ffffffff8adf11a0 [ 107.515911][ T4921] RBP: ffffc9000c927778 R08: ffffffff8e1ff26f R09: 1ffffffff1c3fe4d [ 107.515923][ T4921] R10: dffffc0000000000 R11: fffffbfff1c3fe4e R12: dffffc0000000000 [ 107.515936][ T4921] R13: dffffc0000000000 R14: ffff88802712a2f8 R15: 1ffff92001924ed4 [ 107.515949][ T4921] FS: 0000555556cab500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 107.515965][ T4921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.515977][ T4921] CR2: 0000200000002000 CR3: 000000002e910000 CR4: 00000000003506e0 [ 107.515993][ T4921] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.516004][ T4921] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.516017][ T4921] Kernel panic - not syncing: Fatal exception [ 107.516152][ T4921] Kernel Offset: disabled [ 108.296543][ T4921] Rebooting in 86400 seconds..