last executing test programs: 9.089263132s ago: executing program 0 (id=17): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) close(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@allocspi={0x100, 0x16, 0x501, 0x70bd2c, 0x25dfdbfe, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@multicast2, 0x4e22, 0x6, 0x4e24, 0xfffa, 0x2, 0x80, 0x120, 0x88}, {@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4d5, 0x33}, @in6=@remote, {0x1ff, 0xa2, 0x7, 0xfffffffffffffffc, 0x0, 0x4, 0x7fff, 0x48fe}, {0x4, 0x9, 0x5fde, 0xffff}, {0x5, 0xfffffff8, 0x9}, 0x70bd26, 0x0, 0xa, 0x2, 0x7f, 0x1}, 0x3, 0xde}, [@tfcpad={0x8, 0x16, 0x80000000}]}, 0x100}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) socket(0xcf73c115ba9a5f15, 0x3, 0x0) 8.812164028s ago: executing program 4 (id=19): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) write$dsp(r0, &(0x7f0000000040)='F', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x10004) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) ppoll(&(0x7f00000011c0)=[{0xffffffffffffffff, 0x1000}, {r0, 0x5120}, {r1, 0x2294}], 0x3, &(0x7f0000001200), 0x0, 0x0) write$cgroup_pid(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 8.005396215s ago: executing program 4 (id=24): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x4}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000083c0)="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", 0x67d}], 0x1}, 0x20048843) r2 = dup(r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) 7.652425135s ago: executing program 0 (id=25): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) openat$tun(0xffffffffffffff9c, 0x0, 0x22400, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e20, 0x3, 0x8, 0x200}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 7.538465212s ago: executing program 0 (id=27): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 7.480233595s ago: executing program 4 (id=29): syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) syz_clone3(&(0x7f0000001700)={0x239300080, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) process_madvise(0xffffffffffffffff, &(0x7f00000016c0), 0x9, 0xd, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x70bd27, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7cb, &(0x7f00000001c0)={&(0x7f0000001080)={{@any, 0x1}, {@local, 0xcb}, 0x400, "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"}, 0x418, 0x1008}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r3, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r3, r4], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r8, 0x5761, &(0x7f0000000640)=ANY=[@ANYRES64=r7]) sendmsg$nl_generic(r1, 0x0, 0x4000080) close_range(r0, 0xffffffffffffffff, 0x0) 6.557439448s ago: executing program 1 (id=33): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x4008800) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.555774079s ago: executing program 4 (id=34): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x40, 0xe, 0x4, "761e6e51"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.36326083s ago: executing program 1 (id=35): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000340), 0x0, 0x20000) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/163, 0xa3}], 0x1, 0x205, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) 5.219936347s ago: executing program 1 (id=36): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) close(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@allocspi={0x100, 0x16, 0x501, 0x70bd2c, 0x25dfdbfe, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@multicast2, 0x4e22, 0x6, 0x4e24, 0xfffa, 0x2, 0x80, 0x120, 0x88}, {@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4d5, 0x33}, @in6=@remote, {0x1ff, 0xa2, 0x7, 0xfffffffffffffffc, 0x0, 0x4, 0x7fff, 0x48fe}, {0x4, 0x9, 0x5fde, 0xffff}, {0x5, 0xfffffff8, 0x9}, 0x70bd26, 0x0, 0xa, 0x2, 0x7f, 0x1}, 0x3, 0xde}, [@tfcpad={0x8, 0x16, 0x80000000}]}, 0x100}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) socket(0xcf73c115ba9a5f15, 0x3, 0x0) 5.201585968s ago: executing program 0 (id=46): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 4.288176671s ago: executing program 1 (id=37): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) openat$tun(0xffffffffffffff9c, 0x0, 0x22400, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e20, 0x3, 0x8, 0x200}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 4.286867261s ago: executing program 0 (id=48): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 4.237962123s ago: executing program 1 (id=38): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="f900000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.851735306s ago: executing program 4 (id=40): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000440)=[@uexit={0x0, 0x18, 0x3}, @out_dx={0x6a, 0x28, {0xbbad, 0x0, 0x6}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x3}, @code={0xa, 0x6a, {"26410f300f6effc744240002000000c7442402a5000000c7442406000000000f0114240f20e035000400000f22e0460f20060f005d8766490f6e790066440fc73666baf80cb8c48cd38def66bafc0cb807800000ef450f21f5"}}, @wr_crn={0x67, 0x20, {0x0, 0x8}}, @rdmsr={0x66, 0x18, {0x9b4}}, @in_dx={0x69, 0x20, {0xc94f, 0x1}}, @enable_nested={0x12c, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0x810, 0xb518}}, @rdmsr={0x66, 0x18, {0xa79}}], 0x1aa}) ioctl$KVM_SET_SREGS2(r1, 0x4140aecd, &(0x7f0000000640)={{0x200000, 0x80a0000, 0x10, 0x6, 0xf, 0x2, 0x28, 0x10, 0x7, 0x9, 0x4, 0x6e}, {0x200000, 0x5000, 0xc, 0x9, 0x9, 0xf4, 0x2, 0x4, 0x2, 0x0, 0x6, 0x2}, {0x70000, 0x8080000, 0xb, 0x57, 0x47, 0x4, 0xc1, 0x0, 0x6, 0x4, 0xc6, 0x7d}, {0xd000, 0xdddd1000, 0x1c, 0x8, 0x40, 0x1, 0x8, 0x9, 0xfa, 0x0, 0x1, 0x6}, {0xfffb0001, 0x26000, 0xe, 0xe, 0x4, 0xdb, 0x78, 0xa, 0x78, 0x6, 0x6, 0x2}, {0xdddd1000, 0x40000, 0xf, 0x17, 0xe4, 0x5, 0xc, 0x0, 0x5, 0x61, 0x8, 0x4}, {0x80a0000, 0xeeee0000, 0x9, 0xe, 0x7, 0xf9, 0x4, 0x2, 0x1, 0x6, 0x7, 0xff}, {0x0, 0x3000, 0x9, 0x3, 0x8, 0x1, 0xfa, 0x1, 0xa, 0xff, 0x80, 0x5}, {0x0, 0x528}, {0x8080000, 0xfffb}, 0x40040002, 0x0, 0x0, 0x300082, 0xd, 0x8400, 0xeeee8000, 0x0, [0x64, 0x7, 0x5, 0x6b]}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000780)={0x1, 0x0, [{0x0, 0x9171, 0x2, 0x7f, 0x3, 0x200, 0x83a}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x26c, 0x0, 0x8000000}]}) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xfffffffffffffffd, 0x183003) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000140)=""/248) 3.4481275s ago: executing program 3 (id=47): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 3.342837446s ago: executing program 2 (id=49): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 3.184612805s ago: executing program 2 (id=50): userfaultfd(0x80001) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) rt_sigprocmask(0x1, &(0x7f00000000c0)={[0xffffffffffffffff]}, &(0x7f0000000100), 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x128}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="0c0100001a00070026bd700000000000fe80000000000000000000000000001bfe8000"/44, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff01000000000000000000000000000100000000ff000000fc0000000010000000000000000000005a0000000000000047ef0b9b6330ed1ba6d400b4000000000000020000000000000005000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000600000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb08001d0040000000ca9ad0"], 0x10c}}, 0x40000) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f0000000100)=0x808c) close(r4) 3.133292378s ago: executing program 3 (id=51): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) gettid() write$sndseq(r4, &(0x7f0000001380), 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x9c) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = dup(r3) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RSTATFS(r7, &(0x7f00000001c0)={0x43, 0x9, 0x1, {0x4b0, 0xa3, 0x4, 0x8000000000000001, 0xb6, 0x0, 0x1, 0x401, 0x7fff}}, 0x43) close(0x3) socket$vsock_stream(0x28, 0x1, 0x0) close(0xffffffffffffffff) 2.508727774s ago: executing program 0 (id=52): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b000100"], 0xa0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'sit0\x00'}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x1, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xb1, 0xfe, 0x92, 0x8, 0x1415, 0x3, 0x655d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0xa5, 0x3e}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0xf, &(0x7f0000000b80)=ANY=[@ANYBLOB="050f0f00010c10"], 0x1, [{0x0, 0x0}]}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100009f09a00871041303d581010203010902120001000000000904"], 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) 2.199581542s ago: executing program 3 (id=53): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x438}, 0x0, 0x12f4c4729764eade, 0x1}) io_uring_enter(r1, 0x3516, 0xa00100, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2.151842505s ago: executing program 3 (id=54): unshare(0x22060600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000ec0)={0x0, [{0x2, 0x0, 0x84, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x80000001, 0x0}, {0x0, 0x0, 0x100, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x200, 0x0}, {0x1, 0x0, 0xfffffffc, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x95, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x9d4, 0x0}, {0x1, 0x0, 0x4, 0x0}]}) 2.114660097s ago: executing program 4 (id=55): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x35, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xca, 0x9b, 0xd4, 0x10, 0x1199, 0xb000, 0xa898, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x30, 0x2, 0x0, 0x17, 0xb5, 0x1b}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1.843490293s ago: executing program 3 (id=56): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000000c0)) 1.790074816s ago: executing program 1 (id=57): capset(&(0x7f0000000080)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000000)={0x17, 0xa9ff, 0x4, 0x8000, 0xa, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) personality(0x4000009) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000000301010100000000000000000200000081fe4aa3d6a4bc0c0019800800020022010000300002802c00018031000300fc02000000008000000000000000000010000400201ff276fa3811dfa05a275776685243b1b216b2710601637220f83f05f54fe2048ca74175b1389b86a732876f1aad885cbfeb6b70e425eb2681ac9fce4af77f6d674a3d0cc3310bf1b055c82260d9ff"], 0x50}, 0x1, 0x0, 0x0, 0x40804}, 0x44890) fcntl$notify(0xffffffffffffffff, 0x402, 0x2a) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000200)=0x4, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @mss={0x2, 0x5}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0) 1.705177261s ago: executing program 3 (id=58): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x3c, r3, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000580)={{0x3, 0x0, 0x1, 0x1, 0x200001}, 0xff, 0x8, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x2, 0x3, 0xf8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a000001090002"], 0x40}}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000540)=@pppoe={0x18, 0x0, {0x1, @local, 'netdevsim0\x00'}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000a00)="9c280a5aaca549d197b5b0c3131f84b54706d81179a41aafd6cf88bfddfd5d5d8cf44b6a565ccef21977e89eb700b2", 0x2f}, {0x0}], 0x2, &(0x7f0000000840)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xa3cc}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x60}, 0x40002) open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='\x00', 0x89901) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000010300)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1.615233206s ago: executing program 2 (id=59): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) close(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', 0x0, 0x0, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1.192049961s ago: executing program 2 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf500f0ff}, 0x0) 135.630012ms ago: executing program 2 (id=61): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0x25, 0x0, 0x0) 0s ago: executing program 2 (id=62): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="020400020c000000fdffffffffdbdf2503000600002000000200000064010100000000000000000002000100000000000700fb0300000000030005000000000002000000ac1414aa0000000000000000010008000000000001001400"], 0x60}, 0x1, 0x7}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts. [ 50.638841][ T4170] cgroup: Unknown subsys name 'net' [ 50.781228][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.034108][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.654444][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 53.774255][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.781978][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.789892][ T4184] device bridge_slave_0 entered promiscuous mode [ 53.800705][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.808038][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.816205][ T4184] device bridge_slave_1 entered promiscuous mode [ 53.835413][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 53.861677][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.890117][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.932610][ T4184] team0: Port device team_slave_0 added [ 53.944124][ T4184] team0: Port device team_slave_1 added [ 53.950186][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 53.992298][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 54.013275][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.020577][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.046739][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.078799][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.085847][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.111961][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.130343][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 54.139719][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.146893][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.154757][ T4193] device bridge_slave_0 entered promiscuous mode [ 54.186417][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.193644][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.201521][ T4193] device bridge_slave_1 entered promiscuous mode [ 54.235880][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.242938][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.251374][ T4185] device bridge_slave_0 entered promiscuous mode [ 54.260174][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.271250][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.293114][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.300261][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.308458][ T4185] device bridge_slave_1 entered promiscuous mode [ 54.333816][ T4184] device hsr_slave_0 entered promiscuous mode [ 54.340652][ T4184] device hsr_slave_1 entered promiscuous mode [ 54.371765][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.397751][ T4193] team0: Port device team_slave_0 added [ 54.420361][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.430817][ T4193] team0: Port device team_slave_1 added [ 54.476432][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.483506][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.491715][ T4186] device bridge_slave_0 entered promiscuous mode [ 54.498913][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.506179][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.514134][ T4187] device bridge_slave_0 entered promiscuous mode [ 54.544985][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.552358][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.561194][ T4186] device bridge_slave_1 entered promiscuous mode [ 54.568202][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.575431][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.583347][ T4187] device bridge_slave_1 entered promiscuous mode [ 54.590625][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.597815][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.624246][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.649056][ T4185] team0: Port device team_slave_0 added [ 54.677930][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.684882][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.710969][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.726023][ T4185] team0: Port device team_slave_1 added [ 54.755819][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.775936][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.805760][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.815161][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.822107][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.848673][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.877666][ T4193] device hsr_slave_0 entered promiscuous mode [ 54.884247][ T4193] device hsr_slave_1 entered promiscuous mode [ 54.891092][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.898955][ T4193] Cannot create hsr debugfs directory [ 54.906091][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.915571][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.922519][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.948980][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.966577][ T4186] team0: Port device team_slave_0 added [ 54.991810][ T4187] team0: Port device team_slave_0 added [ 55.002265][ T4187] team0: Port device team_slave_1 added [ 55.009561][ T4186] team0: Port device team_slave_1 added [ 55.055031][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.062078][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.088275][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.112138][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.120590][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.146704][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.161502][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.169159][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.195258][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.206911][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.213878][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.239915][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.254839][ T4185] device hsr_slave_0 entered promiscuous mode [ 55.261598][ T4185] device hsr_slave_1 entered promiscuous mode [ 55.268350][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.275961][ T4185] Cannot create hsr debugfs directory [ 55.301451][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.311901][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.349064][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.364700][ T4187] device hsr_slave_0 entered promiscuous mode [ 55.371898][ T4187] device hsr_slave_1 entered promiscuous mode [ 55.378953][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.386778][ T4187] Cannot create hsr debugfs directory [ 55.403144][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.426182][ T4186] device hsr_slave_0 entered promiscuous mode [ 55.432897][ T4186] device hsr_slave_1 entered promiscuous mode [ 55.440431][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.447363][ T4190] Bluetooth: hci3: command 0x0409 tx timeout [ 55.448122][ T4186] Cannot create hsr debugfs directory [ 55.515294][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 55.515314][ T4229] Bluetooth: hci4: command 0x0409 tx timeout [ 55.521512][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 55.542701][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 55.721678][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.732179][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.744349][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.754038][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.813550][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.821544][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.839838][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.863209][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.873342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.883804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.901471][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.911940][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.964116][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.973547][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.983900][ T923] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.991151][ T923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.001090][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.011552][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.020192][ T923] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.027284][ T923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.035856][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.060156][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.074466][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.084005][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.094987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.104858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.113920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.123560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.133214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.141463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.150998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.168998][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.177502][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.189493][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.201092][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.211318][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.222273][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.241613][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.252272][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.270231][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.279017][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.289161][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.297949][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.307307][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.333574][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.351045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.359856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.368509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.378213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.386814][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.393856][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.426658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.452437][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.491825][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.501066][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.510081][ T1230] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.517218][ T1230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.526444][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.560697][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.576811][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.591342][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.600974][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.613916][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.622614][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.631928][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.641399][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.660825][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.704816][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.714044][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.724980][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.734161][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.742692][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.752171][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.760733][ T923] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.767854][ T923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.778070][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.786828][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.801101][ T923] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.808328][ T923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.816587][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.825587][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.834264][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.843370][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.852099][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.860919][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.869533][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.877726][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.888883][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.898152][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.906436][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.923752][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.936416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.946540][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.955811][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.968510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.977484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.990779][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.002098][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.014155][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.024379][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.035016][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.051242][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.090499][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.106105][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.114282][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.135931][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.158060][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.172655][ T923] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.179772][ T923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.193676][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.202803][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.211430][ T923] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.218515][ T923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.227036][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.235832][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.247938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.279149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.296796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.316533][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.323622][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.345653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.366367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.378101][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.385291][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.393019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.416472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.425010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.436501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.445525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.453915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.462465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.470810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.484876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.501106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.509649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.521998][ T4268] Bluetooth: hci3: command 0x041b tx timeout [ 57.533848][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.553456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.564764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.577417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.584847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.595758][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 57.604823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.613012][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 57.623260][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 57.633952][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.653404][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.660937][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 57.690873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.701678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.715891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.724638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.739593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.750663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.764142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.776012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.786198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.823587][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.840545][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.870616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.880403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.895803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.904090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.912597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.922301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.941141][ T4184] device veth0_vlan entered promiscuous mode [ 57.959124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.969316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.978583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.988966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.999319][ T4185] device veth0_vlan entered promiscuous mode [ 58.012035][ T4193] device veth0_vlan entered promiscuous mode [ 58.023301][ T4184] device veth1_vlan entered promiscuous mode [ 58.044818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.053724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.062097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.072435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.082451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.090709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.099751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.114024][ T4185] device veth1_vlan entered promiscuous mode [ 58.139753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.150221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.159090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.169236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.177625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.185312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.198307][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.208056][ T4193] device veth1_vlan entered promiscuous mode [ 58.220276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.232237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.246600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.275685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.284032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.292169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.305465][ T4184] device veth0_macvtap entered promiscuous mode [ 58.319282][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.334003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.342255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.352020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.362541][ T4185] device veth0_macvtap entered promiscuous mode [ 58.374047][ T4184] device veth1_macvtap entered promiscuous mode [ 58.387520][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.396662][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.404563][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.413482][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.422975][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.443139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.451624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.470457][ T4185] device veth1_macvtap entered promiscuous mode [ 58.481014][ T4193] device veth0_macvtap entered promiscuous mode [ 58.493403][ T4193] device veth1_macvtap entered promiscuous mode [ 58.501331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.509816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.518089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.526200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.534820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.582947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.591657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.602275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.611649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.623241][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.632154][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.643601][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.655325][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.664717][ T4187] device veth0_vlan entered promiscuous mode [ 58.681008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.690080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.698303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.706445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.714142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.726244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.735727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.744282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.753958][ T4186] device veth0_vlan entered promiscuous mode [ 58.762257][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.776312][ T4187] device veth1_vlan entered promiscuous mode [ 58.786927][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.799150][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.809865][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.820852][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.836377][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.843984][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.854604][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.866606][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.875413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.883415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.894232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.903879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.913227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.922174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.931108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.942999][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.952339][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.962020][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.970970][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.999117][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.008693][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.018111][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.026867][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.047690][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.058503][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.068733][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.079631][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.091093][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.101482][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.110832][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.121166][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.131740][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.166146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.176663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.186725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.196231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.211240][ T4186] device veth1_vlan entered promiscuous mode [ 59.221770][ T4187] device veth0_macvtap entered promiscuous mode [ 59.264515][ T4187] device veth1_macvtap entered promiscuous mode [ 59.334611][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.345398][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.357882][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.368430][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.378482][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.389206][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.400627][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.425409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.441020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.449841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.459320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.469071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.477978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.488549][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.499496][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.509811][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.521275][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.531347][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.542192][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.553649][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.576854][ T4186] device veth0_macvtap entered promiscuous mode [ 59.586116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.594288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.602929][ T4268] Bluetooth: hci3: command 0x040f tx timeout [ 59.610238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.622830][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.632258][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.641293][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.651305][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.676320][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.678244][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 59.684315][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.702657][ T4186] device veth1_macvtap entered promiscuous mode [ 59.714721][ T4268] Bluetooth: hci4: command 0x040f tx timeout [ 59.721002][ T4268] Bluetooth: hci2: command 0x040f tx timeout [ 59.725323][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.736411][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.740825][ T4268] Bluetooth: hci1: command 0x040f tx timeout [ 59.781462][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.796368][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.804211][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.812410][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.840518][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.852787][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.865974][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.879005][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.890357][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.901707][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.911827][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.928244][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.938220][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.949045][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.960315][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.986469][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.997817][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.011968][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.023003][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.032977][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.043652][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.055162][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.066011][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.076538][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.087177][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.098612][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.124448][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.132826][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.138658][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.148883][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.150976][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.158950][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.182596][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.192493][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.201665][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.211886][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.232938][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.234511][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.250532][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.255619][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.280622][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.348573][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.357001][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.364488][ T923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.427222][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.440693][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.449259][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.471892][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.497359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.505905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.526329][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.541438][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.558104][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.036454][ T4251] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 61.285211][ T4251] usb 2-1: Using ep0 maxpacket: 16 [ 61.285251][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #280!!! [ 61.305231][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.415570][ T4251] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.457602][ T4251] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 61.519582][ T4251] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 61.530299][ T4251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.557304][ T4251] usb 2-1: config 0 descriptor?? [ 61.665209][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 61.686055][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 61.765666][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 61.772093][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 61.795483][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 61.805458][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 61.825350][ T13] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 61.835494][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.855240][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.881388][ T13] usb 3-1: config 0 descriptor?? [ 61.890422][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 62.042750][ T4251] kye 0003:0458:5010.0001: hidraw0: USB HID v0.0f Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 62.079011][ T4251] kye 0003:0458:5010.0001: tablet-enabling feature report not found [ 62.102940][ T4251] kye 0003:0458:5010.0001: tablet enabling failed [ 62.209603][ T13] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 62.304520][ T4251] usb 2-1: USB disconnect, device number 2 [ 62.316008][ T4229] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 62.390721][ T4327] fido_id[4327]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 62.565141][ T4229] usb 1-1: Using ep0 maxpacket: 16 [ 62.705304][ T4229] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 62.733772][ T4229] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.780232][ T4229] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 62.794773][ T4229] usb 1-1: config 1 has no interface number 1 [ 62.801596][ T4229] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 62.814950][ T4229] usb 1-1: config 1 interface 2 altsetting 1 has an invalid endpoint with address 0x61, skipping [ 62.985430][ T4229] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 62.989018][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 63.003839][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #242!!! [ 63.020641][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.073505][ T4229] usb 1-1: Product: syz [ 63.092762][ T4229] usb 1-1: Manufacturer: syz [ 63.116927][ T4229] usb 1-1: SerialNumber: syz [ 63.195373][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 63.512046][ T4229] usb 1-1: USB disconnect, device number 2 [ 63.595654][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 63.602997][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 63.614271][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 63.620835][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 63.625177][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 63.634020][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 63.663697][ T4295] udevd[4295]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 64.170133][ T4363] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 64.264305][ T4364] Zero length message leads to an empty skb [ 64.501766][ T4370] netlink: 'syz.1.20': attribute type 1 has an invalid length. [ 64.521209][ T4370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20'. [ 64.536872][ T4370] device dummy0 entered promiscuous mode [ 64.695433][ T4373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21'. [ 64.816682][ T4373] team0: Port device veth0_to_bond added [ 64.900003][ T13] usb 3-1: USB disconnect, device number 2 [ 65.018471][ T4377] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 65.262721][ T4384] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.566800][ T4391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 65.764751][ T26] audit: type=1326 audit(1770749797.889:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.4.29" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3787965f79 code=0x0 [ 66.157644][ T4190] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 66.411963][ T4190] usb 1-1: Using ep0 maxpacket: 32 [ 66.555513][ T4190] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 66.563925][ T4190] usb 1-1: config 0 has no interface number 0 [ 66.616408][ T4190] usb 1-1: config 0 interface 184 has no altsetting 0 [ 66.672523][ T4412] device syzkaller0 entered promiscuous mode [ 66.795310][ T4190] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 66.810825][ T4190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.820537][ T4190] usb 1-1: Product: syz [ 66.824709][ T4190] usb 1-1: Manufacturer: syz [ 66.834924][ T4190] usb 1-1: SerialNumber: syz [ 66.850906][ T4190] usb 1-1: config 0 descriptor?? [ 66.899534][ T4190] smsc75xx v1.0.0 [ 66.915118][ T1108] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.935188][ T4251] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 67.125298][ T4190] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 67.147716][ T4190] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 67.177067][ T4190] usb 1-1: USB disconnect, device number 3 [ 67.345286][ T4251] usb 3-1: No LPM exit latency info found, disabling LPM. [ 67.445474][ T1108] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 67.461644][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.484130][ T1108] usb 5-1: Product: syz [ 67.491959][ T1108] usb 5-1: Manufacturer: syz [ 67.505119][ T1108] usb 5-1: SerialNumber: syz [ 67.685699][ T4251] usb 3-1: string descriptor 0 read error: -22 [ 67.691957][ T4251] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 67.718474][ T4251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.742412][ T4251] usb 3-1: config 0 descriptor?? [ 67.942131][ T4417] input: syz1 as /devices/virtual/input/input5 [ 67.985504][ T1108] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 68.015103][ T4408] udc-core: couldn't find an available UDC or it's busy [ 68.045428][ T4408] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 68.325364][ T4251] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 68.409596][ T4251] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 68.440247][ T4251] dib0700: firmware download failed at 7 with -22 [ 68.503050][ T4251] usb 3-1: USB disconnect, device number 3 [ 68.735226][ T1108] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 68.753374][ T1108] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 68.764661][ T1108] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 68.773816][ T1108] lan78xx: probe of 5-1:1.0 failed with error -71 [ 68.799950][ T1108] usb 5-1: USB disconnect, device number 2 [ 69.198357][ T4173] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 69.475132][ T4173] usb 2-1: Using ep0 maxpacket: 16 [ 69.535165][ T1108] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.605399][ T4173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 69.785122][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 69.805830][ T4173] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 69.819538][ T4173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.839557][ T4173] usb 2-1: Product: syz [ 69.852586][ T4173] usb 2-1: Manufacturer: syz [ 69.857604][ T4173] usb 2-1: SerialNumber: syz [ 69.884278][ T4173] usb 2-1: config 0 descriptor?? [ 69.927327][ T4173] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 69.948862][ T4173] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 70.065286][ T1108] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 70.074336][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 70.090305][ T4462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.50'. [ 70.119901][ T1108] usb 5-1: Product: syz [ 70.142453][ T1108] usb 5-1: Manufacturer: syz [ 70.152673][ T4462] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 70.163489][ T1108] usb 5-1: SerialNumber: syz [ 70.177896][ T1108] usb 5-1: config 0 descriptor?? [ 70.462132][ T4190] usb 5-1: USB disconnect, device number 3 [ 70.578566][ T4173] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 70.915342][ T4173] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 70.925209][ T3520] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 70.935464][ T4173] em28xx 2-1:0.0: board has no eeprom [ 71.065255][ T4173] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 71.075224][ T4173] em28xx 2-1:0.0: dvb set to bulk mode. [ 71.119899][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.126711][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.141732][ T4190] em28xx 2-1:0.0: Binding DVB extension [ 71.158031][ T4173] usb 2-1: USB disconnect, device number 3 [ 71.194780][ T4173] em28xx 2-1:0.0: Disconnecting em28xx [ 71.289323][ T4190] em28xx 2-1:0.0: Registering input extension [ 71.305197][ T3520] usb 1-1: No LPM exit latency info found, disabling LPM. [ 71.343588][ T4173] em28xx 2-1:0.0: Closing input extension [ 71.405207][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 71.438733][ T4173] em28xx 2-1:0.0: Freeing device [ 71.530965][ T4482] netlink: 60 bytes leftover after parsing attributes in process `syz.1.57'. [ 71.655161][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 71.660463][ T3520] usb 1-1: string descriptor 0 read error: -22 [ 71.696974][ T3520] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 71.719282][ T3520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.739062][ T3520] usb 1-1: config 0 descriptor?? [ 71.785556][ T21] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 71.799918][ T21] usb 5-1: config 0 has no interface number 0 [ 71.814509][ T21] usb 5-1: config 0 interface 48 has no altsetting 0 [ 71.985736][ T21] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 71.998433][ T4465] udc-core: couldn't find an available UDC or it's busy [ 72.017486][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.035230][ T4465] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 72.056310][ T21] usb 5-1: Product: syz [ 72.075259][ T3520] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 72.085313][ T21] usb 5-1: Manufacturer: syz [ 72.089931][ T21] usb 5-1: SerialNumber: syz [ 72.206059][ T3520] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 72.220130][ T3520] dib0700: firmware download failed at 7 with -22 [ 72.227778][ T21] usb 5-1: config 0 descriptor?? [ 72.252119][ T3520] usb 1-1: USB disconnect, device number 4 [ 73.207757][ T4202] Bluetooth: hci0: Unknown advertising packet type: 0xd49b [ 73.207808][ T4202] Bluetooth: hci0: Unknown advertising packet type: 0x1bb5 [ 73.216758][ T4202] ================================================================== [ 73.232121][ T4202] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x133f/0x3c90 [ 73.239935][ T4202] Read of size 1 at addr ffff888022d23401 by task kworker/u5:8/4202 [ 73.247919][ T4202] [ 73.250263][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 73.257809][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 73.267855][ T4202] Workqueue: hci0 hci_rx_work [ 73.272541][ T4202] Call Trace: [ 73.275816][ T4202] [ 73.278762][ T4202] dump_stack_lvl+0x188/0x250 [ 73.283470][ T4202] ? show_regs_print_info+0x20/0x20 [ 73.288669][ T4202] ? load_image+0x400/0x400 [ 73.293166][ T4202] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 73.298630][ T4202] print_address_description+0x60/0x2d0 [ 73.304167][ T4202] ? hci_le_meta_evt+0x133f/0x3c90 [ 73.309267][ T4202] kasan_report+0xdf/0x130 [ 73.313681][ T4202] ? hci_le_meta_evt+0x133f/0x3c90 [ 73.318800][ T4202] hci_le_meta_evt+0x133f/0x3c90 [ 73.323746][ T4202] ? hci_remote_host_features_evt+0x280/0x280 [ 73.329816][ T4202] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 73.335466][ T4202] ? mark_lock+0x94/0x320 [ 73.339794][ T4202] ? mutex_unlock+0x10/0x10 [ 73.344306][ T4202] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 73.350282][ T4202] ? lock_chain_count+0x20/0x20 [ 73.355158][ T4202] ? __rwlock_init+0x140/0x140 [ 73.359918][ T4202] hci_event_packet+0xe48/0x1370 [ 73.364868][ T4202] ? lockdep_hardirqs_on+0x94/0x140 [ 73.370068][ T4202] ? rcu_lock_release+0x20/0x20 [ 73.374912][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 73.380109][ T4202] hci_rx_work+0x255/0xa10 [ 73.384569][ T4202] process_one_work+0x85f/0x1010 [ 73.389601][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 73.395235][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 73.400528][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 73.405568][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 73.411111][ T4202] ? wq_worker_running+0x97/0x170 [ 73.416142][ T4202] worker_thread+0xaa6/0x1290 [ 73.420818][ T4202] ? lockdep_hardirqs_on+0x94/0x140 [ 73.426006][ T4202] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 73.431901][ T4202] kthread+0x436/0x520 [ 73.435984][ T4202] ? rcu_lock_release+0x20/0x20 [ 73.440825][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 73.445412][ T4202] ret_from_fork+0x1f/0x30 [ 73.449837][ T4202] [ 73.452856][ T4202] [ 73.455171][ T4202] Allocated by task 4472: [ 73.459480][ T4202] __kasan_kmalloc+0xb5/0xf0 [ 73.464066][ T4202] __alloc_skb+0x22c/0x750 [ 73.468484][ T4202] vhci_write+0xbc/0x450 [ 73.472731][ T4202] vfs_write+0x745/0xd60 [ 73.476988][ T4202] ksys_write+0x152/0x260 [ 73.481305][ T4202] do_syscall_64+0x4c/0xa0 [ 73.485796][ T4202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.491690][ T4202] [ 73.494011][ T4202] The buggy address belongs to the object at ffff888022d23000 [ 73.494011][ T4202] which belongs to the cache kmalloc-1k of size 1024 [ 73.508052][ T4202] The buggy address is located 1 bytes to the right of [ 73.508052][ T4202] 1024-byte region [ffff888022d23000, ffff888022d23400) [ 73.521746][ T4202] The buggy address belongs to the page: [ 73.527385][ T4202] page:ffffea00008b4800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22d20 [ 73.537630][ T4202] head:ffffea00008b4800 order:3 compound_mapcount:0 compound_pincount:0 [ 73.545944][ T4202] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 73.553952][ T4202] raw: 00fff00000010200 ffffea0001df9800 0000000300000003 ffff888016c41dc0 [ 73.562525][ T4202] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 73.571093][ T4202] page dumped because: kasan: bad access detected [ 73.577497][ T4202] page_owner tracks the page as allocated [ 73.583203][ T4202] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4034, ts 41697158132, free_ts 41697121449 [ 73.601940][ T4202] get_page_from_freelist+0x1bbd/0x1ca0 [ 73.607506][ T4202] __alloc_pages+0x1ee/0x480 [ 73.612089][ T4202] new_slab+0xc0/0x4b0 [ 73.616145][ T4202] ___slab_alloc+0x80a/0xdd0 [ 73.620723][ T4202] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 73.626532][ T4202] __alloc_skb+0x22c/0x750 [ 73.630938][ T4202] __tcp_send_ack+0x9d/0x5d0 [ 73.635529][ T4202] tcp_recvmsg_locked+0x1f57/0x27f0 [ 73.640715][ T4202] tcp_recvmsg+0x232/0x770 [ 73.645138][ T4202] inet_recvmsg+0x146/0x200 [ 73.649655][ T4202] sock_read_iter+0x2b8/0x380 [ 73.654327][ T4202] vfs_read+0x759/0xd60 [ 73.658473][ T4202] ksys_read+0x152/0x260 [ 73.662700][ T4202] do_syscall_64+0x4c/0xa0 [ 73.667107][ T4202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.672992][ T4202] page last free stack trace: [ 73.677660][ T4202] free_unref_page_prepare+0x637/0x6c0 [ 73.683145][ T4202] free_unref_page+0x8f/0x2a0 [ 73.687817][ T4202] skb_release_data+0x3b1/0x800 [ 73.692665][ T4202] __kfree_skb+0x4c/0x60 [ 73.696898][ T4202] tcp_recvmsg_locked+0x14e1/0x27f0 [ 73.702096][ T4202] tcp_recvmsg+0x232/0x770 [ 73.706519][ T4202] inet_recvmsg+0x146/0x200 [ 73.711041][ T4202] sock_read_iter+0x2b8/0x380 [ 73.715719][ T4202] vfs_read+0x759/0xd60 [ 73.719896][ T4202] ksys_read+0x152/0x260 [ 73.724130][ T4202] do_syscall_64+0x4c/0xa0 [ 73.728539][ T4202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.734424][ T4202] [ 73.736737][ T4202] Memory state around the buggy address: [ 73.742357][ T4202] ffff888022d23300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 73.750407][ T4202] ffff888022d23380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 73.758478][ T4202] >ffff888022d23400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.766663][ T4202] ^ [ 73.770734][ T4202] ffff888022d23480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.778787][ T4202] ffff888022d23500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.786840][ T4202] ================================================================== [ 73.794898][ T4202] Disabling lock debugging due to kernel taint [ 73.801074][ C1] vkms_vblank_simulate: vblank timer overrun [ 73.821621][ T21] usb 5-1: USB disconnect, device number 4 [ 73.831439][ T4202] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 73.838667][ T4202] CPU: 0 PID: 4202 Comm: kworker/u5:8 Tainted: G B syzkaller #0 [ 73.847613][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 73.857681][ T4202] Workqueue: hci0 hci_rx_work [ 73.862388][ T4202] Call Trace: [ 73.865680][ T4202] [ 73.868626][ T4202] dump_stack_lvl+0x188/0x250 [ 73.873626][ T4202] ? show_regs_print_info+0x20/0x20 [ 73.878829][ T4202] ? load_image+0x400/0x400 [ 73.883355][ T4202] panic+0x2e5/0x810 [ 73.887249][ T4202] ? bpf_jit_dump+0xd0/0xd0 [ 73.891761][ T4202] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 73.898046][ T4202] ? _raw_spin_unlock+0x40/0x40 [ 73.902921][ T4202] ? hci_le_meta_evt+0x133f/0x3c90 [ 73.908034][ T4202] check_panic_on_warn+0x80/0xa0 [ 73.912988][ T4202] ? hci_le_meta_evt+0x133f/0x3c90 [ 73.918120][ T4202] end_report+0x6d/0xf0 [ 73.922277][ T4202] kasan_report+0x102/0x130 [ 73.926783][ T4202] ? hci_le_meta_evt+0x133f/0x3c90 [ 73.931894][ T4202] hci_le_meta_evt+0x133f/0x3c90 [ 73.936855][ T4202] ? hci_remote_host_features_evt+0x280/0x280 [ 73.942922][ T4202] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 73.948567][ T4202] ? mark_lock+0x94/0x320 [ 73.952891][ T4202] ? mutex_unlock+0x10/0x10 [ 73.957398][ T4202] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 73.963419][ T4202] ? lock_chain_count+0x20/0x20 [ 73.968298][ T4202] ? __rwlock_init+0x140/0x140 [ 73.973093][ T4202] hci_event_packet+0xe48/0x1370 [ 73.978049][ T4202] ? lockdep_hardirqs_on+0x94/0x140 [ 73.983276][ T4202] ? rcu_lock_release+0x20/0x20 [ 73.988147][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 73.993368][ T4202] hci_rx_work+0x255/0xa10 [ 73.997811][ T4202] process_one_work+0x85f/0x1010 [ 74.002776][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 74.008436][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 74.013750][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 74.018787][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 74.024364][ T4202] ? wq_worker_running+0x97/0x170 [ 74.029406][ T4202] worker_thread+0xaa6/0x1290 [ 74.034113][ T4202] ? lockdep_hardirqs_on+0x94/0x140 [ 74.039332][ T4202] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 74.045245][ T4202] kthread+0x436/0x520 [ 74.049330][ T4202] ? rcu_lock_release+0x20/0x20 [ 74.054218][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 74.058829][ T4202] ret_from_fork+0x1f/0x30 [ 74.063269][ T4202] [ 74.066590][ T4202] Kernel Offset: disabled [ 74.070933][ T4202] Rebooting in 86400 seconds..