last executing test programs: 1m0.199741851s ago: executing program 4 (id=16): socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000240)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {}, {@jqfmt_vfsv1}, {@grpid}]}, 0x2, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") r1 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfed64000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x4, 0x4eb, &(0x7f0000000540)="$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") ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x0, 0x5, 0x6, 0x80009, 0xffffffff, 0xfffc}) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000000)={0x2, 0x3, 0x815, 0xa, 0x15e, 0x0}) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r1, 0x4) 54.581042347s ago: executing program 4 (id=25): ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f5247424f81422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"}) 52.128416056s ago: executing program 4 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") socket(0x2a, 0x5, 0x7fff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000300), 0x1, 0x56d, &(0x7f0000000540)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x25}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="ac", 0x1}], 0x1}, 0x8804) 48.900546474s ago: executing program 4 (id=40): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, 0x0, 0x0, 0x16, 0x0) r3 = mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) mq_notify(r3, &(0x7f0000000200)={0x0, 0x25, 0x1, @thr={0x0, 0x0}}) 46.090378743s ago: executing program 4 (id=49): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000000c0), &(0x7f0000000280)=0x4) 45.181955455s ago: executing program 4 (id=51): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x8, 0x4, &(0x7f00000020c0)=ANY=[@ANYBLOB="419d40000800000800000000000000ff18410000f8ffffff0000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0xfffffc7a) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r5, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1}}], 0x1, 0xc015) 29.858512046s ago: executing program 32 (id=51): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x8, 0x4, &(0x7f00000020c0)=ANY=[@ANYBLOB="419d40000800000800000000000000ff18410000f8ffffff0000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0xfffffc7a) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r5, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1}}], 0x1, 0xc015) 15.305959269s ago: executing program 1 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='rd_pages=8\n', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff) 14.715695033s ago: executing program 1 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r4, 0x0, 0x40000c0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 13.20166376s ago: executing program 1 (id=183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffea}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0xfffffff7, 0xb47e, 0xb, 0x20000003, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x2, 0xb}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0xa, 0x40000003, 0xfffffffc, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000030}, 0x0) close(0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 7.901213989s ago: executing program 3 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc', 0x9) 7.794157752s ago: executing program 3 (id=198): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 7.791443582s ago: executing program 0 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r0 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4010565a, &(0x7f0000000900)={0x8000004}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r0) 6.986353411s ago: executing program 3 (id=200): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0004', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n\x00', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='nonexistent_udc\n\x00', 0x10) close(r4) 6.894130183s ago: executing program 0 (id=201): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, &(0x7f0000000900)={0x8000004}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 6.753016307s ago: executing program 0 (id=203): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, 0x0, 0x0, 0x16, 0x0) r3 = mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) mq_notify(r3, &(0x7f0000000200)={0x0, 0x25, 0x1, @thr={0x0, 0x0}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffcf6) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x4000}) io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6.655664729s ago: executing program 3 (id=204): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, 0x0, 0x0, 0x16, 0x0) r4 = mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) mq_notify(r4, &(0x7f0000000200)={0x0, 0x25, 0x1, @thr={0x0, 0x0}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffcf6) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x4000}) io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000004c0)=@multiplanar_mmap={0x8, 0x0, 0x4, 0x80, 0x3, {}, {0x4, 0x1, 0x3, 0x2, 0x1, 0x0, "1f88ba7b"}, 0x6, 0x1, {0x0}, 0x5}) 3.774540529s ago: executing program 0 (id=206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffea}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0xfffffff7, 0xb47e, 0xb, 0x20000003, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x2, 0xb}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0xa, 0x40000003, 0xfffffffc, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000030}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.774188369s ago: executing program 2 (id=208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 3.751786339s ago: executing program 2 (id=209): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000c80)={[{@init_itable}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@quota}, {@sysvgroups}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@debug}]}, 0xfc, 0x57d, &(0x7f0000001500)="$eJzs3d9rW1UcAPDvTX/sp66DMfRFBntwMpeurT8mCM5H0eFA32doszKaLqNJx1oHrg/uxRcZgogD8Q/w3cfhP+BfMdDBkFH0QYTITW+2tE2atkuXbPl84G7n5N6bc7+593t6Tm5CAhhYJ9J/chGvRsS3ScSRpnXDka08sbbd6qOb0+mSRK322V9JJNljje2T7P9DWeWViPjt64jTuc3tVpaW5wqlUnEhq49X56+NV5aWz1yZL8wWZ4tXJ6emzr09Nfneu+90LdY3Lv7zw6f3Pjr3zcnV7395cPROEufjcLauOY6ncKu5cqLwX1YaifMbNpzoQmP9JOn1AbArQ1mej0TaBxyJoSzrgRffVxFRAwZUIv9hQDXGAY25fZfmwc+Nhx+uTYDqsY82xz+89t5I7K/PjQ6uJutmRul8d6wL7adt/Prn3TvpElu/D3GgQx1gR26tRMTZ4eHN/X+S9X+7d7b+5vHWNrYxaH9/oJfupeOfN1uN/3KPxz/RYvxzqEXu7kbn/M896EIzbaXjv/dbjn8fd11jQ1ntpfqYbyS5fKVUPBsRL0fEqah1vPVxbvV+rd265vFfuqTtN8aC2XE8GN63fp+ZQrUQEaO7DHmdhyv14W2qTf+/vz7W3Xj+09fj4jbbOF68+1q7dZ3j31u1nyNeb3n+n5zWZOv7k+P162G8cVVs9vft47+3a7/X8T9ciTi4dfxjSfP92srO2/hp/7/Fdut2e/2PJp/Xy40kuFGoVhcmIkaTTzY/Pvlk30a9sX0a/6mTW/d/ra7/dPL1xTbjv33sdttN++H8z+zo/O+8cP/jL39s1/72zv9b9dKp7JGs/2stu1a2e4BP+/oBAAAAAABAP8lFxOFIcvnH5Vwun1/7fMexOJgrlSvV05fLi1dnov5d2bEYyTXudB9p+jzERPZ52EZ9ckN9KiKORsR3Qwfq9fx0uTTT6+ABAAAAAAAAAAAAAAAAAACgTxxq8/3/1B9DvT46YM/Vf9hgX6+PAuiFjj/5341fegL6Usf8B15Y8h8Gl/yHwSX/YXDJfxhc8h8Gl/yHwSX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKsuXriQLrXVRzen0/rM9aXFufL1MzPFylx+fnE6P11euJafLZdnS8X8dHm+0/OVyuVrE5OxeGO8WqxUxytLy5fmy4tXq5euzBdmi5eKI88kKgAAAAAAAAAAAAAAAAAAAHi+VJaW5wqlUnGhC4UkIrrxPP1W+CD64jD2MsA1u9p9uF+i2OvCyB6kzDMprGQHvrO9etQhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAL/wcAAP//eBcqGw==") close(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x121484b, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tgkill(r1, r1, 0x39) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) 2.665513915s ago: executing program 2 (id=210): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r0 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4010565a, &(0x7f0000000900)={0x8000004}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r0) 2.432611952s ago: executing program 3 (id=211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r4, 0x0, 0x40000c0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x8000000000000009, 0x8c0002) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2.362006573s ago: executing program 2 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, &(0x7f0000000900)={0x8000004}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 1.766284257s ago: executing program 1 (id=213): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, 0x0) lremovexattr(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) mprotect(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0xc) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000071180b0000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shutdown(r0, 0x1) 1.713608949s ago: executing program 0 (id=214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000002280)=""/4090, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000002300), 0x0, &(0x7f0000000540), 0x0, r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x1000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.516096634s ago: executing program 3 (id=215): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, 0x0, 0x0, 0x16, 0x0) r4 = mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) mq_notify(r4, &(0x7f0000000200)={0x0, 0x25, 0x1, @thr={0x0, 0x0}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffcf6) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x4000}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000004c0)=@multiplanar_mmap={0x8, 0x0, 0x4, 0x80, 0x3, {}, {0x4, 0x1, 0x3, 0x2, 0x1, 0x0, "1f88ba7b"}, 0x6, 0x1, {0x0}, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.21828941s ago: executing program 2 (id=216): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='rd_pages=8\n', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000001200)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0xffffffffffffff9c, &(0x7f0000001300)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/d0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001500)='1\n', 0x2) 225.547175ms ago: executing program 1 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='rd_pages=8\n', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001500)='1\n', 0x2) close(r2) 127.045567ms ago: executing program 0 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0', 0xb) 125.954237ms ago: executing program 1 (id=219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 0s ago: executing program 2 (id=220): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, 0x0, 0x0, 0x16, 0x0) r4 = mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) mq_notify(r4, &(0x7f0000000200)={0x0, 0x25, 0x1, @thr={0x0, 0x0}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffcf6) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x4000}) io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000004c0)=@multiplanar_mmap={0x8, 0x0, 0x4, 0x80, 0x3, {}, {0x4, 0x1, 0x3, 0x2, 0x1, 0x0, "1f88ba7b"}, 0x6, 0x1, {0x0}, 0x5}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. [ 59.821794][ T4172] cgroup: Unknown subsys name 'net' [ 59.924178][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.414542][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.243064][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 63.297517][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 63.316289][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 63.346087][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 63.383627][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 63.441515][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.449501][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.457922][ T4201] device bridge_slave_0 entered promiscuous mode [ 63.473293][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.480544][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.488736][ T4201] device bridge_slave_1 entered promiscuous mode [ 63.560037][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.567973][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.576775][ T4188] device bridge_slave_0 entered promiscuous mode [ 63.606826][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.616386][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.623473][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.631666][ T4188] device bridge_slave_1 entered promiscuous mode [ 63.645215][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.652304][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.660577][ T4187] device bridge_slave_0 entered promiscuous mode [ 63.677475][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.706667][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.713841][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.721864][ T4187] device bridge_slave_1 entered promiscuous mode [ 63.729473][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.736655][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.744839][ T4192] device bridge_slave_0 entered promiscuous mode [ 63.761081][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.770519][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.778764][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.787237][ T4186] device bridge_slave_0 entered promiscuous mode [ 63.802280][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.809554][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.817757][ T4192] device bridge_slave_1 entered promiscuous mode [ 63.833425][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.842875][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.850222][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.858579][ T4186] device bridge_slave_1 entered promiscuous mode [ 63.886028][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.897742][ T4201] team0: Port device team_slave_0 added [ 63.905861][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.936159][ T4201] team0: Port device team_slave_1 added [ 63.943826][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.955473][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.978538][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.007486][ T4188] team0: Port device team_slave_0 added [ 64.015150][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.045080][ T4188] team0: Port device team_slave_1 added [ 64.053043][ T4192] team0: Port device team_slave_0 added [ 64.069079][ T4187] team0: Port device team_slave_0 added [ 64.076644][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.083622][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.109949][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.129316][ T4192] team0: Port device team_slave_1 added [ 64.138282][ T4186] team0: Port device team_slave_0 added [ 64.145696][ T4187] team0: Port device team_slave_1 added [ 64.152608][ T4186] team0: Port device team_slave_1 added [ 64.158901][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.166044][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.192012][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.233136][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.240316][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.266718][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.279955][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.287214][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.313800][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.363277][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.370473][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.396981][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.409282][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.416601][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.442898][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.455358][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.462329][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.489184][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.519195][ T4201] device hsr_slave_0 entered promiscuous mode [ 64.526563][ T4201] device hsr_slave_1 entered promiscuous mode [ 64.533774][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.541017][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.567065][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.578974][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.586351][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.612348][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.623913][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.631109][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.657180][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.732528][ T4192] device hsr_slave_0 entered promiscuous mode [ 64.739748][ T4192] device hsr_slave_1 entered promiscuous mode [ 64.747572][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.755528][ T4192] Cannot create hsr debugfs directory [ 64.764952][ T4188] device hsr_slave_0 entered promiscuous mode [ 64.771791][ T4188] device hsr_slave_1 entered promiscuous mode [ 64.778821][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.786575][ T4188] Cannot create hsr debugfs directory [ 64.812696][ T4187] device hsr_slave_0 entered promiscuous mode [ 64.819714][ T4187] device hsr_slave_1 entered promiscuous mode [ 64.826879][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.834789][ T4187] Cannot create hsr debugfs directory [ 64.864095][ T4186] device hsr_slave_0 entered promiscuous mode [ 64.870999][ T4186] device hsr_slave_1 entered promiscuous mode [ 64.878222][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.886230][ T4186] Cannot create hsr debugfs directory [ 64.965150][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 64.965149][ T1336] Bluetooth: hci1: command 0x0409 tx timeout [ 64.966330][ T1336] Bluetooth: hci0: command 0x0409 tx timeout [ 64.972361][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 65.010316][ T1336] Bluetooth: hci2: command 0x0409 tx timeout [ 65.249459][ T4201] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.265915][ T4201] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.281674][ T4201] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.291416][ T4201] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.327219][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.341023][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.353156][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.368975][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.431897][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.449975][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.460421][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.480128][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.525668][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.549186][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.566535][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.583403][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.616968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.626709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.636183][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.658710][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.669060][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.707134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.716871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.727664][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.734959][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.744029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.752403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.761435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.774141][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.786009][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.800763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.810135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.819636][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.826865][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.838448][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.861649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.870157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.879311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.889542][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.896680][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.904885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.916763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.926495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.935611][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.942679][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.957758][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.983254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.992145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.002233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.011494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.020731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.029898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.039067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.048084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.057217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.067584][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.089919][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.101272][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.118184][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.127626][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.137604][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.147181][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.157312][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.180182][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.202511][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.223111][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.239339][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.252399][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.260995][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.279815][ T4201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.292062][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.303306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.314495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.337649][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.370886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.379464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.395502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.420598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.429610][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.436775][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.451588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.475942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.485838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.498404][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.505539][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.543736][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.559804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.578292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.589684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.598941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.610679][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.629048][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.639121][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.653506][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.671709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.680853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.701544][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.726572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.736770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.745080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.753685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.763505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.771470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.793823][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.804084][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.817263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.826903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.836993][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.844103][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.852642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.861803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.870761][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.877942][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.886944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.896149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.904584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.928859][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.940938][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.964998][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.983636][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.993010][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.003641][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.012246][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.025254][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.033678][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.055170][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.063093][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.070726][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 67.084365][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 67.094671][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 67.101666][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 67.109756][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.123373][ T4192] device veth0_vlan entered promiscuous mode [ 67.124921][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 67.143101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.153577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.168351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.193777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.204203][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.233312][ T4192] device veth1_vlan entered promiscuous mode [ 67.242507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.253275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.261772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.270756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.279387][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.286511][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.294883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.303678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.312333][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.319447][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.328536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.337459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.346104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.358293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.392848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.401859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.409716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.417867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.427242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.437580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.447816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.456861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.465687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.474880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.482726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.502391][ T4192] device veth0_macvtap entered promiscuous mode [ 67.513127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.522397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.534533][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.543061][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.554066][ T4192] device veth1_macvtap entered promiscuous mode [ 67.562732][ T4201] device veth0_vlan entered promiscuous mode [ 67.573630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.605686][ T4201] device veth1_vlan entered promiscuous mode [ 67.641715][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.654649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.663706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.673440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.683708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.693094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.715236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.734702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.757697][ T4201] device veth0_macvtap entered promiscuous mode [ 67.777516][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.801112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.816329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.830267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.843180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.852909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.861834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.871025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.883629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.892495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.905338][ T4201] device veth1_macvtap entered promiscuous mode [ 67.913395][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.930348][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.939593][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.954806][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.984122][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.015528][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.040399][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.050691][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.080696][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.093118][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.103202][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.114695][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.125579][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.140237][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.166740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.180594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.189903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.203278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.214060][ T4201] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.223813][ T4201] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.233033][ T4201] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.242117][ T4201] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.259652][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.314187][ T4187] device veth0_vlan entered promiscuous mode [ 68.335693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.345522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.354191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.363662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.420827][ T4187] device veth1_vlan entered promiscuous mode [ 68.441104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.455758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.463886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.475898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.484788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.511494][ T4186] device veth0_vlan entered promiscuous mode [ 68.538784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.547747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.558901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.569083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.579161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.598387][ T4186] device veth1_vlan entered promiscuous mode [ 68.636597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.644106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.654983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.663511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.683628][ T4187] device veth0_macvtap entered promiscuous mode [ 68.706022][ T4187] device veth1_macvtap entered promiscuous mode [ 68.716582][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.726461][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.731375][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.765238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.773501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.783458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.792338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.802964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.826681][ T4186] device veth0_macvtap entered promiscuous mode [ 68.849361][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.860196][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.870397][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.882276][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.893782][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.906770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.916105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.924982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.933653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.942848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.956580][ T4186] device veth1_macvtap entered promiscuous mode [ 68.977082][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.988894][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.997353][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.008648][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.019083][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.029857][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.041852][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.057415][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.068815][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.089788][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.099200][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.107824][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.117847][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.128556][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.136056][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 69.142251][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 69.152814][ T4188] device veth0_vlan entered promiscuous mode [ 69.152998][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 69.167344][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.177749][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.186996][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.189312][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 69.203303][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.221848][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 69.236200][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.247485][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.256719][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.264923][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.278242][ T4188] device veth1_vlan entered promiscuous mode [ 69.310588][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.324110][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.338256][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.347216][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.357911][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.373929][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.390572][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.401675][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.413055][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.429260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.441137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.455493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.463420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.473924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.495145][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.531969][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.550946][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.564774][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.575691][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.588293][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.613245][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.648079][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.658955][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.668262][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.678526][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.705301][ T4188] device veth0_macvtap entered promiscuous mode [ 69.739606][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.769439][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.783911][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.793320][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.804061][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.828533][ T4188] device veth1_macvtap entered promiscuous mode [ 69.853511][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.871661][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.880801][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.899018][ T4267] device bridge_slave_0 left promiscuous mode [ 69.911548][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.957313][ T4267] device bridge_slave_1 left promiscuous mode [ 69.963609][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.986678][ T4267] bond0: (slave bond_slave_0): Releasing backup interface [ 70.012570][ T4267] bond0: (slave bond_slave_1): Releasing backup interface [ 70.066254][ T4267] team0: Port device team_slave_0 removed [ 70.092253][ T4267] team0: Port device team_slave_1 removed [ 70.108412][ T4267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.123691][ T4267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.134999][ T4267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.142561][ T4267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.192081][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.209627][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.219771][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.252577][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.268705][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.280779][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.299224][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.349810][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.361141][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.394402][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.415134][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.425623][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.436620][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.447218][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.458671][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.473865][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.495583][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.508236][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.517220][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.526680][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.625620][ T4267] syz.1.2 (4267) used greatest stack depth: 20528 bytes left [ 70.717520][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.727838][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.734362][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.747755][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.876727][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.297142][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.303697][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.381110][ T4278] loop1: detected capacity change from 0 to 128 [ 71.434900][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 71.445013][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 71.455388][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 71.466115][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.470608][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 71.474114][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.480321][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 71.546270][ T4278] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,barrier=0x00000000000000e1,,errors=continue. Quota mode: writeback. [ 71.574906][ T4278] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.779449][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.809574][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.836139][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.321725][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.336498][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.956373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.970554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.007721][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.244553][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.364224][ C0] sched: RT throttling activated [ 73.703508][ T4289] 9pnet: Insufficient options for proto=fd [ 73.710471][ T4289] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 73.720347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.764201][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.773414][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.783696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.151175][ T4309] loop1: detected capacity change from 0 to 512 [ 75.229973][ T4311] Zero length message leads to an empty skb [ 75.240783][ T4309] EXT4-fs (loop1): inline encryption not supported [ 75.461218][ T4319] loop4: detected capacity change from 0 to 512 [ 75.492427][ T4309] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000080,inlinecrypt,,errors=continue. Quota mode: writeback. [ 75.515616][ T4309] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.705060][ T4319] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 75.808406][ T4319] System zones: 1-12 [ 76.081312][ T4319] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.16: error while reading EA inode 32 err=-116 [ 76.195896][ T4319] EXT4-fs (loop4): Remounting filesystem read-only [ 76.240674][ T4319] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 76.305229][ T4319] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.16: error while reading EA inode 32 err=-116 [ 76.360080][ T4329] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 76.374909][ T4319] EXT4-fs (loop4): Remounting filesystem read-only [ 76.505514][ T4319] EXT4-fs (loop4): 1 orphan inode deleted [ 76.511484][ T4319] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsddf,jqfmt=vfsv1,grpid,. Quota mode: none. [ 76.531706][ T4329] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 76.629652][ T4333] netlink: 'syz.0.17': attribute type 5 has an invalid length. [ 77.860125][ T4309] capability: warning: `syz.1.13' uses 32-bit capabilities (legacy support in use) [ 79.969169][ T4353] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 81.466304][ T4375] udc-core: couldn't find an available UDC or it's busy [ 81.490820][ T4370] loop1: detected capacity change from 0 to 512 [ 83.397300][ T4370] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.626079][ T4370] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.929558][ T4370] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 84.248995][ T4395] loop4: detected capacity change from 0 to 512 [ 84.626613][ T4395] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.039937][ T4395] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 85.051467][ T4395] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 85.267669][ T4400] loop2: detected capacity change from 0 to 1024 [ 85.396962][ T4400] ======================================================= [ 85.396962][ T4400] WARNING: The mand mount option has been deprecated and [ 85.396962][ T4400] and is ignored by this kernel. Remove the mand [ 85.396962][ T4400] option from the mount to silence this warning. [ 85.396962][ T4400] ======================================================= [ 85.575929][ T4400] EXT4-fs (loop2): Ignoring removed bh option [ 85.645584][ T4400] EXT4-fs (loop2): inline encryption not supported [ 85.662372][ T4408] loop3: detected capacity change from 0 to 1024 [ 85.693387][ T4400] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 85.765703][ T4400] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm syz.2.33: lblock 2 mapped to illegal pblock 2 (length 1) [ 85.787874][ T4408] EXT4-fs (loop3): Ignoring removed bh option [ 85.887285][ T4408] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 85.920441][ T4408] System zones: 0-1, 3-12 [ 85.934322][ T4400] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 85.961796][ T4408] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,dioread_lock,barrier=0x0000000000000004,nolazytime,quota,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: writeback. [ 86.008169][ T4400] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 48: comm syz.2.33: lblock 0 mapped to illegal pblock 48 (length 1) [ 86.150072][ T4400] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 86.393457][ T4400] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.33: Failed to acquire dquot type 0 [ 86.440339][ T4400] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 86.687653][ T7] cfg80211: failed to load regulatory.db [ 86.710930][ T4400] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.33: mark_inode_dirty error [ 86.776603][ T4400] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 86.906100][ T4400] EXT4-fs (loop2): 1 orphan inode deleted [ 86.991704][ T4400] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 87.103055][ T4427] udc-core: couldn't find an available UDC or it's busy [ 87.210904][ T155] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.259179][ T4400] EXT4-fs (loop2): shut down requested (2) [ 87.326704][ T155] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 91.207743][ T4448] ODEBUG: Out of memory. ODEBUG disabled [ 95.562370][ T4448] Set syz1 is full, maxelem 65536 reached [ 95.774104][ T4510] overlayfs: missing 'lowerdir' [ 95.853649][ T4514] configfs-gadget gadget: uvc: uvc_function_bind() [ 96.429345][ T4531] fuse: Bad value for 'fd' [ 96.435936][ T4531] netlink: 'syz.2.72': attribute type 10 has an invalid length. [ 96.444075][ T4531] netlink: 40 bytes leftover after parsing attributes in process `syz.2.72'. [ 96.596895][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.169863][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.248839][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.407446][ T4518] configfs-gadget gadget: uvc: uvc_function_unbind() [ 97.421626][ T4531] netlink: 'syz.2.72': attribute type 10 has an invalid length. [ 97.430958][ T4531] netlink: 40 bytes leftover after parsing attributes in process `syz.2.72'. [ 98.610978][ T4561] tipc: Enabling of bearer rejected, failed to enable media [ 98.871115][ T4571] tipc: Enabling of bearer rejected, failed to enable media [ 101.293330][ T4599] device syzkaller0 entered promiscuous mode [ 101.325529][ T4599] tipc: Started in network mode [ 101.330600][ T4599] tipc: Node identity 9693cee331a6, cluster identity 4711 [ 101.344788][ T4599] tipc: Enabled bearer , priority 0 [ 101.394390][ T4599] tipc: Resetting bearer [ 101.452067][ T4596] tipc: Resetting bearer [ 101.515694][ T4596] tipc: Disabling bearer [ 103.110341][ T4640] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 103.233735][ T4646] se_dev->se_dev_ptr already set for storage object [ 104.762621][ T4663] se_dev->se_dev_ptr already set for storage object [ 105.872470][ T4680] se_dev->se_dev_ptr already set for storage object [ 106.235998][ T4675] infiniband syz1: set active [ 106.271593][ T4675] infiniband syz1: added syz_tun [ 106.295384][ T4688] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.331018][ T4688] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 1 out of range (1000000..45000000) [ 107.242021][ T4701] se_dev->se_dev_ptr already set for storage object [ 107.376888][ T4675] RDS/IB: syz1: added [ 107.381623][ T4675] smc: adding ib device syz1 with port count 1 [ 107.495667][ T4675] smc: ib device syz1 port 1 has pnetid [ 107.527186][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.548219][ T4710] udc-core: couldn't find an available UDC or it's busy [ 107.617330][ T4712] netem: change failed [ 107.643269][ T4712] device syzkaller0 entered promiscuous mode [ 107.679821][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.708618][ T4712] tipc: Started in network mode [ 107.721041][ T4712] tipc: Node identity c6b33d435f76, cluster identity 4711 [ 107.729159][ T4712] tipc: Enabled bearer , priority 0 [ 107.762301][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.810734][ T4712] tipc: Resetting bearer [ 107.848692][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.883641][ T4711] tipc: Resetting bearer [ 107.916664][ T4711] tipc: Disabling bearer [ 108.112502][ T4720] se_dev->se_dev_ptr already set for storage object [ 108.239122][ T4693] chnl_net:caif_netlink_parms(): no params data found [ 108.414503][ T4229] Bluetooth: hci5: command 0x0409 tx timeout [ 108.771720][ T4693] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.784280][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.793400][ T4693] device bridge_slave_0 entered promiscuous mode [ 108.991688][ T4693] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.014387][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.058864][ T4693] device bridge_slave_1 entered promiscuous mode [ 109.689902][ T4693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.807197][ T4693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.859707][ T4755] loop0: detected capacity change from 0 to 512 [ 110.035029][ T4759] udc-core: couldn't find an available UDC or it's busy [ 110.674919][ T4755] EXT4-fs (loop0): Test dummy encryption mode enabled [ 110.691467][ T4265] Bluetooth: hci5: command 0x041b tx timeout [ 110.703852][ T4693] team0: Port device team_slave_0 added [ 110.712335][ T4693] team0: Port device team_slave_1 added [ 110.733052][ T4693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.740319][ T4693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.614951][ T4693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.641914][ T4755] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.149: inode has both inline data and extents flags [ 112.372131][ T4755] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.149: couldn't read orphan inode 15 (err -117) [ 112.385643][ T4755] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 112.420026][ T4755] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.696267][ T4760] Set syz1 is full, maxelem 65536 reached [ 112.813618][ T4265] Bluetooth: hci5: command 0x040f tx timeout [ 113.426207][ T4693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.452671][ T4755] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 113.536759][ T4693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.877860][ T4693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.988606][ T4693] device hsr_slave_0 entered promiscuous mode [ 114.009125][ T4693] device hsr_slave_1 entered promiscuous mode [ 114.045281][ T4693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.052901][ T4693] Cannot create hsr debugfs directory [ 114.368202][ T4802] se_dev->se_dev_ptr already set for storage object [ 114.959974][ T4232] Bluetooth: hci5: command 0x0419 tx timeout [ 115.500125][ T4806] loop1: detected capacity change from 0 to 2048 [ 115.540749][ T4693] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 116.121838][ T4806] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,noload,,errors=continue. Quota mode: none. [ 116.181186][ T4693] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 116.393361][ T4804] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 116.411634][ T4693] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 116.444599][ T4693] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 116.474682][ T4804] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 116.560981][ T4693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.579659][ T4693] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.587630][ T4804] EXT4-fs (loop1): This should not happen!! Data will be lost [ 116.587630][ T4804] [ 116.605869][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.634866][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.669526][ T4804] EXT4-fs (loop1): Total free blocks count 0 [ 116.684050][ T4828] loop0: detected capacity change from 0 to 512 [ 116.706780][ T4804] EXT4-fs (loop1): Free/Dirty block details [ 116.712877][ T4804] EXT4-fs (loop1): free_blocks=4096 [ 116.718289][ T4804] EXT4-fs (loop1): dirty_blocks=16 [ 116.723530][ T4804] EXT4-fs (loop1): Block reservation details [ 116.730391][ T4804] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 116.955605][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.968049][ T4828] EXT4-fs (loop0): Test dummy encryption mode enabled [ 117.139293][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.359297][ T4828] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.167: inode has both inline data and extents flags [ 117.398172][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.405376][ T4239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.459925][ T4828] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.167: couldn't read orphan inode 15 (err -117) [ 117.519676][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.558910][ T4828] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 117.593422][ T4837] loop3: detected capacity change from 0 to 1024 [ 117.604780][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.658946][ T4837] EXT4-fs (loop3): Ignoring removed bh option [ 117.694843][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.702000][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.768321][ T4837] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 117.804758][ T4837] System zones: 0-1, 3-12 [ 117.827401][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.850887][ T4837] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,dioread_lock,barrier=0x0000000000000004,nolazytime,quota,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: writeback. [ 118.097906][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.390294][ T155] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 118.542290][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.774470][ T4828] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 118.787851][ T155] EXT4-fs (loop1): This should not happen!! Data will be lost [ 118.787851][ T155] [ 118.804998][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.037210][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.218401][ T4693] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.353640][ T4693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.483300][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.496609][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.505953][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.515929][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.525323][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.534014][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.652326][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.894874][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.085875][ T4867] udc-core: couldn't find an available UDC or it's busy [ 120.590585][ T4874] se_dev->se_dev_ptr already set for storage object [ 121.080099][ T9] device hsr_slave_0 left promiscuous mode [ 121.101524][ T9] device hsr_slave_1 left promiscuous mode [ 122.385870][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.393383][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.619042][ T4899] se_dev->se_dev_ptr already set for storage object [ 122.651655][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.684562][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.731632][ T9] device bridge_slave_1 left promiscuous mode [ 122.776755][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.887791][ T9] device bridge_slave_0 left promiscuous mode [ 122.894055][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.959540][ T4910] udc-core: couldn't find an available UDC or it's busy [ 122.976162][ T4909] loop0: detected capacity change from 0 to 512 [ 123.060120][ T4909] EXT4-fs (loop0): Test dummy encryption mode enabled [ 123.112147][ T4909] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.186: inode has both inline data and extents flags [ 123.179798][ T9] device veth1_macvtap left promiscuous mode [ 123.193749][ T9] device veth0_macvtap left promiscuous mode [ 123.204601][ T4909] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.186: couldn't read orphan inode 15 (err -117) [ 123.226948][ T9] device veth1_vlan left promiscuous mode [ 123.232982][ T9] device veth0_vlan left promiscuous mode [ 123.246081][ T4916] se_dev->se_dev_ptr already set for storage object [ 123.262341][ T4909] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 124.374875][ T4909] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 127.737168][ T4949] se_dev->se_dev_ptr already set for storage object [ 127.757757][ T4951] udc-core: couldn't find an available UDC or it's busy [ 128.825186][ T4961] udc-core: couldn't find an available UDC or it's busy [ 128.941571][ T9] team0 (unregistering): Port device team_slave_1 removed [ 128.967791][ T9] team0 (unregistering): Port device team_slave_0 removed [ 128.994588][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.398355][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.563433][ T9] bond0 (unregistering): Released all slaves [ 132.906101][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.912427][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.164534][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.172100][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.396008][ T5026] se_dev->se_dev_ptr already set for storage object [ 135.551211][ T4693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.594399][ T5032] configfs-gadget gadget: uvc: uvc_function_bind() [ 135.627949][ T5032] configfs-gadget gadget: uvc: Unable to allocate streaming EP [ 135.714753][ T5032] ================================================================== [ 135.723226][ T5032] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x3b/0x70 [ 135.731010][ T5032] Read of size 8 at addr ffff888075bc43f0 by task syz.0.218/5032 [ 135.738758][ T5032] [ 135.741114][ T5032] CPU: 1 PID: 5032 Comm: syz.0.218 Not tainted syzkaller #0 [ 135.748420][ T5032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 135.758516][ T5032] Call Trace: [ 135.761819][ T5032] [ 135.764778][ T5032] dump_stack_lvl+0x188/0x250 [ 135.769508][ T5032] ? show_regs_print_info+0x20/0x20 [ 135.774734][ T5032] ? _printk+0xda/0x130 [ 135.778934][ T5032] ? dummy_free_request+0x3b/0x70 [ 135.784002][ T5032] ? load_image+0x410/0x410 [ 135.788621][ T5032] ? _dev_info+0x11b/0x170 [ 135.793071][ T5032] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 135.798740][ T5032] print_address_description+0x60/0x2d0 [ 135.804323][ T5032] ? dummy_free_request+0x3b/0x70 [ 135.809380][ T5032] kasan_report+0xdf/0x130 [ 135.813850][ T5032] ? dummy_free_request+0x3b/0x70 [ 135.818912][ T5032] ? rcu_is_watching+0x11/0xa0 [ 135.823709][ T5032] dummy_free_request+0x3b/0x70 [ 135.828589][ T5032] uvc_function_bind+0xe24/0x12d0 [ 135.835055][ T5032] usb_add_function+0x2d9/0x980 [ 135.839954][ T5032] configfs_composite_bind+0xa02/0xf60 [ 135.845472][ T5032] ? os_desc_qw_sign_store+0x130/0x130 [ 135.850963][ T5032] udc_bind_to_driver+0x203/0x5f0 [ 135.856027][ T5032] usb_gadget_probe_driver+0x1fb/0x380 [ 135.861522][ T5032] gadget_dev_desc_UDC_store+0x1ba/0x2e0 [ 135.867193][ T5032] configfs_write_iter+0x30b/0x400 [ 135.872350][ T5032] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 135.877935][ T5032] vfs_write+0x748/0xd70 [ 135.882220][ T5032] ? file_end_write+0x250/0x250 [ 135.887156][ T5032] ? mutex_lock_nested+0x17/0x20 [ 135.892130][ T5032] ? __fdget_pos+0x2bf/0x370 [ 135.896846][ T5032] ? ksys_write+0x70/0x260 [ 135.901300][ T5032] ksys_write+0x153/0x260 [ 135.905667][ T5032] ? __ia32_sys_read+0x80/0x80 [ 135.910467][ T5032] ? lockdep_hardirqs_on+0x94/0x140 [ 135.915704][ T5032] do_syscall_64+0x4c/0xa0 [ 135.920149][ T5032] ? clear_bhb_loop+0x30/0x80 [ 135.924856][ T5032] ? clear_bhb_loop+0x30/0x80 [ 135.929567][ T5032] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.935501][ T5032] RIP: 0033:0x7effb120ae99 [ 135.939960][ T5032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.959593][ T5032] RSP: 002b:00007effaf463028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.968052][ T5032] RAX: ffffffffffffffda RBX: 00007effb1492fa0 RCX: 00007effb120ae99 [ 135.976056][ T5032] RDX: 000000000000000b RSI: 0000200000000880 RDI: 0000000000000003 [ 135.984061][ T5032] RBP: 00007effb12a0eaf R08: 0000000000000000 R09: 0000000000000000 [ 135.992065][ T5032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.000148][ T5032] R13: 00007effb1493038 R14: 00007effb1492fa0 R15: 00007ffcc2f35ca8 [ 136.008196][ T5032] [ 136.011250][ T5032] [ 136.013600][ T5032] Allocated by task 7: [ 136.017685][ T5032] __kasan_kmalloc+0xaf/0xe0 [ 136.022308][ T5032] __hw_addr_add_ex+0x1ed/0x780 [ 136.027192][ T5032] dev_mc_add+0x91/0x110 [ 136.031468][ T5032] igmp6_group_added+0x228/0x7c0 [ 136.036427][ T5032] __ipv6_dev_mc_inc+0x959/0xb20 [ 136.041391][ T5032] addrconf_dad_work+0x3bd/0x1530 [ 136.046456][ T5032] process_one_work+0x867/0xff0 [ 136.051343][ T5032] worker_thread+0xad7/0x12a0 [ 136.056051][ T5032] kthread+0x42e/0x520 [ 136.060143][ T5032] ret_from_fork+0x1f/0x30 [ 136.064588][ T5032] [ 136.066935][ T5032] The buggy address belongs to the object at ffff888075bc4300 [ 136.066935][ T5032] which belongs to the cache kmalloc-128 of size 128 [ 136.081104][ T5032] The buggy address is located 112 bytes to the right of [ 136.081104][ T5032] 128-byte region [ffff888075bc4300, ffff888075bc4380) [ 136.094930][ T5032] The buggy address belongs to the page: [ 136.100599][ T5032] page:ffffea0001d6f100 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888075bc4c00 pfn:0x75bc4 [ 136.112109][ T5032] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 136.119724][ T5032] raw: 00fff00000000200 ffffea0001eafec0 0000000c0000000c ffff888016c418c0 [ 136.128610][ T5032] raw: ffff888075bc4c00 000000008010000d 00000001ffffffff 0000000000000000 [ 136.137232][ T5032] page dumped because: kasan: bad access detected [ 136.143691][ T5032] page_owner tracks the page as allocated [ 136.149840][ T5032] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 3559, ts 95911999419, free_ts 95608100925 [ 136.165884][ T5032] get_page_from_freelist+0x24f6/0x2670 [ 136.171492][ T5032] __alloc_pages+0x1ee/0x480 [ 136.176117][ T5032] new_slab+0xc0/0x4b0 [ 136.180216][ T5032] ___slab_alloc+0x807/0xdd0 [ 136.184831][ T5032] kmem_cache_alloc_trace+0xf9/0x290 [ 136.190150][ T5032] kernfs_fop_open+0x887/0xba0 [ 136.194949][ T5032] do_dentry_open+0x7f7/0xf90 [ 136.199654][ T5032] path_openat+0x2718/0x2fb0 [ 136.204270][ T5032] do_filp_open+0x1df/0x400 [ 136.208825][ T5032] do_sys_openat2+0x14b/0x500 [ 136.213530][ T5032] __x64_sys_openat+0x135/0x160 [ 136.218405][ T5032] do_syscall_64+0x4c/0xa0 [ 136.222847][ T5032] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.228771][ T5032] page last free stack trace: [ 136.233458][ T5032] free_unref_page_prepare+0x637/0x6c0 [ 136.238964][ T5032] free_unref_page_list+0x119/0x830 [ 136.244187][ T5032] release_pages+0x185f/0x1bd0 [ 136.248980][ T5032] tlb_finish_mmu+0x1b4/0x370 [ 136.253690][ T5032] exit_mmap+0x3d0/0x640 [ 136.257967][ T5032] __mmput+0x115/0x390 [ 136.262073][ T5032] exit_mm+0x632/0x7b0 [ 136.266188][ T5032] do_exit+0x5b8/0x2110 [ 136.270379][ T5032] do_group_exit+0x12c/0x2f0 [ 136.275012][ T5032] get_signal+0x7eb/0x12e0 [ 136.279460][ T5032] arch_do_signal_or_restart+0xe6/0x12a0 [ 136.285125][ T5032] exit_to_user_mode_loop+0x9e/0x130 [ 136.290444][ T5032] exit_to_user_mode_prepare+0xee/0x180 [ 136.296017][ T5032] syscall_exit_to_user_mode+0x16/0x40 [ 136.301509][ T5032] do_syscall_64+0x58/0xa0 [ 136.305950][ T5032] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.312579][ T5032] [ 136.314968][ T5032] Memory state around the buggy address: [ 136.320624][ T5032] ffff888075bc4280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 136.328736][ T5032] ffff888075bc4300: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 136.336823][ T5032] >ffff888075bc4380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 136.344907][ T5032] ^ [ 136.352657][ T5032] ffff888075bc4400: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 136.360736][ T5032] ffff888075bc4480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 136.368844][ T5032] ================================================================== [ 136.376921][ T5032] Disabling lock debugging due to kernel taint [ 136.920199][ T5032] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 136.927556][ T5032] CPU: 0 PID: 5032 Comm: syz.0.218 Tainted: G B syzkaller #0 [ 136.936415][ T5032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.946516][ T5032] Call Trace: [ 136.949825][ T5032] [ 136.952780][ T5032] dump_stack_lvl+0x188/0x250 [ 136.957526][ T5032] ? show_regs_print_info+0x20/0x20 [ 136.962758][ T5032] ? load_image+0x410/0x410 [ 136.967304][ T5032] panic+0x2f8/0x850 [ 136.971234][ T5032] ? bpf_jit_dump+0xd0/0xd0 [ 136.975764][ T5032] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 136.981786][ T5032] ? _raw_spin_unlock+0x40/0x40 [ 136.986674][ T5032] ? print_memory_metadata+0x314/0x400 [ 136.992163][ T5032] ? dummy_free_request+0x3b/0x70 [ 136.997219][ T5032] check_panic_on_warn+0x80/0xa0 [ 137.002221][ T5032] ? dummy_free_request+0x3b/0x70 [ 137.007311][ T5032] end_report+0x6d/0xf0 [ 137.011503][ T5032] kasan_report+0x102/0x130 [ 137.016048][ T5032] ? dummy_free_request+0x3b/0x70 [ 137.021101][ T5032] ? rcu_is_watching+0x11/0xa0 [ 137.025888][ T5032] dummy_free_request+0x3b/0x70 [ 137.030763][ T5032] uvc_function_bind+0xe24/0x12d0 [ 137.035817][ T5032] usb_add_function+0x2d9/0x980 [ 137.040704][ T5032] configfs_composite_bind+0xa02/0xf60 [ 137.046189][ T5032] ? os_desc_qw_sign_store+0x130/0x130 [ 137.051677][ T5032] udc_bind_to_driver+0x203/0x5f0 [ 137.056728][ T5032] usb_gadget_probe_driver+0x1fb/0x380 [ 137.062222][ T5032] gadget_dev_desc_UDC_store+0x1ba/0x2e0 [ 137.067891][ T5032] configfs_write_iter+0x30b/0x400 [ 137.073039][ T5032] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 137.078615][ T5032] vfs_write+0x748/0xd70 [ 137.082891][ T5032] ? file_end_write+0x250/0x250 [ 137.087783][ T5032] ? mutex_lock_nested+0x17/0x20 [ 137.092750][ T5032] ? __fdget_pos+0x2bf/0x370 [ 137.097375][ T5032] ? ksys_write+0x70/0x260 [ 137.101817][ T5032] ksys_write+0x153/0x260 [ 137.106174][ T5032] ? __ia32_sys_read+0x80/0x80 [ 137.110972][ T5032] ? lockdep_hardirqs_on+0x94/0x140 [ 137.116219][ T5032] do_syscall_64+0x4c/0xa0 [ 137.120666][ T5032] ? clear_bhb_loop+0x30/0x80 [ 137.125455][ T5032] ? clear_bhb_loop+0x30/0x80 [ 137.130162][ T5032] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.136090][ T5032] RIP: 0033:0x7effb120ae99 [ 137.140536][ T5032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.160433][ T5032] RSP: 002b:00007effaf463028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 137.168874][ T5032] RAX: ffffffffffffffda RBX: 00007effb1492fa0 RCX: 00007effb120ae99 [ 137.176872][ T5032] RDX: 000000000000000b RSI: 0000200000000880 RDI: 0000000000000003 [ 137.184863][ T5032] RBP: 00007effb12a0eaf R08: 0000000000000000 R09: 0000000000000000 [ 137.192847][ T5032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.200830][ T5032] R13: 00007effb1493038 R14: 00007effb1492fa0 R15: 00007ffcc2f35ca8 [ 137.209257][ T5032] [ 137.212563][ T5032] Kernel Offset: disabled [ 137.216908][ T5032] Rebooting in 86400 seconds..