last executing test programs: 40.43549516s ago: executing program 4 (id=194): r0 = fsopen(&(0x7f0000000100)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) lseek(r2, 0x6, 0x0) 37.191217692s ago: executing program 4 (id=198): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x20) write(r0, &(0x7f0000000000)='3', 0x4e) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000300)=ANY=[@ANYBLOB="0400000004000000040000000b"], 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept4$alg(r1, 0x0, 0x0, 0x0) 35.711142772s ago: executing program 4 (id=204): syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000f80)=ANY=[], 0x1, 0x220, &(0x7f0000000980)="$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") open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 31.715326929s ago: executing program 4 (id=214): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 31.401389335s ago: executing program 4 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x80) 27.964242016s ago: executing program 4 (id=224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) sendmsg$NFT_BATCH(r0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x2000c080) 16.60740274s ago: executing program 3 (id=251): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0x70bd2a, 0x0, {0x2, 0x78, 0x0, 0xff, r2}, [@IFA_LABEL={0x14, 0x3, 'bond0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000001) r7 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r7, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) mkdir(&(0x7f0000000080)='./file0\x00', 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) listen(r8, 0x3) syz_open_dev$tty20(0xc, 0x4, 0x0) 11.571396996s ago: executing program 1 (id=260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000280)=r0) 7.635517552s ago: executing program 1 (id=265): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) 7.338050945s ago: executing program 3 (id=267): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfff2, 0xc}}}, 0x24}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0xe2d, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xf, 0x3}, {0xd, 0xfff3}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x2004004) 7.231469141s ago: executing program 1 (id=268): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = epoll_create1(0x80000) r5 = fcntl$dupfd(r3, 0x0, r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0x20000000}) r6 = gettid() kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r5, &(0x7f0000000840)={r4, r5, 0x8}) 5.313608461s ago: executing program 1 (id=270): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x62001, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @string=0x0}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 5.100391981s ago: executing program 3 (id=271): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.971696117s ago: executing program 2 (id=273): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x22020600) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c) 4.651455462s ago: executing program 2 (id=275): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) write$P9_RLERROR(r0, 0x0, 0xe) 3.492310616s ago: executing program 0 (id=276): ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 3.291264076s ago: executing program 2 (id=277): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000114) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 3.219371739s ago: executing program 3 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x1, 0x20040, 0x5, 0x41, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffdcb, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @loopback, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x806}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0) 2.98489923s ago: executing program 3 (id=279): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000003680)={0x2020}, 0x1) mount(0x0, 0x0, 0x0, 0x2200020, 0x0) 2.849949717s ago: executing program 1 (id=280): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="01080000000000000500270006000000", @ANYRES8=r0, @ANYRESOCT=r1, @ANYRESHEX=r3], 0x28}}, 0x40c4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r5, 0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10a) socket$inet6(0xa, 0x3, 0xff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x4020800) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r8, r8, 0x0) 1.811424736s ago: executing program 0 (id=281): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 1.740988889s ago: executing program 3 (id=282): socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0xffff}, {0xfff2, 0xfff9}, {0x1, 0x9}}}, 0x24}}, 0x4000004) 1.739313919s ago: executing program 2 (id=283): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f) close(r4) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='dummy_udc.0\n', 0xc) close(r5) nanosleep(&(0x7f0000000540)={0x0, 0x2faf080}, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000580), 0x0, 0x2) write$hidraw(r6, &(0x7f00000005c0)='1234567', 0x7) 1.6977857s ago: executing program 1 (id=284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20100, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000200)={0x3ff, 0x2, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.49071426s ago: executing program 0 (id=285): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, 0x0, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x24}}, 0x0) 1.217623903s ago: executing program 0 (id=286): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$inet6(r0, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002980)=ANY=[@ANYBLOB="38010000000000002900"], 0x568}, 0x20040c00) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xc4, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xd000}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.199958854s ago: executing program 2 (id=287): r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x24, &(0x7f0000000000), 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 802.954083ms ago: executing program 0 (id=288): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, 0x0, 0x0, 0x4852) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x0, 0x3, 0xffff, 0x5}) 30.625679ms ago: executing program 0 (id=289): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000014c0)=@newtclass={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) 0s ago: executing program 2 (id=290): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0xa, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffda9}}, 0x20) ptrace(0x10, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.123' (ED25519) to the list of known hosts. [ 75.928677][ T4262] cgroup: Unknown subsys name 'net' [ 76.063566][ T4262] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.680265][ T4262] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 79.779919][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.789437][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.797275][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.805737][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.814512][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.822453][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.829915][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.857614][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.865608][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.874174][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.882129][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.889884][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.950610][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.959554][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.967769][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.975657][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.983457][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.991199][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.017960][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.026594][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.034277][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.042220][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.050433][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.058749][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.105929][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.116919][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.124948][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.133500][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.141474][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.149966][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.412374][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 80.492338][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 80.655886][ T4287] chnl_net:caif_netlink_parms(): no params data found [ 80.680797][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.688948][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.697687][ T4280] device bridge_slave_0 entered promiscuous mode [ 80.727882][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 80.754257][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.762036][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.770455][ T4280] device bridge_slave_1 entered promiscuous mode [ 80.805824][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.813426][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.822220][ T4275] device bridge_slave_0 entered promiscuous mode [ 80.838326][ T4289] chnl_net:caif_netlink_parms(): no params data found [ 80.870381][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.879564][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.888994][ T4275] device bridge_slave_1 entered promiscuous mode [ 80.898742][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.942207][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.013323][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.021533][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.030629][ T4287] device bridge_slave_0 entered promiscuous mode [ 81.041043][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.069226][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.076546][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.084519][ T4287] device bridge_slave_1 entered promiscuous mode [ 81.100791][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.114652][ T4280] team0: Port device team_slave_0 added [ 81.121242][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.128563][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.136768][ T4284] device bridge_slave_0 entered promiscuous mode [ 81.151376][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.158584][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.167148][ T4284] device bridge_slave_1 entered promiscuous mode [ 81.194168][ T4280] team0: Port device team_slave_1 added [ 81.210015][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.217794][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.226181][ T4289] device bridge_slave_0 entered promiscuous mode [ 81.242883][ T4275] team0: Port device team_slave_0 added [ 81.250832][ T4287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.278265][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.285425][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.294301][ T4289] device bridge_slave_1 entered promiscuous mode [ 81.303700][ T4275] team0: Port device team_slave_1 added [ 81.311349][ T4287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.330063][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.344403][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.398183][ T4284] team0: Port device team_slave_0 added [ 81.404756][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.412685][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.438817][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.466034][ T4289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.481631][ T4284] team0: Port device team_slave_1 added [ 81.500794][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.508580][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.534861][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.566987][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.574010][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.600036][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.613672][ T4289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.623316][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.630599][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.656983][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.669684][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.677959][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.704052][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.723401][ T4287] team0: Port device team_slave_0 added [ 81.736509][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.743514][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.770259][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.807230][ T4280] device hsr_slave_0 entered promiscuous mode [ 81.814077][ T4280] device hsr_slave_1 entered promiscuous mode [ 81.830244][ T4287] team0: Port device team_slave_1 added [ 81.838930][ T4289] team0: Port device team_slave_0 added [ 81.864976][ T4275] device hsr_slave_0 entered promiscuous mode [ 81.871909][ T4275] device hsr_slave_1 entered promiscuous mode [ 81.879053][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.887361][ T4275] Cannot create hsr debugfs directory [ 81.895973][ T4289] team0: Port device team_slave_1 added [ 81.923635][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.930825][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.957434][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 81.957953][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 81.965729][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.019872][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.027804][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.037087][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 82.055256][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.089513][ T4284] device hsr_slave_0 entered promiscuous mode [ 82.100433][ T4284] device hsr_slave_1 entered promiscuous mode [ 82.107723][ T4284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.115304][ T4284] Cannot create hsr debugfs directory [ 82.117024][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 82.134844][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.143345][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.169646][ T4289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.196365][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 82.208952][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.215948][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.245296][ T4289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.329950][ T4287] device hsr_slave_0 entered promiscuous mode [ 82.337456][ T4287] device hsr_slave_1 entered promiscuous mode [ 82.344568][ T4287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.353950][ T4287] Cannot create hsr debugfs directory [ 82.385681][ T4289] device hsr_slave_0 entered promiscuous mode [ 82.392777][ T4289] device hsr_slave_1 entered promiscuous mode [ 82.399530][ T4289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.407241][ T4289] Cannot create hsr debugfs directory [ 82.738215][ T4280] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.751048][ T4280] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.774631][ T4280] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.792973][ T4280] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.833165][ T4275] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.852550][ T4275] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.863075][ T4275] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.873592][ T4275] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.951613][ T4284] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.969364][ T4284] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.981491][ T4284] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.991084][ T4284] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.103086][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.132111][ T4289] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.141742][ T4289] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.162942][ T4289] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.173406][ T4289] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.207578][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.219918][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.235061][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.250355][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.271739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.282053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.294531][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.301872][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.333643][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.349422][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.361327][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.372843][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.383980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.411405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.421073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.431835][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.439040][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.449372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.458495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.467738][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.475650][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.483500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.495603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.504732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.513704][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.520857][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.530065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.541846][ T4287] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.554841][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.564189][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.598506][ T4287] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.607567][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.617644][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.627677][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.643085][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.654325][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.664160][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.673234][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.682841][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.696842][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.708133][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.721511][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.737421][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.745675][ T4287] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.767259][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.782149][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.794961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.810546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.821285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.830530][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.840304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.849908][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.857286][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.868398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.878433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.902335][ T4287] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.913854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.923944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.974866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.997378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.016475][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.023581][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.036465][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 84.043440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.051582][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 84.058733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.068109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.077388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.087075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.096996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.105908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.116422][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 84.134953][ T4284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.151391][ T4284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.171246][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.184349][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.197047][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 84.205310][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.221585][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.230660][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.239534][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.251054][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.259818][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.269083][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.277286][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 84.284742][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.305151][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.341121][ T4289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.404141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.424390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.468143][ T4289] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.512542][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.533678][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.550745][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.557990][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.596075][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.621338][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.647686][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.685187][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.692405][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.716964][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.769607][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.778973][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.798052][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.807486][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.817267][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.826029][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.836185][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.852592][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.870767][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.883096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.904023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.918373][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.925971][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.961300][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.994200][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.019197][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.043529][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.059064][ T4287] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.084085][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.098846][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.143533][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.158351][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.187464][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.217820][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.239843][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.257001][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.264360][ T4324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.287129][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.346872][ T4275] device veth0_vlan entered promiscuous mode [ 85.368331][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.387291][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.406683][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.413934][ T4324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.422597][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.432043][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.441830][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.451072][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.488771][ T4275] device veth1_vlan entered promiscuous mode [ 85.509762][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.519574][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.528467][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.542877][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.558850][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.575210][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.585601][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.600983][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.645097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.657145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.678261][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.692091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.709439][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.757714][ T4287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.794632][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.810929][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.828103][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.842918][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.853155][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.894025][ T4275] device veth0_macvtap entered promiscuous mode [ 85.913040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.928375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.947480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.004317][ T4275] device veth1_macvtap entered promiscuous mode [ 86.046841][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.055438][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.091754][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.116530][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 86.122618][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 86.128962][ T4280] device veth0_vlan entered promiscuous mode [ 86.149255][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.169086][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.192757][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.200397][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 86.214719][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.232996][ T4289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.255220][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.266126][ T4280] device veth1_vlan entered promiscuous mode [ 86.276529][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 86.295159][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.304636][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.322808][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.338700][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.356529][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 86.393984][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.404645][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.445180][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.454880][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.470853][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.480851][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.490450][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.502026][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.512341][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.522273][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.531513][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.580867][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.593898][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.611031][ T4280] device veth0_macvtap entered promiscuous mode [ 86.635898][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.648099][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.656184][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.665400][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.674395][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.683134][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.695735][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.706158][ T4289] device veth0_vlan entered promiscuous mode [ 86.721577][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.733518][ T4280] device veth1_macvtap entered promiscuous mode [ 86.767885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.780024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.813010][ T4289] device veth1_vlan entered promiscuous mode [ 86.835529][ T4284] device veth0_vlan entered promiscuous mode [ 86.857483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.871349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.880846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.890521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.947310][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.958537][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.970448][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.004440][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.017789][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.041438][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.067294][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.082684][ T4284] device veth1_vlan entered promiscuous mode [ 87.102183][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.118825][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.134768][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.149728][ T4280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.160019][ T4280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.170027][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.172184][ T4280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.189194][ T4280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.201853][ T4287] device veth0_vlan entered promiscuous mode [ 87.209939][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.219098][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.228308][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.241178][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.249520][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.258891][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.268176][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.280596][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.292169][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.309789][ T4289] device veth0_macvtap entered promiscuous mode [ 87.344495][ T4287] device veth1_vlan entered promiscuous mode [ 87.352673][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.367714][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.382242][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.405969][ T4289] device veth1_macvtap entered promiscuous mode [ 87.453650][ T4284] device veth0_macvtap entered promiscuous mode [ 87.481286][ T4284] device veth1_macvtap entered promiscuous mode [ 87.489276][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.499202][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.507743][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.517945][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.527986][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.536488][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.567263][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.575365][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.591759][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.602202][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.618219][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.635525][ T4287] device veth0_macvtap entered promiscuous mode [ 87.673886][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.689055][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.703416][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.716134][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.734912][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.749572][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.761711][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.772071][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.784338][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.796041][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.818019][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.829910][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.838402][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.856624][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.865601][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.883104][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.894922][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.912886][ T4287] device veth1_macvtap entered promiscuous mode [ 87.935747][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.947201][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.958447][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.971091][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.984518][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.996830][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.008837][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.021277][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.032686][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.043162][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.054225][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.066053][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.096066][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.106861][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.121151][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.132367][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.153221][ T4284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.163943][ T4284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.175878][ T4284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.187809][ T4284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.197551][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 88.203608][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 88.219652][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.232906][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.243081][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.254877][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.265083][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.276036][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.287471][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 88.293775][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.304743][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.316444][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.332227][ T4289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.351528][ T4289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.364735][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 88.401859][ T4289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.411697][ T4289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.447866][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 88.524841][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.569387][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.579617][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.590318][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.600413][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.613520][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.625069][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.657361][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.728359][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.785683][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.875674][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.939638][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.006152][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.083606][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.167638][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.219729][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.235200][ T4287] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.251860][ T4287] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.267492][ T4287] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.282611][ T4287] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.392390][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.420271][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.430370][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.478929][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.487513][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.665342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.719627][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.184114][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.457786][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.497325][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.505233][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.571479][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.618875][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.657541][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.677434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.706882][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.714830][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.735828][ T4375] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 90.750293][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.771533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.780888][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.794538][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.145240][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.153507][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.169598][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.177345][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.992938][ T27] cfg80211: failed to load regulatory.db [ 92.246354][ T130] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.268616][ T4394] loop2: detected capacity change from 0 to 1024 [ 92.439769][ T4394] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.449265][ T130] usb 2-1: Using ep0 maxpacket: 16 [ 92.466388][ T130] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.535185][ T130] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.593749][ T130] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.662675][ T130] usb 2-1: config 0 interface 0 has no altsetting 0 [ 92.702328][ T130] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 92.743323][ T130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.812065][ T130] usb 2-1: config 0 descriptor?? [ 93.099731][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 93.274822][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 93.283445][ T130] usbhid 2-1:0.0: can't add hid device: -71 [ 93.290264][ T130] usbhid: probe of 2-1:0.0 failed with error -71 [ 93.305409][ T130] usb 2-1: USB disconnect, device number 2 [ 93.665930][ T4423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'. [ 93.695079][ T4423] bond0: Unable to set up delay as MII monitoring is disabled [ 93.879180][ T4427] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 94.926461][ T4451] loop2: detected capacity change from 0 to 1024 [ 95.081416][ T4451] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 95.906164][ T4463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 95.988884][ T4472] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 96.227293][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 96.576100][ T4472] x86/PAT: syz.1.27:4472 freeing invalid memtype [mem 0xfe004000-0xfe005fff] [ 97.256883][ T4485] loop2: detected capacity change from 0 to 512 [ 97.543530][ T4485] EXT4-fs: Mount option(s) incompatible with ext2 [ 99.762683][ T4508] loop2: detected capacity change from 0 to 1024 [ 99.895066][ T4508] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 101.946528][ T4525] loop0: detected capacity change from 0 to 256 [ 101.964771][ T4525] exfat: Deprecated parameter 'namecase' [ 101.970826][ T4525] exfat: Deprecated parameter 'namecase' [ 102.236213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 102.272678][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 102.324312][ T4525] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 102.868937][ T4317] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.945502][ T4538] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 103.070427][ T4317] usb 4-1: Using ep0 maxpacket: 16 [ 103.079969][ T4317] usb 4-1: config 0 interface 0 has no altsetting 0 [ 103.130501][ T4317] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 103.150724][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.184481][ T4317] usb 4-1: config 0 descriptor?? [ 103.667202][ T4317] input: HID 258a:6a88 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:258A:6A88.0001/input/input5 [ 103.842601][ T4317] itetech 0003:258A:6A88.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.3-1/input0 [ 104.047513][ T27] usb 4-1: USB disconnect, device number 2 [ 104.198410][ T26] audit: type=1804 audit(1789758826.794:2): pid=4552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.46" name="/newroot/11/file0" dev="fuse" ino=1 res=1 errno=0 [ 104.363400][ T4548] fido_id[4548]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 104.446643][ T4555] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 104.620684][ T4560] loop1: detected capacity change from 0 to 1024 [ 104.757293][ T4560] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 105.184338][ T4571] netlink: 132 bytes leftover after parsing attributes in process `syz.1.49'. [ 106.013989][ T4287] EXT4-fs (loop1): unmounting filesystem. [ 106.254148][ T4578] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.710558][ T4752] device syz_tun entered promiscuous mode [ 115.638819][ T4832] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.926601][ T4840] loop1: detected capacity change from 0 to 4096 [ 115.968270][ T4840] ======================================================= [ 115.968270][ T4840] WARNING: The mand mount option has been deprecated and [ 115.968270][ T4840] and is ignored by this kernel. Remove the mand [ 115.968270][ T4840] option from the mount to silence this warning. [ 115.968270][ T4840] ======================================================= [ 116.250745][ T4847] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.310150][ T4829] loop4: detected capacity change from 0 to 32768 [ 116.469612][ T4829] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 116.508887][ T4829] (syz.4.169,4829,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 116.526556][ T4829] (syz.4.169,4829,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 116.535243][ T4829] (syz.4.169,4829,0):ocfs2_mknod:299 ERROR: status = -2 [ 116.567547][ T4829] (syz.4.169,4829,1):ocfs2_mknod:509 ERROR: status = -2 [ 116.574573][ T4829] (syz.4.169,4829,1):ocfs2_create:683 ERROR: status = -2 [ 117.063697][ T4857] bond0: option arp_interval: invalid value ( ) [ 117.070790][ T4857] bond0: option arp_interval: allowed values 0 - 2147483647 [ 117.420963][ T4284] ocfs2: Unmounting device (7,4) on (node local) [ 117.945231][ T4838] loop3: detected capacity change from 0 to 40427 [ 118.155999][ T4838] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x3ffff [ 118.696664][ T4838] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x30e4 [ 118.738657][ T4838] F2FS-fs (loop3): invalid crc value [ 118.785822][ T4838] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 118.978599][ T4886] loop1: detected capacity change from 0 to 256 [ 119.008570][ T4886] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 119.421340][ T4896] "syz.4.185" (4896) uses obsolete ecb(arc4) skcipher [ 120.251315][ T4897] Zero length message leads to an empty skb [ 120.421631][ T26] audit: type=1400 audit(1789758843.014:3): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name=223A6F pid=4902 comm="syz.2.191" name=223A6F offset=35 [ 120.444607][ T4904] nvmet_tcp: malformed ip/port passed: :4420 [ 120.846263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 120.856271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 120.866252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 120.876250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 120.886249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 120.896243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 120.906248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 120.916255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 120.926251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 123.611649][ T4924] sched: RT throttling activated [ 124.016538][ T4928] FAULT_INJECTION: forcing a failure. [ 124.016538][ T4928] name failslab, interval 1, probability 0, space 0, times 1 [ 124.070795][ T4928] CPU: 1 PID: 4928 Comm: syz.4.198 Not tainted syzkaller #0 [ 124.076726][ T4922] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.078169][ T4928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.078194][ T4928] Call Trace: [ 124.078203][ T4928] [ 124.102079][ T4928] dump_stack_lvl+0x188/0x24e [ 124.106845][ T4928] ? show_regs_print_info+0x12/0x12 [ 124.112115][ T4928] ? load_image+0x410/0x410 [ 124.116687][ T4928] ? __might_sleep+0xd0/0xd0 [ 124.121337][ T4928] ? __lock_acquire+0x7c40/0x7c40 [ 124.126425][ T4928] should_fail_ex+0x390/0x4c0 [ 124.131180][ T4928] should_failslab+0x5/0x20 [ 124.135731][ T4928] slab_pre_alloc_hook+0x59/0x300 [ 124.140818][ T4928] kmem_cache_alloc+0x56/0x2f0 [ 124.145648][ T4928] ? security_file_alloc+0x30/0x110 [ 124.151183][ T4928] security_file_alloc+0x30/0x110 [ 124.156297][ T4928] __alloc_file+0xc2/0x230 [ 124.161056][ T4928] alloc_empty_file+0x90/0x180 [ 124.166510][ T4928] alloc_file+0x5b/0x5f0 [ 124.170831][ T4928] alloc_file_pseudo+0x180/0x200 [ 124.175830][ T4928] ? alloc_empty_file_noaccount+0x80/0x80 [ 124.181611][ T4928] ? __rwlock_init+0x140/0x140 [ 124.186449][ T4928] ? security_inode_alloc+0xbd/0x110 [ 124.191798][ T4928] ? do_raw_spin_unlock+0x11d/0x230 [ 124.197061][ T4928] sock_alloc_file+0xb3/0x240 [ 124.201814][ T4928] do_accept+0x406/0x6f0 [ 124.206127][ T4928] ? __ia32_sys_listen+0x60/0x60 [ 124.211165][ T4928] __sys_accept4+0x97/0x100 [ 124.215725][ T4928] __x64_sys_accept4+0x96/0xb0 [ 124.220538][ T4928] do_syscall_64+0x4c/0xa0 [ 124.225001][ T4928] ? clear_bhb_loop+0x60/0xb0 [ 124.229720][ T4928] ? clear_bhb_loop+0x60/0xb0 [ 124.234451][ T4928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.240430][ T4928] RIP: 0033:0x7f6cc2b9e159 [ 124.244907][ T4928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.264584][ T4928] RSP: 002b:00007f6cc3a08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 124.275994][ T4928] RAX: ffffffffffffffda RBX: 00007f6cc2e25fa0 RCX: 00007f6cc2b9e159 [ 124.286460][ T4928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 124.286635][ T4922] usb 1-1: Using ep0 maxpacket: 16 [ 124.294750][ T4928] RBP: 00007f6cc2c3506b R08: 0000000000000000 R09: 0000000000000000 [ 124.294767][ T4928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.294780][ T4928] R13: 00007f6cc2e26038 R14: 00007f6cc2e25fa0 R15: 00007ffc9eba0938 [ 124.294812][ T4928] [ 125.085346][ T4922] usb 1-1: device descriptor read/all, error -71 [ 125.233511][ T4940] loop1: detected capacity change from 0 to 256 [ 125.251206][ T4940] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 125.430559][ T4943] loop4: detected capacity change from 0 to 16 [ 125.492855][ T4943] erofs: (device loop4): mounted with root inode @ nid 36. [ 125.530529][ T4359] kernel write not supported for file 109/task/110/fail-nth (pid: 4359 comm: kworker/0:7) [ 125.675399][ T4949] loop1: detected capacity change from 0 to 256 [ 125.859201][ T4949] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 126.976347][ T4922] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 128.060476][ T4922] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.081303][ T4922] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 128.091616][ T4922] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 128.101642][ T4922] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.118997][ T4922] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 128.145278][ T4922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.232323][ T4922] gud 1-1:1.0: Failed to get properties (error=-71) [ 129.239179][ T4922] gud: probe of 1-1:1.0 failed with error -71 [ 129.304761][ T4922] usb 1-1: USB disconnect, device number 3 [ 129.452408][ T4978] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 129.465797][ T4978] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 129.570788][ T4980] loop1: detected capacity change from 0 to 764 [ 130.011061][ T4986] loop0: detected capacity change from 0 to 2048 [ 130.095849][ T4986] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 130.101741][ T4986] loop0: partition table partially beyond EOD, truncated [ 130.109896][ T4986] loop0: p1 start 3405774849 is beyond EOD, truncated [ 130.116818][ T4986] loop0: p2 start 53543428 is beyond EOD, truncated [ 130.123472][ T4986] loop0: p3 start 4284289 is beyond EOD, truncated [ 130.133404][ T4986] loop0: p5 start 3405774849 is beyond EOD, truncated [ 130.140758][ T4986] loop0: p6 start 53543428 is beyond EOD, truncated [ 131.032611][ T4990] loop2: detected capacity change from 0 to 4096 [ 131.049467][ T4990] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.934802][ T4990] EXT4-fs (loop2): Test dummy encryption mode enabled [ 132.004041][ T4990] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 132.289824][ T5003] loop0: detected capacity change from 0 to 256 [ 132.364133][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 132.839557][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.846425][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.924594][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 132.943964][ T5005] loop2: detected capacity change from 0 to 4096 [ 132.981070][ T5003] FAT-fs (loop0): Filesystem has been set read-only [ 133.004299][ T5005] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 133.056348][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 133.072027][ T5005] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 133.142924][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 133.674004][ T4993] loop1: detected capacity change from 0 to 40427 [ 133.687488][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 133.757742][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 133.822734][ T4993] F2FS-fs (loop1): invalid crc value [ 133.867805][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 133.930909][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 134.011164][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 134.041892][ T4993] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 134.076551][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 134.148066][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 134.222868][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.302929][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 134.408196][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 134.435013][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 134.464711][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 134.483834][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 134.555340][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 134.611811][ T5012] Bluetooth: MGMT ver 1.22 [ 134.637085][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 134.696639][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 134.756352][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 134.774381][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 134.826436][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 134.863730][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.906530][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 134.915212][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 135.057484][ T5003] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 135.179617][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.400618][ T26] audit: type=1800 audit(1789758857.984:4): pid=5003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.222" name="file1" dev="loop0" ino=1048605 res=0 errno=0 [ 135.848965][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.072665][ T5003] syz.0.222 (5003) used greatest stack depth: 20720 bytes left [ 136.193866][ T5024] netlink: 36 bytes leftover after parsing attributes in process `syz.1.225'. [ 136.648315][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 136.658035][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.666739][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.674658][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.682859][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 136.690259][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.895552][ T5025] loop3: detected capacity change from 0 to 4096 [ 137.022676][ T5033] loop1: detected capacity change from 0 to 8 [ 137.032017][ T5033] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 137.709961][ T5025] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 137.857061][ T4551] udevd[4551]: incorrect cramfs checksum on /dev/loop1 [ 137.958026][ T5033] syz.1.231 (5033): drop_caches: 2 [ 138.021412][ T4551] udevd[4551]: incorrect cramfs checksum on /dev/loop1 [ 138.143510][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 138.550596][ T5046] Mass Storage Function, version: 2009/09/11 [ 138.557245][ T5046] LUN: removable file: (no medium) [ 138.584753][ T5046] LUN: removable file: (no medium) [ 139.484163][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 139.830057][ T5061] loop1: detected capacity change from 0 to 512 [ 139.980320][ T5065] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 139.996130][ T5026] chnl_net:caif_netlink_parms(): no params data found [ 140.271615][ T5061] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 140.322154][ T5061] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.164990][ T5079] loop0: detected capacity change from 0 to 4096 [ 141.205442][ T4287] EXT4-fs (loop1): unmounting filesystem. [ 141.205933][ T5079] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 141.409613][ T5026] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.417199][ T5026] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.457696][ T5026] device bridge_slave_0 entered promiscuous mode [ 141.506481][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 141.566766][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 141.591720][ T5088] loop1: detected capacity change from 0 to 256 [ 141.598926][ T5026] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.606070][ T5026] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.628148][ T5026] device bridge_slave_1 entered promiscuous mode [ 141.708080][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.744554][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 141.774397][ T27] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.836357][ T27] usb 3-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 141.879603][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.933312][ T5026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.951807][ T27] usb 3-1: Product: syz [ 141.976287][ T27] usb 3-1: Manufacturer: syz [ 141.986412][ T27] usb 3-1: SerialNumber: syz [ 142.004225][ T5026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.035887][ T27] usb 3-1: Found UVC 1.00 device syz (046d:0821) [ 142.063371][ T27] usb 3-1: No valid video chain found. [ 142.140614][ T5091] loop1: detected capacity change from 0 to 256 [ 142.193985][ T5091] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 142.226969][ T27] usb 3-1: USB disconnect, device number 2 [ 142.442325][ T5026] team0: Port device team_slave_0 added [ 142.493945][ T5026] team0: Port device team_slave_1 added [ 142.905343][ T9] device hsr_slave_0 left promiscuous mode [ 142.954201][ T9] device hsr_slave_1 left promiscuous mode [ 142.960782][ T5100] loop3: detected capacity change from 0 to 2048 [ 142.970124][ T9] device bridge_slave_1 left promiscuous mode [ 142.995444][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.024313][ T5089] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.136644][ T5079] loop0: detected capacity change from 4096 to 0 [ 143.176590][ T5086] ntfs3: loop0: ino=5, "/" directory corrupted [ 143.197412][ T9] device bridge_slave_0 left promiscuous mode [ 143.203706][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.337372][ T4359] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 143.534921][ T41] ntfs3: loop0: ino=5, directory corrupted [ 143.605897][ T4359] usb 2-1: Using ep0 maxpacket: 8 [ 143.629892][ T41] ntfs3: loop0: ino=5, directory corrupted [ 143.636394][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 143.698339][ T4359] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.734919][ T4289] syz-executor: attempt to access beyond end of device [ 143.734919][ T4289] loop0: rw=2049, sector=256, nr_sectors = 8 limit=0 [ 143.792020][ T4359] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.811669][ T4289] Buffer I/O error on dev loop0, logical block 32, lost sync page write [ 143.856724][ T4289] ntfs3: loop0: ntfs_set_state r=3 failed, -5. [ 143.891523][ T4359] usb 2-1: config 0 interface 0 has no altsetting 0 [ 143.919545][ T4289] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 143.954915][ T4359] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 143.978466][ T4289] syz-executor: attempt to access beyond end of device [ 143.978466][ T4289] loop0: rw=2049, sector=256, nr_sectors = 8 limit=0 [ 143.992330][ T4289] Buffer I/O error on dev loop0, logical block 32, lost sync page write [ 144.001585][ T4289] ntfs3: loop0: ntfs_set_state r=3 failed, -5. [ 144.008280][ T4289] syz-executor: attempt to access beyond end of device [ 144.008280][ T4289] loop0: rw=0, sector=256, nr_sectors = 8 limit=0 [ 144.030857][ T57] kworker/u4:4: attempt to access beyond end of device [ 144.030857][ T57] loop0: rw=2049, sector=256, nr_sectors = 8 limit=0 [ 144.061264][ T4359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.084018][ T4359] usb 2-1: config 0 descriptor?? [ 144.094924][ T57] Buffer I/O error on dev loop0, logical block 32, lost sync page write [ 144.114463][ T9] device veth1_macvtap left promiscuous mode [ 144.128329][ T57] ntfs3: loop0: ntfs3_write_inode r=3 failed, -5. [ 144.135488][ T4289] syz-executor: attempt to access beyond end of device [ 144.135488][ T4289] loop0: rw=0, sector=256, nr_sectors = 8 limit=0 [ 144.158095][ T9] device veth0_macvtap left promiscuous mode [ 144.165317][ T9] device veth1_vlan left promiscuous mode [ 144.171505][ T4289] syz-executor: attempt to access beyond end of device [ 144.171505][ T4289] loop0: rw=2049, sector=256, nr_sectors = 8 limit=0 [ 144.191661][ T9] device veth0_vlan left promiscuous mode [ 144.213346][ T4289] Buffer I/O error on dev loop0, logical block 32, lost sync page write [ 144.236468][ T4289] ntfs3: loop0: ntfs_evict_inode r=3 failed, -5. [ 144.260570][ T4289] syz-executor: attempt to access beyond end of device [ 144.260570][ T4289] loop0: rw=0, sector=256, nr_sectors = 8 limit=0 [ 144.528428][ T4359] apple 0003:05AC:0241.0002: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 144.553448][ T4359] input: HID 05ac:0241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:0241.0002/input/input6 [ 144.788627][ T4359] apple 0003:05AC:0241.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 05ac:0241] on usb-dummy_hcd.1-1/input0 [ 145.327069][ T4359] usb 2-1: USB disconnect, device number 3 [ 145.482107][ T5106] loop2: detected capacity change from 0 to 40427 [ 145.506832][ T5106] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 145.514657][ T5106] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 145.608051][ T5106] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 145.648305][ T5128] loop1: detected capacity change from 0 to 16 [ 145.683029][ T5106] F2FS-fs (loop2): Found nat_bits in checkpoint [ 145.716381][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 145.728361][ T5128] erofs: (device loop1): mounted with root inode @ nid 36. [ 145.779627][ T5128] syz.1.253: attempt to access beyond end of device [ 145.779627][ T5128] loop1: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 145.861441][ T5133] fido_id[5133]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 145.883684][ T5128] syz.1.253: attempt to access beyond end of device [ 145.883684][ T5128] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 145.900105][ T26] audit: type=1800 audit(1789758868.494:5): pid=5128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.253" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 145.983895][ T5128] syz.1.253: attempt to access beyond end of device [ 145.983895][ T5128] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 146.059237][ T5106] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 146.076447][ T5106] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 147.239944][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 147.432642][ T7] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 147.501195][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 147.611144][ T7] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 147.709917][ T7] usb 2-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 147.766004][ T5161] loop2: detected capacity change from 0 to 512 [ 147.796143][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.968444][ T5161] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 147.987397][ T5128] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 148.077058][ T5161] System zones: 1-12 [ 148.095091][ T5161] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.257: missing EA_INODE flag [ 148.127047][ T5161] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.257: error while reading EA inode 12 err=-117 [ 148.157116][ T5161] EXT4-fs (loop2): 1 orphan inode deleted [ 148.162926][ T5161] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 148.269933][ T5165] loop0: detected capacity change from 0 to 256 [ 148.508680][ T4281] Bluetooth: hci5: Reading Intel version command failed (-71) [ 148.520105][ T4359] usb 2-1: USB disconnect, device number 4 [ 148.945820][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 150.956794][ T9] team0 (unregistering): Port device team_slave_1 removed [ 151.156216][ T9] team0 (unregistering): Port device team_slave_0 removed [ 151.662379][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.774955][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.172015][ T5197] loop2: detected capacity change from 0 to 512 [ 152.185811][ T5197] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.210497][ T5197] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 152.228253][ T5197] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 152.375719][ T9] bond0 (unregistering): Released all slaves [ 152.572138][ T5199] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 153.096404][ T5026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.108264][ T5026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.140626][ T5026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.261424][ T5187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 153.329846][ T5026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.356250][ T5026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.449058][ T5026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.502848][ T5202] loop2: detected capacity change from 0 to 512 [ 153.598124][ T5202] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 153.626673][ T5202] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.835333][ T5026] device hsr_slave_0 entered promiscuous mode [ 153.890370][ T5026] device hsr_slave_1 entered promiscuous mode [ 155.612182][ T5026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.644121][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 155.691683][ T5026] Cannot create hsr debugfs directory [ 155.741921][ T5210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 156.368991][ T5242] loop0: detected capacity change from 0 to 128 [ 156.396421][ T5242] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 156.445799][ T5246] loop2: detected capacity change from 0 to 512 [ 156.900952][ T5246] EXT4-fs (loop2): 1 orphan inode deleted [ 157.292065][ T5246] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 157.373962][ T5246] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.488089][ T4501] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 157.500546][ T4919] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 157.514018][ T4501] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:11: Failed to release dquot type 1 [ 157.702299][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 157.751001][ T4281] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 157.897826][ T5026] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 157.944742][ T5026] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.019985][ T5026] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.059550][ T5026] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 158.227856][ T5026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.249488][ T5026] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.303287][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.324417][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.340622][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.352609][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.368892][ T4860] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.376149][ T4860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.392617][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.401943][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.419829][ T4860] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.427105][ T4860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.448177][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.458660][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.467824][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.477512][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.505253][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.519539][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.279343][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.322040][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.365802][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.399926][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.425090][ T26] audit: type=1800 audit(1789758882.014:6): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.283" name="no_out_endpoint" dev="configfs" ino=37336 res=0 errno=0 [ 159.464868][ T5026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.515446][ T26] audit: type=1800 audit(1789758882.014:7): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.283" name="subclass" dev="configfs" ino=37337 res=0 errno=0 [ 159.542561][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.582099][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.604522][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.626538][ T26] audit: type=1800 audit(1789758882.014:8): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.283" name="protocol" dev="configfs" ino=37340 res=0 errno=0 [ 159.672375][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 159.714022][ T26] audit: type=1800 audit(1789758882.054:9): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.283" name="report_length" dev="configfs" ino=37345 res=0 errno=0 [ 159.787607][ T26] audit: type=1800 audit(1789758882.054:10): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.283" name="report_desc" dev="configfs" ino=37346 res=0 errno=0 [ 159.810670][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 159.864331][ T26] audit: type=1800 audit(1789758882.074:11): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.283" name="UDC" dev="configfs" ino=37354 res=0 errno=0 [ 160.167882][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.186387][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 160.206986][ T27] usb 1-1: Dual-Role OTG device on HNP port [ 160.214191][ T27] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 160.284034][ T5302] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.973440][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.996518][ C1] ------------[ cut here ]------------ [ 161.002390][ C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 161.009657][ C1] WARNING: CPU: 1 PID: 5300 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x27c/0x4d0 [ 161.019810][ C1] Modules linked in: [ 161.023750][ C1] CPU: 1 PID: 5300 Comm: syz.0.288 Not tainted syzkaller #0 [ 161.031115][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.041230][ C1] RIP: 0010:usb_ep_enable+0x27c/0x4d0 [ 161.046676][ C1] Code: 49 8b 0e 48 c7 c0 80 e4 3e 8b 49 c7 c0 a0 e4 3e 8b 4c 0f 44 c0 48 c7 c7 40 e4 3e 8b 48 c7 c6 0d f9 63 8c 89 ea e8 f4 09 ce fa <0f> 0b e9 c4 fe ff ff e8 08 83 02 fb 49 bc 00 00 00 00 00 fc ff df [ 161.066315][ C1] RSP: 0018:ffffc900001e0768 EFLAGS: 00010046 [ 161.072409][ C1] RAX: a3afd678894c0a00 RBX: ffff888026ebc0e0 RCX: ffff888027c89e00 [ 161.080407][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 161.088414][ C1] RBP: 0000000000000081 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 161.096528][ C1] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: dffffc0000000000 [ 161.107908][ C1] R13: ffff888026ebc10d R14: ffff888026ebc0e8 R15: ffff88802eb27fba [ 161.115923][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 161.124879][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.131506][ C1] CR2: 00007fd981215660 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 161.139543][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 161.147541][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 161.155557][ C1] Call Trace: [ 161.158865][ C1] [ 161.161733][ C1] hidg_set_alt+0x126/0xa00 [ 161.166285][ C1] ? usb_gadget_set_state+0x142/0x310 [ 161.171721][ C1] set_config+0x6e8/0xf70 [ 161.176084][ C1] composite_setup+0x194c/0x2b00 [ 161.181058][ C1] configfs_composite_setup+0xc3/0x100 [ 161.186561][ C1] dummy_timer+0x1305/0x34e0 [ 161.191191][ C1] ? __lock_acquire+0x1465/0x7c40 [ 161.196269][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 161.201324][ C1] ? lock_chain_count+0x20/0x20 [ 161.206221][ C1] ? dummy_free_streams+0x520/0x520 [ 161.211451][ C1] __hrtimer_run_queues+0x522/0xc90 [ 161.216784][ C1] ? dummy_free_streams+0x520/0x520 [ 161.222204][ C1] ? hrtimer_interrupt+0x980/0x980 [ 161.227382][ C1] hrtimer_run_softirq+0x173/0x290 [ 161.233342][ C1] handle_softirqs+0x291/0x910 [ 161.238133][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 161.243037][ C1] ? do_softirq+0x210/0x210 [ 161.247580][ C1] ? hrtimer_interrupt+0x775/0x980 [ 161.252740][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 161.257968][ C1] __irq_exit_rcu+0x13b/0x230 [ 161.262665][ C1] ? irq_exit_rcu+0x20/0x20 [ 161.267197][ C1] irq_exit_rcu+0x5/0x20 [ 161.271552][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 161.277234][ C1] [ 161.280207][ C1] [ 161.283163][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 161.289176][ C1] RIP: 0010:finish_task_switch+0x267/0x8e0 [ 161.295101][ C1] Code: d9 08 85 c0 0f 84 38 01 00 00 48 85 db 0f 85 57 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 93 20 e3 08 e8 1e 18 2f 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 161.314821][ C1] RSP: 0018:ffffc900036b7a20 EFLAGS: 00000282 [ 161.320924][ C1] RAX: a3afd678894c0a00 RBX: 0000000000000000 RCX: a3afd678894c0a00 [ 161.329096][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 161.337088][ C1] RBP: ffffc900036b7a70 R08: ffff8880b8f3acc3 R09: 1ffff110171e7598 [ 161.345082][ C1] R10: dffffc0000000000 R11: ffffed10171e7599 R12: ffff888027c89e00 [ 161.353712][ C1] R13: 1ffff110171e76f2 R14: dffffc0000000000 R15: ffff8880b8f3b790 [ 161.362651][ C1] __schedule+0x1087/0x4030 [ 161.368074][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 161.373308][ C1] ? _raw_spin_unlock+0x40/0x40 [ 161.378200][ C1] ? release_firmware_map_entry+0x187/0x187 [ 161.384129][ C1] ? preempt_schedule+0xbc/0xd0 [ 161.389016][ C1] preempt_schedule_common+0x82/0xd0 [ 161.394330][ C1] preempt_schedule+0xbc/0xd0 [ 161.399039][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 161.404692][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 161.410712][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 161.415790][ C1] ? lock_chain_count+0x20/0x20 [ 161.420674][ C1] preempt_schedule_thunk+0x16/0x18 [ 161.425926][ C1] _raw_write_unlock_irq+0x3c/0x40 [ 161.431074][ C1] do_exit+0x17bb/0x2570 [ 161.435355][ C1] ? lock_chain_count+0x20/0x20 [ 161.440240][ C1] ? put_task_struct+0x80/0x80 [ 161.445039][ C1] ? preempt_schedule+0xbc/0xd0 [ 161.449924][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 161.455597][ C1] do_group_exit+0x229/0x2e0 [ 161.460245][ C1] __x64_sys_exit_group+0x3b/0x40 [ 161.465320][ C1] do_syscall_64+0x4c/0xa0 [ 161.469787][ C1] ? clear_bhb_loop+0x60/0xb0 [ 161.474795][ C1] ? clear_bhb_loop+0x60/0xb0 [ 161.479731][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.485667][ C1] RIP: 0033:0x7fd980f9e159 [ 161.490115][ C1] Code: Unable to access opcode bytes at 0x7fd980f9e12f. [ 161.497182][ C1] RSP: 002b:00007ffc2d851018 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 161.505799][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd980f9e159 [ 161.513810][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.521802][ C1] RBP: 00007ffc2d85107c R08: 0000000000000000 R09: 00000000000927c0 [ 161.529793][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000003d [ 161.537797][ C1] R13: 00000000000927c0 R14: 0000000000027102 R15: 00007ffc2d8510d0 [ 161.545803][ C1] [ 161.549001][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 161.557369][ C1] CPU: 1 PID: 5300 Comm: syz.0.288 Not tainted syzkaller #0 [ 161.570077][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.581131][ C1] Call Trace: [ 161.584442][ C1] [ 161.587353][ C1] dump_stack_lvl+0x188/0x24e [ 161.592856][ C1] ? memcpy+0x3c/0x60 [ 161.597262][ C1] ? show_regs_print_info+0x12/0x12 [ 161.602757][ C1] ? load_image+0x410/0x410 [ 161.607402][ C1] panic+0x2d3/0x710 [ 161.611347][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 161.615893][ C1] __warn+0x2f8/0x4f0 [ 161.619906][ C1] ? usb_ep_enable+0x27c/0x4d0 [ 161.624707][ C1] ? usb_ep_enable+0x27c/0x4d0 [ 161.629522][ C1] report_bug+0x2ba/0x4f0 [ 161.633894][ C1] ? usb_ep_enable+0x27c/0x4d0 [ 161.638719][ C1] handle_bug+0x3a/0x70 [ 161.642901][ C1] exc_invalid_op+0x16/0x40 [ 161.647431][ C1] asm_exc_invalid_op+0x16/0x20 [ 161.652299][ C1] RIP: 0010:usb_ep_enable+0x27c/0x4d0 [ 161.657704][ C1] Code: 49 8b 0e 48 c7 c0 80 e4 3e 8b 49 c7 c0 a0 e4 3e 8b 4c 0f 44 c0 48 c7 c7 40 e4 3e 8b 48 c7 c6 0d f9 63 8c 89 ea e8 f4 09 ce fa <0f> 0b e9 c4 fe ff ff e8 08 83 02 fb 49 bc 00 00 00 00 00 fc ff df [ 161.677351][ C1] RSP: 0018:ffffc900001e0768 EFLAGS: 00010046 [ 161.683456][ C1] RAX: a3afd678894c0a00 RBX: ffff888026ebc0e0 RCX: ffff888027c89e00 [ 161.691457][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 161.699448][ C1] RBP: 0000000000000081 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 161.708247][ C1] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: dffffc0000000000 [ 161.716806][ C1] R13: ffff888026ebc10d R14: ffff888026ebc0e8 R15: ffff88802eb27fba [ 161.726472][ C1] ? usb_ep_enable+0x27c/0x4d0 [ 161.731303][ C1] hidg_set_alt+0x126/0xa00 [ 161.735833][ C1] ? usb_gadget_set_state+0x142/0x310 [ 161.741248][ C1] set_config+0x6e8/0xf70 [ 161.745612][ C1] composite_setup+0x194c/0x2b00 [ 161.750579][ C1] configfs_composite_setup+0xc3/0x100 [ 161.756067][ C1] dummy_timer+0x1305/0x34e0 [ 161.760697][ C1] ? __lock_acquire+0x1465/0x7c40 [ 161.765770][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 161.770824][ C1] ? lock_chain_count+0x20/0x20 [ 161.775716][ C1] ? dummy_free_streams+0x520/0x520 [ 161.780949][ C1] __hrtimer_run_queues+0x522/0xc90 [ 161.786180][ C1] ? dummy_free_streams+0x520/0x520 [ 161.791412][ C1] ? hrtimer_interrupt+0x980/0x980 [ 161.796553][ C1] hrtimer_run_softirq+0x173/0x290 [ 161.801696][ C1] handle_softirqs+0x291/0x910 [ 161.806489][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 161.811364][ C1] ? do_softirq+0x210/0x210 [ 161.815884][ C1] ? hrtimer_interrupt+0x775/0x980 [ 161.821110][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 161.826334][ C1] __irq_exit_rcu+0x13b/0x230 [ 161.831041][ C1] ? irq_exit_rcu+0x20/0x20 [ 161.835618][ C1] irq_exit_rcu+0x5/0x20 [ 161.839894][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 161.845561][ C1] [ 161.848509][ C1] [ 161.851464][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 161.857471][ C1] RIP: 0010:finish_task_switch+0x267/0x8e0 [ 161.863332][ C1] Code: d9 08 85 c0 0f 84 38 01 00 00 48 85 db 0f 85 57 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 93 20 e3 08 e8 1e 18 2f 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 161.883708][ C1] RSP: 0018:ffffc900036b7a20 EFLAGS: 00000282 [ 161.890416][ C1] RAX: a3afd678894c0a00 RBX: 0000000000000000 RCX: a3afd678894c0a00 [ 161.898409][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 161.906400][ C1] RBP: ffffc900036b7a70 R08: ffff8880b8f3acc3 R09: 1ffff110171e7598 [ 161.914422][ C1] R10: dffffc0000000000 R11: ffffed10171e7599 R12: ffff888027c89e00 [ 161.922501][ C1] R13: 1ffff110171e76f2 R14: dffffc0000000000 R15: ffff8880b8f3b790 [ 161.930512][ C1] __schedule+0x1087/0x4030 [ 161.935050][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 161.940285][ C1] ? _raw_spin_unlock+0x40/0x40 [ 161.945169][ C1] ? release_firmware_map_entry+0x187/0x187 [ 161.951094][ C1] ? preempt_schedule+0xbc/0xd0 [ 161.955968][ C1] preempt_schedule_common+0x82/0xd0 [ 161.961279][ C1] preempt_schedule+0xbc/0xd0 [ 161.965982][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 161.971637][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 161.977743][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 161.983579][ C1] ? lock_chain_count+0x20/0x20 [ 161.991034][ C1] preempt_schedule_thunk+0x16/0x18 [ 162.001391][ C1] _raw_write_unlock_irq+0x3c/0x40 [ 162.006899][ C1] do_exit+0x17bb/0x2570 [ 162.011182][ C1] ? lock_chain_count+0x20/0x20 [ 162.016163][ C1] ? put_task_struct+0x80/0x80 [ 162.021314][ C1] ? preempt_schedule+0xbc/0xd0 [ 162.026629][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 162.032311][ C1] do_group_exit+0x229/0x2e0 [ 162.036944][ C1] __x64_sys_exit_group+0x3b/0x40 [ 162.041996][ C1] do_syscall_64+0x4c/0xa0 [ 162.046436][ C1] ? clear_bhb_loop+0x60/0xb0 [ 162.051136][ C1] ? clear_bhb_loop+0x60/0xb0 [ 162.056012][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.062416][ C1] RIP: 0033:0x7fd980f9e159 [ 162.066870][ C1] Code: Unable to access opcode bytes at 0x7fd980f9e12f. [ 162.073910][ C1] RSP: 002b:00007ffc2d851018 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 162.082363][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd980f9e159 [ 162.090372][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.100368][ C1] RBP: 00007ffc2d85107c R08: 0000000000000000 R09: 00000000000927c0 [ 162.120844][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000003d [ 162.129301][ C1] R13: 00000000000927c0 R14: 0000000000027102 R15: 00007ffc2d8510d0 [ 162.137665][ C1] [ 162.141277][ C1] Kernel Offset: disabled [ 162.145683][ C1] Rebooting in 86400 seconds..