last executing test programs: 2m0.233685771s ago: executing program 0 (id=337): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x100000000002, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) pipe2$watch_queue(&(0x7f0000000000), 0x80) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000240)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000003c0)=[r1], &(0x7f0000000080), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 1m59.371197081s ago: executing program 0 (id=340): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_GETMDB={0x18, 0x56, 0x20, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0xc0c0}, 0x44) 1m57.299398562s ago: executing program 0 (id=344): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x20008d0, &(0x7f0000000240)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB=',mode=00000000000000000000007,umask=00000000000000000177777,gid=forget,volume=00000000000000001023,noadinicb,novrs,lastblock=00000000000000000002,iocharset=cp936,gid=', @ANYRESDEC=0x0, @ANYBLOB], 0x1, 0xc32, &(0x7f0000009100)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b12455, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0xfffffffffffffffa) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vcs(0xffffffffffffff9c, 0x0, 0x401, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, r1, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}, 0x1, 0x800e0000, 0x0, 0x80}, 0x40006) 1m53.354832208s ago: executing program 0 (id=354): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6_mptcp(0xa, 0x1, 0x106) semtimedop(0x0, 0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$GETZCNT(0x0, 0x2, 0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x1) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 1m48.032299587s ago: executing program 0 (id=365): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ptrace(0x10, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x18, r3, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) 1m46.114209263s ago: executing program 0 (id=368): r0 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r0, 0x0, 0x140) openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e05411, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x800) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) 1m30.492057572s ago: executing program 32 (id=368): r0 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r0, 0x0, 0x140) openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e05411, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x800) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) 27.726447746s ago: executing program 1 (id=547): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 22.138257232s ago: executing program 2 (id=558): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) 21.411992429s ago: executing program 3 (id=559): r0 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000380), 0xed7, 0x22201) ioctl$BLKPG(r4, 0x1269, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vcsa(0x0, 0x7b95b611, 0x802) ioctl$NILFS_IOCTL_GET_CPSTAT(r4, 0x80186e83, &(0x7f0000000180)) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000140)={@hyper}) 20.259243457s ago: executing program 2 (id=560): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000020000000100000c02000000000000000000000d00000000c9ec5598fcd836344868d83500000000000000000000cca08a06a6bc9ccc362be3dae197fd900cb12745e3bf910700bfe4141898295538"], 0x0, 0x34}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r0, &(0x7f0000000040), 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) 18.48257259s ago: executing program 1 (id=561): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, 0x0) r1 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000300)=0xb3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x880) syz_open_dev$loop(&(0x7f0000000280), 0x1, 0x40040) 18.439356841s ago: executing program 2 (id=562): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r4 = socket(0x1e, 0x4, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) 17.314068009s ago: executing program 2 (id=564): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='rd_pages=8\n', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000001200)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0xffffffffffffff9c, &(0x7f0000001300)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/d0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001500)='1\n', 0x2) close(r2) 16.337619872s ago: executing program 3 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000400)=ANY=[], 0xb0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c854}, 0x20004000) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 16.114067438s ago: executing program 1 (id=567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x20000000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 16.065052959s ago: executing program 2 (id=569): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) rmdir(&(0x7f0000000180)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00') syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) 12.581056354s ago: executing program 1 (id=576): r0 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000380), 0xed7, 0x22201) ioctl$BLKPG(r4, 0x1269, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vcsa(0x0, 0x7b95b611, 0x802) ioctl$NILFS_IOCTL_GET_CPSTAT(r4, 0x80186e83, &(0x7f0000000180)) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000140)={@hyper}) 9.01160835s ago: executing program 1 (id=583): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) 8.997638551s ago: executing program 5 (id=584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r3, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000240)="e1", 0x1, 0x200080c1, &(0x7f0000000400)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1f}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) sendto$inet6(r4, &(0x7f0000000180)='9', 0xfffffffffffffd46, 0x4820, 0x0, 0xffffffffffffff3e) 6.828150244s ago: executing program 3 (id=586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x20000000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 6.513115581s ago: executing program 5 (id=588): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) close(0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 5.696959921s ago: executing program 3 (id=589): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) epoll_create(0x7) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r4 = syz_open_pts(r3, 0x80) utime(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r4, r3, 0x80000) 5.696748971s ago: executing program 4 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 4.569695909s ago: executing program 5 (id=591): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000804, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xff, 0x28e, &(0x7f0000000f40)="$eJzs3c9qY1UcB/DfzZ820UWycCVCL+jCVWl9ghapIBYEJQt1ocWmIE0otBDwD8aufAKfwFfwNdyIL+ADOMxuuihzh5vcpJnJTUs606bMfD6b/jjnfO/9nZOErnLz3Xv948OTs6PzX/6LRiOJyk7sxEUS7ajExG9R6t9H5eMAwAN3kWXxOBtbL11RX5CsVe60MQDgzsz+/191LwDA/fjyq68/293f3/siTRsR/d8HnSTGf8fzu0fxQ/SiG1vRisuIbGpcf/Lp/l7U0lw7PugPB5082f/27+L6u/9HjPLb0Yp2eX47HZvJDwederxV3H+nF93P/4xWvFOe/6gkH521+PD9mf43oxX/fB8n0YvDordJ/tftNP04++PJz9/ko3k+GQ4669N1xerqvb4wAAAAAAAAAAAAAAAAAAAAAAC81jbTqfbzz9+pXo7mN+fmk9n8oucDDWeez7OVpmlWpK6uX4t3a1Fbza4BAAAAAAAAAAAAAAAAAADgYTn78afjg16ve1parBerrltTVky+1l8yFU+XuM6NxcayqagWrfWSiOXuVS+SNy+ulk7FwsNs5v10T5Na5COVWxz4fJFMR5qzUxsxvlc+0hwXMyMv/aI0YlRMtnp8kMQNqUbZm2Su+GvpfrL5t18j32h5au3FkWaxg5LFzWvuvvb2rY4uay2YSiKiPj3M669Tf3Ufq9EnBQAAAAAAAAAAAAAAAAAAuGdXX/otmTxfQUMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsAJXv/+/RDEswovWZNW8qEUxsuItAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8AZ4FgAA//8YB15i") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write(r1, &(0x7f0000000300), 0x0) sendmmsg$sock(r3, 0x0, 0x0, 0x4000080) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 4.563342388s ago: executing program 4 (id=592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000008}, 0x44080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @empty, 0x9}, 0x1c) shutdown(r3, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_ADD_TO_RESOLV_LIST={{0x9}, 0x10}}}, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00003bf000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r4, 0x0, 0x0) 4.318649805s ago: executing program 3 (id=593): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setown(r2, 0x8, r0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @broadcast, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = dup(r5) flistxattr(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) 3.301904499s ago: executing program 4 (id=594): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) pipe2$watch_queue(&(0x7f0000000000), 0x80) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000240)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000003c0)=[r1], &(0x7f0000000080), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 2.471849879s ago: executing program 2 (id=595): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0xb]}, 0x8) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080), &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180), &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200), 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)=@newspdinfo={0x24, 0x24, 0x1, 0x70bd2d, 0x25dfdbfd, 0x7, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x24}}, 0x4000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=r4, @ANYBLOB], 0x14}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x6, 0x200000006c832, 0xffffffffffffffff, 0x3000) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000001780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a14000000060a010800000000000000000300000a54000000020a01010000000000000000030000000900010073797a30000000000c000440000000000000000108000240000000010900010073797a300000000008000240000000010c0004400000000000000002140000001100010000000000000000000100000a64ea1bfe8486242ca7393e6acfc20b497b1ec5761e482c0100000080000000a024b89a6d790db337327647d47e13b2f97a7bff9ba8f0a87dc826a0ba3c938e0c7704e8a9d5781dc9916bf51deef790f52a579f357cd91abf6002bedd"], 0x90}, 0x1, 0x0, 0x0, 0x15}, 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r5, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.406656621s ago: executing program 5 (id=596): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x118) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000"], 0x1c}}, 0x4048800) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4b8d}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x2f0, 0x100000c, 0x148, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x1000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "3a2a8fa7d4b22c81086c268084a9c7223d88d322ef00"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0xfe}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff000000, 0xffffff00, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21, 0x0, 0x28}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@set4={{0x50}, {{}, {{0x44}, 0x5a}, {{0x2000004}, 0xa}, 0x3}}, @common=@icmp={{0x28}, {0x12, "be45"}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xd, 0xa1, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)}, &(0x7f0000000440)=0x10) getpeername$inet6(r5, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, 0x0, 0x0) 2.296983564s ago: executing program 4 (id=597): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='dummy_udc.0', 0xb) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000a00)) read(0xffffffffffffffff, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) nanosleep(&(0x7f0000000900)={0x1}, 0x0) 2.095440759s ago: executing program 5 (id=598): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) socket(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x43861, &(0x7f0000000500)={[{@nobarrier}, {@oldalloc}, {@barrier}]}, 0x0, 0x53b, &(0x7f0000000780)="$eJzs3e9rJGcdAPDvTLJ3ubvU5FTkLNgWW7kreruXxrZRpK0g6puCWt+fMdkL4TbZI7upl1A0xT9AEFFB3/tG8A8QSsF/QISCvhcVReSqL/VGZmdW82M3u5fuZe82nw9M9nnm1/f7DNnZ+cUzAZxZz0TEaxExFRHPR8RcOT4th5t5Za+Y7/17b63kQxJZ9sY/kkjKcd115fXpiLhULBIzEfGNr0R8Ozkat7Wze3u50ahvlfVae+NOrbWze319Y3mtvlbfXFxceGnp5aUXl25kpWLGvZO1cz4iXvnSX378g198+ZV3PvOdP97827Xv5ml94WNF3hGxcrI1H69Yd6WzLbrybbT1MIKNSd6eytS4swAAYBj5Mf6HI+KTneP/uZjqHM0BAAAAkyR7dTb+nURkD+7ySRYCAAAATl8aEbORpNXyWYDZSNNqtXiG96NxMW00W+1P32pub67m0yLmo5LeWm/Ub0TE+aKe5PWF8hnbbv2FQ/XFiLgcET+au9CpV1eajdVxX/wAAACAM+LS0wfP//81l+bl8+POCwAAABix+b4VAAAAYFI45QcAAIDJ5/wfAAAAJtrXXn89H7Lue7xX39zZvt188/pqvXW7urG9Ul1pbt2prjWba50++zYGra/RbN75bGxu36216612rbWze3Ojub3Zvrl+4BXYAAAAwCm6/PS7f0giYu/zFzpDlP0A9nDudDMDHil/HncCwChNjTsBYGymx50AMDaVgXPYQ8CkSwZMP/rwTnGtMH77cPIBAABG7+rHj97/797oH3xtAHic9XnWBwCYYO7uwdlVOekTgFdGnQkwLh8qPs73m963844+9/9/vq9cXGPIshMnBwAAjMRsZ0jSanmcPhtpWq1GPNF5LUAlubXeqN8ozw9+P1c5n9cXOksmA58ZBgAAAAAAAAAAAAAAAAAAAAAAAAAKWZZENthUZ1YAAADgsRSR/jXp9OYfcXXuudmDVwcOvfXrZ2/85O5yu721EHHuq8Vbvc5FRPun5fgXMq8EAAAAgEdAcZ5efi6MOxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJs37995a6Q6nGffvX4yI+V7xp2Om8zkTlYi4+M8kpvctl0TE1Aji770dEVd6xU/ifpZl82UWveJfeMjx5zubpnf8NCIujSA+nGXv5vuf13p9/9J4pvPZ+/s3XQ4fVP/9X/q//d9Un/3PE4fq/Tz53q9qfeO/HfHkdO/9Tzd+UsQ/ECKvPDtkG7/1zd3dnhP2rbJX/P2xau2NO7XWzu719Y3ltfpafXNxceGlpZeXXly6Ubu13qiXf3uG+eEnfn3/uPZf7BN//mD7j2z/54ZqfRb/ee/uvY8UlUqv+Nee7f37e6VP/LT87ftUWc6nX+2W94ryfk/98ndPHdf+1T7tnxnQ/mtDtT8+9/zXv/+nnlOObA0A4DS0dnZvLzca9a1jCjNDzHPKhVcfjTRGWIhHI41xFbLvFf+PD7TU/ezQmAdbfHAh+yCLT8cI0jh35Hs6FSddYRKxl69ryH9IAABgwvz/oP+4O0gAAAAAAAAAAAAAAAAAAADAwzRE52Hv/CaOdDk2ExFD9z12OObeeJoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCs/wYAAP//rDfMnw==") timer_create(0xfffffffffffffff4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) close(r0) 1.334518427s ago: executing program 4 (id=599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x20000000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) setpgid(0x0, 0x0) execve(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 996.898485ms ago: executing program 5 (id=600): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='rd_pages=8\n', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000001200)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0xffffffffffffff9c, &(0x7f0000001300)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/d0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001500)='1\n', 0x2) close(r2) 996.554065ms ago: executing program 1 (id=601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) getpgid(r0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 278.431953ms ago: executing program 3 (id=602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks']) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 0s ago: executing program 4 (id=603): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000900)={0x2, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xe, 0x2, 0x9, 0x4, 0x5, 0x8, 0xc, 0x4, 0x7, 0x9, 0x8, 0x4, 0x8, 0x80000000, 0xffffffffffbffffa, 0x5, 0x7, 0xa, 0xffffffffffffffff, 0x6}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x30, 0x20, 0x301, 0x70bd27, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x3}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_to_bridge\x00'}]}, 0x30}}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. [ 62.666693][ T4174] cgroup: Unknown subsys name 'net' [ 62.795915][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.337147][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.178109][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 66.278404][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 66.350829][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 66.361914][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.369020][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.377577][ T4187] device bridge_slave_0 entered promiscuous mode [ 66.403440][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 66.417887][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.425266][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.433361][ T4187] device bridge_slave_1 entered promiscuous mode [ 66.501435][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.518340][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.533128][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.541021][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.548866][ T4190] device bridge_slave_0 entered promiscuous mode [ 66.561276][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.568363][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.576895][ T4190] device bridge_slave_1 entered promiscuous mode [ 66.600494][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 66.644932][ T4187] team0: Port device team_slave_0 added [ 66.669222][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.686582][ T4187] team0: Port device team_slave_1 added [ 66.692831][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.700534][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.708804][ T4189] device bridge_slave_0 entered promiscuous mode [ 66.727007][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.734409][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.742799][ T4188] device bridge_slave_0 entered promiscuous mode [ 66.752055][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.774230][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.781896][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.790361][ T4189] device bridge_slave_1 entered promiscuous mode [ 66.806305][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.813546][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.821828][ T4188] device bridge_slave_1 entered promiscuous mode [ 66.854879][ T4190] team0: Port device team_slave_0 added [ 66.869339][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.876334][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.902291][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.927744][ T4190] team0: Port device team_slave_1 added [ 66.935783][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.945595][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.952850][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.978966][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.992327][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.014311][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.021575][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.029821][ T4199] device bridge_slave_0 entered promiscuous mode [ 67.039038][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.054262][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.083168][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.090430][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.098238][ T4199] device bridge_slave_1 entered promiscuous mode [ 67.121285][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.128261][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.154519][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.188397][ T4189] team0: Port device team_slave_0 added [ 67.195169][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.202666][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.228887][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.243130][ T4188] team0: Port device team_slave_0 added [ 67.258552][ T4187] device hsr_slave_0 entered promiscuous mode [ 67.265799][ T4187] device hsr_slave_1 entered promiscuous mode [ 67.288954][ T4189] team0: Port device team_slave_1 added [ 67.300399][ T4188] team0: Port device team_slave_1 added [ 67.308355][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.321130][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.392724][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.400198][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.426793][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.445197][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.452300][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.478356][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.496881][ T4199] team0: Port device team_slave_0 added [ 67.506711][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.513995][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.540854][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.555354][ T4190] device hsr_slave_0 entered promiscuous mode [ 67.562542][ T4190] device hsr_slave_1 entered promiscuous mode [ 67.570966][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.579662][ T4190] Cannot create hsr debugfs directory [ 67.586054][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.593599][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.623955][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.638074][ T4199] team0: Port device team_slave_1 added [ 67.706982][ T4188] device hsr_slave_0 entered promiscuous mode [ 67.714419][ T4188] device hsr_slave_1 entered promiscuous mode [ 67.722069][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.730155][ T4188] Cannot create hsr debugfs directory [ 67.748303][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.755495][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.781789][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.814383][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.821451][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.847655][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.899909][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 67.906592][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 67.917462][ T4189] device hsr_slave_0 entered promiscuous mode [ 67.924649][ T4189] device hsr_slave_1 entered promiscuous mode [ 67.931670][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.939611][ T4189] Cannot create hsr debugfs directory [ 67.979355][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 67.980712][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 67.985688][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 68.018888][ T4199] device hsr_slave_0 entered promiscuous mode [ 68.026169][ T4199] device hsr_slave_1 entered promiscuous mode [ 68.032958][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.040674][ T4199] Cannot create hsr debugfs directory [ 68.235078][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.255095][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.264998][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.278943][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.342351][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.354765][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.369674][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.380447][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.436122][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.461470][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.471390][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.486325][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.553650][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.564264][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.575057][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.597833][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.606754][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.650387][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.673298][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.684590][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.694642][ T4199] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.711658][ T4199] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.724443][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.732614][ T4199] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.746553][ T4199] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.782350][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.791450][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.801082][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.808356][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.817383][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.828417][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.837293][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.844438][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.853482][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.861791][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.870646][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.883970][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.898858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.908177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.917535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.926921][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.934055][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.944723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.953765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.962558][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.969663][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.002362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.010445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.022726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.040934][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.067928][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.077686][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.087028][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.097555][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.106680][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.115620][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.139915][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.153891][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.163029][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.172645][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.182272][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.190397][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.198749][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.213155][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.222296][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.231808][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.243916][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.252709][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.275529][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.295706][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.306548][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.320512][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.331095][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.340438][ T1457] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.347532][ T1457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.356725][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.365472][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.377380][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.386212][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.395060][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.404641][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.413467][ T1457] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.420581][ T1457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.446179][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.462736][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.478051][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.490720][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.498915][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.517307][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.533955][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.548289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.587475][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.597850][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.612800][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.630008][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.646935][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.654094][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.670500][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.685374][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.695230][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.711220][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.725493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.734601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.744391][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.751517][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.764545][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.772976][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.798904][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.808816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.819178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.827731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.838437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.847747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.864956][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.874287][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.890883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.898406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.911896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.925598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.936845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.952602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.964198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.973672][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.980740][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 69.981493][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 69.986825][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.004709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.013231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.028642][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.037782][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.046549][ T1457] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.053720][ T1457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.062114][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.062703][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 70.077453][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 70.083870][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 70.107218][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.118071][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.141746][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.157374][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.166223][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.196357][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.206929][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.220596][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.234790][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.244085][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.262208][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.304200][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.322420][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.332701][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.343004][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.354058][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.363696][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.372980][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.389964][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.398474][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.407549][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.420221][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.457708][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.468043][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.477696][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.531678][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.544090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.564495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.582350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.597354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.641716][ T4187] device veth0_vlan entered promiscuous mode [ 70.656965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.665680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.674788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.685370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.706958][ T4190] device veth0_vlan entered promiscuous mode [ 70.725294][ T4187] device veth1_vlan entered promiscuous mode [ 70.760237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.768746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.777547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.793951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.804606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.812879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.821191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.834205][ T4190] device veth1_vlan entered promiscuous mode [ 70.852781][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.883735][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.892751][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.902852][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.911377][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.921166][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.937069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.946281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.962976][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.976242][ T4187] device veth0_macvtap entered promiscuous mode [ 71.003111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.020765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.035725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.064260][ T4187] device veth1_macvtap entered promiscuous mode [ 71.082578][ T4190] device veth0_macvtap entered promiscuous mode [ 71.091774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.101649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.111432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.121356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.148509][ T4189] device veth0_vlan entered promiscuous mode [ 71.162906][ T4190] device veth1_macvtap entered promiscuous mode [ 71.171582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.180984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.189793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.198463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.207608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.239789][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.251074][ T4189] device veth1_vlan entered promiscuous mode [ 71.261644][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.273060][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.279763][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.291316][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.300778][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.312494][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.322354][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.331977][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.343352][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.353133][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.363338][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.372960][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.386389][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.397466][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.409624][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.430396][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.441297][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.453648][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.468053][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.477913][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.487439][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.496560][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.510733][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.519845][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.528879][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.538448][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.578198][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.587849][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.602163][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.610652][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.619396][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.627440][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.635645][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.643938][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.655081][ T4199] device veth0_vlan entered promiscuous mode [ 71.663766][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.673585][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.682690][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.691661][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.710879][ T4188] device veth0_vlan entered promiscuous mode [ 71.765914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.775267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.805079][ T4199] device veth1_vlan entered promiscuous mode [ 71.818778][ T4188] device veth1_vlan entered promiscuous mode [ 71.845925][ T4189] device veth0_macvtap entered promiscuous mode [ 71.902415][ T4189] device veth1_macvtap entered promiscuous mode [ 71.914695][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.934925][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.949110][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.957251][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.966340][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.976638][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.985704][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.996159][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.004331][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.012671][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.021994][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.053071][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.064283][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 72.070760][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 72.076855][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.087232][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.097989][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.110988][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.125016][ T4188] device veth0_macvtap entered promiscuous mode [ 72.139647][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 72.146345][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.147705][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 72.162822][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.172254][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.179613][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 72.190672][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.199429][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.213455][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.224078][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.239039][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.243979][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.257073][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.267973][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.279413][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.292330][ T4199] device veth0_macvtap entered promiscuous mode [ 72.309020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.317587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.326932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.337268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.352180][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.361064][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.370415][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.381433][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.392914][ T4188] device veth1_macvtap entered promiscuous mode [ 72.411037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.422705][ T4199] device veth1_macvtap entered promiscuous mode [ 72.439654][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.447862][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.494377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.515645][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.528039][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.538688][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.551353][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.561987][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.573430][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.585296][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.596867][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.611293][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.622435][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.634596][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.645168][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.655901][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.668258][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.691424][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.717525][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.729991][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.741778][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.752324][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.763104][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.773550][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.785446][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.798440][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.809724][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.810198][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.826756][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.833758][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.843373][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.852880][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.862662][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.871802][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.881423][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.897145][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.906123][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.915518][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.924990][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.987968][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.005384][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.016741][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.028373][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.040615][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.051229][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.063481][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.077594][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.096439][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.142419][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.160159][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.189960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.209588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.235535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.248812][ T4199] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.273199][ T4199] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.282142][ T4199] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.291250][ T4199] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.362054][ T4270] device syzkaller0 entered promiscuous mode [ 73.382279][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.400461][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.458364][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.714963][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.755991][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.140406][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 74.157000][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 74.235440][ T2305] Bluetooth: hci4: command 0x0419 tx timeout [ 74.245991][ T2305] Bluetooth: hci3: command 0x0419 tx timeout [ 74.372459][ T2305] Bluetooth: hci0: command 0x0419 tx timeout [ 74.414900][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.507963][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.522155][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.547767][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.668251][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.696059][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.409077][ C1] sched: RT throttling activated [ 76.443198][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.410569][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.418547][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.601514][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.610063][ T4307] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.849092][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 79.869095][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.889098][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.909092][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.929100][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.939100][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.949094][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.959092][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.969097][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 79.999104][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 80.149930][ T4336] loop3: detected capacity change from 0 to 2048 [ 80.191805][ T4336] ======================================================= [ 80.191805][ T4336] WARNING: The mand mount option has been deprecated and [ 80.191805][ T4336] and is ignored by this kernel. Remove the mand [ 80.191805][ T4336] option from the mount to silence this warning. [ 80.191805][ T4336] ======================================================= [ 80.275867][ T4337] device syzkaller0 entered promiscuous mode [ 80.339652][ T4341] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.697328][ T4348] tipc: Started in network mode [ 81.720175][ T4336] syz.3.16 (4336) used greatest stack depth: 19440 bytes left [ 81.742956][ T4348] tipc: Node identity b258ceb7b4f7, cluster identity 4711 [ 81.750941][ T4348] tipc: Enabled bearer , priority 0 [ 81.794497][ T4343] device syzkaller0 entered promiscuous mode [ 81.821339][ T4353] loop4: detected capacity change from 0 to 256 [ 81.855164][ T4355] device syzkaller0 entered promiscuous mode [ 81.940551][ T4343] tipc: Resetting bearer [ 82.044351][ T4340] tipc: Resetting bearer [ 82.067028][ T4340] tipc: Disabling bearer [ 83.045613][ T4368] device syzkaller0 entered promiscuous mode [ 86.354949][ T4393] loop3: detected capacity change from 0 to 512 [ 87.404462][ T7] cfg80211: failed to load regulatory.db [ 88.348288][ T4414] tipc: Started in network mode [ 88.354474][ T4414] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 88.363431][ T4414] tipc: Enabled bearer , priority 4 [ 89.661423][ T4297] tipc: Node number set to 8432298 [ 89.863304][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.902007][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.938672][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.423576][ T4406] device bridge_slave_0 left promiscuous mode [ 91.980142][ T4406] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.821224][ T4406] device bridge_slave_1 left promiscuous mode [ 92.963953][ T4406] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.327061][ T4406] bond0: (slave bond_slave_0): Releasing backup interface [ 93.621618][ T4406] bond0: (slave bond_slave_1): Releasing backup interface [ 93.746641][ T4406] team0: Port device team_slave_0 removed [ 93.912614][ T4406] team0: Port device team_slave_1 removed [ 93.929891][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.937406][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.947943][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.960710][ T4406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.064391][ T4469] tipc: Started in network mode [ 94.072901][ T4469] tipc: Node identity 9a35a7083462, cluster identity 4711 [ 94.086334][ T4469] tipc: Enabled bearer , priority 0 [ 94.150578][ T4465] tipc: Resetting bearer [ 94.197583][ T4476] device syzkaller0 entered promiscuous mode [ 94.206773][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 94.225715][ T4480] device syzkaller0 entered promiscuous mode [ 94.272780][ T4464] tipc: Resetting bearer [ 94.305343][ T4486] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.342235][ T4464] tipc: Disabling bearer [ 95.208221][ T4498] netlink: 'syz.0.55': attribute type 10 has an invalid length. [ 95.855641][ T4498] team0: Device veth1_vlan failed to register rx_handler [ 96.997664][ T4488] syz.2.50 (4488) used greatest stack depth: 18640 bytes left [ 97.133269][ T4523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.63'. [ 97.274477][ T4523] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 97.324747][ T4523] [U] J"—E:ÀÆ" [ 98.030488][ T4536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.64'. [ 98.166329][ T4540] x_tables: ip_tables: osf match: only valid for protocol 6 [ 99.881345][ T4545] loop1: detected capacity change from 0 to 2048 [ 99.912442][ T4552] tipc: Started in network mode [ 99.965834][ T4552] tipc: Node identity 4, cluster identity 4711 [ 100.025356][ T4552] tipc: Node number set to 4 [ 100.078793][ T4545] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 100.110448][ T4555] capability: warning: `syz.3.70' uses deprecated v2 capabilities in a way that may be insecure [ 100.149526][ T4545] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 100.181956][ T4545] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.888316][ T4583] loop4: detected capacity change from 0 to 512 [ 102.918656][ T4584] loop0: detected capacity change from 0 to 256 [ 103.121289][ T4591] netlink: 292 bytes leftover after parsing attributes in process `syz.3.80'. [ 103.305562][ T4583] EXT4-fs (loop4): Test dummy encryption mode enabled [ 103.376471][ T4597] netlink: 'syz.0.79': attribute type 2 has an invalid length. [ 103.716333][ T4583] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.77: inode has both inline data and extents flags [ 103.887729][ T4583] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.77: couldn't read orphan inode 15 (err -117) [ 104.501827][ T4583] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 104.918571][ T4591] Set syz1 is full, maxelem 6117 reached [ 105.361038][ T4614] ODEBUG: Out of memory. ODEBUG disabled [ 106.021824][ T4583] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 108.008460][ T4638] device syzkaller0 entered promiscuous mode [ 109.956654][ T4653] xt_HMARK: spi-set and port-set can't be combined [ 111.022694][ T4666] netlink: 'syz.1.96': attribute type 1 has an invalid length. [ 111.243172][ T4666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.301664][ T4677] loop4: detected capacity change from 0 to 512 [ 111.335978][ T4672] device macvlan2 entered promiscuous mode [ 111.385350][ T4672] device bond1 entered promiscuous mode [ 111.397956][ T4672] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 111.410018][ T4672] team0: Port device macvlan2 added [ 111.418922][ T4677] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 111.505904][ T4677] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.105134][ T4699] loop3: detected capacity change from 0 to 512 [ 114.198948][ T4701] Zero length message leads to an empty skb [ 114.265602][ T4699] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.105: missing EA_INODE flag [ 114.372240][ T4699] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.105: error while reading EA inode 12 err=-117 [ 114.390125][ T4706] tc action pedit unable to extract header offset for header type (0x4) [ 114.398836][ T4706] tc action pedit unable to extract header offset for header type (0x4) [ 114.407246][ T4706] tc action pedit unable to extract header offset for header type (0x4) [ 114.415637][ T4706] tc action pedit unable to extract header offset for header type (0x4) [ 114.424032][ T4706] tc action pedit unable to extract header offset for header type (0x4) [ 114.432446][ T4706] tc action pedit unable to extract header offset for header type (0x4) [ 114.440847][ T4706] tc action pedit unable to extract header offset for header type (0x4) [ 114.449246][ T4706] tc action pedit unable to extract header offset for header type (0x4) [ 114.457646][ T4706] tc action pedit unable to extract header offset for header type (0x4) [ 114.466039][ T4706] tc action pedit unable to extract header offset for header type (0x4) [ 114.474453][ T4706] 0: reclassify loop, rule prio 0, protocol 800 [ 114.581197][ T4699] EXT4-fs (loop3): 1 orphan inode deleted [ 114.587313][ T4699] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 118.002170][ T4741] device syzkaller0 entered promiscuous mode [ 118.017263][ T4741] tipc: Enabled bearer , priority 0 [ 118.065492][ T4741] tipc: Resetting bearer [ 118.163450][ T4746] xt_bpf: check failed: parse error [ 118.197141][ T4739] tipc: Resetting bearer [ 118.228322][ T4739] tipc: Disabling bearer [ 118.438909][ T4753] netlink: 'syz.3.113': attribute type 2 has an invalid length. [ 119.296264][ T4758] loop1: detected capacity change from 0 to 256 [ 120.491989][ T4751] loop0: detected capacity change from 0 to 4096 [ 120.517877][ T4758] FAT-fs (loop1): error, clusters badly computed (0 != 128) [ 120.547384][ T4751] EXT4-fs (loop0): Test dummy encryption mode enabled [ 120.718458][ T4758] FAT-fs (loop1): error, clusters badly computed (1 != 129) [ 120.726941][ T4758] FAT-fs (loop1): error, clusters badly computed (2 != 130) [ 120.734604][ T4758] FAT-fs (loop1): error, clusters badly computed (3 != 131) [ 120.748178][ T4758] FAT-fs (loop1): error, clusters badly computed (4 != 132) [ 120.755948][ T4758] FAT-fs (loop1): error, clusters badly computed (5 != 133) [ 120.815493][ T4751] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback. [ 121.809665][ T4785] device syzkaller0 entered promiscuous mode [ 123.944501][ T4812] loop3: detected capacity change from 0 to 512 [ 124.021894][ T4812] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 125.440336][ T4812] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 125.959358][ T4812] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.205932][ T4839] process 'syz.2.139' launched '/dev/fd/6' with NULL argv: empty string added [ 129.011109][ T4845] netlink: 16 bytes leftover after parsing attributes in process `syz.4.143'. [ 129.076707][ T4856] netlink: 'syz.2.145': attribute type 9 has an invalid length. [ 129.084913][ T4856] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.145'. [ 130.122355][ T4860] netlink: 288 bytes leftover after parsing attributes in process `syz.2.148'. [ 130.292409][ T4866] netlink: 'syz.4.149': attribute type 11 has an invalid length. [ 132.477611][ T4887] Cannot find del_set index 0 as target [ 132.561239][ T4886] device veth0 entered promiscuous mode [ 133.079322][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.086119][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.214089][ T4885] device veth0 left promiscuous mode [ 133.776065][ T4896] Cannot find del_set index 0 as target [ 136.684713][ T4898] Invalid ELF header magic: != ELF [ 137.862258][ T4942] loop3: detected capacity change from 0 to 512 [ 138.073911][ T4942] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 138.087139][ T4942] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.236862][ T4942] EXT4-fs (loop3): 1 truncate cleaned up [ 138.242758][ T4942] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 141.552237][ T4993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 141.572852][ T4993] device dummy0 entered promiscuous mode [ 141.584826][ T4993] device macvtap1 entered promiscuous mode [ 142.197431][ T5008] UBIFS error (pid: 5008): cannot open "./file0", error -22 [ 142.231481][ T5009] using random self ethernet address [ 142.272382][ T5009] using random host ethernet address [ 144.178305][ T5009] usb0: HOST MAC de:6f:fa:fb:89:5e [ 144.184146][ T5009] usb0: MAC ba:eb:b9:a0:ab:6b [ 144.513510][ T5039] device syzkaller0 entered promiscuous mode [ 145.059186][ T4297] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 145.419701][ T4297] usb 1-1: Dual-Role OTG device on HNP port [ 145.551308][ T4297] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15 [ 145.905719][ T4297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.841324][ T4297] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, de:6f:fa:fb:89:5e [ 148.861309][ T5095] tipc: Enabling of bearer rejected, failed to enable media [ 149.574782][ T5125] syz.2.204 sent an empty control message without MSG_MORE. [ 150.315124][ T5132] loop0: detected capacity change from 0 to 512 [ 150.362159][ T5131] 0: reclassify loop, rule prio 0, protocol 700 [ 150.452963][ T5132] EXT4-fs (loop0): Ignoring removed bh option [ 150.546227][ T5138] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 150.578747][ T5140] MPTCP: addr_signal error, add_addr=1, echo=0 [ 150.583991][ T5140] MPTCP: addr_signal error, rm_addr=1 [ 150.798845][ T5132] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.207: corrupted in-inode xattr [ 150.818487][ T5132] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.207: couldn't read orphan inode 15 (err -117) [ 150.834494][ T5132] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 153.177885][ T5156] device syzkaller0 entered promiscuous mode [ 153.241652][ T5176] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.251818][ T5176] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.260794][ T5176] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.269692][ T5176] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.409083][ T5176] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 157.982121][ T5236] tipc: Enabling of bearer rejected, failed to enable media [ 158.660631][ T5243] device syzkaller0 entered promiscuous mode [ 161.108183][ T5277] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 161.914727][ T5287] device syzkaller0 entered promiscuous mode [ 162.832785][ T5299] loop3: detected capacity change from 0 to 256 [ 162.888981][ T5299] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 169.136234][ T5381] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 169.146776][ T5381] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 173.471810][ T5414] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 176.504816][ T5419] loop3: detected capacity change from 0 to 512 [ 176.851841][ T5419] EXT4-fs (loop3): inodes count not valid: 40 vs 32 [ 177.339027][ T5458] Cannot find add_set index 4 as target [ 179.615155][ T5498] netlink: 'syz.0.289': attribute type 11 has an invalid length. [ 180.441774][ T5492] loop2: detected capacity change from 0 to 128 [ 181.068837][ T5502] loop0: detected capacity change from 0 to 512 [ 181.135186][ T5502] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 181.455238][ T5502] EXT4-fs (loop0): 1 truncate cleaned up [ 181.461817][ T5502] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 182.099461][ T5509] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 184.819614][ T5543] device syzkaller0 entered promiscuous mode [ 185.048902][ T5549] Cannot find add_set index 4 as target [ 185.914948][ T5555] loop2: detected capacity change from 0 to 256 [ 185.982496][ T5555] FAT-fs (loop2): "posix" option is obsolete, not supported now [ 189.842410][ T5606] loop0: detected capacity change from 0 to 128 [ 190.195176][ T5616] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 191.201991][ T4265] Bluetooth: hci3: command 0x0406 tx timeout [ 191.208147][ T4265] Bluetooth: hci0: command 0x0406 tx timeout [ 191.217856][ T4265] Bluetooth: hci1: command 0x0406 tx timeout [ 191.224554][ T4265] Bluetooth: hci4: command 0x0406 tx timeout [ 191.251259][ T4265] Bluetooth: hci2: command 0x0406 tx timeout [ 194.171914][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.178271][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.954982][ T5680] Cannot find add_set index 4 as target [ 198.953021][ T5724] x_tables: ip_tables: osf match: only valid for protocol 6 [ 200.418505][ T5731] tc action pedit 'at' offset 2 out of bounds [ 200.424727][ T5731] tc action pedit 'at' offset 2 out of bounds [ 200.430865][ T5731] tc action pedit 'at' offset 2 out of bounds [ 200.436957][ T5731] tc action pedit 'at' offset 2 out of bounds [ 200.443067][ T5731] tc action pedit 'at' offset 2 out of bounds [ 200.449180][ T5731] tc action pedit 'at' offset 2 out of bounds [ 200.455270][ T5731] tc action pedit 'at' offset 2 out of bounds [ 200.461409][ T5731] tc action pedit 'at' offset 2 out of bounds [ 200.467496][ T5731] tc action pedit 'at' offset 2 out of bounds [ 200.473613][ T5731] tc action pedit 'at' offset 2 out of bounds [ 200.479798][ T5731] TC_ACT_REPEAT abuse ? [ 201.252892][ T5748] tipc: Enabled bearer , priority 4 [ 202.632851][ T4278] tipc: Node number set to 2924979976 [ 204.822921][ T5787] loop0: detected capacity change from 0 to 2048 [ 204.920264][ T5787] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.950722][ T5812] tipc: Enabling of bearer rejected, failed to enable media [ 207.622387][ T5819] tipc: Started in network mode [ 207.627324][ T5819] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 207.634724][ T5819] tipc: Enabled bearer , priority 4 [ 208.820615][ T4235] tipc: Node number set to 8432298 [ 210.163216][ T5864] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 210.191475][ T1108] libceph: connect (1)[c::]:6789 error -101 [ 210.260518][ T1108] libceph: mon0 (1)[c::]:6789 connect error [ 211.062028][ T5857] ceph: No mds server is up or the cluster is laggy [ 211.073524][ T4265] libceph: connect (1)[c::]:6789 error -101 [ 211.265539][ T4265] libceph: mon0 (1)[c::]:6789 connect error [ 212.077520][ T4265] libceph: connect (1)[c::]:6789 error -101 [ 212.158051][ T4265] libceph: mon0 (1)[c::]:6789 connect error [ 213.266346][ T5888] loop2: detected capacity change from 0 to 512 [ 213.277869][ T5891] loop3: detected capacity change from 0 to 64 [ 215.228347][ T5888] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.363: bg 0: block 5: invalid block bitmap [ 215.335073][ T5888] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 215.375228][ T5888] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.363: invalid indirect mapped block 3 (level 2) [ 215.488038][ T5888] EXT4-fs (loop2): 1 orphan inode deleted [ 215.513727][ T5888] EXT4-fs (loop2): 1 truncate cleaned up [ 215.536108][ T5888] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: writeback. [ 222.970076][ T5965] xt_cgroup: path and classid specified [ 224.231557][ T5973] loop2: detected capacity change from 0 to 64 [ 225.856345][ T5982] loop3: detected capacity change from 0 to 2048 [ 225.905429][ T5982] NILFS (loop3): unrecognized mount option "ÈÍÜÊûä¬V°l [ 225.905429][ T5982] ´šnorecovery" [ 233.527357][ T4265] Bluetooth: hci5: command 0x0409 tx timeout [ 234.227552][ T5908] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.236576][ T5908] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.247081][ T5908] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.256060][ T5908] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.403460][ T5967] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 234.413331][ T5967] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 234.422972][ T5967] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 236.053140][ T4231] Bluetooth: hci5: command 0x041b tx timeout [ 237.638905][ T6026] chnl_net:caif_netlink_parms(): no params data found [ 238.560096][ T1324] Bluetooth: hci5: command 0x040f tx timeout [ 238.871580][ T6070] tipc: Enabled bearer , priority 2 [ 240.338336][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.415124][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.424382][ T6026] device bridge_slave_0 entered promiscuous mode [ 240.477158][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.497302][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.508332][ T6026] device bridge_slave_1 entered promiscuous mode [ 240.539751][ T6026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.564701][ T6026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.962417][ T4231] Bluetooth: hci5: command 0x0419 tx timeout [ 242.203275][ T6026] team0: Port device team_slave_0 added [ 242.413469][ T6026] team0: Port device team_slave_1 added [ 242.535008][ T6111] loop3: detected capacity change from 0 to 256 [ 243.442191][ T6111] FAT-fs (loop3): Directory bread(block 64) failed [ 243.449352][ T6111] FAT-fs (loop3): Directory bread(block 65) failed [ 243.458301][ T6111] FAT-fs (loop3): Directory bread(block 66) failed [ 243.465248][ T6111] FAT-fs (loop3): Directory bread(block 67) failed [ 243.472370][ T6111] FAT-fs (loop3): Directory bread(block 68) failed [ 243.479205][ T6111] FAT-fs (loop3): Directory bread(block 69) failed [ 243.486803][ T6111] FAT-fs (loop3): Directory bread(block 70) failed [ 243.493766][ T6111] FAT-fs (loop3): Directory bread(block 71) failed [ 243.502055][ T6111] FAT-fs (loop3): Directory bread(block 72) failed [ 243.508874][ T6111] FAT-fs (loop3): Directory bread(block 73) failed [ 244.115620][ T6026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.127215][ T6026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.168299][ T6026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.181151][ T6026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.188135][ T6026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.762250][ T6126] syz.3.424 uses obsolete (PF_INET,SOCK_PACKET) [ 245.183505][ T6026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.442351][ T6026] device hsr_slave_0 entered promiscuous mode [ 246.256639][ T6026] device hsr_slave_1 entered promiscuous mode [ 246.267334][ T6026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.277817][ T6026] Cannot create hsr debugfs directory [ 248.791549][ T6026] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 249.464340][ T6026] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 249.490545][ T6026] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 249.506741][ T6026] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 249.967885][ T6026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.002769][ T6167] autofs4:pid:6167:autofs_fill_super: called with bogus options [ 250.022265][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.109485][ T6169] loop2: detected capacity change from 0 to 256 [ 250.150961][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.403259][ T6026] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.434966][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.448048][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.672288][ T4632] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.679454][ T4632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.735370][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.039620][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.063647][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.177183][ T4632] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.184372][ T4632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.076743][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.122058][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.149557][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.318946][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.328279][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.351482][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.594208][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.613596][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.719789][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.471436][ T6026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.543695][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.596314][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.998663][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.007408][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.020513][ T6026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.311505][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 255.485176][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.581330][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.593077][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.217625][ T6026] device veth0_vlan entered promiscuous mode [ 256.279254][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 256.326400][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 256.828825][ T6026] device veth1_vlan entered promiscuous mode [ 256.891084][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.018315][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.194647][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 257.264783][ T6026] device veth0_macvtap entered promiscuous mode [ 258.690478][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 258.707794][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.731638][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.487418][ T6026] device veth1_macvtap entered promiscuous mode [ 259.531662][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.549532][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.568341][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.579898][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.592151][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.603199][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.613746][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.625937][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.637476][ T6026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.644971][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.654485][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.668645][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.679536][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.690002][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.701885][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.713121][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.724571][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.735067][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.747057][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.759418][ T6026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.769729][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.778752][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.791339][ T6026] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.801020][ T6026] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.810939][ T6026] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.823108][ T6026] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.881571][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.893909][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.903188][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 259.926591][ T4632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.934588][ T4632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.944369][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 266.438883][ T6294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.463'. [ 266.689104][ T6307] futex_wake_op: syz.2.470 tries to shift op by 144; fix this program [ 266.719410][ T6307] loop2: detected capacity change from 0 to 128 [ 268.326983][ T26] audit: type=1326 audit(2000000127.890:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6313 comm="syz.3.473" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb88b8aae99 code=0x0 [ 268.525344][ T6326] loop2: detected capacity change from 0 to 1024 [ 268.541509][ T6326] EXT4-fs (loop2): Ignoring removed bh option [ 268.858209][ T6326] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,nolazytime,bh,init_itable,. Quota mode: none. [ 268.927816][ T6335] Invalid ELF header magic: != ELF [ 269.648303][ T6322] process '/newroot/99/file0' started with executable stack [ 270.048260][ T6346] ip6t_srh: unknown srh match flags 4000 [ 275.138500][ T6380] netlink: 'syz.1.490': attribute type 1 has an invalid length. [ 275.146408][ T6380] netlink: 'syz.1.490': attribute type 2 has an invalid length. [ 275.306353][ T6380] device bridge1 entered promiscuous mode [ 275.315478][ T6380] team0: Port device bridge1 added [ 276.571028][ T6395] [U]  [ 281.820261][ T6462] ip6t_srh: unknown srh match flags FF3F [ 282.226445][ T6466] autofs4:pid:6466:autofs_fill_super: called with bogus options [ 282.771685][ T6472] loop2: detected capacity change from 0 to 1024 [ 283.180685][ T6480] loop3: detected capacity change from 0 to 256 [ 283.446384][ T4204] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 283.821591][ T6472] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 283.942767][ T6472] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.120240][ T6556] netlink: 'syz.3.535': attribute type 21 has an invalid length. [ 290.128489][ T6556] netlink: 156 bytes leftover after parsing attributes in process `syz.3.535'. [ 292.598851][ T6577] loop3: detected capacity change from 0 to 256 [ 293.469153][ T6577] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 294.342988][ T6588] loop5: detected capacity change from 0 to 4096 [ 295.559629][ T6604] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.614701][ T6618] x_tables: ip_tables: osf match: only valid for protocol 6 [ 299.917442][ T6642] tmpfs: Unknown parameter 'fscontext' [ 308.420729][ T6701] loop5: detected capacity change from 0 to 128 [ 308.891268][ T4204] Bluetooth: Wrong link type (-22) [ 311.096331][ T6717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.578'. [ 312.693095][ T6739] Invalid ELF header magic: != ELF [ 313.719964][ T6742] overlayfs: failed to clone upperpath [ 315.649322][ T6758] hugetlbfs: syz.5.588 (6758): Using mlock ulimits for SHM_HUGETLB is deprecated [ 316.922276][ T6767] loop5: detected capacity change from 0 to 256 [ 316.990441][ T6767] FAT-fs (loop5): "posix" option is obsolete, not supported now [ 317.031323][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.037678][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.015110][ T6785] device syzkaller1 entered promiscuous mode [ 319.030332][ T6785] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 319.051436][ T6785] xt_CONNSECMARK: invalid mode: 254 [ 319.429200][ T6793] loop5: detected capacity change from 0 to 512 [ 320.385324][ T6803] autofs4:pid:6803:autofs_fill_super: called with bogus options [ 321.544537][ T6802] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 321.562313][ T6810] tmpfs: Bad value for 'nr_blocks' [ 321.636964][ T6802] [ 321.639350][ T6802] ====================================================== [ 321.646402][ T6802] WARNING: possible circular locking dependency detected [ 321.653448][ T6802] syzkaller #0 Not tainted [ 321.657887][ T6802] ------------------------------------------------------ [ 321.664919][ T6802] syz.5.600/6802 is trying to acquire lock: [ 321.670826][ T6802] ffff888145858b70 (&sb->s_type->i_mutex_key#25){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 321.682378][ T6802] [ 321.682378][ T6802] but task is already holding lock: [ 321.689759][ T6802] ffff888060aea520 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 321.698871][ T6802] [ 321.698871][ T6802] which lock already depends on the new lock. [ 321.698871][ T6802] [ 321.709294][ T6802] [ 321.709294][ T6802] the existing dependency chain (in reverse order) is: [ 321.718335][ T6802] [ 321.718335][ T6802] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 321.726020][ T6802] __mutex_lock_common+0x1e5/0x2400 [ 321.731781][ T6802] mutex_lock_nested+0x17/0x20 [ 321.737100][ T6802] tcm_set_name+0x26/0x90 [ 321.741970][ T6802] function_make+0x195/0x350 [ 321.747111][ T6802] configfs_mkdir+0x511/0x9e0 [ 321.752341][ T6802] vfs_mkdir+0x386/0x570 [ 321.757142][ T6802] do_mkdirat+0x1dd/0x5c0 [ 321.762025][ T6802] __x64_sys_mkdirat+0x85/0x90 [ 321.767343][ T6802] do_syscall_64+0x4c/0xa0 [ 321.772317][ T6802] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 321.778761][ T6802] [ 321.778761][ T6802] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 321.787050][ T6802] __mutex_lock_common+0x1e5/0x2400 [ 321.792834][ T6802] mutex_lock_nested+0x17/0x20 [ 321.798156][ T6802] configfs_rmdir+0x638/0x980 [ 321.803410][ T6802] vfs_rmdir+0x19d/0x410 [ 321.808230][ T6802] do_rmdir+0x27f/0x710 [ 321.812937][ T6802] __x64_sys_rmdir+0x45/0x50 [ 321.818074][ T6802] do_syscall_64+0x4c/0xa0 [ 321.823038][ T6802] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 321.829491][ T6802] [ 321.829491][ T6802] -> #0 (&sb->s_type->i_mutex_key#25){++++}-{3:3}: [ 321.838220][ T6802] __lock_acquire+0x2c66/0x7b50 [ 321.843652][ T6802] lock_acquire+0x19e/0x400 [ 321.848713][ T6802] down_write+0x38/0x60 [ 321.853422][ T6802] configfs_depend_item_unlocked+0x14f/0x430 [ 321.859959][ T6802] usbg_make_tpg+0x1f3/0x580 [ 321.865102][ T6802] target_fabric_make_tpg+0xa0/0x6d0 [ 321.870942][ T6802] configfs_mkdir+0x511/0x9e0 [ 321.876193][ T6802] vfs_mkdir+0x386/0x570 [ 321.880985][ T6802] do_mkdirat+0x1dd/0x5c0 [ 321.885872][ T6802] __x64_sys_mkdirat+0x85/0x90 [ 321.891273][ T6802] do_syscall_64+0x4c/0xa0 [ 321.896243][ T6802] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 321.902686][ T6802] [ 321.902686][ T6802] other info that might help us debug this: [ 321.902686][ T6802] [ 321.912929][ T6802] Chain exists of: [ 321.912929][ T6802] &sb->s_type->i_mutex_key#25 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 321.912929][ T6802] [ 321.927844][ T6802] Possible unsafe locking scenario: [ 321.927844][ T6802] [ 321.935325][ T6802] CPU0 CPU1 [ 321.940715][ T6802] ---- ---- [ 321.946097][ T6802] lock(&opts->dep_lock); [ 321.950565][ T6802] lock(gadget_subsys.su_mutex); [ 321.958135][ T6802] lock(&opts->dep_lock); [ 321.965095][ T6802] lock(&sb->s_type->i_mutex_key#25); [ 321.970591][ T6802] [ 321.970591][ T6802] *** DEADLOCK *** [ 321.970591][ T6802] [ 321.978753][ T6802] 5 locks held by syz.5.600/6802: [ 321.983823][ T6802] #0: ffff88814615e460 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 321.993117][ T6802] #1: ffff88805e6473f0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 322.004004][ T6802] #2: ffffffff8cc23e70 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 322.013972][ T6802] #3: ffffffff8cf21328 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580 [ 322.023686][ T6802] #4: ffff888060aea520 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 322.033223][ T6802] [ 322.033223][ T6802] stack backtrace: [ 322.039143][ T6802] CPU: 1 PID: 6802 Comm: syz.5.600 Not tainted syzkaller #0 [ 322.046453][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 322.056551][ T6802] Call Trace: [ 322.059861][ T6802] [ 322.062818][ T6802] dump_stack_lvl+0x188/0x250 [ 322.067530][ T6802] ? load_image+0x410/0x410 [ 322.072069][ T6802] ? show_regs_print_info+0x20/0x20 [ 322.077314][ T6802] ? print_circular_bug+0x12b/0x1a0 [ 322.082552][ T6802] check_noncircular+0x296/0x330 [ 322.087523][ T6802] ? finish_task_switch+0x12f/0x650 [ 322.092770][ T6802] ? add_chain_block+0x9b0/0x9b0 [ 322.097736][ T6802] ? lockdep_lock+0xf1/0x1f0 [ 322.102364][ T6802] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 322.108390][ T6802] ? mark_lock+0x94/0x320 [ 322.112752][ T6802] ? _find_first_zero_bit+0xd1/0xf0 [ 322.117989][ T6802] __lock_acquire+0x2c66/0x7b50 [ 322.122882][ T6802] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 322.129076][ T6802] ? release_firmware_map_entry+0x190/0x190 [ 322.135005][ T6802] ? lock_acquire+0x208/0x400 [ 322.139724][ T6802] ? verify_lock_unused+0x140/0x140 [ 322.144953][ T6802] ? preempt_schedule_common+0xa5/0xd0 [ 322.150444][ T6802] ? preempt_schedule+0xbc/0xd0 [ 322.155438][ T6802] ? schedule_preempt_disabled+0x20/0x20 [ 322.161105][ T6802] ? __mutex_trylock_common+0x15c/0x260 [ 322.166685][ T6802] ? rcu_lock_release+0x20/0x20 [ 322.171564][ T6802] ? preempt_schedule_thunk+0x16/0x18 [ 322.176983][ T6802] lock_acquire+0x19e/0x400 [ 322.181522][ T6802] ? configfs_depend_item_unlocked+0x14f/0x430 [ 322.187724][ T6802] ? __might_sleep+0xf0/0xf0 [ 322.192348][ T6802] ? __kasan_kmalloc+0xc6/0xe0 [ 322.197144][ T6802] ? read_lock_is_recursive+0x10/0x10 [ 322.202555][ T6802] ? mutex_lock_io_nested+0x60/0x60 [ 322.207792][ T6802] down_write+0x38/0x60 [ 322.212006][ T6802] ? configfs_depend_item_unlocked+0x14f/0x430 [ 322.218197][ T6802] configfs_depend_item_unlocked+0x14f/0x430 [ 322.224233][ T6802] usbg_make_tpg+0x1f3/0x580 [ 322.228867][ T6802] ? mutex_lock_io_nested+0x60/0x60 [ 322.234097][ T6802] ? usbg_drop_tport+0x20/0x20 [ 322.238921][ T6802] ? vscnprintf+0x80/0x80 [ 322.243284][ T6802] target_fabric_make_tpg+0xa0/0x6d0 [ 322.248596][ T6802] ? target_fabric_release_wwn+0xa0/0xa0 [ 322.254260][ T6802] configfs_mkdir+0x511/0x9e0 [ 322.258965][ T6802] vfs_mkdir+0x386/0x570 [ 322.263241][ T6802] do_mkdirat+0x1dd/0x5c0 [ 322.267596][ T6802] ? vfs_mkdir+0x570/0x570 [ 322.272042][ T6802] __x64_sys_mkdirat+0x85/0x90 [ 322.276832][ T6802] do_syscall_64+0x4c/0xa0 [ 322.281274][ T6802] ? clear_bhb_loop+0x30/0x80 [ 322.285973][ T6802] ? clear_bhb_loop+0x30/0x80 [ 322.290675][ T6802] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 322.296613][ T6802] RIP: 0033:0x7fbcc2139e99 [ 322.301054][ T6802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.320683][ T6802] RSP: 002b:00007fbcc0392028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 322.329126][ T6802] RAX: ffffffffffffffda RBX: 00007fbcc23c1fa0 RCX: 00007fbcc2139e99 [ 322.337121][ T6802] RDX: 00000000000001ff RSI: 0000200000001000 RDI: ffffffffffffff9c [ 322.345125][ T6802] RBP: 00007fbcc21cfeaf R08: 0000000000000000 R09: 0000000000000000 [ 322.353127][ T6802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.361124][ T6802] R13: 00007fbcc23c2038 R14: 00007fbcc23c1fa0 R15: 00007ffc75a30448 [ 322.369129][ T6802]