last executing test programs: 52.718016271s ago: executing program 2 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x81, 0x800001000891}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') 47.161649934s ago: executing program 2 (id=13): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer], 0x0, 0x0, 0x0}) 44.142136226s ago: executing program 2 (id=22): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x400, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffeaf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x0, 0x7ffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3]}) syz_emit_vhci(&(0x7f0000003940)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0xe6}, {0x5, "6132c4022392fb53"}}}}, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000100), 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 43.991361939s ago: executing program 2 (id=24): mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x17f) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x1, 0x9) 43.852633123s ago: executing program 2 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x10000a0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r5, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x10, 0x3f2, 0x100, 0x70bd2b, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x20008001}, 0x40000) 41.741555493s ago: executing program 2 (id=28): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea5", 0x29) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006000000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x10, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xf29d}], 0x1a000, 0x40010102, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, 0x0, 0x0) 26.646134834s ago: executing program 32 (id=28): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea5", 0x29) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006000000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x10, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xf29d}], 0x1a000, 0x40010102, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, 0x0, 0x0) 23.071963449s ago: executing program 1 (id=73): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x80000100008b}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000340)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8840, 0x0) mlockall(0x2) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) process_vm_writev(r1, &(0x7f000001a480)=[{&(0x7f0000000100)=""/45, 0x2d}], 0x1, 0x0, 0x0, 0x0) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_UNLOCK(r4, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 21.325064241s ago: executing program 3 (id=75): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x132a}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000000c0)) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f00000010c0)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRES64, @ANYRES64, @ANYRES64, @ANYRESDEC, @ANYRESOCT=0x0, @ANYBLOB="96baa9bd293f32a4be21fdffc77440a9d9c7e16c6c51d63e8ba964b01e06c4ad80d5ba81bf754b2f63dd49ffac2f96d2be9ab12be13dc3bd59217be281d895795a047ce3258eb171bd1200000000000000a112eb61edbb22074fb2464c2c040aa73dc1cccff5291d669049a8e13b373c0960d91ad00e2765cf73b478067d073524b1515e0cf674b54ab1945a77534ca0c321c00bc82e1eec0d6ea55eab950800b5c12b71f10f76", @ANYRESOCT, @ANYRES16], 0x1, 0x1b7, &(0x7f0000000780)="$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") 20.295456725s ago: executing program 1 (id=76): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x804810, &(0x7f0000000480), 0x1, 0x3df, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x6, 0x11, r1, 0x0) capset(0x0, 0x0) 18.44001803s ago: executing program 4 (id=80): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048800}, 0x20000000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06400e08"], 0x9) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x402, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x1, 0x4002004c4, 0x0, 0x8000000000000004, 0xc595, 0x0, 0x1, 0x7, 0x1, 0xb3, 0x91], 0xeeee8000, 0x2010c3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.980361454s ago: executing program 1 (id=84): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x6) socket(0x840000000002, 0x3, 0xfa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7146, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 16.725084361s ago: executing program 0 (id=85): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) fsopen(0x0, 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x101400, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x100400c1, &(0x7f0000000200)={0x11, 0xf8, r6, 0x1, 0x87, 0x6, @broadcast}, 0x14) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x80, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000340)={'raw\x00', 0x0, [0xa00, 0x8, 0x400, 0x2, 0x3]}, 0x0) 13.716918112s ago: executing program 0 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x80000100008b}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000340)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8840, 0x0) mlockall(0x2) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) process_vm_writev(r1, &(0x7f000001a480)=[{&(0x7f0000000100)=""/45, 0x2d}], 0x1, 0x0, 0x0, 0x0) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_UNLOCK(r4, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 13.716544032s ago: executing program 1 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001008, 0xffffffffffffff9c, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x2200060, 0x0, 0x11, 0x0, &(0x7f0000000200)) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x280440e, &(0x7f0000000200)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}], [{@context={'context', 0x3d, 'staff_u'}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) mount$cgroup(0x0, 0x0, 0x0, 0x8082, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, 0x0, 0x0, 0x0) 13.716277043s ago: executing program 3 (id=88): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000240), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 13.682019973s ago: executing program 4 (id=89): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x1390, 0x1100, 0x12f8, 0xffffffff, 0x1100, 0x11a8, 0x12f8, 0x12f8, 0xffffffff, 0x12f8, 0x12f8, 0x5, 0x0, {[{{@ip={@local, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x1100, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0xfffffffe}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x6, 0x0, 0x4], 0x2}, {0x4, [0x2, 0x7, 0x5, 0x1, 0x1, 0x4], 0x5}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x8, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@rand_addr=0x64010101, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @local, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @dev={0xac, 0x14, 0x14, 0x33}, @broadcast, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13f0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x100084000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0xfe1d) 12.101081951s ago: executing program 4 (id=90): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2000003, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f6465636f6d706f7365008000000000000042000fc32c6e6f636172726965722c6e6f6465636e6d706f736500a580263e005a80c976898113cb9f4680642ce86dd3b5d3ba4a739e6654e4a1277ef2dd52ea98c5ea630da0c29cd73f8b9f4fd077e97f3ec1acc1ac9132611fb53a41b8fdb6b9"], 0x1, 0x62c, &(0x7f0000000680)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, 0x0, 0x18) 11.989360564s ago: executing program 3 (id=91): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x44998) openat(0xffffffffffffff9c, 0x0, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r6, &(0x7f0000000240)='functionfs', 0xa) read(r5, &(0x7f0000000100)=""/9, 0xb) mount(0x0, &(0x7f00000002c0)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x54}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 10.235274655s ago: executing program 3 (id=92): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af25, &(0x7f0000002d80)) 7.93709275s ago: executing program 1 (id=93): pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r2, 0xffffffffffffffff, 0x1) splice(r0, 0x0, r1, 0x0, 0x7151, 0x0) 6.492509985s ago: executing program 0 (id=94): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/meminfo\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 5.701760784s ago: executing program 4 (id=95): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f25, 0x5) splice(r2, 0x0, r1, 0x0, 0x8, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r4, 0x2004, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xea5bc50b6199d77e) 5.636784025s ago: executing program 3 (id=96): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) fsopen(0x0, 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x101400, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x100400c1, &(0x7f0000000200)={0x11, 0xf8, r6, 0x1, 0x87, 0x6, @broadcast}, 0x14) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x80, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000340)={'raw\x00', 0x0, [0xa00, 0x8, 0x400, 0x2, 0x3]}, 0x0) 3.515483256s ago: executing program 3 (id=97): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x7) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000440)='./config/usb_gadget/g1/functions/midi.usb0\x00', &(0x7f0000000540)='hugetlbfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi.usb0/in_ports/file0\x00', 0x401, 0x11) write(r1, &(0x7f0000000180)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='2\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='dummy_udc.0', 0xb) 2.679805306s ago: executing program 1 (id=98): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file2\x00', 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000e80)='.\x00', 0x555502, 0x0) 2.375884013s ago: executing program 0 (id=99): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1d, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x7}}, 0x0, @val={0x8c, 0x10, {0x283, "726712ea1b02", @short="acf28009ddef7a20"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) 1.957758633s ago: executing program 0 (id=100): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000240), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.822466846s ago: executing program 4 (id=101): setns(0xc9, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47", 0x13) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002f80), 0x0, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000001c0)={0x4, 0x1, 0x800, 0xd, 0x7b, "203c0020070000d588000000000700", 0x6, 0x1}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.66841105s ago: executing program 0 (id=102): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x22) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x21, 0x7ff, &(0x7f00000001c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x42, 0xc0) write(r0, &(0x7f0000000080)='4', 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = socket(0x28, 0x5, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x161) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') syz_clone3(&(0x7f0000000240)={0x400, 0x0, 0x0, 0x0, {0x38}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r3, &(0x7f00000005c0)={0x28, 0x0, 0xffffffff, @my=0x0}, 0xfe48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000900000000000000"], 0x48) r5 = socket(0x1, 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) readv(r6, &(0x7f0000000680)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100), &(0x7f0000000140)=@udp=r5, 0x1}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f00000001c0)={r4, 0x0, 0xa800, &(0x7f00000000c0)={@_ha_fsid={[0x88, 0x1]}, {0x4, 0x5, 0x4, 0x400}}, 0x3, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1b, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0d000310"], 0xf) 0s ago: executing program 4 (id=103): socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0xfffe, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}, 0x5}, 0x1c) r1 = dup2(r0, r0) sendmmsg$unix(r1, &(0x7f0000008380), 0x400000000000174, 0x4008890) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. [ 61.626475][ T4173] cgroup: Unknown subsys name 'net' [ 61.774530][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.245647][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.779716][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 64.808182][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 64.828762][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 64.915163][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 64.967976][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.975189][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.984030][ T4193] device bridge_slave_0 entered promiscuous mode [ 64.992738][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 65.025029][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.032257][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.040844][ T4193] device bridge_slave_1 entered promiscuous mode [ 65.062842][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.070123][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.077947][ T4187] device bridge_slave_0 entered promiscuous mode [ 65.114546][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.121794][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.129750][ T4188] device bridge_slave_0 entered promiscuous mode [ 65.137084][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.144917][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.153245][ T4187] device bridge_slave_1 entered promiscuous mode [ 65.162721][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.182304][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.189581][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.197829][ T4188] device bridge_slave_1 entered promiscuous mode [ 65.219857][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.273489][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.283653][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.291172][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.299182][ T4186] device bridge_slave_0 entered promiscuous mode [ 65.308067][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.320353][ T4193] team0: Port device team_slave_0 added [ 65.332189][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.341624][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.349668][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.357472][ T4186] device bridge_slave_1 entered promiscuous mode [ 65.365615][ T4193] team0: Port device team_slave_1 added [ 65.373237][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.407257][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.414600][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.422558][ T4194] device bridge_slave_0 entered promiscuous mode [ 65.454014][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.461267][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.469572][ T4194] device bridge_slave_1 entered promiscuous mode [ 65.504200][ T4188] team0: Port device team_slave_0 added [ 65.512845][ T4187] team0: Port device team_slave_0 added [ 65.521349][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.532385][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.543044][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.550527][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.576593][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.589296][ T4188] team0: Port device team_slave_1 added [ 65.595484][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.604787][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.630992][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.643648][ T4187] team0: Port device team_slave_1 added [ 65.651170][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.661988][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.729812][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.736771][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.763397][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.775295][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.782932][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.809355][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.823318][ T4194] team0: Port device team_slave_0 added [ 65.832276][ T4186] team0: Port device team_slave_0 added [ 65.840933][ T4194] team0: Port device team_slave_1 added [ 65.868624][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.875610][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.902112][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.913998][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.924635][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.951055][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.963743][ T4186] team0: Port device team_slave_1 added [ 65.974951][ T4193] device hsr_slave_0 entered promiscuous mode [ 65.982403][ T4193] device hsr_slave_1 entered promiscuous mode [ 66.018558][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.025548][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.052019][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.075256][ T4188] device hsr_slave_0 entered promiscuous mode [ 66.082289][ T4188] device hsr_slave_1 entered promiscuous mode [ 66.089373][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.097215][ T4188] Cannot create hsr debugfs directory [ 66.116359][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.123550][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.149819][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.180762][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.187791][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.213906][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.226743][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.233905][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.260089][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.282957][ T4187] device hsr_slave_0 entered promiscuous mode [ 66.290027][ T4187] device hsr_slave_1 entered promiscuous mode [ 66.297032][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.305087][ T4187] Cannot create hsr debugfs directory [ 66.370046][ T4186] device hsr_slave_0 entered promiscuous mode [ 66.377066][ T4186] device hsr_slave_1 entered promiscuous mode [ 66.384282][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.392224][ T4186] Cannot create hsr debugfs directory [ 66.439535][ T4194] device hsr_slave_0 entered promiscuous mode [ 66.446401][ T4194] device hsr_slave_1 entered promiscuous mode [ 66.456655][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.464988][ T4194] Cannot create hsr debugfs directory [ 66.479250][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 66.485953][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 66.488772][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 66.497992][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 66.498934][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 66.750542][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.761918][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.774573][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.783534][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.827001][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.844746][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.857485][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.871086][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.907212][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.932030][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.993086][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.003871][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.016312][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.037870][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.047262][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.059335][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.105735][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.116068][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.145368][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.155074][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.177229][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.221432][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.233726][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.243990][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.262609][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.290031][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.298484][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.306353][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.320181][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.333457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.343984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.354004][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.361315][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.371240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.396378][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.427501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.436945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.446764][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.453877][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.461902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.472020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.479992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.488835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.497285][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.504443][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.513370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.522370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.532131][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.539250][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.546953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.555953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.587765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.595921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.608012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.617175][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.624283][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.632927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.643277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.651836][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.658948][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.666671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.676280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.685081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.695579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.705094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.714254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.723605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.732477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.741382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.751805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.760132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.768140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.795040][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.805557][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.824350][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.836035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.845374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.854208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.865021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.874613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.883364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.892368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.901469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.910558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.919061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.928193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.936981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.946834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.959727][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.975673][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.984921][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.993637][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.002799][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.022423][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.034897][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.049942][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.059459][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.068860][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.076824][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.100959][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.115636][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.131008][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.145373][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.155020][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.163995][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.182639][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.219809][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.230481][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.244603][ T1506] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.251764][ T1506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.265239][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.274250][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.283244][ T1506] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.290599][ T1506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.298968][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.307691][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.316815][ T1506] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.323967][ T1506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.332774][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.375925][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.386468][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.397164][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.408105][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.426045][ T1506] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.433278][ T1506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.442408][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.451597][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.460963][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.470698][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.480917][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.500554][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.514796][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.524724][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.535404][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.564298][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.581261][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 68.587390][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 68.597361][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 68.603002][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.614844][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 68.622201][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 68.637725][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.656459][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.665663][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.680271][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.695142][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.705156][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.721659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.735995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.766886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.778684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.801535][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.818230][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.835183][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.850491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.857999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.866739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.875569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.886758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.895511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.915378][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.949904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.968779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.976309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.010715][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.040542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.054866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.064595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.079444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.111125][ T4188] device veth0_vlan entered promiscuous mode [ 69.139071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.148029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.163061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.173657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.185922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.196032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.205662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.213873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.222903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.231673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.244817][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.263652][ T4188] device veth1_vlan entered promiscuous mode [ 69.273622][ T4193] device veth0_vlan entered promiscuous mode [ 69.327635][ T4193] device veth1_vlan entered promiscuous mode [ 69.387520][ T4194] device veth0_vlan entered promiscuous mode [ 69.398655][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.405766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.421316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.434904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.444525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.452965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.461046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.471455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.482999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.492232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.501566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.510646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.524230][ T4188] device veth0_macvtap entered promiscuous mode [ 69.537809][ T4194] device veth1_vlan entered promiscuous mode [ 69.550651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.558860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.566812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.576742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.584802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.597335][ T4188] device veth1_macvtap entered promiscuous mode [ 69.622231][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.631386][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.639968][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.649219][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.662752][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.672765][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.698095][ T4193] device veth0_macvtap entered promiscuous mode [ 69.712648][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.722581][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.731592][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.743250][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.752042][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.772493][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.780963][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.801663][ T4194] device veth0_macvtap entered promiscuous mode [ 69.811452][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.821693][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.830814][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.839722][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.847595][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.856818][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.871452][ T4187] device veth0_vlan entered promiscuous mode [ 69.879733][ T4194] device veth1_macvtap entered promiscuous mode [ 69.887803][ T4193] device veth1_macvtap entered promiscuous mode [ 69.907274][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.916246][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.925925][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.935622][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.945885][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.954372][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.965873][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.976978][ T4186] device veth0_vlan entered promiscuous mode [ 69.991201][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.001563][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.021165][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.030750][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.040092][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.049184][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.062624][ T4187] device veth1_vlan entered promiscuous mode [ 70.076554][ T4186] device veth1_vlan entered promiscuous mode [ 70.092585][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.104004][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.116028][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.142322][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.154277][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.165426][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.176137][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.188964][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.204604][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.215430][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.227070][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.235647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.245103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.254158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.263226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.272759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.282020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.300435][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.313369][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.324478][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.338592][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.350523][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.381107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.390682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.402392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.412767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.422655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.431906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.442852][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.452234][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.461521][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.470548][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.483979][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.493060][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.502129][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.511115][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.529657][ T4187] device veth0_macvtap entered promiscuous mode [ 70.545685][ T4186] device veth0_macvtap entered promiscuous mode [ 70.565644][ T4187] device veth1_macvtap entered promiscuous mode [ 70.575827][ T4186] device veth1_macvtap entered promiscuous mode [ 70.641552][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 70.655162][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 70.661970][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 70.668061][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 70.674287][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 70.682760][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.693552][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.706518][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.717854][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.729130][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.739635][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.750849][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.763737][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.774310][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.784607][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.795522][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.809463][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.819986][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.829859][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.841053][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.853225][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.875498][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.884436][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.898480][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.906552][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.915310][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.925418][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.934699][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.943534][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.955133][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.965965][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.976976][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.987879][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.997828][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.008788][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.021247][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.033483][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.045373][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.055711][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.067096][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.077365][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.087947][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.097834][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.108785][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.121412][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.144864][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.146879][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.162171][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.172018][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.174278][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.187419][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.199587][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.212787][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.222167][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.231275][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.240271][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.254625][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.264227][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.273455][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.286435][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.286570][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.300651][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.354613][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.365633][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.387480][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.401472][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.420402][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.428254][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.511932][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.531741][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.546129][ T1506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.558380][ T1506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.582485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.596395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.668218][ T1506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.677778][ T1506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.713684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.749029][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.762149][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.783119][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.793181][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.844999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.861812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.872712][ T4272] loop3: detected capacity change from 0 to 1024 [ 71.896792][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.907085][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.918357][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.931639][ T4267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.936508][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.956275][ T1506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.981823][ T4272] EXT4-fs (loop3): Ignoring removed orlov option [ 72.026882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.077765][ T4272] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 73.128370][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.148376][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.158380][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.168357][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.178364][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.188354][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.198364][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.208439][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.218356][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.228430][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 75.358371][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 75.368560][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 75.485856][ T4291] loop4: detected capacity change from 0 to 128 [ 75.608387][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 75.628343][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 75.636070][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 75.802602][ T4296] device bridge0 entered promiscuous mode [ 75.814120][ T4296] bridge0: port 3(macsec1) entered blocking state [ 75.820862][ T4296] bridge0: port 3(macsec1) entered disabled state [ 76.540329][ T4295] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.608660][ T4296] device bridge0 left promiscuous mode [ 76.955621][ T4301] loop1: detected capacity change from 0 to 2048 [ 76.957120][ T4303] loop4: detected capacity change from 0 to 1024 [ 77.101286][ T4301] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.286174][ T4301] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.374875][ T4301] fs-verity: sha512 using implementation "sha512-avx2" [ 77.404137][ T4301] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.10: bg 0: block 368: padding at end of block bitmap is not set [ 80.513839][ T4301] fs-verity (loop1, inode 13): ext4_end_enable_verity() failed with err -28 [ 80.538729][ T4301] syz.1.10 (4301) used greatest stack depth: 20496 bytes left [ 80.852716][ T4326] loop0: detected capacity change from 0 to 256 [ 80.923534][ T4329] loop4: detected capacity change from 0 to 512 [ 80.958867][ T4326] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.008855][ T4326] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 81.031212][ T4326] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc4d1c548, utbl_chksum : 0xe619d30d) [ 81.226506][ T4326] exFAT-fs (loop0): error, found bogus dentry(18) beyond unused empty group(10) (start_clu : 6, cur_clu : 6) [ 81.264757][ T4326] exFAT-fs (loop0): Filesystem has been set read-only [ 81.851128][ T26] audit: type=1326 audit(1786849871.683:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.3.14" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62543ae0d9 code=0x7ffc0000 [ 82.038798][ T26] audit: type=1326 audit(1786849871.693:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.3.14" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62543ae0d9 code=0x7ffc0000 [ 82.149238][ T26] audit: type=1326 audit(1786849871.693:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.3.14" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62543ae0d9 code=0x7ffc0000 [ 82.230872][ T26] audit: type=1326 audit(1786849871.773:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.3.14" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62543ae0d9 code=0x7ffc0000 [ 82.346689][ T26] audit: type=1326 audit(1786849871.773:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.3.14" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f62543ae0d9 code=0x7ffc0000 [ 82.412838][ T26] audit: type=1326 audit(1786849871.773:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.3.14" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62543ae0d9 code=0x7ffc0000 [ 82.538999][ T26] audit: type=1326 audit(1786849871.773:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.3.14" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62543ae0d9 code=0x7ffc0000 [ 82.563922][ T4352] loop1: detected capacity change from 0 to 2048 [ 82.598618][ T4228] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.605988][ T26] audit: type=1326 audit(1786849871.773:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.3.14" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62543ae0d9 code=0x7ffc0000 [ 82.680881][ T26] audit: type=1326 audit(1786849871.783:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.3.14" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62543ae0d9 code=0x7ffc0000 [ 82.741115][ T4352] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.757450][ T26] audit: type=1326 audit(1786849871.783:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.3.14" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f62543ae0d9 code=0x7ffc0000 [ 83.881293][ T4352] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 84.942264][ T4352] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 84.968524][ T4175] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.977897][ T4352] EXT4-fs (loop1): This should not happen!! Data will be lost [ 84.977897][ T4352] [ 84.999706][ T4352] EXT4-fs (loop1): Total free blocks count 0 [ 85.006783][ T4352] EXT4-fs (loop1): Free/Dirty block details [ 85.019312][ T4228] usb 1-1: device descriptor read/all, error -71 [ 85.064060][ T4352] EXT4-fs (loop1): free_blocks=4096 [ 85.069651][ T4352] EXT4-fs (loop1): dirty_blocks=160 [ 85.075031][ T4352] EXT4-fs (loop1): Block reservation details [ 85.087140][ T4352] EXT4-fs (loop1): i_reserved_data_blocks=10 [ 85.156003][ T4341] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 85.175952][ T4341] EXT4-fs (loop1): This should not happen!! Data will be lost [ 85.175952][ T4341] [ 85.243671][ T4175] usb 4-1: Using ep0 maxpacket: 32 [ 86.778380][ T4175] usb 4-1: config index 0 descriptor too short (expected 200, got 43) [ 86.786998][ T4175] usb 4-1: config 21 has an invalid interface association descriptor of length 2, skipping [ 86.800076][ T13] cfg80211: failed to load regulatory.db [ 86.828364][ T4175] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 86.840484][ T4228] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.854339][ T4175] usb 4-1: config 21 has 0 interfaces, different from the descriptor's value: 1 [ 86.918754][ T4175] usb 4-1: string descriptor 0 read error: -71 [ 86.925154][ T4175] usb 4-1: New USB device found, idVendor=3537, idProduct=7e78, bcdDevice=60.9a [ 86.944808][ T4175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.388869][ T4175] usb 4-1: can't set config #21, error -71 [ 88.398363][ T4175] usb 4-1: USB disconnect, device number 2 [ 89.044307][ T4228] usb 1-1: Using ep0 maxpacket: 16 [ 89.609422][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 89.618279][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 89.627182][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 89.638258][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 89.647133][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 89.658359][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 89.667304][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 89.678210][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 89.687111][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 89.698068][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 89.721108][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.740829][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.749257][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.587347][ T4228] usb 1-1: device descriptor read/all, error -71 [ 90.602124][ T4228] usb usb1-port1: attempt power cycle [ 90.770074][ T4393] loop0: detected capacity change from 0 to 2048 [ 90.937982][ T4393] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 91.038446][ T4393] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.163249][ T4398] loop4: detected capacity change from 0 to 2048 [ 91.400448][ T4398] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.428532][ T4406] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.487201][ T4398] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.695183][ T4409] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.27: bg 0: block 345: padding at end of block bitmap is not set [ 91.878890][ T4409] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 110 with error 117 [ 91.915604][ T4409] EXT4-fs (loop4): This should not happen!! Data will be lost [ 91.915604][ T4409] [ 92.190835][ T4418] ip_tables: iptables: counters copy to user failed while replacing table [ 96.208527][ T4234] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.293870][ T4440] IPv6: NLM_F_REPLACE set, but no existing node found! [ 96.444832][ T4442] Bluetooth: hci0: load_link_keys: too big key_count value 16384 [ 96.479030][ T4234] usb 5-1: Using ep0 maxpacket: 16 [ 96.489001][ T4442] device batadv_slave_0 entered promiscuous mode [ 96.529970][ T4442] Zero length message leads to an empty skb [ 96.543621][ T4441] device batadv_slave_0 left promiscuous mode [ 96.599995][ T4234] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.621393][ T4234] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.631519][ T4234] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 96.665478][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.699341][ T4234] usb 5-1: config 0 descriptor?? [ 97.674348][ T4446] loop3: detected capacity change from 0 to 2048 [ 97.681153][ T4448] loop0: detected capacity change from 0 to 512 [ 97.759263][ T1184] wlan1: Trigger new scan to find an IBSS to join [ 97.768531][ T4448] EXT4-fs (loop0): Ignoring removed oldalloc option [ 97.788142][ T4448] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 97.812354][ T4446] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.885250][ T4448] EXT4-fs (loop0): 1 truncate cleaned up [ 98.014200][ T4448] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,abort,data_err=ignore,acl,oldalloc,errors=remount-ro,. Quota mode: none. [ 98.739108][ T4234] usbhid 5-1:0.0: can't add hid device: -71 [ 98.745362][ T4234] usbhid: probe of 5-1:0.0 failed with error -71 [ 98.798523][ T4234] usb 5-1: USB disconnect, device number 2 [ 99.098031][ T4464] ip_tables: iptables: counters copy to user failed while replacing table [ 100.138453][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.458492][ T4234] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.560537][ T4485] chnl_net:caif_netlink_parms(): no params data found [ 100.568022][ T4493] loop0: detected capacity change from 0 to 256 [ 100.589158][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.610124][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.625232][ T4493] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xba218ca8, utbl_chksum : 0xe619d30d) [ 100.666793][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 100.666808][ T26] audit: type=1800 audit(1786849890.503:46): pid=4493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.61" name="file1" dev="loop0" ino=1048598 res=0 errno=0 [ 100.702299][ T4493] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 100.716690][ T4344] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.729893][ T13] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 100.739948][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 100.758351][ T4493] exFAT-fs (loop0): Filesystem has been set read-only [ 100.766561][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 100.805913][ T13] usb 4-1: SerialNumber: syz [ 100.811444][ T4493] exFAT-fs (loop0): error, failed to bmap (inode : ffff88806079a860 iblock : 8, err : -5) [ 100.838133][ T4493] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 100.871178][ T4485] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.881497][ T4485] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.889930][ T4234] usb 2-1: config index 0 descriptor too short (expected 200, got 43) [ 100.893166][ T4485] device bridge_slave_0 entered promiscuous mode [ 100.905202][ T4234] usb 2-1: config 21 has an invalid interface association descriptor of length 2, skipping [ 100.911884][ T4485] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.922913][ T4485] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.931229][ T4485] device bridge_slave_1 entered promiscuous mode [ 100.956392][ T4234] usb 2-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 100.959738][ T4485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.986126][ T4234] usb 2-1: config 21 has 0 interfaces, different from the descriptor's value: 1 [ 101.009103][ T4344] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.029904][ T4485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.070230][ T4485] team0: Port device team_slave_0 added [ 101.078223][ T4485] team0: Port device team_slave_1 added [ 101.118260][ T13] usb 4-1: 0:2 : does not exist [ 102.521673][ T4234] usb 2-1: New USB device found, idVendor=3537, idProduct=7e78, bcdDevice=60.9a [ 102.540075][ T1184] wlan1: Trigger new scan to find an IBSS to join [ 102.549106][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.557154][ T4234] usb 2-1: Product: syz [ 102.592222][ T13] usb 4-1: USB disconnect, device number 3 [ 102.799228][ T4234] usb 2-1: Manufacturer: syz [ 102.803904][ T4234] usb 2-1: SerialNumber: syz [ 102.813369][ T4228] Bluetooth: hci3: command 0x0409 tx timeout [ 102.936208][ T4515] ip_tables: iptables: counters copy to user failed while replacing table [ 103.865361][ T4344] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.889075][ T4234] usb 2-1: USB disconnect, device number 2 [ 106.216603][ T1107] Bluetooth: hci3: command 0x041b tx timeout [ 106.246964][ T9] wlan1: Creating new IBSS network, BSSID ea:86:ab:af:00:e4 [ 106.363247][ T4485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.388491][ T4485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.485866][ T4485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.505316][ T4541] loop0: detected capacity change from 0 to 1024 [ 106.563682][ T4344] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.601152][ T4485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.618449][ T4485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.668915][ T4541] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 106.717318][ T4485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.754681][ T4541] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,abort,discard,max_batch_time=0x0000000000000ac9,data=ordered,mblk_io_submit,usrquota,init_itable,block_validity,bsddf,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 108.238470][ T4175] Bluetooth: hci3: command 0x040f tx timeout [ 108.303163][ T4485] device hsr_slave_0 entered promiscuous mode [ 108.330554][ T4485] device hsr_slave_1 entered promiscuous mode [ 108.348443][ T4485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.356116][ T4485] Cannot create hsr debugfs directory [ 108.587103][ T4551] loop0: detected capacity change from 0 to 256 [ 108.660283][ T4551] dummy_hcd dummy_hcd.0: remove, state 1 [ 108.730996][ T4551] usb usb1: USB disconnect, device number 1 [ 108.877146][ T4551] dummy_hcd dummy_hcd.0: stopped [ 108.934582][ T4551] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 109.022800][ T4485] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.123139][ T4485] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.198734][ T4485] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.296003][ T4485] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.347571][ T4568] loop3: detected capacity change from 0 to 8 [ 109.393924][ T4570] loop1: detected capacity change from 0 to 512 [ 109.485513][ T4570] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.502070][ T4568] SQUASHFS error: zlib decompression failed, data probably corrupt [ 109.548540][ T26] audit: type=1800 audit(1786849899.383:47): pid=4570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.76" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 109.659165][ T4568] SQUASHFS error: Failed to read block 0x9b: -5 [ 109.671092][ T4568] SQUASHFS error: Unable to read metadata cache entry [99] [ 109.694438][ T4568] SQUASHFS error: Unable to read inode 0x127 [ 109.833569][ T4485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.334264][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 111.938034][ T4590] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.044118][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.511960][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.589922][ T4485] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.632190][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.679671][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.708974][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.716136][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.423404][ T4600] file system registered [ 115.519998][ T4600] No source specified [ 116.529691][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.556182][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.600181][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.659418][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.667567][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.734056][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.761849][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.865748][ T4344] device hsr_slave_0 left promiscuous mode [ 116.895777][ T4344] device hsr_slave_1 left promiscuous mode [ 116.910083][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.917625][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.971428][ T4344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.018558][ T4344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.046276][ T4344] device bridge_slave_1 left promiscuous mode [ 117.090275][ T4344] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.163076][ T4344] device bridge_slave_0 left promiscuous mode [ 117.188681][ T4344] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.343206][ T4344] device veth1_macvtap left promiscuous mode [ 118.424432][ T4611] loop1: detected capacity change from 0 to 4096 [ 118.526369][ T4611] EXT4-fs (loop1): Test dummy encryption mode enabled [ 118.538025][ T4611] EXT4-fs (loop1): inline encryption not supported [ 118.548775][ T4611] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 118.562305][ T4611] EXT4-fs (loop1): Unrecognized mount option "context=staff_u" or missing value [ 118.672508][ T4344] device veth0_macvtap left promiscuous mode [ 118.777034][ T4344] device veth1_vlan left promiscuous mode [ 118.812562][ T4344] device veth0_vlan left promiscuous mode [ 120.659163][ T4625] loop4: detected capacity change from 0 to 1024 [ 121.691572][ T4633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.379419][ T4344] team0 (unregistering): Port device team_slave_1 removed [ 123.460052][ T4344] team0 (unregistering): Port device team_slave_0 removed [ 123.559219][ T4344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.688937][ T4344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.100898][ T4640] loop1: detected capacity change from 0 to 2048 [ 124.199521][ T4640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.253604][ T4344] bond0 (unregistering): Released all slaves [ 124.320361][ T4643] __nla_validate_parse: 135 callbacks suppressed [ 124.320380][ T4643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.99'. [ 124.412248][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.457022][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.570372][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.583237][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.599638][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.618022][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.631893][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.659967][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.720317][ T1184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.752542][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.671763][ T4656] loop0: detected capacity change from 0 to 764 [ 126.774683][ T4652] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 126.787476][ T4652] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 126.797891][ T4652] CPU: 0 PID: 4652 Comm: syz.3.97 Not tainted syzkaller #0 [ 126.807477][ T4652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.818540][ T4652] RIP: 0010:dummy_set_selfpowered+0xb7/0x150 [ 126.825154][ T4652] Code: 94 c0 4d 8d b4 c6 f8 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 03 b4 87 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 ea b3 87 fb 41 be f0 12 00 00 4d [ 126.847774][ T4652] RSP: 0018:ffffc9000301fa38 EFLAGS: 00010246 [ 126.854033][ T4652] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88802b799dc0 [ 126.863065][ T4652] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000005 [ 126.871763][ T4652] RBP: 0000000000000003 R08: ffffffff8c44fd07 R09: 1ffffffff1889fa0 [ 126.880899][ T4652] R10: dffffc0000000000 R11: fffffbfff1889fa1 R12: dffffc0000000000 [ 126.890270][ T4652] R13: ffff8880788fb4b8 R14: ffff888021a152f8 R15: 0000000000000000 [ 126.899662][ T4652] FS: 00007f62526066c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 126.909082][ T4652] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.917559][ T4652] CR2: 00007f29f6016000 CR3: 000000006370e000 CR4: 00000000003506f0 [ 126.926764][ T4652] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 126.935895][ T4652] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 126.946758][ T4652] Call Trace: [ 126.950381][ T4652] [ 126.953377][ T4652] ? dummy_wakeup+0x260/0x260 [ 126.958646][ T4652] usb_gadget_set_selfpowered+0x6a/0x230 [ 126.964993][ T4652] composite_dev_prepare+0x2f3/0x310 [ 126.970377][ T4652] configfs_composite_bind+0xa1/0xf60 [ 126.975915][ T4652] ? mutex_lock_io_nested+0x60/0x60 [ 126.982206][ T4652] ? mutex_lock_io_nested+0x60/0x60 [ 126.988982][ T4652] ? os_desc_qw_sign_store+0x130/0x130 [ 126.994874][ T4652] udc_bind_to_driver+0x203/0x5f0 [ 127.002352][ T4652] usb_gadget_probe_driver+0x1fb/0x380 [ 127.007977][ T4652] gadget_dev_desc_UDC_store+0x1ba/0x2e0 [ 127.014570][ T4652] configfs_write_iter+0x30b/0x400 [ 127.020468][ T4652] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 127.026900][ T4652] vfs_write+0x748/0xd70 [ 127.031221][ T4652] ? file_end_write+0x250/0x250 [ 127.036397][ T4652] ? mutex_lock_nested+0x17/0x20 [ 127.042836][ T4652] ? __fdget_pos+0x2bf/0x370 [ 127.050262][ T4652] ? ksys_write+0x70/0x260 [ 127.056708][ T4652] ksys_write+0x153/0x260 [ 127.062130][ T4652] ? __ia32_sys_read+0x80/0x80 [ 127.067191][ T4652] ? lockdep_hardirqs_on+0x94/0x140 [ 127.073210][ T4652] do_syscall_64+0x4c/0xa0 [ 127.077986][ T4652] ? clear_bhb_loop+0x30/0x80 [ 127.083793][ T4652] ? clear_bhb_loop+0x30/0x80 [ 127.088849][ T4652] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.095843][ T4652] RIP: 0033:0x7f62543ae0d9 [ 127.101269][ T4652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.124381][ T4652] RSP: 002b:00007f6252606028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.133106][ T4652] RAX: ffffffffffffffda RBX: 00007f6254635fa0 RCX: 00007f62543ae0d9 [ 127.141387][ T4652] RDX: 000000000000000b RSI: 00002000000003c0 RDI: 0000000000000004 [ 127.150303][ T4652] RBP: 00007f6254445024 R08: 0000000000000000 R09: 0000000000000000 [ 127.158881][ T4652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.167341][ T4652] R13: 00007f6254636038 R14: 00007f6254635fa0 R15: 00007fffa959ff08 [ 127.175563][ T4652] [ 127.178686][ T4652] Modules linked in: [ 127.204682][ T4656] ISO 9660 Extensions: Microsoft Joliet Level 0 [ 127.214926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.229489][ T4656] ISOFS: File unit size != 0 for ISO file (1792). [ 127.244198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.285753][ T4485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.297168][ T4656] ISOFS: Interleaved files not (yet) supported. [ 127.322596][ T4656] ISOFS: File unit size != 0 for ISO file (1856). [ 127.378601][ T4656] ISOFS: Interleaved files not (yet) supported. [ 127.386936][ T4656] ISOFS: File unit size != 0 for ISO file (1856). [ 127.499247][ T4656] ISOFS: Interleaved files not (yet) supported. [ 127.500145][ T4652] ---[ end trace 6afcfe4ae43fa4d3 ]--- [ 127.556578][ T4652] RIP: 0010:dummy_set_selfpowered+0xb7/0x150 [ 127.563882][ T4652] Code: 94 c0 4d 8d b4 c6 f8 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 03 b4 87 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 ea b3 87 fb 41 be f0 12 00 00 4d [ 127.594714][ T4656] ISOFS: File unit size != 0 for ISO file (1856). [ 127.641978][ T4652] RSP: 0018:ffffc9000301fa38 EFLAGS: 00010246 [ 127.695550][ T4652] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88802b799dc0 [ 127.768195][ T4652] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000005 [ 127.975789][ T4656] ISOFS: Interleaved files not (yet) supported. [ 127.983757][ T4656] ISOFS: File unit size != 0 for ISO file (1856). [ 127.983808][ T4652] RBP: 0000000000000003 R08: ffffffff8c44fd07 R09: 1ffffffff1889fa0 [ 128.038447][ T4652] R10: dffffc0000000000 R11: fffffbfff1889fa1 R12: dffffc0000000000 [ 128.048130][ T4652] R13: ffff8880788fb4b8 R14: ffff888021a152f8 R15: 0000000000000000 [ 128.073816][ T4656] ISOFS: Interleaved files not (yet) supported. [ 128.077540][ T4652] FS: 00007f62526066c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 128.097057][ T4656] ISOFS: File unit size != 0 for ISO file (1856). [ 128.112627][ T4656] ISOFS: Interleaved files not (yet) supported. [ 128.121067][ T4656] ISOFS: File unit size != 0 for ISO file (1856). [ 128.268361][ T4652] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.290399][ T4652] CR2: 0000200000016000 CR3: 000000006370e000 CR4: 00000000003506e0 [ 128.321913][ T4652] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.360716][ T4652] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.505302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.523896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.536520][ T4652] Kernel panic - not syncing: Fatal exception [ 128.543655][ T4652] Kernel Offset: disabled [ 128.548669][ T4652] Rebooting in 86400 seconds..