last executing test programs: 17.011673236s ago: executing program 0 (id=10): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@cred={{0x18, 0x1, 0x3d}}], 0x18, 0x4008050}}], 0x1, 0x1) r0 = socket(0x840000000002, 0x3, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x3, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r1, 0x4, 0x800) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x4b45, 0x4) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000300)={{0x723, 0x5, 0x200, 0x41, 0x1}, &(0x7f0000000240)=[{}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0x4}}]}) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0xfffffffd}, 0x10) r6 = openat$nullb(0xffffff9c, &(0x7f0000000100), 0x10801, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000380)={0xfffffffffffffffe, 0xcd56}) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 15.200212811s ago: executing program 2 (id=14): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r2 = userfaultfd(0x801) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xe7a}, 0x1c) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x32, &(0x7f00000007c0)=ANY=[@ANYBLOB="e90c610000a2bbbbbbbbbbbb0800450000240000e000031190de00000000000000000000fffe0027907882010000000000"], 0x0) syz_emit_ethernet(0xfb9, &(0x7f00000017c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfab, 0x0, 0x2, 0x8, 0x11, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x4e20, 0x4e20, 0xf97, 0x0, @wg=@data={0x4, 0x8, 0xe55d, "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"}}}}}}, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, 0x0) openat$uhid(0xffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x8, 0x80, 0x5, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c200000000000000000000009000000000000000000000009000002000000000000000009"], 0x0, 0x96}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40c0080) 13.279379289s ago: executing program 0 (id=19): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffa, 0x82ab01) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) 12.638782745s ago: executing program 0 (id=21): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r0, 0x0, 0x0, 0x80000001) 8.573487356s ago: executing program 0 (id=31): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) mmap(&(0x7f0000442000/0x3000)=nil, 0x3000, 0x100000b, 0xa8011, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) dup(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f00000002c0)=0x1) 7.047409844s ago: executing program 3 (id=33): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) io_setup(0x7ff, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000400)=[0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000001e40)={0x2020}, 0x2020) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) bind$can_raw(r2, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x4b) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x19f981) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f002}) 5.269674849s ago: executing program 4 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r0, &(0x7f0000000e00)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) mount(&(0x7f0000000900)=@filename='devtmpfs\x00', &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000002000), 0x0) close(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$6lowpan_control(r1, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x5, 0x803, 0x3) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r8, @ANYBLOB='F'], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x8080) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYBLOB="01"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000001100)='./mnt\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 5.138851892s ago: executing program 3 (id=37): socket(0x2d, 0x2, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x2) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r0 = syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40002042, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) 4.573845426s ago: executing program 1 (id=38): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0) 4.055204219s ago: executing program 3 (id=39): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x5e25, @broadcast}, 0x0, 0x0, 0x3}}, 0x26) 3.901001152s ago: executing program 1 (id=40): r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000440), &(0x7f0000000400)=0xfffffffffffffda9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x4002) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000240)=""/191) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x10040) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x81, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100400008004d75006f00650000010c9078ac1414aae0000001071f86e0000001640101027f000001ac1414aa00000000e0000001ac1414bb006861b1774d337116ae9c9a8e4e56a64920d2aeaa49a4f4e5e1b2d675d2db3160f511c896b08c66674e6f208992f74eefa862bb05d29c7302c6a49041a258ffc97317ec61bdefbfb4238b9d1ad268975c44c710dcd283a7a710834ff778382273"], 0x0) openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x2000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='dummy_hcd.0', 0xb) preadv(r4, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) r6 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x10001) openat$audio(0xffffffffffffff9c, 0x0, 0x220002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) 3.778016285s ago: executing program 3 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x2e, &(0x7f0000000100)) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0xa0302, 0x5e) sendfile(r3, r3, 0x0, 0x2) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.740687567s ago: executing program 1 (id=42): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x1, 0x40002) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x6, 0xd65b, 0x5, 0x1850bff, 0x0, 0x0, 0x40, 0xa}}, 0x50) mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, &(0x7f0000000140)='\x00') ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0x6, 0x86, 0x3, 0x80, 0x10, "af475577c34491e617424faa2d452a06d9e743"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r2, &(0x7f0000000300)='p:test/event1 ./file0:0x0 arg2=%bx', 0x22) 3.636977829s ago: executing program 1 (id=43): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711829000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1e08004502005800000000fd2f907800000800e0000086dd080088be00000000100000000100000000000000080022eb0000000020c5006a0200000000000000000000000800655800"/102], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14, 0x80000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='00:03', 0x5) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x101b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x30, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x0, 0xf1, 0x1, {0x22, 0xd7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x4, 0x2}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="050f2fbe39d30003000400"]}) 3.6025387s ago: executing program 4 (id=44): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) getegid() ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000680)={0x0, 0x0, 0xd, 0x0, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r3, 0x5) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r4, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xb52]}}) 3.526141001s ago: executing program 3 (id=45): bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet(0xa, 0x801, 0x84) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xe5c5e2d11a21b6e6}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000824}, 0x4800) 3.262168648s ago: executing program 2 (id=46): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r2 = userfaultfd(0x801) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xe7a}, 0x1c) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x32, &(0x7f00000007c0)=ANY=[@ANYBLOB="e90c610000a2bbbbbbbbbbbb0800450000240000e000031190de00000000000000000000fffe0027907882010000000000"], 0x0) syz_emit_ethernet(0xfb9, &(0x7f00000017c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfab, 0x0, 0x2, 0x8, 0x11, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x4e20, 0x4e20, 0xf97, 0x0, @wg=@data={0x4, 0x8, 0xe55d, "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"}}}}}}, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000240)={{&(0x7f00004d0000/0x3000)=nil, 0x3000}, 0x1}) openat$uhid(0xffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x8, 0x80, 0x5, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c200000000000000000000009000000000000000000000009000002000000000000000009"], 0x0, 0x96}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0x82, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 2.41191056s ago: executing program 4 (id=47): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x5ede6002) 2.354538761s ago: executing program 2 (id=48): mount(0x0, 0x0, &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x50) write(r0, 0x0, 0x0) getpid() r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(r1, 0x0, 0x0) 2.261162893s ago: executing program 4 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x50) write(r0, 0x0, 0x0) getpid() r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc040564a, &(0x7f00000000c0)) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) write(0xffffffffffffffff, &(0x7f0000001400)='2\n', 0x2) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) write(r1, &(0x7f0000000880), 0x0) 1.420638634s ago: executing program 3 (id=50): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xcd, 0x2, 0x0, 0x101, 0x0, 0x20000000, 0x9, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x4, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0x7, 0x9, 0x48, 0x9, 0x6, 0x6a77, 0x2, 0x7fffffff, 0xa]}) r1 = openat$comedi(0xffffff9c, 0x0, 0x63a1ffeb966d5d6, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000640)={'das16m1\x00', [0xc, 0x4, 0x18c, 0x9, 0x7a23fb2a, 0x9, 0x4, 0x2, 0xd6, 0xfff, 0x101, 0x8, 0x1, 0x2, 0xb, 0x0, 0xc724, 0x5, 0x8, 0x9, 0x80, 0x0, 0x200, 0x4acb, 0x40, 0x3885ed69, 0x286, 0x7, 0x2, 0x3, 0x1ff]}) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r2 = userfaultfd(0x801) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r3, &(0x7f0000000880)='3', 0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) poll(&(0x7f0000000700)=[{r0, 0x80}], 0x1, 0x200003) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000a00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="480000000f1400042abd7000fcdbdf250800010002000000080045007372700056b09708000300040000000800030002000000080003000300000008000300040000000800030003"], 0x48}, 0x1, 0x0, 0x0, 0x800c000}, 0x4001) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) pread64(r1, &(0x7f00000008c0)=""/127, 0x7f, 0x5) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000888}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getchain={0x3c, 0x66, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff2, 0xfff1}, {0xb, 0x7}, {0x2, 0x6}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008084) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='i8042\x00', 0x6) 886.715307ms ago: executing program 2 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 876.250568ms ago: executing program 0 (id=52): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x2}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x4080) 359.766671ms ago: executing program 4 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, 0xffa8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) r0 = getegid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x2}, [{0x8, 0x4}, {0x8, 0x4}, {0x8, 0x5, r0}, {0x8, 0x4}, {0x8, 0x6}, {0x8, 0x1}, {0x8, 0x2}, {0x8, 0x1}, {0x8, 0x4, r0}], {0x10, 0x5}, {0x20, 0x5}}, 0x6c, 0x0) 359.51466ms ago: executing program 1 (id=54): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x41009432, &(0x7f00000001c0)=0x10000000) 260.436873ms ago: executing program 2 (id=55): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002", 0x16}], 0x1, 0x0, 0x2) 129.025286ms ago: executing program 0 (id=56): syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x4a25d, 0x49a41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) r3 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) dup2(r3, r3) 105.577737ms ago: executing program 2 (id=57): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000140)="10", 0x1}], 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x44}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xd0}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) unshare(0x6020400) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x19) writev(r6, &(0x7f0000000680)=[{&(0x7f0000000140)="16ea", 0x2}], 0x1) r7 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x88) r9 = openat$cgroup_int(r8, &(0x7f0000000200)='cpu.idle\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f00000000c0)=0x5, 0x36) write(r5, &(0x7f0000000140)='e100\x00', 0x4) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) write(r10, &(0x7f00000001c0)='0000:00:03.0\x00', 0xc) r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000000)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', r5}, 0x14) write(r11, &(0x7f0000000240)='0000:00:03.0\x00', 0xc) 78.955618ms ago: executing program 1 (id=58): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x4, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}}}}}, 0x0) write(r3, &(0x7f0000000240)='0000:00:1d.7', 0xc) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0xd, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) write(r5, &(0x7f00000002c0)='0000:00:1d.7', 0xc) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 0s ago: executing program 4 (id=59): setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x21, 0x4, 0x52, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket(0x1a, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2fa801, 0x115) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="595d25bd7000fcdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x20020810}, 0x74248b129e2a72de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = gettid() prlimit64(r5, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000d40)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @ib={0x1b, 0x7a, 0x889, {}, 0x1119dff, 0xffffffff80000002, 0xcd41}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000c40)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r7, 0x2}}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, &(0x7f0000000040)=0x200) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r12 = dup(r11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r12, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r12, 0xc0d05605, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000829bd7000ffdbdf2501000000080002000100000014000c0020010000000000000000000000000001080008000400000008000700", @ANYBLOB="0c0003000400000000000000080002000100000005000d000f000000080001", @ANYRES32=r4, @ANYBLOB="080004006410011105000d00025983253c8a552a3dee8d3088e7170f9653d4b1c767d653f105bdd297a1e4f14faf7773ec8ad7613d84c6a7b7ba4cd3e083eced4618edc8a41800168e3eb216ae1848e97ce7d9fd2df2b00489e2c828cc1ecfa364424082e2334c70b05fc13d3eff2938694539eb4c2cc4a8b8c048da9668bae3777ffb59f8aadb6875811156788dd1d528ba77d828fa97110571284a41a710491b4fc109c82a1f9985a2551cb33ed79818b7c5c3265a3466d26017164e4b793de0a22d8a8247a99f4db4e3c7bd14e9cff5025768d8eb4f74"], 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. [ 58.305570][ T4174] cgroup: Unknown subsys name 'net' [ 58.442522][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.679640][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.916903][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.034880][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 61.046760][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 61.106168][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 61.131862][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.139467][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.148349][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.173059][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.180191][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.188987][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.207547][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 61.276166][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.290929][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.299306][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.309064][ T4192] device bridge_slave_0 entered promiscuous mode [ 61.319857][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.326923][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.335131][ T4192] device bridge_slave_1 entered promiscuous mode [ 61.342227][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.349647][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.357846][ T4188] device bridge_slave_0 entered promiscuous mode [ 61.366448][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.400388][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.408631][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.416599][ T4188] device bridge_slave_1 entered promiscuous mode [ 61.440376][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.447990][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.456276][ T4186] device bridge_slave_0 entered promiscuous mode [ 61.491688][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.501136][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.509287][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.517793][ T4189] device bridge_slave_0 entered promiscuous mode [ 61.525139][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.532504][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.540269][ T4186] device bridge_slave_1 entered promiscuous mode [ 61.549285][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.560781][ T4187] team0: Port device team_slave_0 added [ 61.568276][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.577501][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.584570][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.592783][ T4189] device bridge_slave_1 entered promiscuous mode [ 61.614237][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.625905][ T4187] team0: Port device team_slave_1 added [ 61.672458][ T4192] team0: Port device team_slave_0 added [ 61.680212][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.691393][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.708623][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.715817][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.745326][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.762312][ T4192] team0: Port device team_slave_1 added [ 61.770750][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.790230][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.803540][ T4188] team0: Port device team_slave_0 added [ 61.810936][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.818630][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.845730][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.886117][ T4188] team0: Port device team_slave_1 added [ 61.924160][ T4186] team0: Port device team_slave_0 added [ 61.938954][ T4189] team0: Port device team_slave_0 added [ 61.945558][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.953562][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.980609][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.994958][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.002787][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.010568][ T4186] team0: Port device team_slave_1 added [ 62.017514][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.024468][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.052969][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.074813][ T4189] team0: Port device team_slave_1 added [ 62.081167][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.088265][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.114840][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.151454][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.158698][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.185419][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.231556][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.238803][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.265483][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.284986][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.292010][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.318993][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.339899][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.346879][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.373111][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.387906][ T4192] device hsr_slave_0 entered promiscuous mode [ 62.394700][ T4192] device hsr_slave_1 entered promiscuous mode [ 62.402018][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.409891][ T4192] Cannot create hsr debugfs directory [ 62.436941][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.444089][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.470672][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.498684][ T4188] device hsr_slave_0 entered promiscuous mode [ 62.505388][ T4188] device hsr_slave_1 entered promiscuous mode [ 62.512552][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.520345][ T4188] Cannot create hsr debugfs directory [ 62.536251][ T4186] device hsr_slave_0 entered promiscuous mode [ 62.543276][ T4186] device hsr_slave_1 entered promiscuous mode [ 62.550294][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.558317][ T4186] Cannot create hsr debugfs directory [ 62.635218][ T4189] device hsr_slave_0 entered promiscuous mode [ 62.642282][ T4189] device hsr_slave_1 entered promiscuous mode [ 62.648907][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.656557][ T4189] Cannot create hsr debugfs directory [ 62.668179][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 62.747355][ T4194] Bluetooth: hci3: command 0x0409 tx timeout [ 62.753547][ T4194] Bluetooth: hci0: command 0x0409 tx timeout [ 62.757284][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 62.767583][ T4194] Bluetooth: hci4: command 0x0409 tx timeout [ 62.895079][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.915537][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.924328][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.938176][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.975747][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.985827][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.998059][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.011073][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.075861][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.085922][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.113680][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.123508][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.174442][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.193830][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.204507][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.232326][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.242258][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.251747][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.261924][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.270959][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.287848][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.302589][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.312043][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.321721][ T1599] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.329011][ T1599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.337611][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.364298][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.373800][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.383233][ T1599] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.390360][ T1599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.400127][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.410468][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.420645][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.429936][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.439207][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.461664][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.471898][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.483312][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.491440][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.501281][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.510281][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.521033][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.531000][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.543824][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.554323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.563240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.574292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.583653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.593166][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.600398][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.624265][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.636201][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.644911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.655071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.663680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.686332][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.697830][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.706249][ T1595] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.713375][ T1595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.740459][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.775037][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.794598][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.837225][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.854292][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.864183][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.874478][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.882999][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.891840][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.900871][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.909980][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.919067][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.926764][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.934824][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.947792][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.975721][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.990388][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.028334][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.041090][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.057026][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.070015][ T1595] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.077113][ T1595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.088248][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.096928][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.106872][ T1595] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.114069][ T1595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.122834][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.132299][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.146101][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.162992][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.171694][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.182477][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.194626][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.208050][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.233353][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.243574][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.253514][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.263045][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.272178][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.281813][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.290430][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.312461][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.324302][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.350863][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.361553][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.376757][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.385674][ T1599] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.392917][ T1599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.401673][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.412363][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.421419][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.430732][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.440911][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.448906][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.456449][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.464298][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.472168][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.481149][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.489743][ T1599] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.496823][ T1599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.513367][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.521721][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.531525][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.545332][ T4187] device veth0_vlan entered promiscuous mode [ 64.555130][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.563460][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.572390][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.580865][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.590971][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.600388][ T1599] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.607593][ T1599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.616255][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.625476][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.650703][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.659803][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.669869][ T1599] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.676932][ T1599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.684783][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.693713][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.704807][ T4187] device veth1_vlan entered promiscuous mode [ 64.741141][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.749793][ T4237] Bluetooth: hci1: command 0x041b tx timeout [ 64.750571][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.768816][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.776824][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.784663][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.793814][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.802767][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.812644][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.821456][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.829841][ T4237] Bluetooth: hci4: command 0x041b tx timeout [ 64.836235][ T4237] Bluetooth: hci0: command 0x041b tx timeout [ 64.842949][ T4237] Bluetooth: hci2: command 0x041b tx timeout [ 64.849530][ T4237] Bluetooth: hci3: command 0x041b tx timeout [ 64.851802][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.871357][ T4188] device veth0_vlan entered promiscuous mode [ 64.893266][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.901647][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.911671][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.921740][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.932176][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.941622][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.950823][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.960581][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.969197][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.977778][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.986113][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.994919][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.003702][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.012934][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.021375][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.029673][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.045800][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.056710][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.097561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.113188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.144911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.160641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.177859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.200858][ T4188] device veth1_vlan entered promiscuous mode [ 65.218083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.226702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.275133][ T4187] device veth0_macvtap entered promiscuous mode [ 65.306275][ T4187] device veth1_macvtap entered promiscuous mode [ 65.342788][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.353153][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.361892][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.370175][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.378400][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.388902][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.420272][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.431647][ T4188] device veth0_macvtap entered promiscuous mode [ 65.445584][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.454839][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.464538][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.479110][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.500974][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.512829][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.522154][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.532191][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.547681][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.562312][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.574326][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.584254][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.593236][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.603868][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.613363][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.622458][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.632647][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.641339][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.651033][ T4188] device veth1_macvtap entered promiscuous mode [ 65.670660][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.679845][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.689104][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.698349][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.715339][ T4192] device veth0_vlan entered promiscuous mode [ 65.732494][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.740889][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.749935][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.764571][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.773554][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.782128][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.793313][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.806576][ T4192] device veth1_vlan entered promiscuous mode [ 65.837119][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.849536][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.861525][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.888146][ T4189] device veth0_vlan entered promiscuous mode [ 65.895439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.904558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.914648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.923375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.935888][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.946999][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.959445][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.980224][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.990140][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.000081][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.010719][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.022821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.033143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.042502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.052305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.062284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.070439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.079747][ T4186] device veth0_vlan entered promiscuous mode [ 66.096088][ T4189] device veth1_vlan entered promiscuous mode [ 66.115485][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.128679][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.157653][ T4186] device veth1_vlan entered promiscuous mode [ 66.180574][ T4192] device veth0_macvtap entered promiscuous mode [ 66.206935][ T4192] device veth1_macvtap entered promiscuous mode [ 66.227025][ T4189] device veth0_macvtap entered promiscuous mode [ 66.263082][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.275117][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.290707][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.299986][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.309577][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.319180][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.327840][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.336308][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.345141][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.353888][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.365198][ T4189] device veth1_macvtap entered promiscuous mode [ 66.379533][ T4186] device veth0_macvtap entered promiscuous mode [ 66.389460][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.400587][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.411065][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.421839][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.434813][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.457032][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.469581][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.479717][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.493240][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.503357][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.516628][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.529151][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.540615][ T4186] device veth1_macvtap entered promiscuous mode [ 66.548615][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.556607][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.565104][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.573582][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.582562][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.593153][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.603514][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.614556][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.628432][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.640923][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.651868][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.664497][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.679871][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.691108][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.701114][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.711855][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.722039][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.733158][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.744611][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.771410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.780251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.789865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.801102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.819684][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.829353][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 66.836260][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.838863][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.853566][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.856693][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.869882][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.895155][ T1599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.895701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.911955][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 66.916552][ T1599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.919278][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 66.933535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.944270][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 66.949115][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.959877][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 66.968328][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.978461][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.989591][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.034609][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.044742][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.056568][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.098516][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.109452][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.120773][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.131501][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.141633][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.154326][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.164570][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.175365][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.186815][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.202659][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.214861][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.230289][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.242012][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.252462][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.265164][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.275589][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.286576][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.318596][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.335496][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.344919][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.356245][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.366558][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.408500][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.420766][ T4274] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 67.455785][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.466691][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.487834][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.578867][ T4276] Config c/1 of g_uac2 needs at least one function. [ 67.586399][ T4276] udc usbip-vudc.0: failed to start g_uac2: -22 [ 67.615870][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.631247][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.660281][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.702945][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.719112][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.745766][ T1595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.809278][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.828333][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.843117][ T4282] syz.0.7[4282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.843234][ T4282] syz.0.7[4282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.865420][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.891943][ T1595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.919019][ T1595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.935234][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.996235][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.942284][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 68.995024][ T1599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.004604][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.025606][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 69.045034][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.053494][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 69.454934][ T1599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.113240][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 70.127407][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 70.144641][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.257267][ T4297] process 'syz.2.3' launched './file2' with NULL argv: empty string added [ 71.317194][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 71.327185][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 71.337177][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 71.347175][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.357179][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.367179][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.377179][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.387173][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.397177][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.407176][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.587010][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.594165][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.812744][ T4306] jffs2: notice: (4306) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 71.872631][ T4308] Invalid ELF header len 9 [ 72.059464][ T4317] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.157349][ T1108] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.183343][ T4321] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 72.190333][ T4321] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 72.253394][ T4321] vhci_hcd vhci_hcd.0: Device attached [ 72.325843][ T4328] syz.1.15 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 72.354288][ T4307] usbip-vudc usbip-vudc.0: gadget not bound [ 72.447306][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 72.580331][ T4269] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 72.588331][ T4194] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 72.597815][ T1108] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 72.610131][ T1108] usb 1-1: config 0 has no interface number 0 [ 72.647257][ T1108] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 72.678610][ T1108] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 72.716646][ T1108] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 72.764231][ T1108] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 72.774005][ T4340] serial 00:04: in use; can't configure [ 72.800534][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.858321][ T1108] usb 1-1: config 0 descriptor?? [ 72.919471][ T1108] ldusb 1-1:0.55: Interrupt in endpoint not found [ 72.967527][ T4269] usb 4-1: config 0 has no interfaces? [ 72.973188][ T4269] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 73.006331][ T4269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.133607][ T4269] usb 4-1: config 0 descriptor?? [ 73.306061][ T4234] usb 1-1: USB disconnect, device number 2 [ 73.559783][ T4317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12'. [ 73.603205][ T4317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12'. [ 73.825144][ T4238] usb 4-1: USB disconnect, device number 2 [ 73.867611][ T4194] usb 39-1: device descriptor read/64, error -71 [ 74.462101][ T4323] vhci_hcd: connection closed [ 74.463618][ T153] vhci_hcd: stop threads [ 74.477278][ T4194] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 74.485911][ T4357] device veth1_macvtap left promiscuous mode [ 74.510425][ T153] vhci_hcd: release socket [ 74.517387][ T4357] device macsec0 entered promiscuous mode [ 74.546444][ T153] vhci_hcd: disconnect device [ 75.167392][ T4269] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 75.628143][ T4269] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 75.678691][ T4269] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 75.812218][ T4269] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 76.148058][ T4269] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 76.161581][ T4269] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 76.198319][ T4269] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 76.327815][ T4269] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 76.335840][ T4269] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 76.429019][ T4447] ======================================================= [ 76.429019][ T4447] WARNING: The mand mount option has been deprecated and [ 76.429019][ T4447] and is ignored by this kernel. Remove the mand [ 76.429019][ T4447] option from the mount to silence this warning. [ 76.429019][ T4447] ======================================================= [ 76.569282][ T4447] overlayfs: failed to resolve './file1/file0': -2 [ 76.594574][ T4269] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 77.097705][ T4269] usb 1-1: string descriptor 0 read error: -22 [ 77.113286][ T4269] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 77.168981][ T4269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.320470][ T4269] adutux 1-1:168.0: interrupt endpoints not found [ 77.410898][ T4455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 77.639799][ T4456] batman_adv: batadv0: Adding interface: dummy0 [ 77.639824][ T1108] usb 1-1: USB disconnect, device number 3 [ 77.646404][ T4456] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.646451][ T4456] batman_adv: batadv0: Interface activated: dummy0 [ 77.683141][ T4320] ODEBUG: Out of memory. ODEBUG disabled [ 79.629507][ T4194] vhci_hcd: vhci_device speed not set [ 81.096349][ T4476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34'. [ 81.550481][ T1323] cfg80211: failed to load regulatory.db [ 82.242921][ T26] audit: type=1800 audit(1787866459.582:2): pid=4488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.36" name="memory_backed" dev="configfs" ino=33923 res=0 errno=0 [ 82.378645][ T4493] jffs2: notice: (4493) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 82.562797][ T26] audit: type=1800 audit(1787866459.602:3): pid=4488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.36" name="zone_nr_conv" dev="configfs" ino=33924 res=0 errno=0 [ 82.682215][ T4492] netlink: 'syz.4.36': attribute type 1 has an invalid length. [ 82.859441][ T26] audit: type=1800 audit(1787866459.612:4): pid=4488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.36" name="power" dev="configfs" ino=33925 res=0 errno=0 [ 83.429159][ T4488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.36'. [ 83.449676][ T4492] netlink: 28 bytes leftover after parsing attributes in process `syz.4.36'. [ 83.494060][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.759724][ T4320] Set syz1 is full, maxelem 65536 reached [ 84.017739][ T4194] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 85.227280][ T4194] usb 2-1: unable to get BOS descriptor set [ 85.897152][ T4194] usb 2-1: not running at top speed; connect to a high speed hub [ 86.012049][ T26] audit: type=1800 audit(1787866463.352:5): pid=4525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.49" name="zoned" dev="configfs" ino=34000 res=0 errno=0 [ 86.327828][ T4194] usb 2-1: config 1 interface 0 has no altsetting 0 [ 86.528353][ T4194] usb 2-1: New USB device found, idVendor=046d, idProduct=101b, bcdDevice= 0.40 [ 86.945628][ T4194] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.980840][ T4194] usb 2-1: Product: syz [ 86.985474][ T4194] usb 2-1: Manufacturer: syz [ 87.030376][ T4194] usb 2-1: SerialNumber: syz [ 87.039661][ T4536] jffs2: notice: (4536) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.099958][ T4528] usbip-vudc usbip-vudc.0: gadget not bound [ 87.107526][ T4194] usb 2-1: can't set config #1, error -71 [ 87.121863][ T4194] usb 2-1: USB disconnect, device number 2 [ 87.260695][ T4192] ------------[ cut here ]------------ [ 87.266698][ T4192] kernel BUG at fs/jffs2/nodelist.c:462! [ 87.287607][ T4550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.57'. [ 87.313220][ T4192] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 87.319445][ T4192] CPU: 1 PID: 4192 Comm: syz-executor Not tainted syzkaller #0 [ 87.326993][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.337439][ T4192] RIP: 0010:jffs2_del_ino_cache+0x2a9/0x2b0 [ 87.343345][ T4192] Code: 18 ff e9 60 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5a fe ff ff 4c 89 e7 e8 81 fc 18 ff e9 4d fe ff ff e8 67 d4 d3 fe <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 10 48 [ 87.362942][ T4192] RSP: 0018:ffffc90002e4fb38 EFLAGS: 00010293 [ 87.369005][ T4192] RAX: ffffffff82a53b39 RBX: ffff88805e816080 RCX: ffff88807d255940 [ 87.376967][ T4192] RDX: 0000000000000000 RSI: ffff88805e816080 RDI: ffff88807d6c6000 [ 87.385095][ T4192] RBP: 0000000000000006 R08: ffff88807d6c636b R09: 1ffff1100fad8c6d [ 87.393052][ T4192] R10: dffffc0000000000 R11: ffffed100fad8c6e R12: ffff88805e816080 [ 87.401027][ T4192] R13: dffffc0000000000 R14: ffff88805e8160a0 R15: ffff88807d6c6000 [ 87.409005][ T4192] FS: 0000555583445500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 87.417926][ T4192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.424497][ T4192] CR2: 0000001b3291eff8 CR3: 000000006241d000 CR4: 00000000003506e0 [ 87.432466][ T4192] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.440503][ T4192] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.448902][ T4192] Call Trace: [ 87.452175][ T4192] [ 87.455098][ T4192] ? jffs2_do_clear_inode+0x310/0x390 [ 87.460555][ T4192] jffs2_do_clear_inode+0x31b/0x390 [ 87.465741][ T4192] ? jffs2_statfs+0x370/0x370 [ 87.470408][ T4192] evict+0x4b6/0x8b0 [ 87.474313][ T4192] ? evict_inodes+0x577/0x6e0 [ 87.478979][ T4192] ? proc_nr_inodes+0x320/0x320 [ 87.483833][ T4192] ? do_raw_spin_unlock+0x11d/0x230 [ 87.489126][ T4192] evict_inodes+0x650/0x6e0 [ 87.493627][ T4192] ? clear_inode+0x150/0x150 [ 87.498289][ T4192] ? jffs2_sync_fs+0x93/0xa0 [ 87.503127][ T4192] generic_shutdown_super+0x93/0x300 [ 87.508397][ T4192] kill_mtd_super+0x1f/0x60 [ 87.512897][ T4192] jffs2_kill_sb+0x92/0xb0 [ 87.517305][ T4192] deactivate_locked_super+0x93/0xf0 [ 87.522587][ T4192] cleanup_mnt+0x426/0x4d0 [ 87.527162][ T4192] task_work_run+0x125/0x1a0 [ 87.531742][ T4192] exit_to_user_mode_loop+0x10f/0x130 [ 87.537101][ T4192] exit_to_user_mode_prepare+0xee/0x180 [ 87.542638][ T4192] syscall_exit_to_user_mode+0x16/0x40 [ 87.548082][ T4192] do_syscall_64+0x58/0xa0 [ 87.552563][ T4192] ? clear_bhb_loop+0x30/0x80 [ 87.557220][ T4192] ? clear_bhb_loop+0x30/0x80 [ 87.561881][ T4192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.567766][ T4192] RIP: 0033:0x7f99e416a317 [ 87.572167][ T4192] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 87.591753][ T4192] RSP: 002b:00007ffd4ae5ff28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 87.600976][ T4192] RAX: 0000000000000000 RBX: 00007f99e41ff474 RCX: 00007f99e416a317 [ 87.609141][ T4192] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4ae5ffe0 [ 87.617290][ T4192] RBP: 00007ffd4ae5ffe0 R08: 00007ffd4ae60fe0 R09: 00000000ffffffff [ 87.625257][ T4192] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4ae61070 [ 87.633323][ T4192] R13: 00007f99e41ff474 R14: 0000000000015490 R15: 00007ffd4ae610b0 [ 87.641304][ T4192] [ 87.644396][ T4192] Modules linked in: [ 87.648354][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.670834][ T4192] ---[ end trace 4202294754d8c7ff ]--- [ 87.676333][ T4192] RIP: 0010:jffs2_del_ino_cache+0x2a9/0x2b0 [ 87.682395][ T4550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.57'. [ 87.693117][ T4192] Code: 18 ff e9 60 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5a fe ff ff 4c 89 e7 e8 81 fc 18 ff e9 4d fe ff ff e8 67 d4 d3 fe <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 10 48 [ 87.716072][ T4192] RSP: 0018:ffffc90002e4fb38 EFLAGS: 00010293 [ 87.722924][ T4232] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.732909][ T4192] RAX: ffffffff82a53b39 RBX: ffff88805e816080 RCX: ffff88807d255940 [ 87.741344][ T4192] RDX: 0000000000000000 RSI: ffff88805e816080 RDI: ffff88807d6c6000 [ 87.751529][ T4192] RBP: 0000000000000006 R08: ffff88807d6c636b R09: 1ffff1100fad8c6d [ 87.761228][ T4192] R10: dffffc0000000000 R11: ffffed100fad8c6e R12: ffff88805e816080 [ 87.772191][ T4192] R13: dffffc0000000000 R14: ffff88805e8160a0 R15: ffff88807d6c6000 [ 87.781315][ T4192] FS: 0000555583445500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 87.792480][ T4192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.799576][ T4192] CR2: 0000001b32911ff8 CR3: 000000006241d000 CR4: 00000000003506f0 [ 87.809549][ T4192] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.828530][ T4192] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.837426][ T4192] Kernel panic - not syncing: Fatal exception [ 87.843880][ T4192] Kernel Offset: disabled [ 87.848212][ T4192] Rebooting in 86400 seconds..