last executing test programs: 18.431538208s ago: executing program 4 (id=169): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 13.835593858s ago: executing program 4 (id=185): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="020a007b9497", 'wlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x5ea, 0x0}}], 0x3e8, 0x0) 11.10476941s ago: executing program 4 (id=192): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 10.956725362s ago: executing program 0 (id=193): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) write(r3, &(0x7f0000000000)="3b0000000100fa", 0x7) 10.010161437s ago: executing program 4 (id=195): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 9.197379149s ago: executing program 0 (id=196): mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 9.15831871s ago: executing program 3 (id=197): lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="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"}) 9.064566551s ago: executing program 1 (id=198): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f046}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000004280)={0x0, 0x0, {0xd, 0x8, 0x201a, 0x1, 0x2, 0xf, 0x5, 0x5}}) sendfile(r0, r1, 0x0, 0xffffffff004) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) 6.876835695s ago: executing program 0 (id=200): syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x1010052, &(0x7f0000000400)={[{@order_strict}, {@nodiscard}, {@errors_remount_ro}, {@norecovery}, {@nobarrier}, {}, {@nodiscard}, {@discard}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgUI+IS++gkNAIQ1FDD0T8MT0gKiGKhDhVHKi4UCqlSK0EqlShntqeWvXWE+qFSlUqBfVSpMRV7PfWu8+e7npsz9q7v5/07ds3b3a+b7yRMzOefRuAkdVYfTx5cr4I4d1P33n05aeK315fdld7jSOrj0XstUIIzY5+kW3v87jg6pWXzmzWFuH46mPqh8cut187HUJYDkfCZ6EVPlpc+vLD9x45+vHrU7e8dfGZV3Zp99vy/QAAgGF06c9Lf7/vn396YO6rS4dPh8n28nR83or96XjcfyweKKfj5Ubo7hcd0WkiW28sRiNbbyxbbzzLM16Sr5ltp1my3kSPfGMdyzbbTwAAANiP0nltKxSNha5+o7GwsHbef93nsxPFwnPnl85dGFChAAAAQGX/eXX1plshhBBCCCGEEEIMcazMDvoKBAAAADBq8vnCNlje2Zm62ltr9Zf/8sONzV8PO6Duf//y76/8H7zmNw4AANUN69Fk2q90HJ3mMcjnERzLXrfV4/9Gtp3xLdZZNq/gfplvsKzO/Oe6V5XVv9X3cVDK6s/nw9yryurP5+ncq8rqn6y5jqrK6p+quY6qyuo/UHMdVZXVf7DmOqoqq3+65jqqKqt/puY6qiqr/4aa66iqrP5DNddRVVn9++W22rL6WzXXUVVZ/XM111FVWf031lxHVWX131RzHVWV1X9zzXUMyp2xTT+Hw9l45/lzfk63X87xAAAAYNT91/x/QgghhBBCCCHE0Merg74AAQAAAAxc+lxA+tT7SpTGx3qMj/cYb/YYn+gxPtljHAAAAAjhd2+cu+3tYv1z/tudDy/NG5XmX9rqPEb5fIRbzb/dec+2m3+/zFsGAADAaCm+99m1+x99/4W5ry4dPt1x9nstnu+meUDH47WBT2I/3Rcwk/WLdA59ujtPo2S9/PrADWXbe3ybOwoAAAAjLJ2/t0LRWOg4726FRmNhYf18fD40i3Pnl84ei/30/Sx/nG1OXl/+UM11AwAAAP1bP9/f/Pw/fY/vfJgoFp47v3Tuwlp/pr282ei8LjC7vrzovC7QypYfL1l+IvbT93f+YPbA6vKFMz9cemqndx4AAABGxIUXLz7z5NLS2R954oknnrSfDPo3EwAAsNO++OKd5o9PzPx+7fP/6/Pfpc//H4n9Vpzb7y9xhXSfQPocwIbP6z/RnWe2bL3nu9drZeuNxZjM6p7q2E7omG8wvW6uLF+rezsTJfmms3wzWb58noLxbP2U71C2PJ+fMK03my3P52Ecz3IUWf67AwAAAJRbfOHZ5xcvvHjxwfPPPvn02afPPnfi+Knvnjp17KHvPLS4el//Yufd/QAAAMB+tH7T76ArAQAAAAAAAAAAAAAAAAAAgNFVx9eJDXofAQAAYNT9+9UQwrIQoiTWvgJz8HUIIYQQQvSOsT1QgxBiz8bKSv5N8wAAAAC76+qVl850thssFzuar7211lpzLeZN7cyDf5u7Hmm1yw93Xy85uKPVMOrq/vcv//7K/8FrO5t/Kj3p+/dfo3sDp6vlvXfxl/Od+W8f7zN/vv+PV8t/NMt/b+gv/8r7Wf4nquW/L8t/sM/8G/b/+Wr574/552P/6D395u9+/ydjm/bjQJ/5v53t/1Oh3/zZ/rf6TJh5IOYHgFHUGHQBuyQdJaTj6OnYT/sbDzdDfvfDVo//G9l2xrddefd203HQrbGfjpdmsrzJVuufzrZ3Q8U6c/vlrpKy+nfqfdxtZfU3a66jqrL6J2quo6qy+idrrqOqsvqnaq6jqrL6+z0PHbSy+vfLdeWy+qdrrqOqsvpnaq6jqrL6t/r/+KCU1X+o5jqqKqt/tuY6qiqrv+JltdqV1T9Xcx1VldV/Y811VFVW/00111FVWf0311zHoNwR27Lz4XT+ORvHUr+V9Sc3+VkO67UFAAAA2G/+Zf4/IYQQQgghhBBi6GNlZdBXIBik3f00MwB7ld//o837P9q8/6PN+8//k+7hL7J+MtZjfLzHeLPH+EQ2nv97newxflO23ZUojd/cY/xrPcYP9Ri/tcf4fI/x23qM395j/I4e4wAAAIyGW2Lr/BAAAACG18u/+uTN39z7xJW5ry4dPh0mNsw7fyz2J+Pf1t+I/Xze+6QZ/+b/k9j/RWz/ENt/ZOu7/wQAAAB2X/qeGH//BwAAgOGVvqfU+T8AAAAMr7nYOv8HAACA4XVjbJ3/AwAAwBArpjZfHNt0XeDu2PY7rx8AsPd9PbZ3xvZwbO+K7Tdim44D7ontN2uqDwDYOT///k9PvV2sz/d/Ihu/GpendoPltSsFRaN7Jv8DsT0Y22/1WU/+fQD95k8O9Zlnt/LPbjM/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8GquPJ0/OFyG8++k7j/5s4s2/Xl92V3uNI6uPRey1QgjN9uvS6Hr/13HFq1deOtPZXottEY6HIhTt5eGxy+1M0yGE5XAkfBZa4aPFpS8/fO+Rox+/PnXLWxefeWUXfwRd+wcAAADD6H8BAAD//8WNHkw=") r0 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 6.728629407s ago: executing program 2 (id=201): sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 5.690824953s ago: executing program 3 (id=202): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[], 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5.625124014s ago: executing program 1 (id=203): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0x8, 0x1}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000006080)={0xffffffffffffffff, 0xfff, 0x10}, 0xc) 4.939464605s ago: executing program 2 (id=204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r5, 0x540b, 0x2) 4.890193985s ago: executing program 1 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000001fc0)={0x2020}, 0x2020) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x4802, 0x0) setns(r4, 0x4000000) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) setitimer(0x0, 0x0, 0x0) pipe2$9p(0x0, 0x800) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 4.867267266s ago: executing program 3 (id=206): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r3, 0x0, 0x0) 3.503391177s ago: executing program 3 (id=207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x10, 0xffe0}, {}, {0x8, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x87, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x24, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x6, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xfc}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 3.463843037s ago: executing program 0 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) syz_emit_ethernet(0x106, &(0x7f0000000a40)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xd0, 0x3a, 0x0, @remote, @local, {[@routing={0x11, 0x2, 0x1, 0x10, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}]}, @hopopts={0x6c}, @fragment={0x6, 0x0, 0x9, 0x1, 0x0, 0x8, 0x64}, @hopopts={0x2b, 0x6, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x5, 0x8, [0x6, 0x2, 0x5b, 0x401, 0x200]}}, @padn]}, @routing={0x32, 0x4, 0x1, 0x4, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1]}], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @local, [@hopopts={0x2b, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xaf, 0x29, 0x1, {0x7fff, [{{0x2, 0x3}, 0x6, 0x10, 0x7, './file1'}, {{0x0, 0x2, 0x5}, 0x810, 0x4, 0x10, './file0/../file1'}, {{0x10, 0x3}, 0x1, 0x7, 0x7, './file1'}, {{0x2, 0x4, 0x1}, 0x5, 0x10, 0x7, './file0'}, {{0x0, 0x3, 0x1}, 0x1, 0x96, 0x7, './file1'}]}}, 0xaf) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) utime(0x0, 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 3.458607957s ago: executing program 1 (id=209): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) 3.457222987s ago: executing program 2 (id=210): socket$alg(0x26, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)) r0 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000100)=0x9) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000100) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.840185427s ago: executing program 1 (id=211): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) syz_open_dev$evdev(&(0x7f0000001080), 0x2, 0x800) r0 = syz_io_uring_setup(0x24f0, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0xffffffff, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x0, 0x4, 0x0, 0x0) 2.730715228s ago: executing program 3 (id=212): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x36) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a300000000008000440000000001400000011000100"/101], 0x68}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r2], 0x44}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 2.59415062s ago: executing program 1 (id=213): prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000100)=0x3, &(0x7f0000000140)=0x2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) rmdir(&(0x7f00000001c0)='./file1\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$clear(0x3, 0xfffffffffffffffd) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x4) r4 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_getsetattr(r4, &(0x7f0000000700)={0x800, 0x10, 0x9}, 0x0) 1.905889451s ago: executing program 0 (id=214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) write$P9_RSTATu(r4, &(0x7f0000000580)={0x239, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) 1.31416867s ago: executing program 2 (id=215): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) read(r1, &(0x7f0000000200)=""/209, 0x128) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000180)={0x2, 0x6, 0x6}) 1.262118441s ago: executing program 4 (id=216): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, 0x0, 0x0) creat(&(0x7f00000004c0)='./file0\x00', 0x40) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40)={[], [], 0x2c}, 0x1, 0xee6, &(0x7f0000002d40)="$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") 1.131144693s ago: executing program 2 (id=217): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r3, 0x0, 0x0) 899.313547ms ago: executing program 0 (id=218): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x14018, &(0x7f00000000c0)={[{@barrier}, {@umask={'umask', 0x3d, 0x5}}, {@nls={'nls', 0x3d, 'cp862'}}, {@uid}]}, 0x1, 0x6ac, &(0x7f0000000b40)="$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") 151.481848ms ago: executing program 2 (id=219): r0 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x8, 0x1000) fanotify_mark(r3, 0x105, 0x2a, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r3, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e04093120"], 0x7) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x8000, 0x1, 0x56555941, 0x3, 0x9, [{0x3, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x9, 0x5}, {0x2, 0x10000}, {0x5, 0x400}, {0xc, 0x3000000}], 0xd, 0x3, 0x3, 0x1, 0x7}}) 34.294499ms ago: executing program 3 (id=220): r0 = io_uring_setup(0x218a, &(0x7f0000000240)={0x0, 0xad5e, 0x2, 0x4, 0x221}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r5, 0x540b, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.194' (ED25519) to the list of known hosts. [ 51.890590][ T4240] cgroup: Unknown subsys name 'net' [ 52.021962][ T4240] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.273855][ T4240] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.591568][ T4264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.599756][ T4264] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.603456][ T4265] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.608097][ T4264] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.617069][ T4268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.622830][ T4264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.628989][ T4268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.636778][ T4264] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.643594][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.649996][ T4264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.656774][ T4268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.664064][ T4264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.670894][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.685501][ T4264] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.693503][ T4268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.694433][ T4269] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.701311][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.708160][ T4269] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.715308][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.723102][ T4264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.729367][ T4268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.736793][ T4264] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.743524][ T4268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.750016][ T4264] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.757174][ T4268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.764707][ T4264] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.771489][ T4268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.778819][ T4270] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.785610][ T4268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.799571][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.226276][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 55.245148][ T4253] chnl_net:caif_netlink_parms(): no params data found [ 55.304958][ T4252] chnl_net:caif_netlink_parms(): no params data found [ 55.392053][ T4254] chnl_net:caif_netlink_parms(): no params data found [ 55.449214][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.457044][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.465285][ T4266] device bridge_slave_0 entered promiscuous mode [ 55.481070][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.488389][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.496101][ T4253] device bridge_slave_0 entered promiscuous mode [ 55.505727][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.512975][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.520682][ T4253] device bridge_slave_1 entered promiscuous mode [ 55.534721][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.541954][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.549919][ T4266] device bridge_slave_1 entered promiscuous mode [ 55.564919][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.572117][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.579942][ T4252] device bridge_slave_0 entered promiscuous mode [ 55.588022][ T4255] chnl_net:caif_netlink_parms(): no params data found [ 55.611762][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.618989][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.626850][ T4252] device bridge_slave_1 entered promiscuous mode [ 55.674517][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.695060][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.713307][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.723888][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.742074][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.755276][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.774886][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.782718][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.791197][ T4254] device bridge_slave_0 entered promiscuous mode [ 55.824978][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.832330][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.840559][ T4254] device bridge_slave_1 entered promiscuous mode [ 55.879301][ T4253] team0: Port device team_slave_0 added [ 55.897222][ T4266] team0: Port device team_slave_0 added [ 55.904746][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.917405][ T4252] team0: Port device team_slave_0 added [ 55.923496][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.931018][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.938884][ T4255] device bridge_slave_0 entered promiscuous mode [ 55.947127][ T4253] team0: Port device team_slave_1 added [ 55.953043][ T4255] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.960740][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.969419][ T4255] device bridge_slave_1 entered promiscuous mode [ 55.978033][ T4266] team0: Port device team_slave_1 added [ 55.993264][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.003566][ T4252] team0: Port device team_slave_1 added [ 56.064042][ T4255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.081801][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.089172][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.115515][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.127882][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.134955][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.161174][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.172839][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.180110][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.206663][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.219680][ T4255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.231062][ T4254] team0: Port device team_slave_0 added [ 56.238966][ T4254] team0: Port device team_slave_1 added [ 56.245165][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.252194][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.278397][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.290047][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.297039][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.323043][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.342660][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.349917][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.376321][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.426318][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.433375][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.459820][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.472027][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.479074][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.505114][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.519935][ T4255] team0: Port device team_slave_0 added [ 56.543549][ T4266] device hsr_slave_0 entered promiscuous mode [ 56.550601][ T4266] device hsr_slave_1 entered promiscuous mode [ 56.562848][ T4255] team0: Port device team_slave_1 added [ 56.628628][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.635619][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.661965][ T4255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.676711][ T4252] device hsr_slave_0 entered promiscuous mode [ 56.683615][ T4252] device hsr_slave_1 entered promiscuous mode [ 56.690412][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.698385][ T4252] Cannot create hsr debugfs directory [ 56.706844][ T4253] device hsr_slave_0 entered promiscuous mode [ 56.713465][ T4253] device hsr_slave_1 entered promiscuous mode [ 56.720437][ T4253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.728136][ T4253] Cannot create hsr debugfs directory [ 56.748388][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.755358][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.781491][ T4255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.812050][ T4254] device hsr_slave_0 entered promiscuous mode [ 56.818913][ T4254] device hsr_slave_1 entered promiscuous mode [ 56.825367][ T4254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.833688][ T4270] Bluetooth: hci4: command 0x0409 tx timeout [ 56.833752][ T4254] Cannot create hsr debugfs directory [ 56.897401][ T4255] device hsr_slave_0 entered promiscuous mode [ 56.904210][ T4255] device hsr_slave_1 entered promiscuous mode [ 56.911197][ T4255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.917054][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 56.918985][ T4270] Bluetooth: hci2: command 0x0409 tx timeout [ 56.924951][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 56.931152][ T4256] Bluetooth: hci1: command 0x0409 tx timeout [ 56.945033][ T4255] Cannot create hsr debugfs directory [ 57.221425][ T4266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.237493][ T4266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.246918][ T4266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.259294][ T4266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.301819][ T4252] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.315830][ T4252] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.337577][ T4252] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.346666][ T4252] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.412272][ T4253] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.433497][ T4253] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.443577][ T4253] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.466411][ T4253] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.503203][ T4255] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.537314][ T4255] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.554134][ T4255] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.564130][ T4255] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.595955][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.611130][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.634269][ T4254] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.643324][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.653546][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.664637][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.673414][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.692914][ T4254] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.705315][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.714317][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.739157][ T4254] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.749365][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.758229][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.769408][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.776718][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.785204][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.797307][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.806447][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.815170][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.822280][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.851779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.861217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.870795][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.877923][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.890076][ T4254] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.918100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.926289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.935208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.948288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.957978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.984695][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.991898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.000083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.010503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.019353][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.026472][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.034206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.069153][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.079644][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.088950][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.098719][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.107611][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.117723][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.127096][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.135437][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.144101][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.152660][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.161898][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.170864][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.179506][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.189358][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.208406][ T4255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.215618][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.223786][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.239190][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.251185][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.260218][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.273276][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.286621][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.295963][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.333778][ T4255] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.364868][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.382221][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.391041][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.405511][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.414459][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.421682][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.444814][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.453787][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.469537][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.476691][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.490302][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.501321][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.515376][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.525282][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.537500][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.545428][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.575248][ T4253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.588038][ T4253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.612003][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.633829][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.655563][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.662825][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.678160][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.690310][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.701794][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.708972][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.739259][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.749932][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.759237][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.773593][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.782529][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.791673][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.800454][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.809751][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.817856][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.859025][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.870417][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.879264][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.889598][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.898787][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.906477][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 58.908736][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.921104][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.929896][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.937755][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.947744][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.958001][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.972957][ T4255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.986507][ T4262] Bluetooth: hci2: command 0x041b tx timeout [ 58.990442][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.992533][ T4262] Bluetooth: hci0: command 0x041b tx timeout [ 59.005865][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 59.008776][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.016031][ T4270] Bluetooth: hci3: command 0x041b tx timeout [ 59.030934][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.039973][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.047982][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.057411][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.069522][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.099962][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.113051][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.137817][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.161623][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.177370][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.215205][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.225839][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.237395][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.244515][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.252896][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.261857][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.271228][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.278379][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.287037][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.296682][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.305197][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.321543][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.331224][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.348600][ T4266] device veth0_vlan entered promiscuous mode [ 59.374704][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.384822][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.401482][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.413296][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.425147][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.440384][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.450043][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.462143][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.484517][ T4266] device veth1_vlan entered promiscuous mode [ 59.520369][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.529056][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.537588][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.548096][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.557194][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.565480][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.574343][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.582946][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.592091][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.600232][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.609211][ T4252] device veth0_vlan entered promiscuous mode [ 59.625495][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.661220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.670193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.689262][ T4252] device veth1_vlan entered promiscuous mode [ 59.701036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.709826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.734835][ T4266] device veth0_macvtap entered promiscuous mode [ 59.764022][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.775891][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.798422][ T4255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.807481][ T4266] device veth1_macvtap entered promiscuous mode [ 59.821905][ T4252] device veth0_macvtap entered promiscuous mode [ 59.832150][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.841120][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.849869][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.859809][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.870972][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.881762][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.911253][ T4252] device veth1_macvtap entered promiscuous mode [ 59.930871][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.941329][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.980382][ T4253] device veth0_vlan entered promiscuous mode [ 59.994280][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.003202][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.013372][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.021897][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.031025][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.039213][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.054364][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.070811][ T4255] device veth0_vlan entered promiscuous mode [ 60.081686][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.092968][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.105213][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.117530][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.124906][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.133645][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.142636][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.151507][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.160864][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.168454][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.176504][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.185011][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.194117][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.205263][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.214321][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.223099][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.233513][ T4253] device veth1_vlan entered promiscuous mode [ 60.248738][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.259966][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.272274][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.283447][ T4252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.292327][ T4252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.301395][ T4252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.310306][ T4252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.325591][ T4255] device veth1_vlan entered promiscuous mode [ 60.333852][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.342186][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.351134][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.359963][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.368873][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.379489][ T4266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.388780][ T4266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.398256][ T4266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.407588][ T4266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.442496][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.473796][ T4253] device veth0_macvtap entered promiscuous mode [ 60.490981][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.500134][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.514633][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.532663][ T4253] device veth1_macvtap entered promiscuous mode [ 60.561507][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.575688][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.604156][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.620517][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.630559][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.641559][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.652608][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.696164][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.712706][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.722345][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.736817][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.757707][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.769381][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.781326][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.794028][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.811948][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.826976][ T4255] device veth0_macvtap entered promiscuous mode [ 60.857132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.865543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.875199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.886482][ T4255] device veth1_macvtap entered promiscuous mode [ 60.894265][ T4253] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.905231][ T4253] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.914282][ T4253] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.924477][ T4253] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.959721][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.985013][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.986569][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 61.001910][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.013473][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.031642][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.042544][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.057214][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.066760][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 61.073168][ T4262] Bluetooth: hci2: command 0x040f tx timeout [ 61.073628][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 61.079619][ T4262] Bluetooth: hci3: command 0x040f tx timeout [ 61.080417][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.107578][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.118502][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.131202][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.147030][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.157630][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.167751][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.178848][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.188997][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.199546][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.210574][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.220861][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.229670][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.239626][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.247965][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.256906][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.265523][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.274226][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.290303][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.299556][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.330142][ T4255] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.342923][ T4255] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.351941][ T4255] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.362520][ T4255] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.413937][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.423281][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.439235][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.474798][ T4254] device veth0_vlan entered promiscuous mode [ 61.492385][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.507463][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.515786][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.516670][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.541907][ T4254] device veth1_vlan entered promiscuous mode [ 61.574050][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.586157][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.594120][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.614250][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.623497][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.650160][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.662942][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.683418][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.820257][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.092785][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.243488][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.260625][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.382285][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.397471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.404989][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.415459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.427567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.574973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.636820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.678854][ T4254] device veth0_macvtap entered promiscuous mode [ 62.744143][ T4254] device veth1_macvtap entered promiscuous mode [ 62.774626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.848474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.077785][ T4256] Bluetooth: hci4: command 0x0419 tx timeout [ 63.146648][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 63.147259][ T4256] Bluetooth: hci3: command 0x0419 tx timeout [ 63.160221][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 63.166507][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 63.371484][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.398054][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.525482][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.555823][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.575276][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.591056][ T4353] loop1: detected capacity change from 0 to 1024 [ 63.592438][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.615588][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.633592][ T4353] ======================================================= [ 63.633592][ T4353] WARNING: The mand mount option has been deprecated and [ 63.633592][ T4353] and is ignored by this kernel. Remove the mand [ 63.633592][ T4353] option from the mount to silence this warning. [ 63.633592][ T4353] ======================================================= [ 63.636671][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.717948][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.767924][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.783122][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.805343][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.826409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.836062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 63.846046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 63.856048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 63.864348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 63.872679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 63.880277][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.891109][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.902992][ T4356] QAT: Device 7 not found [ 63.909122][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.919735][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.966270][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.982547][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.003182][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.056997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.065776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.097383][ T4362] input: syz0 as /devices/virtual/input/input5 [ 64.212406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.232023][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.306232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.404022][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.510179][ T4353] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 64.564486][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.787567][ T4254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.912336][ T4254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.941117][ T4254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.957705][ T26] audit: type=1800 audit(1750987474.350:2): pid=4353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 65.025905][ T4254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.483385][ T4367] loop3: detected capacity change from 0 to 131072 [ 65.497172][ T4353] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.7: Allocating blocks 385-513 which overlap fs metadata [ 65.519846][ T4367] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 65.528405][ T4367] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 65.529955][ T4352] EXT4-fs (loop1): pa ffff888075368620: logic 16, phys. 129, len 24 [ 65.545122][ T4352] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 65.566353][ T4243] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.579617][ T4367] F2FS-fs (loop3): invalid crc value [ 65.679075][ T4367] F2FS-fs (loop3): Found nat_bits in checkpoint [ 65.698004][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.728405][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.733756][ T4367] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 65.743444][ T4367] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 65.778232][ T4243] usb 1-1: Using ep0 maxpacket: 16 [ 65.783413][ T4367] F2FS-fs (loop3): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 65.820157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.958739][ T4243] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 65.968192][ T4243] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 65.978011][ T4243] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 65.981823][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.000280][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.004485][ T4243] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 66.613691][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.648199][ T4243] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 66.699396][ T4243] usb 1-1: config 1 interface 0 has no altsetting 0 [ 66.740116][ T4243] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 66.774259][ T4243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.911611][ T4377] syz.3.11 (4377): drop_caches: 2 [ 66.933348][ T4252] Trying to write to read-only block-device loop1 [ 66.982604][ T56] Trying to write to read-only block-device loop1 [ 66.990606][ T4252] Trying to write to read-only block-device loop1 [ 67.002917][ T4243] usb 1-1: can't set config #1, error -71 [ 67.013045][ T4243] usb 1-1: USB disconnect, device number 2 [ 67.057268][ T56] Trying to write to read-only block-device loop1 [ 67.063765][ T56] Trying to write to read-only block-device loop1 [ 67.078554][ T4252] Trying to write to read-only block-device loop1 [ 67.137250][ T4252] Trying to write to read-only block-device loop1 [ 67.143753][ T4252] Trying to write to read-only block-device loop1 [ 67.187835][ T56] Trying to write to read-only block-device loop1 [ 67.194402][ T56] Trying to write to read-only block-device loop1 [ 67.235025][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 71.319855][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.326451][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.431049][ T4426] loop1: detected capacity change from 0 to 128 [ 71.625647][ T4430] loop4: detected capacity change from 0 to 64 [ 71.640088][ T4271] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.435757][ T26] audit: type=1800 audit(1750987481.820:3): pid=4430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.23" name="file0" dev="loop4" ino=17 res=0 errno=0 [ 73.634675][ T4443] loop1: detected capacity change from 0 to 512 [ 73.661082][ T4446] loop2: detected capacity change from 0 to 128 [ 73.676931][ T4443] /dev/loop1: Can't open blockdev [ 73.863182][ T4271] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.903348][ T26] audit: type=1804 audit(1750987483.290:4): pid=4446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.31" name="/newroot/4/file0/bus" dev="loop2" ino=1048595 res=1 errno=0 [ 74.585622][ T4457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33'. [ 74.722524][ T4460] Bluetooth: MGMT ver 1.22 [ 74.779124][ T4457] device hsr_slave_0 left promiscuous mode [ 76.450853][ T1665] cfg80211: failed to load regulatory.db [ 77.200928][ T4492] Invalid ELF header type: 3 != 1 [ 77.454632][ T4494] loop2: detected capacity change from 0 to 64 [ 77.516213][ T4257] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.736146][ T4257] usb 5-1: Using ep0 maxpacket: 16 [ 77.777134][ T4257] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.924721][ T4257] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 77.958971][ T26] audit: type=1800 audit(1750987487.350:5): pid=4494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.43" name="file0" dev="loop2" ino=17 res=0 errno=0 [ 78.151804][ T4257] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 78.273990][ T4257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.440601][ T4257] usb 5-1: config 0 descriptor?? [ 80.534806][ T4257] usbhid 5-1:0.0: can't add hid device: -71 [ 80.570339][ T4257] usbhid: probe of 5-1:0.0 failed with error -71 [ 80.631415][ T4257] usb 5-1: USB disconnect, device number 2 [ 81.183658][ T4508] loop1: detected capacity change from 0 to 1024 [ 81.204076][ T4508] /dev/loop1: Can't open blockdev [ 83.153875][ T4520] syz.1.49 (4520): drop_caches: 2 [ 83.219285][ T4527] overlayfs: failed to resolve './file1': -2 [ 84.085515][ T4538] loop0: detected capacity change from 0 to 512 [ 84.846950][ T4538] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 84.877228][ T4533] loop3: detected capacity change from 0 to 32768 [ 84.898725][ T4538] EXT4-fs (loop0): mount failed [ 85.921772][ T4533] XFS (loop3): Mounting V5 Filesystem [ 86.147373][ T4533] XFS (loop3): log mount failed [ 86.425034][ T4563] Invalid ELF header type: 3 != 1 [ 86.736408][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.986241][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 86.995205][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.129471][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 87.360291][ T7] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 87.473463][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.591640][ T7] usb 3-1: config 0 descriptor?? [ 89.373117][ T4569] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 89.379982][ T4569] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 89.485147][ T4569] vhci_hcd vhci_hcd.0: Device attached [ 89.545484][ T4571] vhci_hcd: connection closed [ 89.548371][ T11] vhci_hcd: stop threads [ 89.611233][ T11] vhci_hcd: release socket [ 89.629117][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 89.635079][ T7] usbhid: probe of 3-1:0.0 failed with error -71 [ 89.658847][ T11] vhci_hcd: disconnect device [ 89.687980][ T7] usb 3-1: USB disconnect, device number 2 [ 89.824790][ T4578] loop3: detected capacity change from 0 to 8 [ 92.336632][ T4605] NILFS (nullb0): couldn't find nilfs on the device [ 92.436084][ T4303] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.275639][ T4608] loop3: detected capacity change from 0 to 512 [ 93.465340][ T4303] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 93.516065][ T4608] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 93.807308][ T4303] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 93.826443][ T4303] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.839187][ T4303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.867469][ T4592] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 94.049280][ T4608] EXT4-fs (loop3): mount failed [ 94.191383][ T4620] loop4: detected capacity change from 0 to 16 [ 94.252740][ T4620] erofs: (device loop4): mounted with root inode @ nid 36. [ 96.725394][ T7] usb 3-1: USB disconnect, device number 3 [ 96.747097][ T4634] fuse: Bad value for 'fd' [ 98.235031][ T4654] loop3: detected capacity change from 0 to 128 [ 98.303573][ T4656] loop4: detected capacity change from 0 to 512 [ 98.317612][ T4654] FAT-fs (loop3): Directory bread(block 414) failed [ 98.346161][ T4654] FAT-fs (loop3): Directory bread(block 415) failed [ 98.352840][ T4654] FAT-fs (loop3): Directory bread(block 416) failed [ 98.367816][ T4631] loop1: detected capacity change from 0 to 32768 [ 98.386086][ T4654] FAT-fs (loop3): Directory bread(block 417) failed [ 98.392738][ T4654] FAT-fs (loop3): Directory bread(block 418) failed [ 98.435299][ T4654] FAT-fs (loop3): Directory bread(block 419) failed [ 98.453530][ T4654] FAT-fs (loop3): Directory bread(block 420) failed [ 98.467374][ T4654] FAT-fs (loop3): Directory bread(block 421) failed [ 98.954907][ T4665] FAT-fs (loop3): Directory bread(block 414) failed [ 98.962322][ T4665] FAT-fs (loop3): Directory bread(block 415) failed [ 99.277756][ T4656] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 99.336267][ T4656] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.421167][ T4669] loop3: detected capacity change from 0 to 512 [ 99.459688][ T4672] fuse: Bad value for 'fd' [ 99.589474][ T4271] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (4271) [ 99.874757][ T4669] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 100.149413][ T4669] EXT4-fs (loop3): mount failed [ 100.569200][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 104.556886][ T4713] loop3: detected capacity change from 0 to 128 [ 104.624426][ T4713] FAT-fs (loop3): Directory bread(block 414) failed [ 104.656422][ T4713] FAT-fs (loop3): Directory bread(block 415) failed [ 104.749644][ T4713] FAT-fs (loop3): Directory bread(block 416) failed [ 104.757430][ T4713] FAT-fs (loop3): Directory bread(block 417) failed [ 104.766093][ T4713] FAT-fs (loop3): Directory bread(block 418) failed [ 104.772842][ T4713] FAT-fs (loop3): Directory bread(block 419) failed [ 104.779651][ T4713] FAT-fs (loop3): Directory bread(block 420) failed [ 104.786355][ T4713] FAT-fs (loop3): Directory bread(block 421) failed [ 105.315266][ T4718] FAT-fs (loop3): Directory bread(block 414) failed [ 105.322172][ T4718] FAT-fs (loop3): Directory bread(block 415) failed [ 105.922070][ T4726] fuse: Bad value for 'fd' [ 106.810162][ T4722] loop3: detected capacity change from 0 to 4096 [ 106.911549][ T4722] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 107.233791][ T26] audit: type=1326 audit(1750987516.610:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4732 comm="syz.4.110" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96a978e929 code=0x0 [ 107.965136][ T4731] loop2: detected capacity change from 0 to 40427 [ 108.174295][ T4731] F2FS-fs (loop2): build fault injection attr: rate: 689, type: 0x3ffff [ 108.321647][ T4731] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 108.850937][ T4751] input: syz0 as /devices/virtual/input/input6 [ 110.421151][ T4754] loop3: detected capacity change from 0 to 32768 [ 110.554703][ T4761] loop0: detected capacity change from 0 to 128 [ 110.568857][ T4754] [ 110.568857][ T4754] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 110.568857][ T4754] [ 110.644747][ T4761] FAT-fs (loop0): Directory bread(block 414) failed [ 110.726113][ T4761] FAT-fs (loop0): Directory bread(block 415) failed [ 110.730243][ T4754] ERROR: (device loop3): diWrite: ixpxd invalid [ 110.730243][ T4754] [ 110.732806][ T4761] FAT-fs (loop0): Directory bread(block 416) failed [ 110.732860][ T4761] FAT-fs (loop0): Directory bread(block 417) failed [ 110.886793][ T4761] FAT-fs (loop0): Directory bread(block 418) failed [ 110.942097][ T4754] ERROR: (device loop3): txCommit: [ 110.942097][ T4754] [ 111.060918][ T4761] FAT-fs (loop0): Directory bread(block 419) failed [ 111.225648][ T4761] FAT-fs (loop0): Directory bread(block 420) failed [ 111.343166][ T4761] FAT-fs (loop0): Directory bread(block 421) failed [ 111.490232][ T4754] find_entry called with index = 0 [ 111.538912][ T4754] read_mapping_page failed! [ 111.569151][ T4754] ERROR: (device loop3): txCommit: [ 111.569151][ T4754] [ 111.770085][ T4769] FAT-fs (loop0): Directory bread(block 414) failed [ 111.776824][ T4769] FAT-fs (loop0): Directory bread(block 415) failed [ 112.032703][ T4772] loop1: detected capacity change from 0 to 16 [ 112.040298][ T4772] /dev/loop1: Can't open blockdev [ 112.915063][ T4483] ERROR: (device loop3): diWrite: ixpxd invalid [ 112.915063][ T4483] [ 112.951639][ T4483] ERROR: (device loop3): txCommit: [ 112.951639][ T4483] [ 113.020223][ T4483] jfs_write_inode: jfs_commit_inode failed! [ 113.027680][ T4255] [ 113.027680][ T4255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.027680][ T4255] [ 113.064048][ T4244] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 113.140464][ T4255] [ 113.140464][ T4255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.140464][ T4255] [ 113.836111][ T26] audit: type=1326 audit(1750987523.220:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4777 comm="syz.4.122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96a978e929 code=0x0 [ 114.580987][ T4791] ALSA: mixer_oss: invalid OSS volume '' [ 115.262566][ T4801] loop2: detected capacity change from 0 to 8 [ 117.374480][ T4806] loop4: detected capacity change from 0 to 128 [ 117.411839][ T4806] FAT-fs (loop4): Directory bread(block 414) failed [ 117.430986][ T4806] FAT-fs (loop4): Directory bread(block 415) failed [ 117.488233][ T4806] FAT-fs (loop4): Directory bread(block 416) failed [ 117.494894][ T4806] FAT-fs (loop4): Directory bread(block 417) failed [ 117.556666][ T4806] FAT-fs (loop4): Directory bread(block 418) failed [ 117.594466][ T4810] NILFS (nullb0): couldn't find nilfs on the device [ 117.622758][ T4806] FAT-fs (loop4): Directory bread(block 419) failed [ 117.788180][ T4806] FAT-fs (loop4): Directory bread(block 420) failed [ 117.911290][ T4806] FAT-fs (loop4): Directory bread(block 421) failed [ 118.565440][ T4815] FAT-fs (loop4): Directory bread(block 414) failed [ 118.572380][ T4815] FAT-fs (loop4): Directory bread(block 415) failed [ 119.136080][ T26] audit: type=1326 audit(1750987528.510:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4819 comm="syz.4.134" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96a978e929 code=0x0 [ 119.424076][ T4818] loop2: detected capacity change from 0 to 8192 [ 120.204737][ T4830] overlayfs: statfs failed on './file0' [ 120.256524][ T4833] loop4: detected capacity change from 0 to 512 [ 120.401680][ T4833] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 120.444841][ T4833] EXT4-fs (loop4): mount failed [ 120.606154][ T4302] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.818079][ T4302] usb 2-1: Using ep0 maxpacket: 32 [ 120.825132][ T4302] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 121.464086][ T4302] usb 2-1: config 0 has no interface number 0 [ 121.581920][ T4302] usb 2-1: config 0 interface 12 has no altsetting 0 [ 121.617675][ T4302] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 121.646673][ T4854] process 'syz.3.143' launched '/dev/fd/-1' with NULL argv: empty string added [ 121.649782][ T4302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.669607][ T4302] usb 2-1: Product: syz [ 121.673877][ T4302] usb 2-1: Manufacturer: syz [ 121.679177][ T4302] usb 2-1: SerialNumber: syz [ 121.696171][ T4302] usb 2-1: config 0 descriptor?? [ 121.724603][ T4855] loop2: detected capacity change from 0 to 65 [ 121.750278][ T4855] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 121.798902][ T4855] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop2 [ 121.917092][ T4855] loop2: detected capacity change from 0 to 8 [ 121.952596][ T4855] SQUASHFS error: lzo decompression failed, data probably corrupt [ 121.976731][ T4855] SQUASHFS error: Failed to read block 0x144: -5 [ 122.015178][ T4855] SQUASHFS error: Unable to read metadata cache entry [142] [ 122.057104][ T4855] SQUASHFS error: Unable to read inode 0x11f [ 122.120047][ T4855] mmap: syz.2.144 (4855) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.486546][ T4860] loop0: detected capacity change from 0 to 128 [ 122.534234][ T4860] FAT-fs (loop0): Directory bread(block 414) failed [ 122.560951][ T4860] FAT-fs (loop0): Directory bread(block 415) failed [ 122.586143][ T4860] FAT-fs (loop0): Directory bread(block 416) failed [ 122.606675][ T4860] FAT-fs (loop0): Directory bread(block 417) failed [ 122.613367][ T4860] FAT-fs (loop0): Directory bread(block 418) failed [ 122.630779][ T4860] FAT-fs (loop0): Directory bread(block 419) failed [ 122.638796][ T4862] NILFS (nullb0): couldn't find nilfs on the device [ 122.655713][ T4860] FAT-fs (loop0): Directory bread(block 420) failed [ 122.676351][ T4860] FAT-fs (loop0): Directory bread(block 421) failed [ 122.942537][ T4866] FAT-fs (loop0): Directory bread(block 414) failed [ 122.949534][ T4866] FAT-fs (loop0): Directory bread(block 415) failed [ 123.045729][ T4869] loop3: detected capacity change from 0 to 1024 [ 123.056112][ T4869] hfsplus: unable to parse mount options [ 123.120638][ T4244] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 123.130610][ T26] audit: type=1326 audit(1750987532.520:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4865 comm="syz.2.148" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff2978e929 code=0x0 [ 124.585086][ T4883] loop0: detected capacity change from 0 to 512 [ 124.807902][ T4883] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.153: bad orphan inode 13 [ 124.930796][ T4883] ext4_test_bit(bit=12, block=4) = 1 [ 124.938106][ T4883] is_bad_inode(inode)=0 [ 124.942284][ T4883] NEXT_ORPHAN(inode)=0 [ 124.979684][ T4883] max_ino=32 [ 124.983546][ T4883] i_nlink=1 [ 124.986857][ T4883] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 125.003671][ T4883] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.153: Unrecognised inode hash code 20 [ 125.015726][ T4883] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.153: Corrupt directory, running e2fsck is recommended [ 125.028900][ T4883] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.153: Unrecognised inode hash code 20 [ 125.040736][ T4883] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.153: Corrupt directory, running e2fsck is recommended [ 125.990865][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 126.177866][ T4302] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 126.185409][ T4302] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 126.193452][ T4302] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 126.201153][ T4302] f81534: probe of 2-1:0.12 failed with error -71 [ 126.213470][ T4302] usb 2-1: USB disconnect, device number 2 [ 126.295879][ T4901] loop0: detected capacity change from 0 to 1024 [ 126.416418][ T4908] random: crng reseeded on system resumption [ 126.533258][ T4901] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 126.846416][ T26] audit: type=1326 audit(1750987536.240:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4904 comm="syz.1.161" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6835f8e929 code=0x0 [ 127.038235][ T4906] loop3: detected capacity change from 0 to 512 [ 127.927441][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 128.183954][ T4906] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 128.287995][ T4906] EXT4-fs (loop3): mount failed [ 129.992165][ T4943] Zero length message leads to an empty skb [ 130.467075][ T4922] loop0: detected capacity change from 0 to 32768 [ 130.623955][ T4922] XFS (loop0): Mounting V5 Filesystem [ 130.875831][ T4966] loop2: detected capacity change from 0 to 1024 [ 130.883203][ T4966] hfsplus: unable to parse mount options [ 131.508139][ T4922] XFS (loop0): AIL initialisation failed: error -12 [ 131.596288][ T4752] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 131.639388][ T4922] XFS (loop0): log mount failed [ 131.656434][ T4244] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 131.837354][ T4752] usb 5-1: Using ep0 maxpacket: 32 [ 131.870442][ T4752] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 131.903261][ T26] audit: type=1326 audit(1750987541.290:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4968 comm="syz.1.172" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6835f8e929 code=0x0 [ 131.935206][ T4752] usb 5-1: config 0 has no interface number 0 [ 131.942847][ T4752] usb 5-1: config 0 interface 12 has no altsetting 0 [ 131.947320][ T4972] loop2: detected capacity change from 0 to 1024 [ 131.964998][ T4752] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 131.966813][ T4244] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 131.983562][ T4752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.983587][ T4752] usb 5-1: Product: syz [ 131.983628][ T4752] usb 5-1: Manufacturer: syz [ 131.983642][ T4752] usb 5-1: SerialNumber: syz [ 131.988521][ T4752] usb 5-1: config 0 descriptor?? [ 132.067009][ T4972] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 132.324657][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 132.370668][ T4980] overlayfs: statfs failed on './file0' [ 132.681664][ T4988] NILFS (nullb0): couldn't find nilfs on the device [ 132.749084][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.755927][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.412591][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 134.516905][ T4752] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 134.819629][ T5006] loop2: detected capacity change from 0 to 1024 [ 134.854903][ T5006] hfsplus: unable to parse mount options [ 134.947004][ T4752] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 134.954349][ T4752] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 134.981473][ T4244] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.987225][ T7] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.032734][ T7] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 135.068422][ T4752] f81534: probe of 5-1:0.12 failed with error -71 [ 135.089310][ T4752] usb 5-1: USB disconnect, device number 3 [ 135.134261][ T7] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.148599][ T5010] loop1: detected capacity change from 0 to 1024 [ 135.198975][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.208462][ T5010] /dev/loop1: Can't open blockdev [ 135.241304][ T4986] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 135.980601][ T5016] loop2: detected capacity change from 0 to 512 [ 136.342573][ T5016] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 136.721881][ T5016] EXT4-fs (loop2): mount failed [ 137.580506][ T26] audit: type=1326 audit(1750987546.970:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5024 comm="syz.1.189" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6835f8e929 code=0x0 [ 137.632612][ T5030] overlayfs: statfs failed on './file0' [ 137.851355][ T7] usb 1-1: USB disconnect, device number 3 [ 137.951434][ T5037] overlayfs: missing 'lowerdir' [ 138.043688][ T5039] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 142.119147][ T4302] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 142.315101][ T5065] loop0: detected capacity change from 0 to 4096 [ 142.326080][ T4302] usb 5-1: Using ep0 maxpacket: 32 [ 142.333398][ T4302] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 142.354321][ T4302] usb 5-1: config 0 has no interface number 0 [ 142.381122][ T4302] usb 5-1: config 0 interface 12 has no altsetting 0 [ 143.248800][ T4302] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 143.686171][ T4302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.694211][ T4302] usb 5-1: Product: syz [ 143.742490][ T4302] usb 5-1: Manufacturer: syz [ 143.756193][ T5080] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.775781][ T4302] usb 5-1: SerialNumber: syz [ 143.825125][ T4302] usb 5-1: config 0 descriptor?? [ 143.833356][ T26] audit: type=1800 audit(1750987553.230:13): pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.200" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 144.168473][ T26] audit: type=1326 audit(1750987553.560:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5084 comm="syz.2.204" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff2978e929 code=0x0 [ 144.494228][ T5094] syz.1.205 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 145.430497][ T5100] netlink: 40 bytes leftover after parsing attributes in process `syz.3.207'. [ 147.286109][ T4302] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 147.358185][ T4302] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 147.369371][ T4302] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 147.380144][ T4302] f81534: probe of 5-1:0.12 failed with error -71 [ 147.532599][ T5119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.546586][ T4302] usb 5-1: USB disconnect, device number 4 [ 147.745598][ T5131] loop4: detected capacity change from 0 to 4096 [ 147.924583][ T5137] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.600666][ T5140] loop0: detected capacity change from 0 to 1024 [ 148.935224][ T5144] [ 148.937603][ T5144] ====================================================== [ 148.944622][ T5144] WARNING: possible circular locking dependency detected [ 148.951913][ T5144] 6.1.141-syzkaller #0 Not tainted [ 148.957021][ T5144] ------------------------------------------------------ [ 148.964043][ T5144] syz.3.220/5144 is trying to acquire lock: [ 148.969947][ T5144] ffff888030351450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xd4/0xa60 [ 148.981382][ T5144] [ 148.981382][ T5144] but task is already holding lock: [ 148.983853][ T5148] loop0: detected capacity change from 0 to 16 [ 148.988737][ T5144] ffff888030350130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 148.988797][ T5144] [ 148.988797][ T5144] which lock already depends on the new lock. [ 148.988797][ T5144] [ 148.988802][ T5144] [ 148.988802][ T5144] the existing dependency chain (in reverse order) is: [ 148.988807][ T5144] [ 148.988807][ T5144] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 148.988834][ T5144] lock_sock_nested+0x44/0x100 [ 148.988856][ T5144] smc_listen_out+0x109/0x3d0 [ 148.988873][ T5144] process_one_work+0x898/0x1160 [ 148.988887][ T5144] worker_thread+0xaa2/0x1250 [ 148.988901][ T5144] kthread+0x29d/0x330 [ 148.988919][ T5144] ret_from_fork+0x1f/0x30 [ 148.988938][ T5144] [ 148.988938][ T5144] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 148.988959][ T5144] __lock_acquire+0x2cf8/0x7c50 [ 148.988978][ T5144] lock_acquire+0x1b4/0x490 [ 148.988994][ T5144] __flush_work+0xed/0xa60 [ 148.995874][ T5148] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 149.004070][ T5144] __cancel_work_timer+0x3ac/0x520 [ 149.004100][ T5144] smc_clcsock_release+0x5c/0xe0 [ 149.004120][ T5144] __smc_release+0x661/0x7d0 [ 149.004135][ T5144] smc_close_non_accepted+0xd1/0x1f0 [ 149.004151][ T5144] smc_close_active+0xb00/0xea0 [ 149.004169][ T5144] __smc_release+0x8d/0x7d0 [ 149.004185][ T5144] smc_release+0x2ca/0x530 [ 149.004202][ T5144] sock_close+0xd5/0x240 [ 149.004214][ T5144] __fput+0x22c/0x920 [ 149.004229][ T5144] task_work_run+0x1ca/0x250 [ 149.004247][ T5144] exit_to_user_mode_loop+0xe6/0x110 [ 149.004269][ T5144] exit_to_user_mode_prepare+0xb1/0x140 [ 149.004289][ T5144] syscall_exit_to_user_mode+0x16/0x40 [ 149.004305][ T5144] do_syscall_64+0x58/0xa0 [ 149.004324][ T5144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.004348][ T5144] [ 149.004348][ T5144] other info that might help us debug this: [ 149.004348][ T5144] [ 149.004354][ T5144] Possible unsafe locking scenario: [ 149.004354][ T5144] [ 149.004359][ T5144] CPU0 CPU1 [ 149.004363][ T5144] ---- ---- [ 149.004368][ T5144] lock(sk_lock-AF_SMC/1); [ 149.004387][ T5144] lock((work_completion)(&new_smc->smc_listen_work)); [ 149.004401][ T5144] lock(sk_lock-AF_SMC/1); [ 149.004418][ T5144] lock((work_completion)(&new_smc->smc_listen_work)); [ 149.004430][ T5144] [ 149.004430][ T5144] *** DEADLOCK *** [ 149.004430][ T5144] [ 149.004435][ T5144] 2 locks held by syz.3.220/5144: [ 149.004445][ T5144] #0: ffff888071c96e10 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 149.004491][ T5144] #1: ffff888030350130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 149.004540][ T5144] [ 149.004540][ T5144] stack backtrace: [ 149.004562][ T5144] CPU: 0 PID: 5144 Comm: syz.3.220 Not tainted 6.1.141-syzkaller #0 [ 149.004579][ T5144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.004592][ T5144] Call Trace: [ 149.004599][ T5144] [ 149.004606][ T5144] dump_stack_lvl+0x168/0x22e [ 149.004626][ T5144] ? load_image+0x3b0/0x3b0 [ 149.004641][ T5144] ? show_regs_print_info+0x12/0x12 [ 149.004662][ T5144] ? print_circular_bug+0x12b/0x1a0 [ 149.004685][ T5144] check_noncircular+0x274/0x310 [ 149.004707][ T5144] ? add_chain_block+0x940/0x940 [ 149.004727][ T5144] ? lockdep_lock+0xdc/0x1e0 [ 149.004747][ T5144] ? _find_first_zero_bit+0xcf/0x100 [ 149.333504][ T5144] __lock_acquire+0x2cf8/0x7c50 [ 149.338350][ T5144] ? xfd_validate_state+0x69/0x140 [ 149.343445][ T5144] ? hlock_conflict+0x59/0x1f0 [ 149.348280][ T5144] ? verify_lock_unused+0x140/0x140 [ 149.353486][ T5144] ? __bfs+0x2a3/0x5c0 [ 149.357543][ T5144] ? check_path+0x40/0x40 [ 149.361856][ T5144] ? mark_lock+0x94/0x320 [ 149.366255][ T5144] ? __lock_acquire+0x13c0/0x7c50 [ 149.371263][ T5144] ? add_chain_block+0x940/0x940 [ 149.376184][ T5144] lock_acquire+0x1b4/0x490 [ 149.380697][ T5144] ? __flush_work+0xd4/0xa60 [ 149.385287][ T5144] ? __lock_acquire+0x13c0/0x7c50 [ 149.390293][ T5144] ? read_lock_is_recursive+0x10/0x10 [ 149.395644][ T5144] ? verify_lock_unused+0x140/0x140 [ 149.400826][ T5144] ? __flush_work+0xd4/0xa60 [ 149.405399][ T5144] __flush_work+0xed/0xa60 [ 149.409815][ T5144] ? __flush_work+0xd4/0xa60 [ 149.414413][ T5144] ? verify_lock_unused+0x140/0x140 [ 149.419596][ T5144] ? flush_work+0x20/0x20 [ 149.423910][ T5144] ? try_to_grab_pending+0xf1/0x840 [ 149.429089][ T5144] ? lockdep_hardirqs_off+0x70/0x100 [ 149.434350][ T5144] ? mark_lock+0x94/0x320 [ 149.438675][ T5144] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 149.444642][ T5144] ? lock_chain_count+0x20/0x20 [ 149.449473][ T5144] ? __cancel_work_timer+0x331/0x520 [ 149.454741][ T5144] __cancel_work_timer+0x3ac/0x520 [ 149.459848][ T5144] ? cancel_work_sync+0x20/0x20 [ 149.464696][ T5144] ? __smc_release+0x659/0x7d0 [ 149.469455][ T5144] ? __local_bh_enable_ip+0x12a/0x1b0 [ 149.474826][ T5144] ? lockdep_hardirqs_on+0x94/0x140 [ 149.480016][ T5144] ? __local_bh_enable_ip+0x12a/0x1b0 [ 149.485379][ T5144] ? _local_bh_enable+0xa0/0xa0 [ 149.490218][ T5144] smc_clcsock_release+0x5c/0xe0 [ 149.495140][ T5144] __smc_release+0x661/0x7d0 [ 149.499712][ T5144] ? do_raw_spin_unlock+0x11d/0x230 [ 149.504896][ T5144] smc_close_non_accepted+0xd1/0x1f0 [ 149.510163][ T5144] smc_close_active+0xb00/0xea0 [ 149.515003][ T5144] ? sock_no_sendpage_locked+0x160/0x160 [ 149.520627][ T5144] __smc_release+0x8d/0x7d0 [ 149.525116][ T5144] ? do_raw_spin_unlock+0x11d/0x230 [ 149.530300][ T5144] smc_release+0x2ca/0x530 [ 149.534701][ T5144] sock_close+0xd5/0x240 [ 149.538925][ T5144] ? sock_mmap+0x90/0x90 [ 149.543148][ T5144] __fput+0x22c/0x920 [ 149.547115][ T5144] task_work_run+0x1ca/0x250 [ 149.551690][ T5144] ? task_work_cancel+0x230/0x230 [ 149.556693][ T5144] ? __close_range+0x1c5/0x730 [ 149.561444][ T5144] ? exit_to_user_mode_loop+0x3b/0x110 [ 149.566894][ T5144] exit_to_user_mode_loop+0xe6/0x110 [ 149.572167][ T5144] exit_to_user_mode_prepare+0xb1/0x140 [ 149.577696][ T5144] syscall_exit_to_user_mode+0x16/0x40 [ 149.583135][ T5144] do_syscall_64+0x58/0xa0 [ 149.587536][ T5144] ? clear_bhb_loop+0x60/0xb0 [ 149.592196][ T5144] ? clear_bhb_loop+0x60/0xb0 [ 149.596852][ T5144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.602738][ T5144] RIP: 0033:0x7f1bcf38e929 [ 149.607164][ T5144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.626767][ T5144] RSP: 002b:00007f1bd0140038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 149.635168][ T5144] RAX: 0000000000000000 RBX: 00007f1bcf5b5fa0 RCX: 00007f1bcf38e929 [ 149.643127][ T5144] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 149.651085][ T5144] RBP: 00007f1bcf410b39 R08: 0000000000000000 R09: 0000000000000000 [ 149.659043][ T5144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.667009][ T5144] R13: 0000000000000000 R14: 00007f1bcf5b5fa0 R15: 00007ffdbcbd2908 [ 149.674979][ T5144] [ 149.828213][ T26] audit: type=1326 audit(1750987559.220:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5146 comm="syz.4.221" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96a978e929 code=0x0