last executing test programs: 7.797455825s ago: executing program 1 (id=491): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf405, 0x0, 0xf06) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xf4c}, {&(0x7f00000003c0)=""/248, 0xf0}], 0x4, 0x0, 0x353}}], 0x400000000000010, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$binfmt_script(r2, &(0x7f0000000100), 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) connect$inet(r1, &(0x7f0000000180), 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x81000f4) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6.483188714s ago: executing program 1 (id=500): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000400)='./file0/file0\x00', 0x0) 6.351927564s ago: executing program 1 (id=502): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mknod(&(0x7f0000000280)='./file0/file0\x00', 0x2, 0x200) acct(&(0x7f0000000200)='./file0/file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 6.083065454s ago: executing program 1 (id=503): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x23894) 4.851640793s ago: executing program 3 (id=505): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000003c0)={[{@quota}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="18010001006d00000000004000000000060000006d85538fda885d469c36f92a6795896d0996e4fda07088de82050fe61ca3e9fef90000000000000000000000014000000000a158e07c67837144cf1daeadbf435de62926f6d529aee467eaa1721b99cac63de8442f8b6df438d1afbe478ab9fdcfceb200f017d7a964cb46fb9149fd1bc64055d7111c32414e190b4cb6a7e5fc9199c2e572a70e76367c31cb18fc000000", @ANYRES32=r1, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="65ff3e6f03ae1b16f31593c46659cf35f076fa09e05827f201d5c73ef0018cfda11ed08f5206e7e2725f66058147e87640a42dae6c043e642741b1c4d8be34d1180fd2543a3f1958c4a4cc544bbc0bc35fdf9e86c842632f60429992acc0d98305c30bf137e006"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x2f) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={0x0, 0x1, 0x6, @random="9b9ea3462e5c"}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000073119c00000000001600000000000000950074000000000061d8163279729d152b78a8fdb14aba7977bb27f9278db147"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x6b3a, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local}, 0x1c) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x229, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0xc0, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x8000, 0xfa, 0x1, {0x22, 0xce0}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfd, 0x6, 0x76}}}}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) recvmmsg(r6, &(0x7f0000000880)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000440)}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001080)=""/223, 0xdf}], 0x1}, 0x1000000}], 0x2, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071108600000000001d400500000000002604000001ed00000f030000000000007c440000000000006b0af8fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c26fc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f843226"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 3.811018462s ago: executing program 4 (id=511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x88040, 0x0) r4 = fsopen(&(0x7f0000000a00)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000a40)='seclabel', &(0x7f0000000a80)='./file0\x00', r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0xffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001280)={'wlan0\x00', 0x0}) sendto$packet(r6, &(0x7f00000000c0)="3f030e0033e6120306001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x4044040, &(0x7f0000000240)={0x11, 0x19, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14) 3.283495102s ago: executing program 4 (id=513): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) setpgid(0x0, 0x0) 3.171241902s ago: executing program 4 (id=515): sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x8c0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007100000000000000029"], 0x30}, 0x0) 3.050966702s ago: executing program 4 (id=517): syz_emit_ethernet(0x32, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='jbd2_run_stats\x00', r3, 0x0, 0x20000000000}, 0x18) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x10000006, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x40000000000000, 0x4, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x6}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000080)) 3.003104292s ago: executing program 3 (id=518): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f000700", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) 2.870113712s ago: executing program 3 (id=519): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0xfffffffffffffe77}], 0x1, 0x0, 0xfffffffe) 2.607444452s ago: executing program 2 (id=520): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00'/18, 0xfffffffffffffffe) 2.535168651s ago: executing program 3 (id=521): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 2.322472182s ago: executing program 2 (id=522): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x12, r2, 0x0) 2.295129312s ago: executing program 3 (id=523): r0 = gettid() bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000580)=0xfffffff9) socketpair(0x1, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_commands={{0x5}, {0xc9, "ce5fc043898429b803bede456950a8b40579640e2c7e9e768f111eb11e92ae99b71359a202601b55bbed87b5633554c5b279e5df8c429890e18a76fee451ed13"}}}}, 0x47) socket(0x2c, 0x2, 0x400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), 0x0}, 0x20) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x101) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x9a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) 2.126907281s ago: executing program 2 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x88040, 0x0) r4 = fsopen(&(0x7f0000000a00)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000a40)='seclabel', &(0x7f0000000a80)='./file0\x00', r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0xffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001280)={'wlan0\x00', 0x0}) sendto$packet(r6, &(0x7f00000000c0)="3f030e0033e6120306001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x4044040, &(0x7f0000000240)={0x11, 0x19, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14) 1.556221661s ago: executing program 2 (id=526): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000847fff)="e5", 0x1, 0x20000094, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af00, &(0x7f00000000c0)) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000180)=r4) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000080)=0xfffffffd) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000040)={0x0, r4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000d, 0x20010, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 1.371026111s ago: executing program 0 (id=527): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) mq_unlink(0x0) 1.300133691s ago: executing program 3 (id=528): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000003c0)={[{@quota}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="18010001006d00000000004000000000060000006d85538fda885d469c36f92a6795896d0996e4fda07088de82050fe61ca3e9fef90000000000000000000000014000000000a158e07c67837144cf1daeadbf435de62926f6d529aee467eaa1721b99cac63de8442f8b6df438d1afbe478ab9fdcfceb200f017d7a964cb46fb9149fd1bc64055d7111c32414e190b4cb6a7e5fc9199c2e572a70e76367c31cb18fc000000", @ANYRES32=r1, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="65ff3e6f03ae1b16f31593c46659cf35f076fa09e05827f201d5c73ef0018cfda11ed08f5206e7e2725f66058147e87640a42dae6c043e642741b1c4d8be34d1180fd2543a3f1958c4a4cc544bbc0bc35fdf9e86c842632f60429992acc0d98305c30bf137e006"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x2f) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000380)={0x0, 0x1, 0x6, @random="9b9ea3462e5c"}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000073119c00000000001600000000000000950074000000000061d8163279729d152b78a8fdb14aba7977bb27f9278db147"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x6b3a, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local}, 0x1c) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x229, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0xc0, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x8000, 0xfa, 0x1, {0x22, 0xce0}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfd, 0x6, 0x76}}}}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) recvmmsg(r6, &(0x7f0000000880)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000440)}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001080)=""/223, 0xdf}], 0x1}, 0x1000000}], 0x2, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 1.237296191s ago: executing program 0 (id=529): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000100000000000000000000850000006d000000850000009e00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) readv(r2, &(0x7f0000000180), 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6(0xa, 0x803, 0x6) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) fstatfs(r1, 0x0) 827.07665ms ago: executing program 0 (id=530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x6c, r1, 0x5, 0x0, 0xfffffffc, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x35, 0xe, {{{}, {}, @broadcast, @device_a, @initial, {0x0, 0x979}}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x8, 0x4, 0x3, 0x7}}, @void, @void, @val={0x25, 0x3, {0x0, 0xb0, 0x49}}, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 695.38367ms ago: executing program 1 (id=531): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r1, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0xffffffffffffff93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) 662.43865ms ago: executing program 0 (id=532): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001300f5d10300"/19, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\v'], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 487.68979ms ago: executing program 0 (id=533): syz_emit_ethernet(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 476.88552ms ago: executing program 1 (id=534): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) 287.23388ms ago: executing program 0 (id=535): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="0f00000000000000611148000000000006000000feffffff950000000000000009f81146f2ac9f390a1346705a045d7fdea61b584e1881572a9551a609968158d1531c48a01ba884b52d8222e380b150caf50ec6fa211f773b139b2ea1003d20f1a978decf441b363f"], &(0x7f0000000080)='GPL\x00', 0x4, 0xd3, &(0x7f00000007c0)=""/211, 0x0, 0x11, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 248.10184ms ago: executing program 4 (id=536): timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000080)=""/243, 0xf3}, {&(0x7f0000000180)=""/75, 0x4b}, {&(0x7f0000000200)=""/156, 0xfffffe80}, {&(0x7f0000000580)=""/209, 0xcf}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000480)=""/105, 0x69}], 0x6, 0x0, 0x0) 203.38834ms ago: executing program 2 (id=537): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x30, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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") 27.0131ms ago: executing program 4 (id=538): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000001c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 0s ago: executing program 2 (id=539): socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x4174, 0x0, &(0x7f0000000100), 0x0) io_uring_setup(0x67bb, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. [ 56.675734][ T4234] cgroup: Unknown subsys name 'net' [ 56.783793][ T4234] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.993208][ T4234] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.442553][ T4260] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.443199][ T4261] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.450827][ T4260] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.458547][ T4261] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.466623][ T4260] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.474291][ T4261] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.479809][ T4260] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.486398][ T4261] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.500618][ T4261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.502339][ T4260] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.508288][ T4261] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.515984][ T4260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.522092][ T4261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.530014][ T4260] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.536302][ T4261] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.544862][ T4260] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.550996][ T4261] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.557686][ T4260] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.564784][ T4261] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 59.571321][ T4260] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.578200][ T4261] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.585477][ T4260] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.592156][ T4261] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.599316][ T4260] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.608333][ T4261] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.620587][ T4260] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.647494][ T4259] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.669146][ T4254] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.680132][ T4249] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.700113][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.083385][ T4253] chnl_net:caif_netlink_parms(): no params data found [ 60.107245][ T4252] chnl_net:caif_netlink_parms(): no params data found [ 60.136638][ T4246] chnl_net:caif_netlink_parms(): no params data found [ 60.177586][ T4247] chnl_net:caif_netlink_parms(): no params data found [ 60.243865][ T4245] chnl_net:caif_netlink_parms(): no params data found [ 60.319521][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.326661][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.335209][ T4253] device bridge_slave_0 entered promiscuous mode [ 60.352009][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.359189][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.366821][ T4252] device bridge_slave_0 entered promiscuous mode [ 60.385914][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.393292][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.401721][ T4253] device bridge_slave_1 entered promiscuous mode [ 60.412297][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.419615][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.427250][ T4252] device bridge_slave_1 entered promiscuous mode [ 60.443109][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.450289][ T4246] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.458586][ T4246] device bridge_slave_0 entered promiscuous mode [ 60.492635][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.499864][ T4246] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.507493][ T4246] device bridge_slave_1 entered promiscuous mode [ 60.533512][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.540736][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.549447][ T4247] device bridge_slave_0 entered promiscuous mode [ 60.563957][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.582418][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.591722][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.599184][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.606959][ T4247] device bridge_slave_1 entered promiscuous mode [ 60.622448][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.640327][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.664036][ T4246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.681618][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.689047][ T4245] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.696729][ T4245] device bridge_slave_0 entered promiscuous mode [ 60.719807][ T4246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.737638][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.744855][ T4245] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.753109][ T4245] device bridge_slave_1 entered promiscuous mode [ 60.762642][ T4252] team0: Port device team_slave_0 added [ 60.770746][ T4247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.790761][ T4253] team0: Port device team_slave_0 added [ 60.808796][ T4252] team0: Port device team_slave_1 added [ 60.816328][ T4247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.826953][ T4253] team0: Port device team_slave_1 added [ 60.835323][ T4246] team0: Port device team_slave_0 added [ 60.872836][ T4246] team0: Port device team_slave_1 added [ 60.880287][ T4245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.917286][ T4245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.927144][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.934441][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.960423][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.974984][ T4247] team0: Port device team_slave_0 added [ 60.981403][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.988740][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.014795][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.049871][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.056841][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.082971][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.096604][ T4247] team0: Port device team_slave_1 added [ 61.103068][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.110088][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.136212][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.147922][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.154967][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.181200][ T4246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.216119][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.223249][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.249293][ T4246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.262763][ T4245] team0: Port device team_slave_0 added [ 61.271081][ T4245] team0: Port device team_slave_1 added [ 61.313868][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.321003][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.347032][ T4247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.384117][ T4253] device hsr_slave_0 entered promiscuous mode [ 61.390923][ T4253] device hsr_slave_1 entered promiscuous mode [ 61.398662][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.405613][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.432009][ T4247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.453495][ T4246] device hsr_slave_0 entered promiscuous mode [ 61.460291][ T4246] device hsr_slave_1 entered promiscuous mode [ 61.466748][ T4246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.474561][ T4246] Cannot create hsr debugfs directory [ 61.480566][ T4245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.487513][ T4245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.513658][ T4245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.535445][ T4252] device hsr_slave_0 entered promiscuous mode [ 61.542863][ T4252] device hsr_slave_1 entered promiscuous mode [ 61.549630][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.557182][ T4252] Cannot create hsr debugfs directory [ 61.567083][ T4245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.574273][ T4245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.600304][ T4245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.688897][ T4260] Bluetooth: hci3: command 0x0409 tx timeout [ 61.712309][ T4245] device hsr_slave_0 entered promiscuous mode [ 61.719312][ T4245] device hsr_slave_1 entered promiscuous mode [ 61.725824][ T4245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.733814][ T4245] Cannot create hsr debugfs directory [ 61.768317][ T4260] Bluetooth: hci0: command 0x0409 tx timeout [ 61.768341][ T4258] Bluetooth: hci4: command 0x0409 tx timeout [ 61.768510][ T4258] Bluetooth: hci1: command 0x0409 tx timeout [ 61.774549][ T4260] Bluetooth: hci2: command 0x0409 tx timeout [ 61.798288][ T4247] device hsr_slave_0 entered promiscuous mode [ 61.804981][ T4247] device hsr_slave_1 entered promiscuous mode [ 61.812340][ T4247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.819986][ T4247] Cannot create hsr debugfs directory [ 62.079099][ T4246] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.104028][ T4246] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.118202][ T4246] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.126885][ T4246] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.174924][ T4252] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.195882][ T4252] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.205918][ T4252] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.235217][ T4253] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.248331][ T4252] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.266433][ T4253] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.276434][ T4253] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.309077][ T4253] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.356343][ T4246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.391732][ T4245] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.404986][ T4245] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.429786][ T4245] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.457253][ T4245] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.472992][ T4247] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.483059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.495746][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.517600][ T4246] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.529171][ T4247] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.540799][ T4247] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.551722][ T4247] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.570916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.580163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.590383][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.597637][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.625266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.634303][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.643452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.653998][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.661199][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.694612][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.702396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.732757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.742904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.754876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.763502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.793205][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.802141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.823854][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.832043][ T4246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.843223][ T4246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.856589][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.865443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.874490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.882829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.891426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.899605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.907305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.943192][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.951493][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.960140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.979726][ T4245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.993290][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.004148][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.017641][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.032729][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.039896][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.077421][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.090255][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.100924][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.109557][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.118243][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.126638][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.133747][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.143139][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.152165][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.161439][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.170006][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.177066][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.185835][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.203711][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.214023][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.222667][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.229819][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.240867][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.258583][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.267909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.283807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.314573][ T4247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.325303][ T4245] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.339196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.347206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.358909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.367604][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.377135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.386250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.394824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.403511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.412654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.425154][ T4253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.436521][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.461744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.470478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.479271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.488866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.497247][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.504429][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.512403][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.520277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.527704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.536884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.545529][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.552665][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.560459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.574661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.582806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.591786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.604538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.613424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.625834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.633882][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.650038][ T4246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.660037][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.679803][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.696779][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.716638][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.726381][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.743659][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.754885][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.767658][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.775921][ T4260] Bluetooth: hci3: command 0x041b tx timeout [ 63.781860][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.792564][ T4247] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.813627][ T4245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.824342][ T4245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.848525][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 63.854587][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 63.860907][ T4260] Bluetooth: hci0: command 0x041b tx timeout [ 63.860927][ T4258] Bluetooth: hci4: command 0x041b tx timeout [ 63.874972][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.902533][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.924109][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.935421][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.955547][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.965164][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.974602][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.981757][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.989960][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.999110][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.007472][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.014597][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.022557][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.031254][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.040206][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.049266][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.056982][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.097637][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.120451][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.140627][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.173152][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.217281][ T4246] device veth0_vlan entered promiscuous mode [ 64.236252][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.250343][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.278868][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.298600][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.334457][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.343433][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.352467][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.362859][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.371446][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.380306][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.388469][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.401491][ T4247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.413624][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.438630][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.452507][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.479755][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.487297][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.502404][ T4246] device veth1_vlan entered promiscuous mode [ 64.530780][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.547144][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.555945][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.572247][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.593314][ T4245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.677663][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.692378][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.709029][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.740200][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.758830][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.779000][ T4252] device veth0_vlan entered promiscuous mode [ 64.794574][ T4246] device veth0_macvtap entered promiscuous mode [ 64.811745][ T4246] device veth1_macvtap entered promiscuous mode [ 64.819914][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.828546][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.836422][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.845550][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.855048][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.863166][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.875652][ T4252] device veth1_vlan entered promiscuous mode [ 64.911855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.920893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.931509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.940184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.949351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.957918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.967200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.975654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.996677][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.012711][ T4247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.021404][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.033825][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.054154][ T4252] device veth0_macvtap entered promiscuous mode [ 65.064027][ T4252] device veth1_macvtap entered promiscuous mode [ 65.076229][ T4245] device veth0_vlan entered promiscuous mode [ 65.083070][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.092370][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.102109][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.110626][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.119940][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.128591][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.137057][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.146869][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.155029][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.163502][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.171887][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.180437][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.189155][ T4253] device veth0_vlan entered promiscuous mode [ 65.197451][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.214294][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.226182][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.237395][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.259716][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.268665][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.277315][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.286198][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.298352][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.306909][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.320397][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.331726][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.343068][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.356826][ T4245] device veth1_vlan entered promiscuous mode [ 65.366682][ T4246] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.376743][ T4246] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.386000][ T4246] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.394779][ T4246] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.407208][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.415949][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.427674][ T4252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.437109][ T4252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.446226][ T4252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.456689][ T4252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.506591][ T4253] device veth1_vlan entered promiscuous mode [ 65.554897][ T4247] device veth0_vlan entered promiscuous mode [ 65.562005][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.571847][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.583154][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.591560][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.632241][ T4245] device veth0_macvtap entered promiscuous mode [ 65.651156][ T4247] device veth1_vlan entered promiscuous mode [ 65.673349][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.681768][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.691678][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.702006][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.710552][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.719977][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.732062][ T4253] device veth0_macvtap entered promiscuous mode [ 65.776861][ T4253] device veth1_macvtap entered promiscuous mode [ 65.794233][ T4245] device veth1_macvtap entered promiscuous mode [ 65.803609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.812252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.820951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.829499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.837525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.846493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.854517][ T4258] Bluetooth: hci3: command 0x040f tx timeout [ 65.870129][ T4247] device veth0_macvtap entered promiscuous mode [ 65.887743][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.891981][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.909108][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.919322][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.924036][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.937552][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.937746][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 65.947498][ T4258] Bluetooth: hci0: command 0x040f tx timeout [ 65.947546][ T4258] Bluetooth: hci1: command 0x040f tx timeout [ 65.954383][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 65.974639][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.998648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.007139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.015898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.024696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.040179][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.051029][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.062031][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.072789][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.084132][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.100898][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.101508][ T4247] device veth1_macvtap entered promiscuous mode [ 66.113156][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.130118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.144421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.152584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.161536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.176570][ T4253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.186708][ T4253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.195945][ T4253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.205303][ T4253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.238638][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.250223][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.261359][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.271836][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.281823][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.292283][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.303660][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.313639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.322661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.342578][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.353334][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.363607][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.374812][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.385043][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.395905][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.406079][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.417307][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.428999][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.444246][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.460952][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.471107][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.481748][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.492275][ T4245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.504358][ T4245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.515295][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.523936][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.528333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.538748][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.543153][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.554637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.558211][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.564284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.580864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.589838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.597620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.612327][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.623490][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.633969][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.644492][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.655996][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.666755][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.676895][ T4247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.687412][ T4247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.700406][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.712430][ T4245] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.723396][ T4245] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.732930][ T4245] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.742000][ T4245] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.754363][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.771645][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.783481][ T4247] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.792586][ T4247] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.801507][ T4247] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.810630][ T4247] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.031130][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.056093][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.058339][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.074239][ T4328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 67.100452][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.109813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.116220][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.125650][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.138277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.149174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.239568][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.250501][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.269198][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.315257][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.330192][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.342832][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.366605][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.396912][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.417335][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.524940][ T4337] loop4: detected capacity change from 0 to 128 [ 67.562766][ T4338] loop0: detected capacity change from 0 to 16 [ 67.577449][ T4337] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.648927][ T4338] erofs: (device loop0): mounted with root inode @ nid 36. [ 67.670379][ T4337] FAT-fs (loop4): bogus number of FAT sectors [ 67.676474][ T4337] FAT-fs (loop4): Can't find a valid FAT filesystem [ 67.732317][ T4343] input: syz0 as /devices/virtual/input/input5 [ 67.742585][ T4338] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 67.803610][ T4337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 67.814187][ T4338] erofs: (device loop0): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 67.869951][ T4338] erofs: (device loop0): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 67.940194][ T4258] Bluetooth: hci3: command 0x0419 tx timeout [ 67.949339][ T4338] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 67.990631][ T4338] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 68.009763][ T4258] Bluetooth: hci4: command 0x0419 tx timeout [ 68.015901][ T4258] Bluetooth: hci1: command 0x0419 tx timeout [ 68.028528][ T4260] Bluetooth: hci2: command 0x0419 tx timeout [ 68.034587][ T4260] Bluetooth: hci0: command 0x0419 tx timeout [ 68.038758][ T4338] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 68.066722][ T4338] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 68.099372][ T4338] syz.0.6: attempt to access beyond end of device [ 68.099372][ T4338] loop0: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 68.113300][ T4338] syz.0.6: attempt to access beyond end of device [ 68.113300][ T4338] loop0: rw=524288, sector=13478624040, nr_sectors = 64 limit=16 [ 68.231287][ T4338] syz.0.6: attempt to access beyond end of device [ 68.231287][ T4338] loop0: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 68.277094][ T4349] netlink: 'syz.3.7': attribute type 11 has an invalid length. [ 68.697104][ T4359] Zero length message leads to an empty skb [ 69.600601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10c!!! [ 69.609010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18e!!! [ 69.617394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18e!!! [ 69.625666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18e!!! [ 69.634012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18e!!! [ 69.642278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18e!!! [ 69.650689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18e!!! [ 69.698900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.707302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.715853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 69.869956][ T4349] netlink: 212 bytes leftover after parsing attributes in process `syz.3.7'. [ 71.865498][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.872097][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.548492][ T4324] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.602706][ T4384] loop2: detected capacity change from 0 to 1024 [ 72.701548][ T4384] hfsplus: invalid catalog max_key_len 1536 [ 72.718734][ T4384] hfsplus: failed to load catalog file [ 72.718865][ T4386] loop0: detected capacity change from 0 to 512 [ 72.768138][ T4324] usb 5-1: Using ep0 maxpacket: 8 [ 72.813589][ T4324] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 72.824311][ T4386] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 72.862773][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 72.872366][ T4386] UDF-fs: Scanning with blocksize 512 failed [ 72.881062][ T4384] netlink: 160 bytes leftover after parsing attributes in process `syz.2.17'. [ 72.889992][ T4324] usb 5-1: Product: syz [ 72.890031][ T4324] usb 5-1: Manufacturer: syz [ 72.890046][ T4324] usb 5-1: SerialNumber: syz [ 72.895577][ T4386] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 72.919314][ T4324] usb 5-1: config 0 descriptor?? [ 72.954855][ T4384] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 72.971550][ T4386] UDF-fs: Scanning with blocksize 1024 failed [ 72.986039][ T4386] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 73.014061][ T4386] UDF-fs: Scanning with blocksize 2048 failed [ 73.035495][ T4386] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 73.106025][ T4386] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.125125][ T4390] loop3: detected capacity change from 0 to 128 [ 73.169568][ T4390] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.285776][ T4324] usb 5-1: USB disconnect, device number 2 [ 73.305410][ T4390] FAT-fs (loop3): error, clusters badly computed (5 != 1) [ 73.429314][ T4390] FAT-fs (loop3): Filesystem has been set read-only [ 73.459319][ T4390] FAT-fs (loop3): error, clusters badly computed (6 != 2) [ 73.679503][ T4390] FAT-fs (loop3): error, clusters badly computed (7 != 3) [ 73.729452][ T4390] FAT-fs (loop3): error, clusters badly computed (8 != 4) [ 73.879117][ T4390] FAT-fs (loop3): error, clusters badly computed (9 != 5) [ 73.887177][ T4390] FAT-fs (loop3): error, clusters badly computed (10 != 6) [ 74.703049][ T4390] FAT-fs (loop3): error, clusters badly computed (11 != 7) [ 74.785860][ T4323] udevd[4323]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.905872][ T4403] trusted_key: encrypted_key: insufficient parameters specified [ 75.068725][ T4407] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.518082][ T4248] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.773011][ T4417] loop0: detected capacity change from 0 to 2048 [ 75.852175][ T4248] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.883672][ T4248] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.934397][ T4248] usb 3-1: config 0 interface 0 has no altsetting 0 [ 75.954676][ T4248] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 75.994787][ T4248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.035536][ T4248] usb 3-1: config 0 descriptor?? [ 76.485675][ T4248] magicmouse 0003:05AC:0269.0001: unbalanced delimiter at end of report description [ 76.503541][ T26] cfg80211: failed to load regulatory.db [ 76.519700][ T4248] magicmouse 0003:05AC:0269.0001: magicmouse hid parse failed [ 76.548554][ T4248] magicmouse: probe of 0003:05AC:0269.0001 failed with error -22 [ 76.734763][ T4248] usb 3-1: USB disconnect, device number 2 [ 76.748026][ T4293] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.898698][ T4433] loop0: detected capacity change from 0 to 512 [ 76.940548][ T4293] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 76.949071][ T4293] usb 2-1: config 0 has no interface number 0 [ 76.959296][ T4293] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 77.054569][ T4293] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 77.094106][ T4293] usb 2-1: config 0 interface 255 has no altsetting 0 [ 77.118123][ T4293] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 77.141427][ T4435] loop0: detected capacity change from 0 to 512 [ 77.158078][ T4293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.187117][ T4293] usb 2-1: config 0 descriptor?? [ 77.220791][ T4323] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 77.248528][ T4293] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 77.544998][ T4440] syz.4.34 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 77.934436][ T4293] usb 2-1: USB disconnect, device number 2 [ 78.674901][ T4463] loop0: detected capacity change from 0 to 512 [ 78.748046][ T4463] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.936130][ T4463] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 80.007566][ T4463] EXT4-fs (loop0): 1 truncate cleaned up [ 80.058045][ T4463] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 80.202374][ T4463] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.44: corrupted in-inode xattr [ 80.227047][ T4477] loop2: detected capacity change from 0 to 256 [ 80.245832][ T4463] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1723: inode #15: comm syz.0.44: unable to update i_inline_off [ 80.313557][ T4477] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 80.339216][ T4463] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 80.371947][ T4463] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.44: corrupted in-inode xattr [ 80.732941][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 80.844625][ T4487] loop3: detected capacity change from 0 to 256 [ 80.957634][ T4487] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 81.061874][ T4492] loop2: detected capacity change from 0 to 256 [ 81.112991][ T4492] ======================================================= [ 81.112991][ T4492] WARNING: The mand mount option has been deprecated and [ 81.112991][ T4492] and is ignored by this kernel. Remove the mand [ 81.112991][ T4492] option from the mount to silence this warning. [ 81.112991][ T4492] ======================================================= [ 81.248658][ T4492] exfat: Deprecated parameter 'utf8' [ 81.254020][ T4492] exfat: Deprecated parameter 'namecase' [ 81.285125][ T4492] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdf1ac56c, utbl_chksum : 0xe619d30d) [ 81.404488][ T4492] process 'syz.2.54' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 81.997716][ T4509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'. [ 82.393071][ T4512] loop3: detected capacity change from 0 to 1024 [ 82.449884][ T4512] ext4: Unknown parameter 'euid' [ 82.688357][ T4527] loop4: detected capacity change from 0 to 128 [ 82.708981][ T4527] EXT4-fs: Ignoring removed oldalloc option [ 82.714934][ T4527] EXT4-fs: Ignoring removed oldalloc option [ 82.846855][ T4527] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 83.252127][ T4527] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.352353][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 84.452236][ T4548] loop2: detected capacity change from 0 to 2048 [ 84.539006][ T4553] loop4: detected capacity change from 0 to 2048 [ 84.546391][ T4548] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 84.633517][ T4553] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.705788][ T4557] loop0: detected capacity change from 0 to 2048 [ 84.770384][ T4557] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 84.830884][ T4557] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.943842][ T4290] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 85.329990][ T4290] usb 3-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.347362][ T4290] usb 3-1: config 1 interface 0 has no altsetting 0 [ 85.406329][ T4568] loop4: detected capacity change from 0 to 512 [ 85.408597][ T4290] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 85.422296][ T4290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.477078][ T4290] usb 3-1: Product: syz [ 85.478387][ T4568] EXT4-fs: Ignoring removed i_version option [ 85.529568][ T4290] usb 3-1: Manufacturer: syz [ 85.534230][ T4290] usb 3-1: SerialNumber: syz [ 85.560105][ T4568] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.579487][ T4558] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 85.601526][ T4568] ext4: Unknown parameter 'seclabel' [ 85.657963][ T4542] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 85.737304][ T4542] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 85.799104][ T4542] EXT4-fs (loop2): This should not happen!! Data will be lost [ 85.799104][ T4542] [ 85.836642][ T4542] EXT4-fs (loop2): Total free blocks count 0 [ 85.864685][ T4542] EXT4-fs (loop2): Free/Dirty block details [ 85.919837][ T4542] EXT4-fs (loop2): free_blocks=2415919104 [ 85.931159][ T4542] EXT4-fs (loop2): dirty_blocks=4880 [ 85.948064][ T4542] EXT4-fs (loop2): Block reservation details [ 85.982966][ T4542] EXT4-fs (loop2): i_reserved_data_blocks=310 [ 86.055322][ T4582] loop3: detected capacity change from 0 to 128 [ 86.145051][ T4542] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 86.374845][ T4586] loop3: detected capacity change from 0 to 1024 [ 87.209473][ T4586] EXT4-fs (loop3): Test dummy encryption mode enabled [ 87.275592][ T4586] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 87.493282][ T4248] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.506980][ T4290] usb 3-1: USB disconnect, device number 3 [ 87.651472][ T4586] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 87.661492][ T27] audit: type=1326 audit(1736947616.011:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6510d85d29 code=0x7ffc0000 [ 87.732877][ T27] audit: type=1326 audit(1736947616.040:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6510d85d29 code=0x7ffc0000 [ 87.772130][ T4248] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.809201][ T27] audit: type=1326 audit(1736947616.040:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6510d85d29 code=0x7ffc0000 [ 87.811304][ T4248] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 87.849973][ T4246] EXT4-fs (loop3): unmounting filesystem. [ 87.883544][ T27] audit: type=1326 audit(1736947616.040:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6510d85d29 code=0x7ffc0000 [ 87.888470][ T4248] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 87.992427][ T4248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.000585][ T27] audit: type=1326 audit(1736947616.040:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6510d85d29 code=0x7ffc0000 [ 88.000721][ T27] audit: type=1326 audit(1736947616.040:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6510d85d29 code=0x7ffc0000 [ 88.122114][ T4248] usb 1-1: config 0 descriptor?? [ 88.239063][ T27] audit: type=1326 audit(1736947616.040:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6510d85d29 code=0x7ffc0000 [ 88.437270][ T27] audit: type=1326 audit(1736947616.040:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6510d85d29 code=0x7ffc0000 [ 88.471672][ T27] audit: type=1326 audit(1736947616.040:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6510d85d29 code=0x7ffc0000 [ 88.497581][ T4615] loop3: detected capacity change from 0 to 128 [ 88.610860][ T27] audit: type=1326 audit(1736947616.040:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f6510d85d29 code=0x7ffc0000 [ 88.821134][ T4248] Bluetooth: Can't get state to change to load configuration err [ 88.840580][ T4248] Bluetooth: Loading sysconfig file failed [ 90.142882][ T4248] ath3k: probe of 1-1:0.0 failed with error -16 [ 90.153664][ T4248] usb 1-1: USB disconnect, device number 2 [ 90.616498][ T4637] loop2: detected capacity change from 0 to 512 [ 90.710221][ T4637] EXT4-fs: Ignoring removed i_version option [ 90.751328][ T4637] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.785743][ T4637] ext4: Unknown parameter 'seclabel' [ 91.019651][ T4643] loop3: detected capacity change from 0 to 256 [ 91.027175][ T4634] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2697365348 (5394730696 ns) > initial count (4275779722 ns). Using initial count to start timer. [ 93.084146][ T4292] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.297934][ T4292] usb 2-1: Using ep0 maxpacket: 16 [ 93.306912][ T4292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 110, changing to 10 [ 93.362628][ T4292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24941, setting to 1024 [ 93.415639][ T4292] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 93.449391][ T4662] loop4: detected capacity change from 0 to 128 [ 93.478043][ T4292] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 93.522480][ T4292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.563619][ T4292] usb 2-1: config 0 descriptor?? [ 94.199017][ T4292] usbhid 2-1:0.0: can't add hid device: -71 [ 94.211772][ T4292] usbhid: probe of 2-1:0.0 failed with error -71 [ 94.240280][ T4292] usb 2-1: USB disconnect, device number 3 [ 94.667877][ T4676] netlink: 44 bytes leftover after parsing attributes in process `syz.3.118'. [ 94.853609][ T4681] loop4: detected capacity change from 0 to 1024 [ 95.686539][ T4681] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 95.695594][ T4681] EXT4-fs (loop4): orphan cleanup on readonly fs [ 95.703643][ T4681] __quota_error: 18 callbacks suppressed [ 95.703658][ T4681] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 95.718791][ T4681] EXT4-fs warning (device loop4): ext4_enable_quotas:7029: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 95.733425][ T4681] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 95.750349][ T4681] EXT4-fs (loop4): 1 truncate cleaned up [ 95.756110][ T4681] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 96.728922][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 97.905342][ T4711] loop2: detected capacity change from 0 to 128 [ 98.428234][ T4721] netlink: 44 bytes leftover after parsing attributes in process `syz.0.129'. [ 98.954098][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 100.955726][ T4732] loop3: detected capacity change from 0 to 1024 [ 101.211394][ T4732] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 101.299446][ T4745] loop2: detected capacity change from 0 to 512 [ 101.330121][ T4732] EXT4-fs (loop3): shut down requested (0) [ 101.380126][ T4745] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.458262][ T4745] EXT4-fs (loop2): 1 truncate cleaned up [ 101.458639][ T27] audit: type=1326 audit(1736947884.926:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4750 comm="syz.4.139" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bd6d85d29 code=0x0 [ 101.486913][ T4745] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 101.622782][ T4246] EXT4-fs (loop3): unmounting filesystem. [ 101.737209][ T4756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.140'. [ 101.784383][ T4757] loop3: detected capacity change from 0 to 1024 [ 101.946011][ T4245] EXT4-fs (loop2): unmounting filesystem. [ 102.008631][ T4761] mmap: syz.1.143 (4761) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.111878][ T4763] capability: warning: `syz.3.144' uses deprecated v2 capabilities in a way that may be insecure [ 102.516118][ T4248] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.807291][ T4248] usb 3-1: unable to get BOS descriptor or descriptor too short [ 102.826511][ T4248] usb 3-1: config 1 interface 0 altsetting 242 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.850662][ T4248] usb 3-1: config 1 interface 0 has no altsetting 0 [ 103.803056][ T4248] usb 3-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 103.812950][ T4784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'. [ 103.821857][ T4248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.830019][ T4248] usb 3-1: Product: syz [ 103.834278][ T4248] usb 3-1: Manufacturer: syz [ 103.853564][ T4248] usb 3-1: SerialNumber: syz [ 104.172843][ T4789] loop4: detected capacity change from 0 to 128 [ 104.219472][ T4248] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input6 [ 104.258661][ T4788] loop0: detected capacity change from 0 to 512 [ 104.289681][ T3607] bcm5974 3-1:1.0: could not read from device [ 104.337669][ T4788] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.154: inode #1: comm syz.0.154: iget: illegal inode # [ 104.356142][ T3607] bcm5974 3-1:1.0: could not read from device [ 104.362401][ T4248] usb 3-1: USB disconnect, device number 4 [ 104.377049][ T3607] bcm5974 3-1:1.0: could not read from device [ 104.511538][ T4788] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.154: error while reading EA inode 1 err=-117 [ 104.603526][ T4788] EXT4-fs (loop0): 1 orphan inode deleted [ 104.633768][ T4788] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 104.784963][ T4796] netlink: 44 bytes leftover after parsing attributes in process `syz.4.158'. [ 104.909537][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 106.268000][ T4803] loop4: detected capacity change from 0 to 2048 [ 107.217233][ T4807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 107.228398][ T4812] loop4: detected capacity change from 0 to 256 [ 107.291233][ T4812] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x60132a91, utbl_chksum : 0xe619d30d) [ 110.044464][ T4835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 110.558983][ T4848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.165'. [ 112.669016][ T4858] loop2: detected capacity change from 0 to 2048 [ 112.700910][ T4860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.170'. [ 112.901446][ T4858] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 114.894141][ T4249] Bluetooth: hci2: link tx timeout [ 114.900686][ T4249] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.077713][ T4858] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 115.084968][ T4879] loop3: detected capacity change from 0 to 512 [ 115.117936][ T4879] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.154080][ T4879] EXT4-fs (loop3): 1 truncate cleaned up [ 115.159849][ T4879] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 115.187041][ T4858] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 115.447791][ T4858] EXT4-fs (loop2): This should not happen!! Data will be lost [ 115.447791][ T4858] [ 115.470710][ T4858] EXT4-fs (loop2): Total free blocks count 0 [ 115.477109][ T4858] EXT4-fs (loop2): Free/Dirty block details [ 115.523314][ T4858] EXT4-fs (loop2): free_blocks=2415919504 [ 115.549752][ T4858] EXT4-fs (loop2): dirty_blocks=32 [ 115.555036][ T4858] EXT4-fs (loop2): Block reservation details [ 115.598799][ T4858] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 115.609965][ T7] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 115.756068][ T4380] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 115.890604][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 115.915525][ T7] usb 4-1: not running at top speed; connect to a high speed hub [ 115.932062][ T7] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 115.957433][ T7] usb 4-1: config 1 interface 0 has no altsetting 0 [ 115.977478][ T7] usb 4-1: New USB device found, idVendor=05ac, idProduct=0229, bcdDevice= 0.40 [ 116.004826][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.026636][ T7] usb 4-1: Product: syz [ 116.030861][ T7] usb 4-1: Manufacturer: syz [ 116.057454][ T7] usb 4-1: SerialNumber: syz [ 116.079282][ T4882] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 116.919510][ T7] appletouch 4-1:1.0: Failed to read mode from device. [ 116.919651][ T7] appletouch: probe of 4-1:1.0 failed with error -5 [ 116.934111][ T4887] tty tty3: ldisc open failed (-12), clearing slot 2 [ 116.942968][ T7] usb 4-1: USB disconnect, device number 2 [ 117.212943][ T4249] Bluetooth: hci2: command 0x0406 tx timeout [ 118.128122][ T4246] EXT4-fs (loop3): unmounting filesystem. [ 119.412079][ T4906] sched: RT throttling activated [ 120.568810][ T4902] loop0: detected capacity change from 0 to 1024 [ 120.981241][ T4902] hfsplus: xattr searching failed [ 121.087167][ T4918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 121.878799][ T4934] loop4: detected capacity change from 0 to 128 [ 122.376444][ T127] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.989133][ T127] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.009389][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.026933][ T127] usb 1-1: Product: syz [ 124.032026][ T127] usb 1-1: Manufacturer: syz [ 124.053531][ T127] usb 1-1: SerialNumber: syz [ 124.517660][ T4958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 125.197623][ T127] cdc_ncm 1-1:1.0: failed to get mac address [ 125.231090][ T127] cdc_ncm 1-1:1.0: bind() failure [ 125.288355][ T127] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 125.304098][ T127] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 125.328355][ T127] usbtest: probe of 1-1:1.1 failed with error -71 [ 125.354241][ T127] usb 1-1: USB disconnect, device number 3 [ 129.889334][ T5000] loop3: detected capacity change from 0 to 512 [ 129.974458][ T5000] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 129.999618][ T5000] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.129240][ T4246] EXT4-fs (loop3): unmounting filesystem. [ 131.561969][ T5008] loop4: detected capacity change from 0 to 256 [ 131.885442][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 136.117305][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.123645][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.343352][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.237'. [ 139.106599][ T4258] Bluetooth: hci4: command 0x2020 tx timeout [ 139.347234][ T5074] loop2: detected capacity change from 0 to 128 [ 139.390886][ T5074] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 139.416899][ T5072] loop4: detected capacity change from 0 to 512 [ 139.435862][ T5072] EXT4-fs: Ignoring removed i_version option [ 139.449677][ T5074] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 139.504849][ T5072] EXT4-fs (loop4): Test dummy encryption mode enabled [ 139.511675][ T5072] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 140.139927][ T5072] EXT4-fs (loop4): 1 truncate cleaned up [ 140.145904][ T5072] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 140.388180][ T4245] EXT4-fs (loop2): unmounting filesystem. [ 140.591455][ T5090] netlink: 32 bytes leftover after parsing attributes in process `syz.2.249'. [ 140.620152][ T5090] device wlan0 entered promiscuous mode [ 140.822593][ T5072] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 142.937269][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 149.517304][ T5170] input: syz0 as /devices/virtual/input/input8 [ 152.686545][ T5227] loop4: detected capacity change from 0 to 128 [ 153.473370][ T5222] loop2: detected capacity change from 0 to 512 [ 153.528348][ T5222] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 153.664719][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 153.797454][ T5222] EXT4-fs (loop2): 1 truncate cleaned up [ 153.803160][ T5222] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 154.572807][ T4245] EXT4-fs (loop2): unmounting filesystem. [ 155.436444][ T5255] loop3: detected capacity change from 0 to 128 [ 155.469674][ T5257] loop4: detected capacity change from 0 to 512 [ 155.497524][ T5257] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.510698][ T5257] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 155.690119][ T5264] syz.4.309 (5264) used greatest stack depth: 19328 bytes left [ 156.515664][ T5270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 157.761763][ T27] audit: type=1800 audit(1736947937.589:31): pid=5257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.309" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 157.833813][ T27] audit: type=1800 audit(1736947937.617:32): pid=5261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.309" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 158.012241][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 158.660435][ T4289] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 159.251931][ T4289] usb 2-1: unable to get BOS descriptor or descriptor too short [ 160.370816][ T4289] usb 2-1: not running at top speed; connect to a high speed hub [ 160.391124][ T4289] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 160.421749][ T4289] usb 2-1: config 1 interface 0 has no altsetting 0 [ 160.433903][ T5309] loop4: detected capacity change from 0 to 1024 [ 160.442613][ T4289] usb 2-1: New USB device found, idVendor=05ac, idProduct=0229, bcdDevice= 0.40 [ 160.459251][ T4289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.489640][ T4289] usb 2-1: Product: syz [ 160.515913][ T4289] usb 2-1: Manufacturer: syz [ 160.524898][ T4289] usb 2-1: SerialNumber: syz [ 160.562153][ T5282] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 160.801443][ T4289] appletouch 2-1:1.0: Failed to read mode from device. [ 160.817756][ T4289] appletouch: probe of 2-1:1.0 failed with error -5 [ 160.885313][ T4289] usb 2-1: USB disconnect, device number 4 [ 162.548589][ T5349] loop0: detected capacity change from 0 to 256 [ 163.615600][ T5358] loop3: detected capacity change from 0 to 512 [ 163.681930][ T5358] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 163.737747][ T5358] EXT4-fs (loop3): 1 truncate cleaned up [ 163.746116][ T5358] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 164.198028][ T3582] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 164.416063][ T3582] usb 4-1: unable to get BOS descriptor or descriptor too short [ 164.430794][ T3582] usb 4-1: not running at top speed; connect to a high speed hub [ 164.465320][ T3582] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 164.501447][ T3582] usb 4-1: config 1 interface 0 has no altsetting 0 [ 164.536499][ T3582] usb 4-1: New USB device found, idVendor=05ac, idProduct=0229, bcdDevice= 0.40 [ 164.561498][ T3582] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.569545][ T3582] usb 4-1: Product: syz [ 164.600632][ T3582] usb 4-1: Manufacturer: syz [ 164.649741][ T3582] usb 4-1: SerialNumber: syz [ 164.780203][ T5365] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 165.038017][ T3582] appletouch 4-1:1.0: Failed to read mode from device. [ 165.080516][ T3582] appletouch: probe of 4-1:1.0 failed with error -5 [ 165.171070][ T3582] usb 4-1: USB disconnect, device number 3 [ 165.765295][ T4246] EXT4-fs (loop3): unmounting filesystem. [ 167.144842][ T5400] loop3: detected capacity change from 0 to 128 [ 167.239808][ T5401] loop2: detected capacity change from 0 to 256 [ 167.985479][ T5409] loop3: detected capacity change from 0 to 512 [ 168.073889][ T5409] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 168.160403][ T5409] EXT4-fs (loop3): 1 truncate cleaned up [ 168.170954][ T5409] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 168.602861][ T4248] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 168.797175][ T4248] usb 4-1: unable to get BOS descriptor or descriptor too short [ 168.816755][ T4248] usb 4-1: not running at top speed; connect to a high speed hub [ 168.858223][ T4248] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 168.891043][ T4248] usb 4-1: config 1 interface 0 has no altsetting 0 [ 168.929378][ T4248] usb 4-1: New USB device found, idVendor=05ac, idProduct=0229, bcdDevice= 0.40 [ 168.971378][ T4248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.003792][ T4248] usb 4-1: Product: syz [ 169.008039][ T4248] usb 4-1: Manufacturer: syz [ 169.045387][ T4248] usb 4-1: SerialNumber: syz [ 169.082496][ T5418] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 170.587227][ T4248] appletouch 4-1:1.0: Failed to read mode from device. [ 170.605349][ T4248] appletouch: probe of 4-1:1.0 failed with error -5 [ 170.634050][ T4248] usb 4-1: USB disconnect, device number 4 [ 171.306404][ T4246] EXT4-fs (loop3): unmounting filesystem. [ 172.420016][ T4248] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 172.711165][ T4248] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 172.719560][ T4248] usb 1-1: config 0 has no interface number 0 [ 172.729493][ T4248] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 172.797096][ T4248] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 172.841149][ T4248] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 172.857464][ T4248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.875727][ T4248] usb 1-1: config 0 descriptor?? [ 172.888184][ T5434] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 174.064658][ T4248] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input12 [ 174.156628][ C1] usbtouchscreen 1-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 174.359006][ T4248] usb 1-1: USB disconnect, device number 4 [ 175.529163][ T5461] loop3: detected capacity change from 0 to 256 [ 175.655842][ T5461] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 175.735351][ T5461] syz.3.379: attempt to access beyond end of device [ 175.735351][ T5461] loop3: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 175.785670][ T5461] syz.3.379: attempt to access beyond end of device [ 175.785670][ T5461] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 175.850822][ T27] audit: type=1800 audit(1736947954.492:33): pid=5461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.379" name="file1" dev="loop3" ino=1048615 res=0 errno=0 [ 176.575385][ T5475] loop3: detected capacity change from 0 to 256 [ 183.466567][ T5538] usb usb8: usbfs: process 5538 (syz.0.401) did not claim interface 4 before use [ 183.899211][ T5544] loop4: detected capacity change from 0 to 2048 [ 184.066875][ T5544] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 185.767396][ T5544] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 185.783311][ T5544] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 185.796053][ T5544] EXT4-fs (loop4): This should not happen!! Data will be lost [ 185.796053][ T5544] [ 185.806510][ T5544] EXT4-fs (loop4): Total free blocks count 0 [ 185.812521][ T5544] EXT4-fs (loop4): Free/Dirty block details [ 185.818551][ T5544] EXT4-fs (loop4): free_blocks=2415919504 [ 185.824318][ T5544] EXT4-fs (loop4): dirty_blocks=2496 [ 185.829659][ T5544] EXT4-fs (loop4): Block reservation details [ 185.835670][ T5544] EXT4-fs (loop4): i_reserved_data_blocks=156 [ 186.728293][ T33] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 189.130586][ T5588] binder: 5587:5588 ioctl 80047213 0 returned -22 [ 189.927170][ T5601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.422'. [ 190.986861][ T5617] Bluetooth: MGMT ver 1.22 [ 193.110778][ T4249] Bluetooth: hci1: command 0x0406 tx timeout [ 193.116272][ T4258] Bluetooth: hci3: command 0x0406 tx timeout [ 193.116850][ T4249] Bluetooth: hci4: command 0x0406 tx timeout [ 193.122784][ T4258] Bluetooth: hci0: command 0x0406 tx timeout [ 193.129887][ T4249] Bluetooth: hci2: command 0x0406 tx timeout [ 195.887299][ T27] audit: type=1326 audit(1736948229.252:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5348985d29 code=0x7ffc0000 [ 195.935335][ T27] audit: type=1326 audit(1736948229.252:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5348985d29 code=0x7ffc0000 [ 195.976297][ T27] audit: type=1326 audit(1736948229.252:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f5348985d29 code=0x7ffc0000 [ 196.058980][ T27] audit: type=1326 audit(1736948229.252:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5348985d29 code=0x7ffc0000 [ 196.197899][ T27] audit: type=1326 audit(1736948229.252:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5696 comm="syz.3.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5348985d29 code=0x7ffc0000 [ 196.283228][ T27] audit: type=1326 audit(1736948229.326:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6510d85d29 code=0x7ffc0000 [ 196.441093][ T27] audit: type=1326 audit(1736948229.326:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6510d85d29 code=0x7ffc0000 [ 196.517082][ T27] audit: type=1326 audit(1736948229.326:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6510d85d29 code=0x7ffc0000 [ 196.546249][ T27] audit: type=1326 audit(1736948229.326:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6510d85d29 code=0x7ffc0000 [ 196.571026][ T27] audit: type=1326 audit(1736948229.326:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6510d85d29 code=0x7ffc0000 [ 197.232033][ T5723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.445'. [ 201.253419][ T5757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.458'. [ 201.815521][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.823349][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.717395][ T5792] netlink: 44 bytes leftover after parsing attributes in process `syz.1.472'. [ 204.629550][ T5816] loop4: detected capacity change from 0 to 512 [ 204.725284][ T5816] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 204.999409][ T5816] EXT4-fs (loop4): 1 truncate cleaned up [ 205.005982][ T5816] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 205.453623][ T4292] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 205.690611][ T4292] usb 5-1: unable to get BOS descriptor or descriptor too short [ 205.714262][ T4292] usb 5-1: not running at top speed; connect to a high speed hub [ 206.967746][ T4292] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 207.011385][ T4292] usb 5-1: config 1 interface 0 has no altsetting 0 [ 207.035515][ T4292] usb 5-1: New USB device found, idVendor=05ac, idProduct=0229, bcdDevice= 0.40 [ 207.056044][ T5835] netlink: 44 bytes leftover after parsing attributes in process `syz.1.487'. [ 207.066973][ T4292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.088499][ T4292] usb 5-1: Product: syz [ 207.099263][ T4292] usb 5-1: Manufacturer: syz [ 207.110272][ T4292] usb 5-1: SerialNumber: syz [ 207.131267][ T5826] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 207.370764][ T4292] appletouch 5-1:1.0: Failed to read mode from device. [ 207.379480][ T4292] appletouch: probe of 5-1:1.0 failed with error -5 [ 207.409615][ T4292] usb 5-1: USB disconnect, device number 3 [ 207.943279][ T5843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.492'. [ 208.005107][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 209.305372][ T5874] Process accounting resumed [ 211.279864][ T5537] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 211.507972][ T5537] usb 4-1: unable to get BOS descriptor or descriptor too short [ 211.535289][ T5537] usb 4-1: not running at top speed; connect to a high speed hub [ 211.566700][ T5537] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 211.587966][ T5537] usb 4-1: config 1 interface 0 has no altsetting 0 [ 211.607841][ T5537] usb 4-1: New USB device found, idVendor=05ac, idProduct=0229, bcdDevice= 0.40 [ 211.619186][ T5537] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.650920][ T5537] usb 4-1: Product: syz [ 211.656398][ T5537] usb 4-1: Manufacturer: syz [ 211.661397][ T5537] usb 4-1: SerialNumber: syz [ 211.685238][ T5886] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 211.956518][ T5537] appletouch 4-1:1.0: Failed to read mode from device. [ 212.038741][ T5537] appletouch: probe of 4-1:1.0 failed with error -5 [ 212.158119][ T5537] usb 4-1: USB disconnect, device number 5 [ 212.597830][ T5913] netlink: 44 bytes leftover after parsing attributes in process `syz.3.518'. [ 212.660182][ T5915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.506'. [ 214.111043][ T5939] trusted_key: encrypted_key: insufficient parameters specified [ 214.754023][ T14] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 214.951458][ T5951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.531'. [ 214.974766][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 214.989222][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 214.990717][ T14] usb 4-1: not running at top speed; connect to a high speed hub [ 215.035366][ T14] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 215.067855][ T14] usb 4-1: config 1 interface 0 has no altsetting 0 [ 215.099678][ T14] usb 4-1: New USB device found, idVendor=05ac, idProduct=0229, bcdDevice= 0.40 [ 215.131208][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.152824][ T14] usb 4-1: Product: syz [ 215.163625][ T14] usb 4-1: Manufacturer: syz [ 215.179094][ T14] usb 4-1: SerialNumber: syz [ 215.211368][ T5947] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 215.457524][ T14] appletouch 4-1:1.0: Failed to read mode from device. [ 215.470078][ T14] appletouch: probe of 4-1:1.0 failed with error -5 [ 215.523896][ T14] usb 4-1: USB disconnect, device number 6 [ 215.546426][ T5966] ------------[ cut here ]------------ [ 215.552337][ T5966] WARNING: CPU: 1 PID: 5966 at mm/page_alloc.c:5581 __alloc_pages+0x3b7/0x770 [ 215.561461][ T5966] Modules linked in: [ 215.565711][ T5966] CPU: 1 PID: 5966 Comm: syz.4.538 Not tainted 6.1.124-syzkaller #0 [ 215.573838][ T5966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 215.583994][ T5966] RIP: 0010:__alloc_pages+0x3b7/0x770 [ 215.589436][ T5966] Code: fc ff df 0f 85 fa 00 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cd 41 89 cd e9 ea 00 00 00 c6 05 ac 6b b0 0c 01 <0f> 0b 41 83 fc 0a 0f 86 1e fd ff ff 45 31 e4 48 c7 44 24 20 0e 36 [ 215.609144][ T5966] RSP: 0018:ffffc90005f579e0 EFLAGS: 00010246 [ 215.615238][ T5966] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 215.623269][ T5966] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90005f57a68 [ 215.631277][ T5966] RBP: ffffc90005f57b00 R08: dffffc0000000000 R09: ffffc90005f57a40 [ 215.639251][ T5966] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000014 [ 215.647264][ T5966] R13: 0000000000040d40 R14: 1ffff92000beaf44 R15: 1ffff92000beaf40 [ 215.655303][ T5966] FS: 00007f0bd7b586c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 215.664641][ T5966] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.671235][ T5966] CR2: 0000000020001000 CR3: 0000000074cc5000 CR4: 00000000003506e0 [ 215.679287][ T5966] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 215.687316][ T5966] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 215.695355][ T5966] Call Trace: [ 215.698659][ T5966] [ 215.701608][ T5966] ? __warn+0x15a/0x520 [ 215.705837][ T5966] ? __alloc_pages+0x3b7/0x770 [ 215.710618][ T5966] ? report_bug+0x2af/0x500 [ 215.715142][ T5966] ? __alloc_pages+0x3b7/0x770 [ 215.719991][ T5966] ? handle_bug+0x3d/0x70 [ 215.724351][ T5966] ? exc_invalid_op+0x16/0x40 [ 215.729106][ T5966] ? asm_exc_invalid_op+0x16/0x20 [ 215.734169][ T5966] ? __alloc_pages+0x3b7/0x770 [ 215.739015][ T5966] ? zone_statistics+0x160/0x160 [ 215.743993][ T5966] ? p9_fid_get+0xa0/0xa0 [ 215.748403][ T5966] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 215.754425][ T5966] ? print_irqtrace_events+0x210/0x210 [ 215.759988][ T5966] __kmalloc_large_node+0x91/0x1d0 [ 215.765126][ T5966] ? __v9fs_get_acl+0x40/0x110 [ 215.769962][ T5966] __kmalloc+0x118/0x230 [ 215.774222][ T5966] ? rcu_is_watching+0x11/0xb0 [ 215.779000][ T5966] __v9fs_get_acl+0x40/0x110 [ 215.783665][ T5966] v9fs_get_acl+0xa5/0x280 [ 215.788106][ T5966] v9fs_mount+0x954/0xc30 [ 215.792501][ T5966] ? xfs_fs_commit_blocks+0x7b0/0x7b0 [ 215.797906][ T5966] legacy_get_tree+0xeb/0x180 [ 215.802640][ T5966] ? xfs_fs_commit_blocks+0x7b0/0x7b0 [ 215.808024][ T5966] vfs_get_tree+0x88/0x270 [ 215.812493][ T5966] do_new_mount+0x2ba/0xb40 [ 215.817016][ T5966] ? ns_capable+0x85/0xe0 [ 215.821354][ T5966] ? do_move_mount_old+0x160/0x160 [ 215.826516][ T5966] __se_sys_mount+0x2d5/0x3c0 [ 215.831210][ T5966] ? __x64_sys_mount+0xc0/0xc0 [ 215.836041][ T5966] ? syscall_enter_from_user_mode+0x2e/0x230 [ 215.842031][ T5966] ? lockdep_hardirqs_on+0x94/0x130 [ 215.847280][ T5966] ? __x64_sys_mount+0x1c/0xc0 [ 215.852135][ T5966] do_syscall_64+0x3b/0xb0 [ 215.856625][ T5966] ? clear_bhb_loop+0x45/0xa0 [ 215.861313][ T5966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.867251][ T5966] RIP: 0033:0x7f0bd6d85d29 [ 215.871692][ T5966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.891520][ T5966] RSP: 002b:00007f0bd7b58038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 215.899998][ T5966] RAX: ffffffffffffffda RBX: 00007f0bd6f75fa0 RCX: 00007f0bd6d85d29 [ 215.907987][ T5966] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 215.915997][ T5966] RBP: 00007f0bd6e01b08 R08: 0000000020000100 R09: 0000000000000000 [ 215.924026][ T5966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.932048][ T5966] R13: 0000000000000000 R14: 00007f0bd6f75fa0 R15: 00007ffc68895128 [ 215.940074][ T5966] [ 215.943160][ T5966] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 215.950451][ T5966] CPU: 1 PID: 5966 Comm: syz.4.538 Not tainted 6.1.124-syzkaller #0 [ 215.958423][ T5966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 215.968475][ T5966] Call Trace: [ 215.971751][ T5966] [ 215.974670][ T5966] dump_stack_lvl+0x1e3/0x2cb [ 215.979621][ T5966] ? nf_tcp_handle_invalid+0x642/0x642 [ 215.985077][ T5966] ? panic+0x764/0x764 [ 215.989168][ T5966] ? 0xffffffffa00007ec [ 215.993324][ T5966] ? vscnprintf+0x59/0x80 [ 215.997647][ T5966] panic+0x318/0x764 [ 216.001533][ T5966] ? __warn+0x169/0x520 [ 216.005687][ T5966] ? memcpy_page_flushcache+0xfc/0xfc [ 216.011070][ T5966] __warn+0x348/0x520 [ 216.015048][ T5966] ? __alloc_pages+0x3b7/0x770 [ 216.019803][ T5966] report_bug+0x2af/0x500 [ 216.024131][ T5966] ? __alloc_pages+0x3b7/0x770 [ 216.028903][ T5966] handle_bug+0x3d/0x70 [ 216.033058][ T5966] exc_invalid_op+0x16/0x40 [ 216.037545][ T5966] asm_exc_invalid_op+0x16/0x20 [ 216.042384][ T5966] RIP: 0010:__alloc_pages+0x3b7/0x770 [ 216.047754][ T5966] Code: fc ff df 0f 85 fa 00 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cd 41 89 cd e9 ea 00 00 00 c6 05 ac 6b b0 0c 01 <0f> 0b 41 83 fc 0a 0f 86 1e fd ff ff 45 31 e4 48 c7 44 24 20 0e 36 [ 216.067377][ T5966] RSP: 0018:ffffc90005f579e0 EFLAGS: 00010246 [ 216.073467][ T5966] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 216.081533][ T5966] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90005f57a68 [ 216.089509][ T5966] RBP: ffffc90005f57b00 R08: dffffc0000000000 R09: ffffc90005f57a40 [ 216.097499][ T5966] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000014 [ 216.105485][ T5966] R13: 0000000000040d40 R14: 1ffff92000beaf44 R15: 1ffff92000beaf40 [ 216.113484][ T5966] ? zone_statistics+0x160/0x160 [ 216.118453][ T5966] ? p9_fid_get+0xa0/0xa0 [ 216.122782][ T5966] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 216.128775][ T5966] ? print_irqtrace_events+0x210/0x210 [ 216.134404][ T5966] __kmalloc_large_node+0x91/0x1d0 [ 216.139523][ T5966] ? __v9fs_get_acl+0x40/0x110 [ 216.144288][ T5966] __kmalloc+0x118/0x230 [ 216.148536][ T5966] ? rcu_is_watching+0x11/0xb0 [ 216.153293][ T5966] __v9fs_get_acl+0x40/0x110 [ 216.157895][ T5966] v9fs_get_acl+0xa5/0x280 [ 216.162303][ T5966] v9fs_mount+0x954/0xc30 [ 216.166640][ T5966] ? xfs_fs_commit_blocks+0x7b0/0x7b0 [ 216.172028][ T5966] legacy_get_tree+0xeb/0x180 [ 216.176718][ T5966] ? xfs_fs_commit_blocks+0x7b0/0x7b0 [ 216.182092][ T5966] vfs_get_tree+0x88/0x270 [ 216.186508][ T5966] do_new_mount+0x2ba/0xb40 [ 216.191021][ T5966] ? ns_capable+0x85/0xe0 [ 216.195355][ T5966] ? do_move_mount_old+0x160/0x160 [ 216.200488][ T5966] __se_sys_mount+0x2d5/0x3c0 [ 216.205155][ T5966] ? __x64_sys_mount+0xc0/0xc0 [ 216.209918][ T5966] ? syscall_enter_from_user_mode+0x2e/0x230 [ 216.215903][ T5966] ? lockdep_hardirqs_on+0x94/0x130 [ 216.221090][ T5966] ? __x64_sys_mount+0x1c/0xc0 [ 216.225840][ T5966] do_syscall_64+0x3b/0xb0 [ 216.230251][ T5966] ? clear_bhb_loop+0x45/0xa0 [ 216.234924][ T5966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.240813][ T5966] RIP: 0033:0x7f0bd6d85d29 [ 216.245227][ T5966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.264826][ T5966] RSP: 002b:00007f0bd7b58038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 216.273239][ T5966] RAX: ffffffffffffffda RBX: 00007f0bd6f75fa0 RCX: 00007f0bd6d85d29 [ 216.281230][ T5966] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 216.289193][ T5966] RBP: 00007f0bd6e01b08 R08: 0000000020000100 R09: 0000000000000000 [ 216.297162][ T5966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.305143][ T5966] R13: 0000000000000000 R14: 00007f0bd6f75fa0 R15: 00007ffc68895128 [ 216.313218][ T5966] [ 216.316486][ T5966] Kernel Offset: disabled [ 216.320858][ T5966] Rebooting in 86400 seconds..