last executing test programs: 8.273621607s ago: executing program 1 (id=2): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180), 0x1, 0x8a, &(0x7f00000001c0)="$eJzszqENAkEUBNDhDKhrAEEH1wOlECQ4FISEimiFEugAgcUcYsGsxCy5vJf8n0zGzO11XaZPxksyVg7H026zLz9MUpdknmSRZNWX/FiXbvbp78/z9nut9wIAAL/rMtR5aDYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A+9AwAA///rYCNS") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='rescan\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) 7.588523564s ago: executing program 0 (id=7): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='gadget.0\x00', 0x8) 7.381716539s ago: executing program 1 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys_mnt\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000140)='./nfsd_mnt\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd_mnt/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='1\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys_mnt/kernel/sunrpc/xprt-switches/switch-0/xprt-0-tcp/dstaddr\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='127.0.0.1\n\x00', 0xa) 7.198061543s ago: executing program 0 (id=9): mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./mysys\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='devices', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='mem\x00', 0x4) 6.613443618s ago: executing program 0 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='127.0.0.1:6789:/\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='mount_timeout=10\x00') 6.055191542s ago: executing program 4 (id=13): r0 = epoll_create(0x1) epoll_wait(r0, 0x0, 0x0, 0xbb8) 5.549257194s ago: executing program 4 (id=15): mkdir(&(0x7f0000000040)='./mount_sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mount_sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./mount_dlm\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./mount_dlm\x00', &(0x7f0000000200)='ocfs2_dlmfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./mount_sys/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='user', 0x4) close(r0) mkdir(&(0x7f00000002c0)='./mount_config\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000340)='./mount_config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./mount_config/dlm/ocfs2\x00', 0x1ff) r1 = open(&(0x7f0000000400)='./mount_config/dlm/ocfs2/recover_callbacks\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='1', 0x1) close(r1) r2 = open(&(0x7f0000000480)='./mount_config/dlm/ocfs2/tcp_port\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='21064', 0x5) 4.832823602s ago: executing program 3 (id=17): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='gadget.0\x00', 0x8) 4.727499014s ago: executing program 4 (id=18): mkdirat(0x9, &(0x7f0000000000)='./sys', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, &(0x7f0000000100)='\x00') r0 = openat(0x9, &(0x7f0000000200)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='pci-host-generic\x00', 0x11) close(r0) r1 = openat(0x9, &(0x7f0000000400)='./sys/bus/platform/drivers/pci-host-generic/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='pcspkr\x00', 0x7) close(r1) r2 = openat(0x9, &(0x7f0000000600)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='1\x00', 0x2) close(r2) 4.559566308s ago: executing program 3 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000400), 0x1000) 4.344817923s ago: executing program 3 (id=21): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x8a, &(0x7f0000000140)="$eJzszqENAkEUBNDhDKhrAEEH1wOlECQ4FISEimiFEugAgcUcYsGsxCy5vJf8n0zGzO11XaZPxksyVg7H026zLz9MUpdknmSRZNWX/FiXbvbp78/z9nut9wIAAL/rMtR5aDYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A+9AwAA///rYCNS") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/f0\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/f1\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x200000) ioctl$FICLONE(r1, 0x40049409, r0) fallocate(r0, 0x1, 0x0, 0x1000) fallocate(r0, 0x1, 0x3000, 0x1000) fallocate(r0, 0x1, 0x5000, 0x1000) fallocate(r0, 0x1, 0x7000, 0x1000) fallocate(r0, 0x1, 0x9000, 0x1000) fallocate(r0, 0x1, 0xb000, 0x1000) fallocate(r0, 0x1, 0xd000, 0x1000) fallocate(r0, 0x1, 0xf000, 0x1000) fallocate(r0, 0x1, 0x11000, 0x1000) fallocate(r0, 0x1, 0x13000, 0x1000) fallocate(r0, 0x1, 0x15000, 0x1000) fallocate(r0, 0x1, 0x17000, 0x1000) fallocate(r0, 0x1, 0x19000, 0x1000) fallocate(r0, 0x1, 0x1b000, 0x1000) fallocate(r0, 0x1, 0x1d000, 0x1000) fallocate(r0, 0x1, 0x1f000, 0x1000) 4.196620537s ago: executing program 2 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000001000)=@filename='none\x00', &(0x7f0000002000)='./tracing\x00', &(0x7f0000003000)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000f000)='./tracing/trace\x00', 0x0, 0x0) read(r0, &(0x7f0000010000)=""/4096, 0x1000) 4.123235819s ago: executing program 0 (id=23): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./sys/bus/i2c/devices/i2c-2\x00', 0x1ff) 3.968771633s ago: executing program 4 (id=24): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./my_configfs/dlm/cluster1/toss_secs\x00', 0x2, 0x0) write(r0, &(0x7f0000001300)='1\x00', 0x2) 3.736917858s ago: executing program 0 (id=25): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000040), 0x0, 0x442d, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/lost+found\x00', 0x0, 0x0) close(r0) 3.637829431s ago: executing program 2 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/i8042/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='i8042\x00', 0x6) 3.566387222s ago: executing program 4 (id=27): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x8a, &(0x7f0000000140)="$eJzszqENAkEUBNDhDKhrAEEH1wOlECQ4FISEimiFEugAgcUcYsGsxCy5vJf8n0zGzO11XaZPxksyVg7H026zLz9MUpdknmSRZNWX/FiXbvbp78/z9nut9wIAAL/rMtR5aDYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A+9AwAA///rYCNS") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000500)='hello_world_ocfs2_test_data_for_local_alloc\x00', 0x2c) fallocate(r0, 0x0, 0x0, 0x100000) fallocate(r0, 0x0, 0x100000, 0x200000) fallocate(r0, 0x0, 0x300000, 0x400000) 2.907286349s ago: executing program 2 (id=28): mkdir(&(0x7f0000000040)='./mount_sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mount_sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./mount_dlm\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./mount_dlm\x00', &(0x7f0000000200)='ocfs2_dlmfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./mount_sys/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='user', 0x4) close(r0) mkdir(&(0x7f00000002c0)='./mount_config\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000340)='./mount_config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./mount_config/dlm/ocfs2\x00', 0x1ff) r1 = open(&(0x7f0000000400)='./mount_config/dlm/ocfs2/recover_callbacks\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='1', 0x1) close(r1) r2 = open(&(0x7f0000000480)='./mount_config/dlm/ocfs2/tcp_port\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='21064', 0x5) 2.257273794s ago: executing program 3 (id=29): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001400)='./my_configfs/dlm/cluster1/scan_secs\x00', 0x2, 0x0) mkdir(&(0x7f0000001700)='./my_configfs/dlm/cluster1/spaces/ls1\x00', 0x1ff) mkdir(&(0x7f0000001900)='./my_configfs/dlm/cluster1/spaces/ls1/nodes/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./my_dev/dlm-control\x00', 0x2, 0x0) write(r1, &(0x7f0000001b00)="0600000000000000020000000401000000000000000000006c733100"/64, 0x40) 1.938674173s ago: executing program 2 (id=30): mkdir(&(0x7f0000001000)='myconfig\x00', 0x1ff) mount(&(0x7f0000001040)=@filename='none\x00', &(0x7f0000001080)='myconfig\x00', &(0x7f00000010c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='myconfig\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001140)=""/4096, 0x1000) 1.772086967s ago: executing program 1 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000200)="4349535300000000060100000200000000000000000000000000000000000000200000000000000080000000000000000000000000000000000000000000000040000000000000000000000020000000", 0x48, 0x100) pwrite64(r0, &(0x7f0000000300)="0000ffff1000000000010000", 0xc, 0xb0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='0000:00:02.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='hpsa\x00', 0x5) 1.351126147s ago: executing program 2 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mnt\x00', 0x1ff) mount(&(0x7f0000002040)=@filename='none\x00', &(0x7f0000002080)='./mnt\x00', &(0x7f00000020c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002100)='./mnt/tracing_on\x00', 0x1, 0x0) write(r0, &(0x7f0000002140)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002180)='./mnt/events/cdns3/cdns3_ep0_queue/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000021c0)='1', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000002200)='./mnt/trace_marker\x00', 0x1, 0x0) write(r2, &(0x7f0000002240)='\x00'/3900, 0xf3c) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000003180)='./mnt/events/cdns3/cdns3_ep0_queue/inject\x00', 0x1, 0x0) write(r3, &(0x7f00000031c0)='dir=1 length=10', 0xf) close(r3) close(0xffffffffffffffff) 969.379406ms ago: executing program 3 (id=33): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f0000000300)="$eJzszqENAkEUBNDhDKhrAEEH1wOlECQ4FISEimiFEugAgcUcYsGsxCy5vJf8n0zGzO11XaZPxksyVg7H026zLz9MUpdknmSRZNWX/FiXbvbp78/z9nut9wIAAL/rMtR5aDYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A+9AwAA///rYCNS") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='test_data_1234567890\x00', 0x14) fsync(r0) close(r0) 933.825857ms ago: executing program 1 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sysfs\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sysfs\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sysfs/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='+2\n', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sysfs/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='mem', 0x3) 591.466216ms ago: executing program 4 (id=35): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000310)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000320)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000310)='./cgroup.cpu/syz0\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000320)='./cgroup.net/syz0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) openat(r0, &(0x7f0000000410)='pids.max\x00', 0x2, 0x0) openat(r1, &(0x7f0000000420)='cpu.weight\x00', 0x2, 0x0) openat(r1, &(0x7f0000000430)='cpu.shares\x00', 0x2, 0x0) openat(r1, &(0x7f0000000440)='cpuset.cpus\x00', 0x2, 0x0) openat(r2, &(0x7f0000000450)='devices.allow\x00', 0x1, 0x0) 484.432638ms ago: executing program 3 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='ucsi_acpi\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/ucsi_acpi/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='pcspkr\x00', 0x7) close(r1) 220.025445ms ago: executing program 0 (id=37): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./my_configfs/dlm/cluster1/toss_secs\x00', 0x2, 0x0) write(r0, &(0x7f0000001300)='1\x00', 0x2) 0s ago: executing program 2 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='i8042\x00', 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. [ 92.195655][ T10] cfg80211: failed to load regulatory.db [ 92.524205][ T5567] cgroup: Unknown subsys name 'net' [ 92.767100][ T5567] cgroup: Unknown subsys name 'cpuset' [ 92.819187][ T5567] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.791480][ T5567] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.368613][ T5583] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.377133][ T5583] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.426408][ T5583] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.455953][ T5594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.456289][ T5583] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.457159][ T5594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.488836][ T5594] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.515968][ T5594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.518431][ T5583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.523950][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.524502][ T5597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.524675][ T5597] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.533351][ T5597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.555184][ T5596] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.556046][ T5596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.564641][ T5594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.578193][ T5598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.584968][ T5598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.593713][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.597115][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.601662][ T5598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.606410][ T5598] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.616456][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.620894][ T5598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.678761][ T5587] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.750338][ T5587] Bluetooth: hci0: command tx timeout [ 99.750733][ T5587] Bluetooth: hci3: command tx timeout [ 99.750826][ T4896] Bluetooth: hci4: command tx timeout [ 99.828128][ T5587] Bluetooth: hci2: command tx timeout [ 99.828330][ T5587] Bluetooth: hci1: command tx timeout [ 100.552158][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.553548][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.553980][ T5577] bridge_slave_0: entered allmulticast mode [ 100.556050][ T5577] bridge_slave_0: entered promiscuous mode [ 100.594496][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.594617][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.594755][ T5578] bridge_slave_0: entered allmulticast mode [ 100.596578][ T5578] bridge_slave_0: entered promiscuous mode [ 100.643424][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.643512][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.643908][ T5577] bridge_slave_1: entered allmulticast mode [ 100.646062][ T5577] bridge_slave_1: entered promiscuous mode [ 100.683350][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.683458][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.683594][ T5578] bridge_slave_1: entered allmulticast mode [ 100.685551][ T5578] bridge_slave_1: entered promiscuous mode [ 100.899650][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.899867][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.900451][ T5581] bridge_slave_0: entered allmulticast mode [ 100.902503][ T5581] bridge_slave_0: entered promiscuous mode [ 100.935273][ T5577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.965900][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.966262][ T5579] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.966448][ T5579] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.966619][ T5579] bridge_slave_0: entered allmulticast mode [ 101.002065][ T5579] bridge_slave_0: entered promiscuous mode [ 101.003834][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.003959][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.004132][ T5581] bridge_slave_1: entered allmulticast mode [ 101.006363][ T5581] bridge_slave_1: entered promiscuous mode [ 101.022200][ T5577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.024704][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.025095][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.027385][ T5580] bridge_slave_0: entered allmulticast mode [ 101.046006][ T5580] bridge_slave_0: entered promiscuous mode [ 101.081911][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.082172][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.082292][ T5579] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.082443][ T5579] bridge_slave_1: entered allmulticast mode [ 101.084323][ T5579] bridge_slave_1: entered promiscuous mode [ 101.160557][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.160662][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.160805][ T5580] bridge_slave_1: entered allmulticast mode [ 101.163825][ T5580] bridge_slave_1: entered promiscuous mode [ 101.319345][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.322533][ T5577] team0: Port device team_slave_0 added [ 101.357023][ T5578] team0: Port device team_slave_0 added [ 101.364987][ T5579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.377038][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.387695][ T5577] team0: Port device team_slave_1 added [ 101.395797][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.405887][ T5578] team0: Port device team_slave_1 added [ 101.419863][ T5579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.474145][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.603769][ T5581] team0: Port device team_slave_0 added [ 101.605129][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.605147][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.605177][ T5577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.662374][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.662392][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.662422][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.665443][ T5579] team0: Port device team_slave_0 added [ 101.667777][ T5581] team0: Port device team_slave_1 added [ 101.681077][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.681129][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.681206][ T5577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.705244][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.705329][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.705372][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.781067][ T5580] team0: Port device team_slave_0 added [ 101.796811][ T5579] team0: Port device team_slave_1 added [ 101.828136][ T4896] Bluetooth: hci3: command tx timeout [ 101.838984][ T4896] Bluetooth: hci4: command tx timeout [ 101.839006][ T5587] Bluetooth: hci0: command tx timeout [ 101.879644][ T5580] team0: Port device team_slave_1 added [ 101.908256][ T4896] Bluetooth: hci2: command tx timeout [ 101.908554][ T5587] Bluetooth: hci1: command tx timeout [ 102.460300][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.460319][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.460349][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.516610][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.516628][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.516658][ T5579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.538473][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.538585][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.538660][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.621335][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.621350][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.621371][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.622758][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.622774][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.622803][ T5579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.744352][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.744370][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.744399][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.803353][ T5577] hsr_slave_0: entered promiscuous mode [ 102.804541][ T5577] hsr_slave_1: entered promiscuous mode [ 102.824060][ T5578] hsr_slave_0: entered promiscuous mode [ 102.825163][ T5578] hsr_slave_1: entered promiscuous mode [ 102.825977][ T5578] debugfs: 'hsr0' already exists in 'hsr' [ 102.826080][ T5578] Cannot create hsr debugfs directory [ 103.065800][ T5581] hsr_slave_0: entered promiscuous mode [ 103.066833][ T5581] hsr_slave_1: entered promiscuous mode [ 103.067575][ T5581] debugfs: 'hsr0' already exists in 'hsr' [ 103.067593][ T5581] Cannot create hsr debugfs directory [ 103.136362][ T5579] hsr_slave_0: entered promiscuous mode [ 103.137513][ T5579] hsr_slave_1: entered promiscuous mode [ 103.139843][ T5579] debugfs: 'hsr0' already exists in 'hsr' [ 103.139918][ T5579] Cannot create hsr debugfs directory [ 103.197423][ T5580] hsr_slave_0: entered promiscuous mode [ 103.200965][ T5580] hsr_slave_1: entered promiscuous mode [ 103.203856][ T5580] debugfs: 'hsr0' already exists in 'hsr' [ 103.203931][ T5580] Cannot create hsr debugfs directory [ 103.908088][ T4896] Bluetooth: hci0: command tx timeout [ 103.918243][ T4896] Bluetooth: hci4: command tx timeout [ 103.918275][ T4896] Bluetooth: hci3: command tx timeout [ 103.989322][ T5587] Bluetooth: hci2: command tx timeout [ 103.989357][ T5587] Bluetooth: hci1: command tx timeout [ 104.043566][ T5577] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.095331][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.109277][ T5577] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.144853][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.157587][ T5577] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.205810][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.233399][ T5577] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.254549][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.385456][ T5581] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.425908][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.436136][ T5581] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.476298][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.495678][ T5581] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.534149][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.574491][ T5581] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.603364][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.805505][ T5579] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.833325][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.865983][ T5579] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.893898][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.909703][ T5579] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.943371][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.979171][ T5579] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.006846][ T5579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.190193][ T5580] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.224276][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.249663][ T5580] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.285170][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.297434][ T5580] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.323486][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.367667][ T5580] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.402876][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.605325][ T5577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.616552][ T5578] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.662562][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.687735][ T5578] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.735312][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.754799][ T5578] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.791844][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.815189][ T5578] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.841956][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.941874][ T5577] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.956334][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.994783][ T4896] Bluetooth: hci3: command tx timeout [ 105.994819][ T4896] Bluetooth: hci4: command tx timeout [ 105.994843][ T4896] Bluetooth: hci0: command tx timeout [ 106.026267][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.026449][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.068317][ T4896] Bluetooth: hci2: command tx timeout [ 106.068377][ T5587] Bluetooth: hci1: command tx timeout [ 106.103639][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.103732][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.149206][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.213176][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.213329][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.274218][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.274327][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.307710][ T5579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.424496][ T5579] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.437418][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.484573][ T269] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.484725][ T269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.564972][ T269] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.566983][ T269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.679674][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.750235][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.763269][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.782431][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.864106][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.864249][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.087572][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.154160][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.171271][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.238696][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.238837][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.962155][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.018720][ T5577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.662892][ T5577] veth0_vlan: entered promiscuous mode [ 108.789009][ T5577] veth1_vlan: entered promiscuous mode [ 108.939641][ T5579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.092938][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.198567][ T5577] veth0_macvtap: entered promiscuous mode [ 109.207499][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.250074][ T5577] veth1_macvtap: entered promiscuous mode [ 109.319823][ T5581] veth0_vlan: entered promiscuous mode [ 109.362246][ T5579] veth0_vlan: entered promiscuous mode [ 109.382869][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.416423][ T5581] veth1_vlan: entered promiscuous mode [ 109.425666][ T5580] veth0_vlan: entered promiscuous mode [ 109.444193][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.471412][ T5579] veth1_vlan: entered promiscuous mode [ 109.530589][ T5580] veth1_vlan: entered promiscuous mode [ 109.619548][ T5578] veth0_vlan: entered promiscuous mode [ 109.794212][ T5578] veth1_vlan: entered promiscuous mode [ 109.839860][ T5581] veth0_macvtap: entered promiscuous mode [ 109.975495][ T5579] veth0_macvtap: entered promiscuous mode [ 109.981577][ T5581] veth1_macvtap: entered promiscuous mode [ 110.029162][ T5579] veth1_macvtap: entered promiscuous mode [ 110.071609][ T5580] veth0_macvtap: entered promiscuous mode [ 110.128881][ T5580] veth1_macvtap: entered promiscuous mode [ 110.151033][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.151065][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.166907][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.282700][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.285692][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.355015][ T5578] veth0_macvtap: entered promiscuous mode [ 110.368978][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.377641][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.424825][ T1030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.424849][ T1030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.425944][ T5578] veth1_macvtap: entered promiscuous mode [ 110.511379][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.131709][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.429974][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.853940][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.853988][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.893170][ T5776] loop0: detected capacity change from 0 to 512 [ 112.039989][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.040011][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.049943][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.465165][ T5776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.465357][ T5776] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.533132][ T5776] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1: iget: bad i_size value: 2533274857506816 [ 112.623471][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.623493][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.829180][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.903943][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.903968][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.904119][ T5782] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 16: block 44:freeing already freed block (bit 44); block bitmap corrupt. [ 112.961132][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.982132][ T5782] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.1: corrupted inode contents [ 112.982437][ T5782] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 113.070072][ T5782] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #16: comm syz.0.1: mark_inode_dirty error [ 113.073898][ T5782] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 113.122562][ T5782] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.1: corrupted inode contents [ 113.122715][ T5782] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 113.156005][ T5782] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.1: mark_inode_dirty error [ 113.156075][ T5782] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 113.163395][ T5782] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.1: corrupted inode contents [ 113.163610][ T5782] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 113.221383][ T5782] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.1: mark_inode_dirty error [ 113.221454][ T5782] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 113.241747][ T5782] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.1: corrupted inode contents [ 113.242222][ T5782] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 113.321854][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.351656][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.369728][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.421817][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.421841][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.472182][ T5782] EXT4-fs error (device loop0): ext4_truncate:4691: inode #16: comm syz.0.1: mark_inode_dirty error [ 113.472270][ T5782] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 113.528460][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.631242][ T1030] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.655392][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.811044][ T1030] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.963970][ T5577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.113079][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.113100][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.449483][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.449505][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.497429][ T5787] loop1: detected capacity change from 0 to 64 [ 115.093183][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.093205][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.253651][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.254267][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.359127][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.442901][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.443115][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.513350][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.529538][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.529793][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.893766][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.512616][ T1460] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.335791][ T5809] ceph: No mds server is up or the cluster is laggy [ 117.623526][ T5585] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 117.990469][ T5716] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 118.065890][ T5798] NFSD: Failed to start, no listeners configured. [ 118.454233][ T5842] loop3: detected capacity change from 0 to 64 [ 119.097431][ T5842] XFS (loop3): Invalid superblock magic number [ 119.627065][ T5863] loop4: detected capacity change from 0 to 64 [ 120.916316][ T5863] (syz.4.27,5863,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 120.916366][ T5863] (syz.4.27,5863,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 121.023402][ T37] audit: type=1800 audit(1786958546.066:2): pid=5872 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.29" name="cluster_name" dev="configfs" ino=8649 res=0 errno=0 [ 121.023458][ T37] audit: type=1800 audit(1786958546.116:3): pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.29" name="local" dev="configfs" ino=8140 res=0 errno=0 [ 121.270105][ T37] audit: type=1800 audit(1786958546.386:4): pid=5872 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.29" name="scan_secs" dev="configfs" ino=8141 res=0 errno=0 [ 121.724035][ T5888] PM: suspend entry (deep) [ 121.943293][ T5858] loop0: detected capacity change from 0 to 32768 [ 122.593250][ T5895] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000104: 0000 [#1] SMP KASAN PTI [ 122.593278][ T5895] KASAN: null-ptr-deref in range [0x0000000000000820-0x0000000000000827] [ 122.593310][ T5895] CPU: 1 UID: 0 PID: 5895 Comm: syz.3.36 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 122.593337][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026[ 122.593337][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.593350][ T5895] RIP: 0010:ucsi_acpi_probe+0x6c/0x4b0 [ 122.593395][ T5895] Code: 89 74 24 08 4c 8b 23 4c 89 e7 e8 5f ae cf fd 49 83 c4 f0 45 31 f6 84 c0 4d 0f 45 f4 49 81 c6 24 08 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 16 04 00 00 41 8b 2e 31 ff 89 ee e8 6b [ 122.593414][ T5895] RSP: 0018:ffffc90005bf7ab8 EFLAGS: 00010203 [ 122.593433][ T5895] RAX: 0000000000000104 RBX: ffff88801db644e8 RCX: 0000000000080000 [ 122.593449][ T5895] RDX: ffffc900076a9000 RSI: 00000000000006c7 RDI: 00000000000006c8 [ 122.593463][ T5895] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.593476][ T5895] R10: dffffc0000000000 R11: ffffffff8752d470 R12: fffffffffffffff0 [ 122.593493][ T5895] R13: dffffc0000000000 R14: 0000000000000824 R15: 1ffff11003b6c89d [ 122.593509][ T5895] FS: 00007f03c28356c0(0000) GS:ffff888125d3a000(0000) knlGS:0000000000000000 [ 122.593527][ T5895] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.593542][ T5895] CR2: 0000001b31423ffc CR3: 000000005e7c4000 CR4: 00000000003526f0 [ 122.593561][ T5895] Call Trace: [ 122.593570][ T5895] [ 122.593581][ T5895] ? __pfx_ucsi_acpi_probe+0x10/0x10 [ 122.593607][ T5895] platform_probe+0xf9/0x190 [ 122.593633][ T5895] ? __pfx_platform_probe+0x10/0x10 [ 122.593656][ T5895] really_probe+0x254/0xae0 [ 122.593689][ T5895] __driver_probe_device+0x1e8/0x360 [ 122.593722][ T5895] device_driver_attach+0xe0/0x1d0 [ 122.593753][ T5895] bind_store+0x1d3/0x220 [ 122.593780][ T5895] ? __pfx_sysfs_kf_write+0x10/0x10 [ 122.593814][ T5895] kernfs_fop_write_iter+0x3a5/0x540 [ 122.593846][ T5895] vfs_write+0x61e/0xbb0 [ 122.593875][ T5895] ? __pfx_vfs_write+0x10/0x10 [ 122.593900][ T5895] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 122.593938][ T5895] ? lockdep_hardirqs_on+0x7a/0x110 [ 122.593965][ T5895] ? mutex_lock_nested+0x152/0x1d0 [ 122.593995][ T5895] ? fdget_pos+0x252/0x320 [ 122.594034][ T5895] ksys_write+0x156/0x270 [ 122.594059][ T5895] ? __pfx_ksys_write+0x10/0x10 [ 122.594087][ T5895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.594111][ T5895] do_syscall_64+0x174/0x580 [ 122.594138][ T5895] ? trace_irq_disable+0x3b/0x140 [ 122.594170][ T5895] ? clear_bhb_loop+0x70/0xc0 [ 122.594194][ T5895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.594215][ T5895] RIP: 0033:0x7f03c45fe0d9 [ 122.594248][ T5895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.594267][ T5895] RSP: 002b:00007f03c2835028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.594290][ T5895] RAX: ffffffffffffffda RBX: 00007f03c4886090 RCX: 00007f03c45fe0d9 [ 122.594306][ T5895] RDX: 0000000000000007 RSI: 0000200000000500 RDI: 0000000000000003 [ 122.594319][ T5895] RBP: 00007f03c4695024 R08: 0000000000000000 R09: 0000000000000000 [ 122.594332][ T5895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.594344][ T5895] R13: 00007f03c4886128 R14: 00007f03c4886090 R15: 00007fff6eeb83d8 [ 122.594366][ T5895] [ 122.594373][ T5895] Modules linked in: [ 122.594435][ T5895] ---[ end trace 0000000000000000 ]--- [ 122.638397][ T5895] RIP: 0010:ucsi_acpi_probe+0x6c/0x4b0 [ 122.638534][ T5895] Code: 89 74 24 08 4c 8b 23 4c 89 e7 e8 5f ae cf fd 49 83 c4 f0 45 31 f6 84 c0 4d 0f 45 f4 49 81 c6 24 08 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 16 04 00 00 41 8b 2e 31 ff 89 ee e8 6b [ 122.638588][ T5895] RSP: 0018:ffffc90005bf7ab8 EFLAGS: 00010203 [ 122.638635][ T5895] RAX: 0000000000000104 RBX: ffff88801db644e8 RCX: 0000000000080000 [ 122.638678][ T5895] RDX: ffffc900076a9000 RSI: 00000000000006c7 RDI: 00000000000006c8 [ 122.638721][ T5895] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.638768][ T5895] R10: dffffc0000000000 R11: ffffffff8752d470 R12: fffffffffffffff0 [ 122.638845][ T5895] R13: dffffc0000000000 R14: 0000000000000824 R15: 1ffff11003b6c89d [ 122.638891][ T5895] FS: 00007f03c28356c0(0000) GS:ffff888125c3a000(0000) knlGS:0000000000000000 [ 122.638932][ T5895] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.638981][ T5895] CR2: 00007fae19388000 CR3: 000000005e7c4000 CR4: 00000000003526f0 [ 122.639034][ T5895] Kernel panic - not syncing: Fatal exception [ 122.639789][ T5895] Kernel Offset: disabled