last executing test programs: 3.396249422s ago: executing program 4 (id=143): setresuid(0x0, 0xee00, 0x0) r0 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3.109606305s ago: executing program 4 (id=148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x1) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1c10, 0x0) 2.848032016s ago: executing program 4 (id=150): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x30, 0x0, r0, 0x0, 0x0, 0x0, 0x60040815, 0xec618f0018aa0bbd}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.607951137s ago: executing program 3 (id=153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xa, &(0x7f00000007c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x3471, &(0x7f00000003c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x8524a9af801bb0f, 0x0, r3, 0x0, 0x0, 0x4, 0x240940, 0x23456}) io_uring_enter(r3, 0x627, 0xc1040000, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5437, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x800}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 2.564152698s ago: executing program 4 (id=154): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000}) 2.324300979s ago: executing program 4 (id=157): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.143915717s ago: executing program 1 (id=160): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.143743297s ago: executing program 3 (id=161): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 2.068136641s ago: executing program 4 (id=162): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 1.896121088s ago: executing program 1 (id=164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200"/573], 0x310) close_range(r2, r3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0x5}) 1.895822667s ago: executing program 2 (id=165): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x2, 0x96c, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0xfffffffffffffffb}, {0x0, 0x4000000000007, 0x2}, 0x800, 0x0, 0x0, 0x0, 0x3, 0x1}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 1.717126875s ago: executing program 1 (id=167): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x2, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c0001800600000005470000080002"], 0x38}}, 0x40) 1.560161802s ago: executing program 2 (id=168): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x20000007d}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, 0x0}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 1.488718055s ago: executing program 0 (id=169): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x24000800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="d81f96bed9556700"/23, 0x17}], 0x15, 0x2009c00, 0x2, 0x0) 1.437853587s ago: executing program 1 (id=170): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.021602615s ago: executing program 0 (id=171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) chroot(0x0) 1.016043746s ago: executing program 3 (id=172): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffe42}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) utime(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000440)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000009c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000008c0)="6f9ea08071e2bf1ffa7f4335f72a1ee24d5959b23051fd01fd4b2b1b1128cfebf49a4d6dd8a298fc08a89abf50dbdeca7e09b570751262940126504a7172e93e43d63b125d4fc279ed0938d4ee30a2d49095667b4f71272185b00468ece4cd7c9e48551d24a503d6c0dc0681ebd2ae09be91172926bd5b3141b6aa634ed8618352af26ec3ca826a63f90c5ef55f288cc7c71bb7ef13a6f3351264bc549a3d4da09a1400af77d5004cbcde053a8c2a31605405cdd5f623b661629a982ba3aca11d3465cf6c366201623d323f93b3acb8fa699abb0", 0xd4, r2}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000005c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpid}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") 996.076547ms ago: executing program 1 (id=173): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 764.249827ms ago: executing program 1 (id=174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 763.942857ms ago: executing program 0 (id=175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 574.323315ms ago: executing program 2 (id=176): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r1}, 0x18) acct(0x0) 526.276257ms ago: executing program 0 (id=177): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x20000095}, 0x4c080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000140)) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000012106bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040012000d000a000d0000009ee517ce4460bc24eab5191081aef456a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5500f69853", 0x61}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 452.22985ms ago: executing program 3 (id=178): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getgroups(0x0, 0x0) 426.017901ms ago: executing program 2 (id=179): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) 343.352085ms ago: executing program 0 (id=180): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffff}, 0x18) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') pread64(r0, &(0x7f0000001240)=""/102392, 0x18ff8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r2) fcntl$setown(r2, 0x8, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140), 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) 276.120398ms ago: executing program 3 (id=181): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 275.810028ms ago: executing program 2 (id=182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1e3802, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)={0x0, 0xfb, 0x1a, 0x9, 0x8, "b081ba00dc1ce3c9b5eedcb175c98535", "e68b00836c"}, 0x1a, 0x2) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000080)) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0xc000, 0x8}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 187.607212ms ago: executing program 0 (id=183): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x470, &(0x7f0000000a40)="$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") r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000240)='./file0\x00', 0x0, r1) 144.242673ms ago: executing program 3 (id=184): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xa, 0x200, 0x7, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/89}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000480), 0x2, r2}, 0x38) 0s ago: executing program 2 (id=185): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 44.298029][ T3933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.326875][ T3933] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts. syzkaller login: [ 65.548876][ T4255] cgroup: Unknown subsys name 'net' [ 65.681986][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.171627][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.332601][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.352405][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.352633][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.362177][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.368811][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.375536][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.382930][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.389471][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.396910][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.404188][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.417904][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.418415][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.425611][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.433099][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.440462][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.447616][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.453465][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.461369][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.467639][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.474509][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.481821][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.495911][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.516898][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.536310][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.543728][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.562951][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.582012][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.589697][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.597694][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.605387][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.864453][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 70.074260][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 70.093101][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.100488][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.109131][ T4270] device bridge_slave_0 entered promiscuous mode [ 70.120444][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.127610][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.135966][ T4270] device bridge_slave_1 entered promiscuous mode [ 70.151800][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 70.234890][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 70.248678][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.262506][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.284786][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 70.361225][ T4270] team0: Port device team_slave_0 added [ 70.367466][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.374576][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.382823][ T4268] device bridge_slave_0 entered promiscuous mode [ 70.394719][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.402273][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.410595][ T4268] device bridge_slave_1 entered promiscuous mode [ 70.433100][ T4270] team0: Port device team_slave_1 added [ 70.462354][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.469755][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.477722][ T4269] device bridge_slave_0 entered promiscuous mode [ 70.509822][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.519777][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.527068][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.534789][ T4269] device bridge_slave_1 entered promiscuous mode [ 70.562937][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.581191][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.588335][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.615422][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.659302][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.666516][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.693179][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.704733][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.712079][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.721296][ T4281] device bridge_slave_0 entered promiscuous mode [ 70.748773][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.762090][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.770358][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.778505][ T4281] device bridge_slave_1 entered promiscuous mode [ 70.795945][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.803154][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.811619][ T4266] device bridge_slave_0 entered promiscuous mode [ 70.821846][ T4268] team0: Port device team_slave_0 added [ 70.829875][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.866644][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.873855][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.882753][ T4266] device bridge_slave_1 entered promiscuous mode [ 70.891168][ T4268] team0: Port device team_slave_1 added [ 70.899598][ T4269] team0: Port device team_slave_0 added [ 70.907834][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.943404][ T4269] team0: Port device team_slave_1 added [ 70.951701][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.013368][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.023573][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.031816][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.058440][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.073398][ T4270] device hsr_slave_0 entered promiscuous mode [ 71.080362][ T4270] device hsr_slave_1 entered promiscuous mode [ 71.091055][ T4281] team0: Port device team_slave_0 added [ 71.106905][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.117503][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.124477][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.151039][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.167902][ T4281] team0: Port device team_slave_1 added [ 71.174653][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.182228][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.209364][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.255247][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.262620][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.289177][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.311441][ T4266] team0: Port device team_slave_0 added [ 71.343211][ T4266] team0: Port device team_slave_1 added [ 71.351617][ T4268] device hsr_slave_0 entered promiscuous mode [ 71.359014][ T4268] device hsr_slave_1 entered promiscuous mode [ 71.366162][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.373954][ T4268] Cannot create hsr debugfs directory [ 71.380146][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.387170][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.413389][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.426581][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.433822][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.460464][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.508935][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.515644][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.543536][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.550722][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.578362][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.589229][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 71.595743][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 71.600421][ T4274] Bluetooth: hci4: command 0x0409 tx timeout [ 71.625025][ T4281] device hsr_slave_0 entered promiscuous mode [ 71.631993][ T4281] device hsr_slave_1 entered promiscuous mode [ 71.641598][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.649418][ T4281] Cannot create hsr debugfs directory [ 71.664299][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.671633][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 71.671677][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 71.684353][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.711244][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.726581][ T4269] device hsr_slave_0 entered promiscuous mode [ 71.734060][ T4269] device hsr_slave_1 entered promiscuous mode [ 71.741011][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.748777][ T4269] Cannot create hsr debugfs directory [ 71.909269][ T4266] device hsr_slave_0 entered promiscuous mode [ 71.916733][ T4266] device hsr_slave_1 entered promiscuous mode [ 71.923842][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.931984][ T4266] Cannot create hsr debugfs directory [ 72.128469][ T4270] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.149112][ T4270] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.162241][ T4270] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.186456][ T4270] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.213310][ T4269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.222671][ T4269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.243598][ T4269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.264022][ T4269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.330803][ T4268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.344458][ T4268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.386405][ T4268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.402487][ T4268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.487097][ T4266] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.499454][ T4266] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.513453][ T4281] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.528526][ T4281] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.541395][ T4281] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.551980][ T4281] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.564000][ T4266] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.576781][ T4266] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.618976][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.661132][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.682713][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.692654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.719792][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.728684][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.739611][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.759299][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.787358][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.797248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.807430][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.814713][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.830683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.839184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.849049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.858340][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.865547][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.876528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.907885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.918429][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.928751][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.936027][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.944389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.954232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.981825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.992258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.003267][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.010585][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.019291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.030329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.039113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.051162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.092957][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.113655][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.124389][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.134162][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.143067][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.152888][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.163211][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.172659][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.181209][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.190003][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.199739][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.209838][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.219177][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.227857][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.237458][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.251375][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.264242][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.273574][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.288202][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.298782][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.317423][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.331733][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.339963][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.354960][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.384115][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.392608][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.402752][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.412233][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.420720][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.438518][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.493986][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.504681][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.521721][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.529007][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.545938][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.554877][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.572968][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.580196][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.595815][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.605514][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.614550][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.624429][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.633445][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.640629][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.650333][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.659585][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.668739][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 73.674805][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 73.681118][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.688296][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.688423][ T4284] Bluetooth: hci4: command 0x041b tx timeout [ 73.703001][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.712304][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.720710][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.747328][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 73.747360][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 73.754023][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.787178][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.798354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.824170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.837086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.847476][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.856738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.866155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.874233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.921533][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.940115][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.951978][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.959362][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.968424][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.977243][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.987129][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.000528][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.009801][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.016982][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.024893][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.033662][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.044674][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.053603][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.062314][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.072189][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.080875][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.089614][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.098545][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.145551][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.154587][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.172929][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.181883][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.189861][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.200173][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.210082][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.243331][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.267282][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.275179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.293854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.303814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.320190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.372058][ T4266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.384348][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.415508][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.424326][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.442824][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.454815][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.471270][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.483150][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.540334][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.566543][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.591515][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.624163][ T4269] device veth0_vlan entered promiscuous mode [ 74.664579][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.687351][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.702161][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.728682][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.759629][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.770178][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.782431][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.799566][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.814325][ T4269] device veth1_vlan entered promiscuous mode [ 74.840926][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.852022][ T4270] device veth0_vlan entered promiscuous mode [ 74.867146][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.878048][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.886927][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.894471][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.941684][ T4270] device veth1_vlan entered promiscuous mode [ 74.951030][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.961011][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.970618][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.984412][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.992503][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.020503][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.030699][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.042372][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.067865][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.083081][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.094680][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.113932][ T4269] device veth0_macvtap entered promiscuous mode [ 75.138892][ T4268] device veth0_vlan entered promiscuous mode [ 75.155869][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.164535][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.175043][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.205914][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.213630][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.224051][ T4269] device veth1_macvtap entered promiscuous mode [ 75.244838][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.255942][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.264769][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.286365][ T4268] device veth1_vlan entered promiscuous mode [ 75.300645][ T4270] device veth0_macvtap entered promiscuous mode [ 75.313426][ T4270] device veth1_macvtap entered promiscuous mode [ 75.333961][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.356833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.371833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.380618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.395479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.429250][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.440285][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.453364][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.486928][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.501244][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.514910][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.524213][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.539094][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.556578][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.568484][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.585195][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.594578][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.604359][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.621311][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.631678][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.647483][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.659329][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.676583][ T4268] device veth0_macvtap entered promiscuous mode [ 75.688028][ T4270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.703743][ T4270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.713265][ T4270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.722120][ T4270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.744855][ T4269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.753908][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 75.753949][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 75.755733][ T4274] Bluetooth: hci1: command 0x040f tx timeout [ 75.771621][ T4269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.782342][ T4269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.791472][ T4269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.804391][ T4268] device veth1_macvtap entered promiscuous mode [ 75.823786][ T4266] device veth0_vlan entered promiscuous mode [ 75.830257][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 75.836370][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 75.848516][ T4266] device veth1_vlan entered promiscuous mode [ 75.856799][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.865236][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.873704][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.887520][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.896346][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.904498][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.913115][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.953979][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.966162][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.976449][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.989322][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.002444][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.023593][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.034442][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.045829][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.056428][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.069859][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.082651][ T4268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.091687][ T4268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.101457][ T4268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.112830][ T4268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.124236][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.133521][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.142556][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.152320][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.163834][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.173223][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.181989][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.261651][ T4266] device veth0_macvtap entered promiscuous mode [ 76.276707][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.285938][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.308889][ T4281] device veth0_vlan entered promiscuous mode [ 76.342468][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.352971][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.362002][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.371080][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.381150][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.400354][ T4266] device veth1_macvtap entered promiscuous mode [ 76.461181][ T4281] device veth1_vlan entered promiscuous mode [ 76.480032][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.494867][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.504029][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.516160][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.528370][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.540151][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.552153][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.563995][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.575041][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.595627][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.603897][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.613969][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.623519][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.626604][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.641052][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.649804][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.659578][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.668888][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.697260][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.709281][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.721518][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.733462][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.743402][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.754144][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.766663][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.776753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.795618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.826709][ T4281] device veth0_macvtap entered promiscuous mode [ 76.846890][ T4266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.857961][ T4266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.868070][ T4266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.877843][ T4266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.890169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.899667][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.902697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.908325][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.940447][ T4281] device veth1_macvtap entered promiscuous mode [ 76.957086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.967347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.975438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.007085][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.019482][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.033134][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.041556][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.049611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.073151][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.085204][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.096403][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.107374][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.118167][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.128811][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.138956][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.150146][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.171465][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.187982][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.202569][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.211199][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.224623][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.235771][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.246274][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.257072][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.269282][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.281627][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.292798][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.303688][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.316011][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.337086][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.350541][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.376478][ T4348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.392514][ T4348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.394106][ T4281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.412030][ T4281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.421945][ T4281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.431636][ T4281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.446161][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.464322][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.495418][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.518067][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.651937][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.681367][ T4384] loop0: detected capacity change from 0 to 164 [ 77.693991][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.741435][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.791727][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.808820][ T4384] ISOFS: unable to read i-node block [ 77.816177][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.826285][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 77.831741][ T4384] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 77.833186][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 77.841663][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 77.881796][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.915593][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 77.921877][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 77.981063][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.025837][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.156908][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.269375][ T4398] loop3: detected capacity change from 0 to 1024 [ 78.298332][ T4398] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.308827][ T27] audit: type=1326 audit(1764457223.482:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4400 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 78.350147][ T4398] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.463317][ T27] audit: type=1326 audit(1764457223.522:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4400 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 78.481649][ T4398] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 78.580958][ T27] audit: type=1326 audit(1764457223.522:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4400 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 78.604064][ T27] audit: type=1326 audit(1764457223.522:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4400 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 78.635047][ T27] audit: type=1326 audit(1764457223.522:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4400 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 78.735828][ T27] audit: type=1326 audit(1764457223.532:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4400 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 78.822395][ T27] audit: type=1326 audit(1764457223.532:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4400 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 78.881851][ T27] audit: type=1326 audit(1764457223.532:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4400 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 78.905932][ T27] audit: type=1326 audit(1764457223.532:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4400 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 78.931473][ T27] audit: type=1326 audit(1764457223.532:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4400 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 78.958479][ T4413] loop4: detected capacity change from 0 to 256 [ 79.231041][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 79.548121][ T4323] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.592693][ T4323] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 80.036364][ T4438] syz.0.21 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 80.910633][ T4464] loop1: detected capacity change from 0 to 512 [ 80.977719][ T4464] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.039444][ T4464] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.176285][ T4464] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.33: Allocating blocks 41-42 which overlap fs metadata [ 81.242246][ T4464] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.33: Allocating blocks 41-42 which overlap fs metadata [ 81.293665][ T4464] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.33: Failed to acquire dquot type 1 [ 81.342956][ T4464] EXT4-fs error (device loop1): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 81.355024][ T4480] usb usb8: usbfs: process 4480 (+}[@) did not claim interface 0 before use [ 81.366298][ T4464] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.33: corrupted inode contents [ 81.384659][ T4464] EXT4-fs error (device loop1): ext4_dirty_inode:6133: inode #12: comm syz.1.33: mark_inode_dirty error [ 81.405666][ T4464] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.33: corrupted inode contents [ 81.432221][ T4464] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.33: mark_inode_dirty error [ 81.468673][ T4464] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.33: corrupted inode contents [ 81.519265][ T4464] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 81.537147][ T4464] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.33: corrupted inode contents [ 81.563064][ T4478] loop0: detected capacity change from 0 to 4096 [ 81.585626][ T4464] EXT4-fs error (device loop1): ext4_truncate:4318: inode #12: comm syz.1.33: mark_inode_dirty error [ 81.633417][ T4478] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 81.648639][ T4464] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 81.664198][ T4464] EXT4-fs (loop1): 1 truncate cleaned up [ 81.672027][ T4464] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 81.704091][ T4488] Zero length message leads to an empty skb [ 81.757382][ T126] cfg80211: failed to load regulatory.db [ 81.850890][ T4491] loop4: detected capacity change from 0 to 1024 [ 81.897125][ T4491] ======================================================= [ 81.897125][ T4491] WARNING: The mand mount option has been deprecated and [ 81.897125][ T4491] and is ignored by this kernel. Remove the mand [ 81.897125][ T4491] option from the mount to silence this warning. [ 81.897125][ T4491] ======================================================= [ 82.125731][ T4464] syz.1.33 (4464) used greatest stack depth: 16672 bytes left [ 82.139432][ T4491] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 82.145205][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 82.251396][ T4491] lo speed is unknown, defaulting to 1000 [ 82.306646][ T4491] lo speed is unknown, defaulting to 1000 [ 82.337437][ T4491] lo speed is unknown, defaulting to 1000 [ 82.388691][ T4491] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 82.443933][ T4491] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 82.557941][ T4491] lo speed is unknown, defaulting to 1000 [ 82.617084][ T4491] lo speed is unknown, defaulting to 1000 [ 82.667004][ T4491] lo speed is unknown, defaulting to 1000 [ 82.686582][ T4491] lo speed is unknown, defaulting to 1000 [ 82.714049][ T4491] lo speed is unknown, defaulting to 1000 [ 82.775755][ T4505] loop2: detected capacity change from 0 to 1024 [ 82.830958][ T4505] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 82.841001][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 83.045964][ T4514] serio: Serial port ptm0 [ 83.051877][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 83.075178][ T4511] loop3: detected capacity change from 0 to 1024 [ 83.131722][ T4511] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.206924][ T4511] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 83.334768][ T27] kauditd_printk_skb: 50 callbacks suppressed [ 83.334783][ T27] audit: type=1326 audit(83.286:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4519 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 83.390143][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 83.399187][ T27] audit: type=1326 audit(83.326:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4519 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 83.441816][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 83.496765][ T27] audit: type=1326 audit(83.326:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4519 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 83.567825][ T27] audit: type=1326 audit(83.326:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4519 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 83.686484][ T27] audit: type=1326 audit(83.326:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4519 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 83.776091][ T27] audit: type=1107 audit(83.506:63): pid=4524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='€' [ 83.817887][ T27] audit: type=1326 audit(83.766:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4530 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 83.902462][ T27] audit: type=1326 audit(83.766:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4530 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 83.975464][ T27] audit: type=1326 audit(83.766:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4530 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 84.045968][ T4534] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.050395][ T27] audit: type=1326 audit(83.766:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4530 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 84.089437][ T4540] loop2: detected capacity change from 0 to 1024 [ 84.184822][ T4540] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 84.219469][ T4534] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.263719][ T4540] siw: device registration error -23 [ 84.406339][ T4550] loop4: detected capacity change from 0 to 512 [ 84.449999][ T4534] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.451196][ T4550] EXT4-fs: Ignoring removed i_version option [ 84.520882][ T4550] EXT4-fs: Ignoring removed bh option [ 84.624427][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 84.646997][ T4534] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.670456][ T4550] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 84.837261][ T4550] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 84.877179][ T4550] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 84.903668][ T4566] loop2: detected capacity change from 0 to 1024 [ 84.942639][ T4534] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.982134][ T4566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.012376][ T4534] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.064237][ T4566] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 85.092110][ T4534] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.177574][ T4534] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.434537][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 85.696042][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 85.895459][ T4591] mmap: syz.2.77 (4591) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.992972][ T4594] loop4: detected capacity change from 0 to 1024 [ 86.089089][ T4594] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.105570][ T4597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.79'. [ 86.295186][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 86.423312][ T4608] netlink: 92 bytes leftover after parsing attributes in process `syz.3.83'. [ 86.505269][ T4612] loop4: detected capacity change from 0 to 512 [ 86.541178][ T4612] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.631077][ T4612] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.684397][ T4614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 86.690470][ T4612] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 86.741226][ T4612] EXT4-fs (loop4): 1 truncate cleaned up [ 86.751292][ T4612] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.872540][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 87.483582][ T4640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 88.084540][ T4666] loop0: detected capacity change from 0 to 512 [ 88.145184][ T4666] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.105: inode has both inline data and extents flags [ 88.190241][ T4666] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.105: couldn't read orphan inode 15 (err -117) [ 88.246777][ T4666] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 88.413616][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 88.580374][ T4655] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 88.614070][ T4683] loop4: detected capacity change from 0 to 512 [ 88.670684][ T4684] loop0: detected capacity change from 0 to 512 [ 88.818369][ T4684] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 88.840086][ T27] kauditd_printk_skb: 914 callbacks suppressed [ 88.840102][ T27] audit: type=1800 audit(88.796:982): pid=4684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.109" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 88.924740][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 89.060027][ T4693] loop2: detected capacity change from 0 to 164 [ 89.454181][ T27] audit: type=1326 audit(89.406:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 89.529246][ T27] audit: type=1326 audit(89.406:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 89.584248][ T27] audit: type=1326 audit(89.416:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 89.658923][ T4702] loop0: detected capacity change from 0 to 512 [ 89.666756][ T27] audit: type=1326 audit(89.416:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 89.705157][ T27] audit: type=1326 audit(89.426:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 89.806012][ T27] audit: type=1326 audit(89.436:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 89.835575][ T27] audit: type=1326 audit(89.436:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 89.858935][ T27] audit: type=1326 audit(89.436:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 89.881561][ T27] audit: type=1326 audit(89.436:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4699 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f0f7818f749 code=0x7ffc0000 [ 89.924090][ T4702] EXT4-fs (loop0): 1 orphan inode deleted [ 89.937681][ T4361] EXT4-fs error (device loop0): ext4_release_dquot:6845: comm kworker/u4:7: Failed to release dquot type 1 [ 89.993290][ T4702] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 90.248418][ T4711] loop2: detected capacity change from 0 to 736 [ 90.464736][ T4711] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.502320][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 90.627664][ T4713] loop0: detected capacity change from 0 to 512 [ 90.648755][ T4713] EXT4-fs: Ignoring removed bh option [ 90.663879][ T4713] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.698883][ T4713] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 90.751505][ T4713] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 90.761075][ T4713] EXT4-fs (loop0): orphan cleanup on readonly fs [ 90.790501][ T4713] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.121: Failed to acquire dquot type 1 [ 90.810585][ T4713] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.121: Invalid block bitmap block 0 in block_group 0 [ 90.826203][ T4713] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.121: Failed to acquire dquot type 1 [ 90.850647][ T4713] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.121: Failed to acquire dquot type 1 [ 90.879945][ T4713] EXT4-fs (loop0): 1 orphan inode deleted [ 90.935025][ T4713] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 93.060794][ T4717] loop3: detected capacity change from 0 to 8192 [ 93.346497][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 93.515219][ T4727] loop0: detected capacity change from 0 to 128 [ 93.592784][ T4727] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 93.798237][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 93.910863][ T4740] netlink: 52 bytes leftover after parsing attributes in process `syz.0.129'. [ 93.946327][ T4741] netlink: 'syz.2.131': attribute type 5 has an invalid length. [ 94.007080][ T4741] netlink: 'syz.2.131': attribute type 37 has an invalid length. [ 94.035502][ T27] kauditd_printk_skb: 108 callbacks suppressed [ 94.035519][ T27] audit: type=1326 audit(93.986:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4744 comm="syz.0.133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a9078f749 code=0x0 [ 94.039197][ T4743] syz.1.132 uses obsolete (PF_INET,SOCK_PACKET) [ 94.173472][ T4749] netlink: 20 bytes leftover after parsing attributes in process `syz.2.134'. [ 94.183219][ T4749] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 94.258213][ T27] audit: type=1326 audit(94.216:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4750 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443058f749 code=0x7ffc0000 [ 94.333365][ T27] audit: type=1326 audit(94.246:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4750 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f443058f749 code=0x7ffc0000 [ 94.378874][ T27] audit: type=1326 audit(94.246:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4750 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443058f749 code=0x7ffc0000 [ 94.408078][ T27] audit: type=1326 audit(94.246:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4750 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f443058f749 code=0x7ffc0000 [ 94.466284][ T4757] netlink: 'syz.3.138': attribute type 1 has an invalid length. [ 94.467582][ T27] audit: type=1326 audit(94.246:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4750 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443058f749 code=0x7ffc0000 [ 94.551624][ T4759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.140'. [ 94.596180][ T4759] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.605690][ T4759] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.614434][ T4759] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.623350][ T4759] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.664072][ T4761] netlink: 'syz.1.139': attribute type 10 has an invalid length. [ 94.723612][ T4761] team0: Port device dummy0 added [ 94.730158][ T4763] netlink: 'syz.1.139': attribute type 10 has an invalid length. [ 94.746308][ T4763] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 94.794008][ T4763] team0: Failed to send options change via netlink (err -105) [ 94.808388][ T4763] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 94.821650][ T4763] team0: Port device dummy0 removed [ 94.834547][ T4763] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 94.850320][ T4759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.140'. [ 95.163117][ T4775] loop0: detected capacity change from 0 to 512 [ 95.272777][ T4775] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 95.444446][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 95.543081][ T4789] netlink: 436 bytes leftover after parsing attributes in process `syz.0.151'. [ 95.684053][ T27] audit: type=1326 audit(95.636:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718658f749 code=0x7ffc0000 [ 95.743177][ T27] audit: type=1326 audit(95.666:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718658f749 code=0x7ffc0000 [ 95.792181][ T27] audit: type=1326 audit(95.666:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f718658f749 code=0x7ffc0000 [ 95.843219][ T27] audit: type=1326 audit(95.666:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4792 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718658f749 code=0x7ffc0000 [ 96.328726][ T4815] loop0: detected capacity change from 0 to 128 [ 96.341735][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 96.637833][ T4823] netlink: 'syz.1.167': attribute type 1 has an invalid length. [ 96.661325][ T4823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'. [ 96.834731][ T4828] loop0: detected capacity change from 0 to 2048 [ 96.928341][ T4828] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 97.142329][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 97.389205][ T4839] loop3: detected capacity change from 0 to 512 [ 97.483280][ T4839] EXT4-fs (loop3): too many log groups per flexible block group [ 97.504825][ T4839] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 97.541187][ T4839] EXT4-fs (loop3): mount failed [ 97.982656][ T4859] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.106471][ T4863] loop0: detected capacity change from 0 to 512 [ 98.142733][ T4863] ------------[ cut here ]------------ [ 98.148929][ T4863] EA inode 11 i_nlink=2 [ 98.175536][ T4863] WARNING: CPU: 0 PID: 4863 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x4be/0x520 [ 98.190085][ T4863] Modules linked in: [ 98.194029][ T4863] CPU: 0 PID: 4863 Comm: syz.0.183 Not tainted syzkaller #0 [ 98.201424][ T4863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.211730][ T4863] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 98.218499][ T4863] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 63 ef 9c ff 49 8b 37 48 c7 c7 40 91 a0 8a 89 da e8 32 e5 18 ff <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 98.238346][ T4863] RSP: 0018:ffffc9000cfbf200 EFLAGS: 00010246 [ 98.244557][ T4863] RAX: 693f6554969bc000 RBX: 0000000000000002 RCX: 0000000000080000 [ 98.253079][ T4863] RDX: ffffc90005539000 RSI: 000000000001a3c3 RDI: 000000000001a3c4 [ 98.261936][ T4863] RBP: ffffc9000cfbf2e8 R08: dffffc0000000000 R09: ffffed10171c4f34 [ 98.270248][ T4863] R10: ffffed10171c4f34 R11: 1ffff110171c4f33 R12: ffffc9000cfbf260 [ 98.278414][ T4863] R13: ffff888059713ee0 R14: dffffc0000000000 R15: ffff888059713f20 [ 98.286667][ T4863] FS: 00007f7a915c96c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 98.295852][ T4863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.302564][ T4863] CR2: 0000000000000000 CR3: 00000000559b8000 CR4: 00000000003506f0 [ 98.310621][ T4863] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 98.318758][ T4863] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 98.326814][ T4863] Call Trace: [ 98.330163][ T4863] [ 98.333140][ T4863] ? ext4_xattr_block_csum+0x500/0x500 [ 98.338715][ T4863] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 98.344245][ T4863] ext4_xattr_set_entry+0xb33/0x1e90 [ 98.349664][ T4863] ext4_xattr_ibody_set+0x250/0x690 [ 98.354926][ T4863] ext4_expand_extra_isize_ea+0x10e5/0x19b0 [ 98.360957][ T4863] __ext4_expand_extra_isize+0x301/0x3e0 [ 98.366690][ T4863] __ext4_mark_inode_dirty+0x47f/0x770 [ 98.372318][ T4863] ext4_evict_inode+0xa73/0x1100 [ 98.377365][ T4863] ? _raw_spin_unlock+0x24/0x40 [ 98.382286][ T4863] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 98.385613][ T4284] Bluetooth: hci5: command 0x1003 tx timeout [ 98.388294][ T4863] ? do_raw_spin_unlock+0x11d/0x230 [ 98.396095][ T4278] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 98.399885][ T4863] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 98.412398][ T4863] evict+0x485/0x870 [ 98.416404][ T4863] ? __lock_acquire+0x7c50/0x7c50 [ 98.421674][ T4863] ? proc_nr_inodes+0x2f0/0x2f0 [ 98.426767][ T4863] ? do_raw_spin_unlock+0x11d/0x230 [ 98.432046][ T4863] ? _raw_spin_unlock+0x24/0x40 [ 98.437019][ T4863] ? iput+0x768/0x980 [ 98.441148][ T4863] ext4_orphan_cleanup+0xbd3/0x1400 [ 98.446502][ T4863] ? ext4_orphan_del+0xb90/0xb90 [ 98.451499][ T4863] ? errseq_check_and_advance+0x62/0x120 [ 98.457337][ T4863] ext4_fill_super+0x7bdf/0x8150 [ 98.462330][ T4863] ? bdev_name+0x2c1/0x3f0 [ 98.466904][ T4863] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 98.473307][ T4863] ? snprintf+0xd7/0x120 [ 98.477851][ T4863] ? preempt_count_add+0x8d/0x190 [ 98.482934][ T4863] ? vscnprintf+0x80/0x80 [ 98.487435][ T4863] ? set_blocksize+0x1d3/0x350 [ 98.492241][ T4863] ? sb_set_blocksize+0xa5/0xe0 [ 98.497191][ T4863] get_tree_bdev+0x3f1/0x610 [ 98.501932][ T4863] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 98.508300][ T4863] vfs_get_tree+0x88/0x270 [ 98.512786][ T4863] do_new_mount+0x24a/0xa40 [ 98.517867][ T4863] __se_sys_mount+0x2d6/0x3c0 [ 98.522617][ T4863] ? __x64_sys_mount+0xc0/0xc0 [ 98.527479][ T4863] ? lockdep_hardirqs_on+0x94/0x140 [ 98.532741][ T4863] ? __x64_sys_mount+0x1c/0xc0 [ 98.537636][ T4863] do_syscall_64+0x4c/0xa0 [ 98.542192][ T4863] ? clear_bhb_loop+0x60/0xb0 [ 98.546974][ T4863] ? clear_bhb_loop+0x60/0xb0 [ 98.551703][ T4863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.557702][ T4863] RIP: 0033:0x7f7a90790eea [ 98.562172][ T4863] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.582419][ T4863] RSP: 002b:00007f7a915c8e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.590970][ T4863] RAX: ffffffffffffffda RBX: 00007f7a915c8ef0 RCX: 00007f7a90790eea [ 98.599055][ T4863] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f7a915c8eb0 [ 98.607122][ T4863] RBP: 0000200000000180 R08: 00007f7a915c8ef0 R09: 0000000000800718 [ 98.615120][ T4863] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 98.623170][ T4863] R13: 00007f7a915c8eb0 R14: 0000000000000470 R15: 0000200000000200 [ 98.631245][ T4863] [ 98.634300][ T4863] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 98.641591][ T4863] CPU: 0 PID: 4863 Comm: syz.0.183 Not tainted syzkaller #0 [ 98.648929][ T4863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.659051][ T4863] Call Trace: [ 98.662517][ T4863] [ 98.665475][ T4863] dump_stack_lvl+0x168/0x22e [ 98.670302][ T4863] ? memcpy+0x3c/0x60 [ 98.674509][ T4863] ? show_regs_print_info+0x12/0x12 [ 98.680039][ T4863] ? load_image+0x3b0/0x3b0 [ 98.685294][ T4863] panic+0x2c9/0x710 [ 98.689409][ T4863] ? bpf_jit_dump+0xd0/0xd0 [ 98.693926][ T4863] __warn+0x2f8/0x4f0 [ 98.697914][ T4863] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 98.703927][ T4863] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 98.709984][ T4863] report_bug+0x2ba/0x4f0 [ 98.714601][ T4863] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 98.720828][ T4863] handle_bug+0x3a/0x70 [ 98.725291][ T4863] exc_invalid_op+0x16/0x40 [ 98.729954][ T4863] asm_exc_invalid_op+0x16/0x20 [ 98.734934][ T4863] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 98.741634][ T4863] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 63 ef 9c ff 49 8b 37 48 c7 c7 40 91 a0 8a 89 da e8 32 e5 18 ff <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 98.761435][ T4863] RSP: 0018:ffffc9000cfbf200 EFLAGS: 00010246 [ 98.767600][ T4863] RAX: 693f6554969bc000 RBX: 0000000000000002 RCX: 0000000000080000 [ 98.775763][ T4863] RDX: ffffc90005539000 RSI: 000000000001a3c3 RDI: 000000000001a3c4 [ 98.783847][ T4863] RBP: ffffc9000cfbf2e8 R08: dffffc0000000000 R09: ffffed10171c4f34 [ 98.792092][ T4863] R10: ffffed10171c4f34 R11: 1ffff110171c4f33 R12: ffffc9000cfbf260 [ 98.800247][ T4863] R13: ffff888059713ee0 R14: dffffc0000000000 R15: ffff888059713f20 [ 98.808603][ T4863] ? ext4_xattr_block_csum+0x500/0x500 [ 98.814161][ T4863] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 98.819723][ T4863] ext4_xattr_set_entry+0xb33/0x1e90 [ 98.825034][ T4863] ext4_xattr_ibody_set+0x250/0x690 [ 98.830249][ T4863] ext4_expand_extra_isize_ea+0x10e5/0x19b0 [ 98.836178][ T4863] __ext4_expand_extra_isize+0x301/0x3e0 [ 98.841833][ T4863] __ext4_mark_inode_dirty+0x47f/0x770 [ 98.847333][ T4863] ext4_evict_inode+0xa73/0x1100 [ 98.852282][ T4863] ? _raw_spin_unlock+0x24/0x40 [ 98.857247][ T4863] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 98.863241][ T4863] ? do_raw_spin_unlock+0x11d/0x230 [ 98.868452][ T4863] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 98.874358][ T4863] evict+0x485/0x870 [ 98.878300][ T4863] ? __lock_acquire+0x7c50/0x7c50 [ 98.883338][ T4863] ? proc_nr_inodes+0x2f0/0x2f0 [ 98.888466][ T4863] ? do_raw_spin_unlock+0x11d/0x230 [ 98.893852][ T4863] ? _raw_spin_unlock+0x24/0x40 [ 98.898724][ T4863] ? iput+0x768/0x980 [ 98.903238][ T4863] ext4_orphan_cleanup+0xbd3/0x1400 [ 98.908640][ T4863] ? ext4_orphan_del+0xb90/0xb90 [ 98.913852][ T4863] ? errseq_check_and_advance+0x62/0x120 [ 98.919497][ T4863] ext4_fill_super+0x7bdf/0x8150 [ 98.924534][ T4863] ? bdev_name+0x2c1/0x3f0 [ 98.929085][ T4863] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 98.935346][ T4863] ? snprintf+0xd7/0x120 [ 98.939612][ T4863] ? preempt_count_add+0x8d/0x190 [ 98.944653][ T4863] ? vscnprintf+0x80/0x80 [ 98.949040][ T4863] ? set_blocksize+0x1d3/0x350 [ 98.954059][ T4863] ? sb_set_blocksize+0xa5/0xe0 [ 98.958992][ T4863] get_tree_bdev+0x3f1/0x610 [ 98.963616][ T4863] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 98.969901][ T4863] vfs_get_tree+0x88/0x270 [ 98.974325][ T4863] do_new_mount+0x24a/0xa40 [ 98.978844][ T4863] __se_sys_mount+0x2d6/0x3c0 [ 98.984141][ T4863] ? __x64_sys_mount+0xc0/0xc0 [ 98.988919][ T4863] ? lockdep_hardirqs_on+0x94/0x140 [ 98.994139][ T4863] ? __x64_sys_mount+0x1c/0xc0 [ 98.998966][ T4863] do_syscall_64+0x4c/0xa0 [ 99.003388][ T4863] ? clear_bhb_loop+0x60/0xb0 [ 99.008335][ T4863] ? clear_bhb_loop+0x60/0xb0 [ 99.013108][ T4863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.019096][ T4863] RIP: 0033:0x7f7a90790eea [ 99.023515][ T4863] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.043332][ T4863] RSP: 002b:00007f7a915c8e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 99.052037][ T4863] RAX: ffffffffffffffda RBX: 00007f7a915c8ef0 RCX: 00007f7a90790eea [ 99.060115][ T4863] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f7a915c8eb0 [ 99.068180][ T4863] RBP: 0000200000000180 R08: 00007f7a915c8ef0 R09: 0000000000800718 [ 99.076244][ T4863] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 99.084232][ T4863] R13: 00007f7a915c8eb0 R14: 0000000000000470 R15: 0000200000000200 [ 99.092226][ T4863] [ 99.095500][ T4863] Kernel Offset: disabled [ 99.099933][ T4863] Rebooting in 86400 seconds..