last executing test programs: 9.403016765s ago: executing program 3 (id=187): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) 7.451360491s ago: executing program 3 (id=193): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14ff00000000001000000008"], 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10001, 0x36, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.308902523s ago: executing program 3 (id=195): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) unshare(0x2c020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kfree\x00'}, 0x18) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000000)=0x1) 4.955404062s ago: executing program 4 (id=210): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) exit(0xa) ptrace$peeksig(0x4209, r0, 0x0, &(0x7f0000000040)) 4.950123032s ago: executing program 2 (id=211): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 4.85525606s ago: executing program 2 (id=214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) 3.232744741s ago: executing program 4 (id=216): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) 3.178128875s ago: executing program 3 (id=217): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x1, '7'}, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2d01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 3.148846127s ago: executing program 4 (id=218): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYRES32], 0x4) 3.087305912s ago: executing program 2 (id=219): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14ff00000000001000000008"], 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10001, 0x36, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.061827674s ago: executing program 4 (id=220): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0341, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$TUNSETDEBUG(r8, 0x400454c9, &(0x7f0000000140)=0x4) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) close_range(r6, 0xffffffffffffffff, 0x0) 2.99410979s ago: executing program 1 (id=221): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 2.973643861s ago: executing program 0 (id=222): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = fsmount(0xffffffffffffffff, 0x0, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x61, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xa8, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) r9 = gettid() tkill(r9, 0x15) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={'\x00', 0x5, 0xf3e, 0x6, 0xc9, 0x2, r9}) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070008000000100008800c0001556d0000000000000008000500", @ANYRES32=r11], 0x38}}, 0x0) 2.172988746s ago: executing program 1 (id=223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs") 2.163100587s ago: executing program 2 (id=224): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file2\x00', 0x4000, &(0x7f0000000b40)=ANY=[], 0x1, 0x11ff, &(0x7f0000002480)="$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") sendmsg(0xffffffffffffffff, 0x0, 0x4000) truncate(&(0x7f0000000040)='./file2\x00', 0x8000c00) 2.160355386s ago: executing program 4 (id=225): r0 = creat(0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000380), &(0x7f00000003c0)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r2) 2.10854183s ago: executing program 3 (id=226): r0 = gettid() r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.106353751s ago: executing program 0 (id=227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0x9]}, 0x8, 0x80000) 1.998230219s ago: executing program 0 (id=228): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) 1.914968636s ago: executing program 0 (id=229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.825281703s ago: executing program 1 (id=230): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) 1.679264435s ago: executing program 1 (id=231): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0341, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) ioctl$TUNSETDEBUG(r8, 0x400454c9, &(0x7f0000000140)=0x4) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r8, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r6, 0xffffffffffffffff, 0x0) 1.663003567s ago: executing program 0 (id=232): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0341, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) ioctl$TUNSETDEBUG(r8, 0x400454c9, &(0x7f0000000140)=0x4) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r8, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r6, 0xffffffffffffffff, 0x0) 1.637283449s ago: executing program 2 (id=233): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) unshare(0x20000400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0xb, 0xa4, 0xffb, 0x7, 0xb69, 0xfd4, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x5, 0x9, 0x4, 0x7, 0x5, 0x180000, 0x762, 0xffffffff, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x3d, 0xbed4, 0x7, 0x8000100, 0x3, 0x0, 0x11000, 0xb, 0x5, 0x79b, 0x2, 0x1, 0x8b19, 0x4, 0x400a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x481, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x384, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x5, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x8, 0x81000000, 0xfdffffff, 0x0, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x0, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x9, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 875.23706ms ago: executing program 4 (id=234): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsB22S0t3e5W9vNJBp5n5+k+z3efeWaemWc3gL41mv2TRGyPiN8iYrieXV5gtP7f9avnq39fPV9NYmnprT+TvNy1q+erZdHy77YVmbE0Iv0kKSpZbv7suZPTtdrsmSI/sXDqvYn5s+eePXFq+vjs8dnTU4cPHzo4+cLzU891JM4srmt7P5zbt+e1dy69Xj166d2fvs3au73Y3xhHp4xmgf+1lGve90SnK+uxHQ3pZKCHDWFNKhGRdddgPv6HoxI3O284Xv24p40DNlR2bdrSfvfiEnAXS6LXLQB6o7zQZ/e/5dalqcemcOWl+g1QFvf1YqvvGYi0KDPYdH/bSaMRcXTxn6+yLTboOQQAQKPPql8eiWdazf/SuL+h3M5iDWUkIu6JiF0RcW9E7I6I+yLysg9ExINrrL95aejW+U96+Y4CW6Vs/vdisba1fP5Xzv5ipFLkduTxDybHTtRmDxSfyVgMbsnykyvU8f0rv37ebl/j/C/bsvrLuWDRjssDTQ/oZqYXpvNJaQdc+Shi70Cr+JMbKwFJROyJiL1re+udZeLEU9/sa1fo9vGvoAPrTEtfRzxZ7//FaIq/lKy8Pjnxv6jNHpgoj4pb/fzLxTfb1b+u+Dsg6/+ty4//5iIjSeN67fza67j4+6dt72nu9PgfSt7Oz0dlR30wvbBwZjJiKDmSvzhUlM1fn7r5t2W+LJ/FP7a/9fjfFTcreCgisoP44Yh4JCIeLdr+WEQ8HhH7V4j/x5fb79sM/T/T8vx34/hv6v+1Jyonf/iuXf2r6/9DeWqseCU//93Gahu4ns8OAAAA/ivS/DvwSTp+I52m4+P17/Dvjq1pbW5+4eljc++fnql/V34kBtPySddww/PQyWSxeMd6fqp4VlzuP1g8N/6i8v88P16dq830OHbod9vajP/MH5Vetw7YcK3W0aaGetAQoOuax3+6PHvhjW42Bugqv9eG/nWb8Z92qx1A97n+Q/9qNf4vNOWtBcDdyfUf+pfxD/3L+If+ZfxDX1rP7/ol+jkR6aZohsQGJXp9ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiMfwMAAP//d5Lu1w==") r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 875.04327ms ago: executing program 3 (id=235): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14ff00000000001000000008"], 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x10001, 0x36, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 858.779531ms ago: executing program 2 (id=236): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0341, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$TUNSETDEBUG(r8, 0x400454c9, &(0x7f0000000140)=0x4) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) close_range(r6, 0xffffffffffffffff, 0x0) 820.104275ms ago: executing program 1 (id=237): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x38, r0, 0x10ada85e65c25359, 0xfffffff9, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) 723.160192ms ago: executing program 0 (id=238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) fsmount(0xffffffffffffffff, 0x0, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x61, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xa8, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = gettid() tkill(r8, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070008000000100008800c0001556d0000000000000008000500", @ANYRES32=r10], 0x38}}, 0x0) 0s ago: executing program 1 (id=239): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts. syzkaller login: [ 50.141145][ T4171] cgroup: Unknown subsys name 'net' [ 50.290854][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.510968][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.888892][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 52.962621][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 52.975947][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 53.007699][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 53.048420][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 53.068467][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.075787][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.084348][ T4182] device bridge_slave_0 entered promiscuous mode [ 53.098470][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.105794][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.113634][ T4182] device bridge_slave_1 entered promiscuous mode [ 53.193879][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.223859][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.233339][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.240852][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.248677][ T4186] device bridge_slave_0 entered promiscuous mode [ 53.288565][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.295878][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.303883][ T4186] device bridge_slave_1 entered promiscuous mode [ 53.312244][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.319632][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.328129][ T4181] device bridge_slave_0 entered promiscuous mode [ 53.356769][ T4182] team0: Port device team_slave_0 added [ 53.363029][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.370928][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.379553][ T4187] device bridge_slave_0 entered promiscuous mode [ 53.394962][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.402218][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.410721][ T4181] device bridge_slave_1 entered promiscuous mode [ 53.418073][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.425460][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.433379][ T4183] device bridge_slave_0 entered promiscuous mode [ 53.442862][ T4182] team0: Port device team_slave_1 added [ 53.449119][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.456439][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.464327][ T4187] device bridge_slave_1 entered promiscuous mode [ 53.485013][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.492205][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.501196][ T4183] device bridge_slave_1 entered promiscuous mode [ 53.538113][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.559383][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.566735][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.593102][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.614947][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.626100][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.639218][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.655326][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.662298][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.689076][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.710316][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.721602][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.732621][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.766566][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.787182][ T4186] team0: Port device team_slave_0 added [ 53.805353][ T4187] team0: Port device team_slave_0 added [ 53.826396][ T4186] team0: Port device team_slave_1 added [ 53.846783][ T4187] team0: Port device team_slave_1 added [ 53.856071][ T4181] team0: Port device team_slave_0 added [ 53.864167][ T4183] team0: Port device team_slave_0 added [ 53.893951][ T4181] team0: Port device team_slave_1 added [ 53.909210][ T4183] team0: Port device team_slave_1 added [ 53.924341][ T4182] device hsr_slave_0 entered promiscuous mode [ 53.933637][ T4182] device hsr_slave_1 entered promiscuous mode [ 53.962731][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.973785][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.000430][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.012708][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.019914][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.046907][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.059424][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.066640][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.099325][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.111135][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.118518][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.145256][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.169285][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.176445][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.202532][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.214582][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.221841][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.248147][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.266969][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.273940][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.300419][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.312807][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.320040][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.346644][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.435073][ T4181] device hsr_slave_0 entered promiscuous mode [ 54.442043][ T4181] device hsr_slave_1 entered promiscuous mode [ 54.449250][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.457275][ T4181] Cannot create hsr debugfs directory [ 54.466124][ T4186] device hsr_slave_0 entered promiscuous mode [ 54.473303][ T4186] device hsr_slave_1 entered promiscuous mode [ 54.480076][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.488008][ T4186] Cannot create hsr debugfs directory [ 54.501469][ T4183] device hsr_slave_0 entered promiscuous mode [ 54.508685][ T4183] device hsr_slave_1 entered promiscuous mode [ 54.515523][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.523263][ T4183] Cannot create hsr debugfs directory [ 54.543928][ T4187] device hsr_slave_0 entered promiscuous mode [ 54.550981][ T4187] device hsr_slave_1 entered promiscuous mode [ 54.558035][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.565810][ T4187] Cannot create hsr debugfs directory [ 54.605993][ T4189] Bluetooth: hci2: command 0x0409 tx timeout [ 54.606106][ T1324] Bluetooth: hci4: command 0x0409 tx timeout [ 54.612643][ T4189] Bluetooth: hci0: command 0x0409 tx timeout [ 54.625006][ T4189] Bluetooth: hci1: command 0x0409 tx timeout [ 54.631482][ T4189] Bluetooth: hci3: command 0x0409 tx timeout [ 54.863920][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.876197][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.885789][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.895444][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.946101][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.959826][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.983122][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.992431][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.032104][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.043371][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.059823][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.072452][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.124262][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.146234][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.156429][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.166328][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.191771][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.241944][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.268724][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.282559][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.304267][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.313599][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.324172][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.334241][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.345259][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.352835][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.362634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.382438][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.391763][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.401801][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.411803][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.420529][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.427807][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.437063][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.458425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.484287][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.504951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.513908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.524748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.533626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.542631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.552077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.561074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.570498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.582025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.596408][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.617886][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.653699][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.677447][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.697007][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.709853][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.718113][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.727848][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.737142][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.745588][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.754471][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.763473][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.770964][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.780255][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.802912][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.829080][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.840134][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.854750][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.861978][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.871533][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.880684][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.889941][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.897229][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.905772][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.913751][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.922150][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.932315][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.941714][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.948832][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.957095][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.968395][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.978611][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.989227][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.996652][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.027572][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.037197][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.049626][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.060098][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.069167][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.078674][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.088397][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.097712][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.107294][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.116833][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.125932][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.139456][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.149448][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.158709][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.166553][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.178144][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.185985][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.196217][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.206325][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.237400][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.247475][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.259196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.268189][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.278030][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.287634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.296848][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.306440][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.315062][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.323415][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.332663][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.346469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.355536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.369291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.378327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.387874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.398323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.411276][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.422934][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.434023][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.446737][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.458197][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.469710][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.480818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.490148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.499998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.508642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.524530][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.548544][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.560300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.576016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.591412][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.606463][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.631504][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.660070][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.673756][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.681123][ T4268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.695786][ T4239] Bluetooth: hci3: command 0x041b tx timeout [ 56.702605][ T4239] Bluetooth: hci1: command 0x041b tx timeout [ 56.713803][ T4239] Bluetooth: hci0: command 0x041b tx timeout [ 56.724708][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.724925][ T4239] Bluetooth: hci4: command 0x041b tx timeout [ 56.734542][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.766015][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.782763][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.785083][ T4239] Bluetooth: hci2: command 0x041b tx timeout [ 56.789998][ T4268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.836895][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.849897][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.859076][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.869611][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.879106][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.888862][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.897541][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.913042][ T4182] device veth0_vlan entered promiscuous mode [ 56.936200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.944484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.954110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.963676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.973345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.981269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.989026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.996854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.005387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.013473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.023973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.033284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.046217][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.060082][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.083426][ T4182] device veth1_vlan entered promiscuous mode [ 57.096745][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.104447][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.118001][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.139530][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.175768][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.186066][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.195607][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.204286][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.260411][ T4183] device veth0_vlan entered promiscuous mode [ 57.281095][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.306281][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.315524][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.324524][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.333812][ T4186] device veth0_vlan entered promiscuous mode [ 57.349825][ T4183] device veth1_vlan entered promiscuous mode [ 57.358275][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.372733][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.382122][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.397806][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.407373][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.416336][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.425708][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.443069][ T4182] device veth0_macvtap entered promiscuous mode [ 57.458585][ T4186] device veth1_vlan entered promiscuous mode [ 57.476415][ T4182] device veth1_macvtap entered promiscuous mode [ 57.503081][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.513295][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.522023][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.530614][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.539088][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.547264][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.555406][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.563146][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.572081][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.590516][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.609014][ T4183] device veth0_macvtap entered promiscuous mode [ 57.619283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.629943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.639235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.659689][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.670144][ T4183] device veth1_macvtap entered promiscuous mode [ 57.683524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.691899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.700488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.713130][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.729190][ T4186] device veth0_macvtap entered promiscuous mode [ 57.738359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.748743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.757408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.767036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.776989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.788911][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.798406][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.808668][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.817796][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.838014][ T4186] device veth1_macvtap entered promiscuous mode [ 57.846177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.856403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.864571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.875726][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.893152][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.909987][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.927410][ T4187] device veth0_vlan entered promiscuous mode [ 57.939852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.947897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.956155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.968421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.977913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.987001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.011075][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.022372][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.032572][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.043684][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.057454][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.066627][ T4187] device veth1_vlan entered promiscuous mode [ 58.079910][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.088573][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.100030][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.112363][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.124266][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.133834][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.145036][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.155738][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.175018][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.186681][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.216778][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.226658][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.242283][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.251589][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.263625][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.272497][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.281461][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.291256][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.308749][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.318916][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.334265][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.344414][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.353957][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.363847][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.389759][ T4187] device veth0_macvtap entered promiscuous mode [ 58.402691][ T4187] device veth1_macvtap entered promiscuous mode [ 58.439240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.449199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.458833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.467746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.477157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.485374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.494831][ T4181] device veth0_vlan entered promiscuous mode [ 58.549980][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.550202][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.564623][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.569719][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.580451][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.598507][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.608850][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.619635][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.631130][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.647254][ T4181] device veth1_vlan entered promiscuous mode [ 58.664586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.673498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.681822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.692563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.734150][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.751480][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.761724][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.773160][ T4292] Bluetooth: hci0: command 0x040f tx timeout [ 58.775949][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.780168][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 58.795086][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.796203][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 58.810400][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.824611][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.847206][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 58.852382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.861389][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 58.869471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.878887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.888989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.898351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.909552][ T4181] device veth0_macvtap entered promiscuous mode [ 58.919818][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.931353][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.940798][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.942414][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.951058][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.963337][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.976312][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.985409][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.019200][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.031210][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.040674][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.056583][ T4181] device veth1_macvtap entered promiscuous mode [ 59.088336][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.109004][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.132432][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.168359][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.174206][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.182448][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.199518][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.205677][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.263885][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.284343][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.309844][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.322269][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.333255][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.344249][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.354822][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.365579][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.378290][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.396618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.409370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.419046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.441192][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.485930][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.505397][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.517827][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.533882][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.550623][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.562061][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.581292][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.598774][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.639967][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.670419][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.679780][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.688838][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.714979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.742920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.492341][ T1108] cfg80211: failed to load regulatory.db [ 60.512009][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.521901][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.568860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.651607][ T4311] loop3: detected capacity change from 0 to 1024 [ 60.686297][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.694351][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.696960][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.743060][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.752702][ T4311] ======================================================= [ 60.752702][ T4311] WARNING: The mand mount option has been deprecated and [ 60.752702][ T4311] and is ignored by this kernel. Remove the mand [ 60.752702][ T4311] option from the mount to silence this warning. [ 60.752702][ T4311] ======================================================= [ 60.771547][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.798881][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.829352][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.832428][ T4311] EXT4-fs (loop3): Ignoring removed oldalloc option [ 60.854517][ T4311] EXT4-fs (loop3): Ignoring removed orlov option [ 60.855345][ T4239] Bluetooth: hci3: command 0x0419 tx timeout [ 60.864597][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.873523][ T4239] Bluetooth: hci1: command 0x0419 tx timeout [ 60.882426][ T4239] Bluetooth: hci0: command 0x0419 tx timeout [ 61.018994][ T4239] Bluetooth: hci4: command 0x0419 tx timeout [ 61.231204][ T4311] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001045,oldalloc,noquota,minixdf,barrier=0x0000000000000002,delalloc,nojournal_checksum,orlov,user_xattr,quota,delalloc,,errors=continue. Quota mode: writeback. [ 61.268033][ T4239] Bluetooth: hci2: command 0x0419 tx timeout [ 61.459400][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.911016][ T4333] device syzkaller0 entered promiscuous mode [ 62.107306][ T4333] syzkaller0: create flow: hash 259925099 index 1 [ 62.234329][ T4333] syzkaller0: delete flow: hash 259925099 index 1 [ 62.551155][ T4339] loop0: detected capacity change from 0 to 164 [ 62.606734][ T4343] atomic_op ffff88807ead0198 conn xmit_atomic 0000000000000000 [ 62.726996][ T4348] netlink: 'syz.1.15': attribute type 3 has an invalid length. [ 62.751092][ T4348] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15'. [ 62.993496][ T4352] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.089347][ T4354] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.221184][ T4354] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.271233][ T4354] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.374351][ T4354] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.482638][ T4354] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.513120][ T4354] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.538526][ T4354] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.558937][ T4354] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.576376][ T4382] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 64.587095][ T4382] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 64.596655][ T4382] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 64.686036][ T4382] syz.1.21 (4382) used greatest stack depth: 20744 bytes left [ 64.883963][ T4383] device syzkaller0 entered promiscuous mode [ 65.052876][ T4383] syzkaller0: create flow: hash 259925099 index 1 [ 65.261577][ T26] audit: type=1800 audit(1756329113.842:2): pid=4382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.21" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 65.325065][ T4383] syzkaller0: delete flow: hash 259925099 index 1 [ 65.638775][ T4396] process 'syz.1.28' launched './file1' with NULL argv: empty string added [ 65.651744][ T4394] loop0: detected capacity change from 0 to 512 [ 65.699672][ T4394] EXT4-fs (loop0): Ignoring removed oldalloc option [ 65.714662][ T4394] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.758804][ T4394] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.835871][ T4394] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 65.853413][ T4394] EXT4-fs (loop0): 1 truncate cleaned up [ 65.859827][ T4394] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 65.908251][ T26] audit: type=1800 audit(1756329115.182:3): pid=4394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.29" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 65.963230][ T4408] loop1: detected capacity change from 0 to 1024 [ 66.036365][ T4408] EXT4-fs (loop1): Ignoring removed orlov option [ 66.080229][ T4408] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 66.113166][ T4413] Zero length message leads to an empty skb [ 66.119592][ T26] audit: type=1800 audit(1756329115.382:4): pid=4408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="GPL" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 66.226717][ T26] audit: type=1804 audit(1756329115.382:5): pid=4408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="GPL" name="/newroot/8/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 66.290574][ T4422] usb usb1: usbfs: process 4422 (syz.0.35) did not claim interface 0 before use [ 66.475902][ T4424] device syzkaller0 entered promiscuous mode [ 66.724929][ T21] syzkaller0: tun_net_xmit 48 [ 67.315745][ T4437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.41'. [ 67.449803][ T4441] loop3: detected capacity change from 0 to 512 [ 67.479351][ T4440] loop0: detected capacity change from 0 to 4096 [ 67.540968][ T4444] loop4: detected capacity change from 0 to 512 [ 67.579981][ T4440] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.668199][ T4441] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000003168,max_dir_size_kb=0x000000000000000d,,errors=continue. Quota mode: writeback. [ 67.699104][ T4444] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 67.715258][ T4444] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.717193][ T4441] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.016118][ T4458] loop2: detected capacity change from 0 to 2368 [ 68.069889][ T4458] netlink: 'syz.2.48': attribute type 10 has an invalid length. [ 68.111707][ T4458] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 68.237510][ T4458] sd 0:0:1:0: device reset [ 68.574481][ T4480] device syzkaller0 entered promiscuous mode [ 68.641099][ T23] syzkaller0: tun_net_xmit 48 [ 69.471643][ T4478] sched: RT throttling activated [ 69.690046][ T4471] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 69.805768][ T26] audit: type=1107 audit(1756329119.072:6): pid=4504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 70.207254][ T4525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.69'. [ 70.235050][ T4525] netlink: 84 bytes leftover after parsing attributes in process `syz.3.69'. [ 70.278443][ T4528] loop1: detected capacity change from 0 to 512 [ 70.335520][ T4525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.69'. [ 70.362511][ T4525] netlink: 84 bytes leftover after parsing attributes in process `syz.3.69'. [ 70.363957][ T4528] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 70.398004][ T4528] System zones: 0-2, 18-18, 34-34 [ 70.442676][ T4528] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.70: bg 0: block 248: padding at end of block bitmap is not set [ 70.466836][ T4528] Quota error (device loop1): write_blk: dquota write failed [ 70.481184][ T4528] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 70.492786][ T4528] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.70: Failed to acquire dquot type 1 [ 70.515958][ T4528] EXT4-fs (loop1): 1 truncate cleaned up [ 70.525051][ T4528] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 70.549165][ T4528] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.551558][ T4525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.69'. [ 70.572662][ T4525] netlink: 84 bytes leftover after parsing attributes in process `syz.3.69'. [ 70.913473][ T4564] loop4: detected capacity change from 0 to 512 [ 71.198831][ T4568] device syzkaller0 entered promiscuous mode [ 71.434644][ T4564] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.981890][ T4564] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.075977][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.082787][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.431048][ T4555] ODEBUG: Out of memory. ODEBUG disabled [ 72.524322][ T4585] device syzkaller0 entered promiscuous mode [ 73.207119][ T4597] loop4: detected capacity change from 0 to 128 [ 73.257631][ T4600] loop1: detected capacity change from 0 to 512 [ 73.350846][ T4597] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.379523][ T4600] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 73.427292][ T4597] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.582838][ T4607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.91'. [ 73.796665][ T4618] loop4: detected capacity change from 0 to 1024 [ 73.799399][ T4615] loop0: detected capacity change from 0 to 1024 [ 74.024095][ T4621] device syzkaller0 entered promiscuous mode [ 74.321134][ T4618] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.506524][ T26] audit: type=1800 audit(1756329123.782:7): pid=4618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.96" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 74.511954][ T4615] EXT4-fs (loop0): Ignoring removed orlov option [ 74.544138][ T4615] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 74.577711][ T4615] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 74.962562][ T4632] device syzkaller0 entered promiscuous mode [ 75.080752][ T4253] syzkaller0: tun_net_xmit 48 [ 75.571736][ T4635] device syzkaller0 entered promiscuous mode [ 75.671439][ T4635] syzkaller0: create flow: hash 259925099 index 1 [ 76.055138][ T4629] loop4: detected capacity change from 0 to 512 [ 76.265240][ T4629] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 76.379534][ T21] syzkaller0: tun_net_xmit 48 [ 76.402470][ T4630] syzkaller0: delete flow: hash 259925099 index 1 [ 76.685976][ T4651] netlink: 268 bytes leftover after parsing attributes in process `syz.4.105'. [ 76.740877][ T4651] unsupported nla_type 65024 [ 76.930661][ T4660] loop4: detected capacity change from 0 to 512 [ 76.973082][ T4660] EXT4-fs (loop4): Ignoring removed oldalloc option [ 77.190260][ T4667] device syzkaller0 entered promiscuous mode [ 77.345387][ T4659] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 77.427357][ T4660] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.109: Parent and EA inode have the same ino 15 [ 77.764541][ T4660] EXT4-fs (loop4): Remounting filesystem read-only [ 77.791850][ T4660] EXT4-fs (loop4): 1 orphan inode deleted [ 77.814429][ T4660] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000040,mb_optimize_scan=0x0000000000000001,bsdgroups,oldalloc,resuid=0x0000000000000000,. Quota mode: none. [ 77.922268][ T4660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.109'. [ 78.045246][ T4660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.109'. [ 78.242474][ T4683] device syzkaller0 entered promiscuous mode [ 78.281070][ T4683] syzkaller0: create flow: hash 259925099 index 1 [ 78.320590][ T1108] syzkaller0: tun_net_xmit 48 [ 78.415862][ T4660] netlink: 100 bytes leftover after parsing attributes in process `syz.4.109'. [ 78.829196][ T4677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.109'. [ 78.939669][ T4675] syzkaller0: delete flow: hash 259925099 index 1 [ 78.998801][ T4555] Set syz1 is full, maxelem 65536 reached [ 80.309993][ T4722] atomic_op ffff88802afdc998 conn xmit_atomic 0000000000000000 [ 81.276525][ T26] audit: type=1326 audit(1756329130.552:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c483fbe9 code=0x7ffc0000 [ 81.303921][ T26] audit: type=1326 audit(1756329130.552:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c483fbe9 code=0x7ffc0000 [ 81.333377][ T26] audit: type=1326 audit(1756329130.582:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f11c483fbe9 code=0x7ffc0000 [ 81.357261][ T26] audit: type=1326 audit(1756329130.582:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c483fbe9 code=0x7ffc0000 [ 81.465630][ T26] audit: type=1326 audit(1756329130.582:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4737 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c483fbe9 code=0x7ffc0000 [ 81.494246][ T4745] syz.0.139[4745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.494339][ T4745] syz.0.139[4745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.524919][ T26] audit: type=1326 audit(1756329130.772:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4743 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f06f5be9 code=0x7ffc0000 [ 81.557741][ T4753] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.927763][ T26] audit: type=1326 audit(1756329130.772:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4743 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61f06f5be9 code=0x7ffc0000 [ 81.961601][ T4761] loop0: detected capacity change from 0 to 2048 [ 82.036788][ T26] audit: type=1326 audit(1756329130.772:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4743 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f06f5be9 code=0x7ffc0000 [ 82.059203][ T26] audit: type=1326 audit(1756329130.772:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4743 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f61f06f5be9 code=0x7ffc0000 [ 82.086697][ T4764] loop4: detected capacity change from 0 to 128 [ 82.114979][ T26] audit: type=1326 audit(1756329130.772:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4743 comm="syz.0.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f06f5be9 code=0x7ffc0000 [ 82.189766][ T4761] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.222330][ T4764] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 82.235470][ T4764] System zones: 1-3, 19-19, 35-36 [ 82.282467][ T4764] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 82.311753][ T4764] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.440103][ T4182] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 82.474906][ T4182] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 84.715492][ T4803] device syzkaller0 entered promiscuous mode [ 84.824630][ T4803] syzkaller0: create flow: hash 259925099 index 1 [ 85.063967][ T4801] loop3: detected capacity change from 0 to 1024 [ 85.231381][ T4253] syzkaller0: tun_net_xmit 48 [ 85.238437][ T4795] syzkaller0: delete flow: hash 259925099 index 1 [ 85.435579][ T4801] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,abort,nodioread_nolock,data_err=abort,init_itable,nodelalloc,,errors=continue. Quota mode: none. [ 85.558604][ T4825] syz.0.162[4825] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.558688][ T4825] syz.0.162[4825] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.670058][ T4827] loop4: detected capacity change from 0 to 1024 [ 86.012625][ T4827] EXT4-fs (loop4): Ignoring removed bh option [ 86.092884][ T4827] EXT4-fs (loop4): inline encryption not supported [ 86.309360][ T4827] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 86.487520][ T4827] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 2: comm syz.4.163: lblock 2 mapped to illegal pblock 2 (length 1) [ 86.710978][ T4848] device syzkaller0 entered promiscuous mode [ 86.877819][ T4827] __quota_error: 39 callbacks suppressed [ 86.877871][ T4827] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 87.239827][ T4827] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 48: comm syz.4.163: lblock 0 mapped to illegal pblock 48 (length 1) [ 87.257636][ T4827] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 87.273841][ T4827] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.163: Failed to acquire dquot type 0 [ 87.314287][ T4827] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 87.315958][ T4846] loop3: detected capacity change from 0 to 2048 [ 87.474023][ T4827] EXT4-fs error (device loop4): ext4_evict_inode:282: inode #11: comm syz.4.163: mark_inode_dirty error [ 87.538290][ T4827] EXT4-fs warning (device loop4): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 87.554143][ T4827] EXT4-fs (loop4): 1 orphan inode deleted [ 87.561217][ T4827] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 87.583854][ T4262] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.686096][ T4859] loop2: detected capacity change from 0 to 512 [ 87.712762][ T3560] loop3: p2 < > p3 < > [ 87.735419][ T4262] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 87.753387][ T3560] loop3: partition table partially beyond EOD, truncated [ 87.792330][ T4262] EXT4-fs error (device loop4): ext4_release_dquot:6243: comm kworker/u4:4: Failed to release dquot type 0 [ 87.808092][ T3560] loop3: p2 start 4278190080 is beyond EOD, truncated [ 87.825885][ T26] audit: type=1326 audit(1756329137.102:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4845 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad31c1fbe9 code=0x7fc00000 [ 87.872072][ T4846] loop3: p2 < > p3 < > [ 87.874149][ T4859] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.173: bg 0: block 248: padding at end of block bitmap is not set [ 87.884855][ T4846] loop3: partition table partially beyond EOD, truncated [ 87.899409][ T4827] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 48: comm syz.4.163: lblock 0 mapped to illegal pblock 48 (length 1) [ 87.915075][ T4846] loop3: p2 start 4278190080 is beyond EOD, truncated [ 87.967272][ T4827] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 88.016657][ T4859] Quota error (device loop2): write_blk: dquota write failed [ 88.072097][ T4859] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 88.095189][ T26] audit: type=1326 audit(1756329137.362:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f06f5be9 code=0x7ffc0000 [ 88.124603][ T4859] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.173: Failed to acquire dquot type 1 [ 88.174296][ T26] audit: type=1326 audit(1756329137.392:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61f06f5be9 code=0x7ffc0000 [ 88.211755][ T4859] EXT4-fs (loop2): 1 truncate cleaned up [ 88.228506][ T4859] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.263571][ T26] audit: type=1326 audit(1756329137.392:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4868 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f06f5be9 code=0x7ffc0000 [ 88.292288][ T4859] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.443920][ T4636] EXT4-fs error (device loop2): ext4_release_dquot:6243: comm kworker/u4:10: Failed to release dquot type 1 [ 88.776002][ T4891] device syzkaller0 entered promiscuous mode [ 89.094295][ T4460] udevd[4460]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 89.359183][ T4460] udevd[4460]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 89.575812][ T4902] device syzkaller0 entered promiscuous mode [ 89.668984][ T4902] syzkaller0: create flow: hash 259925099 index 1 [ 91.006359][ T4898] syzkaller0: delete flow: hash 259925099 index 1 [ 91.018144][ T4910] loop0: detected capacity change from 0 to 1024 [ 91.108864][ T4910] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.167021][ T4910] EXT4-fs warning (device loop0): ext4_rmdir:3243: inode #11: comm syz.0.188: empty directory 'file1' has too many links (111) [ 91.339929][ T4923] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.502695][ T4923] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.521180][ T4934] loop1: detected capacity change from 0 to 164 [ 91.677451][ T4923] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.942576][ T4942] device syzkaller0 entered promiscuous mode [ 92.184954][ T4254] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.504964][ T4254] usb 4-1: device descriptor read/64, error -71 [ 92.606633][ T4923] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.626862][ T4948] netlink: 104 bytes leftover after parsing attributes in process `syz.4.200'. [ 92.844991][ T4254] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.910082][ T4955] netlink: 196 bytes leftover after parsing attributes in process `syz.0.202'. [ 93.053768][ T4923] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.065092][ T4254] usb 4-1: device descriptor read/64, error -71 [ 93.169439][ T4923] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.185319][ T4254] usb usb4-port1: attempt power cycle [ 93.347548][ T4923] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.470350][ T4923] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.634959][ T4254] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.760149][ T4254] usb 4-1: device descriptor read/8, error -71 [ 93.789999][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 93.790013][ T26] audit: type=1326 audit(1756329143.062:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4973 comm="syz.4.210" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff663f61be9 code=0x0 [ 95.430720][ T4254] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.722184][ T5009] syz.3.217 uses obsolete (PF_INET,SOCK_PACKET) [ 95.725223][ T4254] usb 4-1: device not accepting address 5, error -71 [ 95.959106][ T5016] device syzkaller0 entered promiscuous mode [ 96.098320][ T4254] usb usb4-port1: unable to enumerate USB device [ 96.415309][ T5017] netlink: 332 bytes leftover after parsing attributes in process `syz.1.221'. [ 96.602102][ T5023] loop1: detected capacity change from 0 to 512 [ 96.679029][ T26] audit: type=1326 audit(1756329145.952:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f06f5be9 code=0x7ffc0000 [ 96.708845][ T26] audit: type=1326 audit(1756329145.952:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f61f06f5be9 code=0x7ffc0000 [ 96.717814][ T5023] EXT4-fs (loop1): error: journal path ./bus is not a block device [ 96.794189][ T26] audit: type=1326 audit(1756329145.952:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f06f5be9 code=0x7ffc0000 [ 96.857687][ T5027] loop2: detected capacity change from 0 to 8192 [ 96.885311][ T5037] netlink: 'syz.0.229': attribute type 4 has an invalid length. [ 96.949752][ T5027] attempt to access beyond end of device [ 96.949752][ T5027] loop2: rw=0, want=57848, limit=8192 [ 96.970050][ T5027] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 96.980530][ T5038] netlink: 'syz.0.229': attribute type 4 has an invalid length. [ 96.994475][ T5027] FAT-fs (loop2): Filesystem has been set read-only [ 97.027364][ T5027] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 97.057137][ T5027] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 97.937892][ T5053] loop4: detected capacity change from 0 to 512 [ 98.169697][ T5062] device syzkaller0 entered promiscuous mode [ 98.345543][ T5053] EXT4-fs (loop4): Ignoring removed oldalloc option [ 98.704492][ T5053] ------------[ cut here ]------------ [ 98.727402][ T5053] WARNING: CPU: 0 PID: 5053 at mm/page_alloc.c:5449 __alloc_pages+0x391/0x470 [ 98.767279][ T5053] Modules linked in: [ 98.771617][ T5053] CPU: 1 PID: 5053 Comm: syz.4.234 Not tainted 5.15.189-syzkaller #0 [ 98.786474][ T5053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.816592][ T5053] RIP: 0010:__alloc_pages+0x391/0x470 [ 98.840765][ T5053] Code: 31 ff e9 b2 fe ff ff e8 7d b2 f5 07 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fd ff ff 4c 89 e7 e8 44 ac 09 00 e9 43 fd ff ff <0f> 0b 45 31 ff e9 ef fe ff ff 65 44 8b 2d 35 9a 4f 7e 41 83 fd 08 [ 98.897012][ T5053] RSP: 0018:ffffc90003cf7360 EFLAGS: 00010246 [ 98.903544][ T5053] RAX: ffffc90003cf73a0 RBX: 1ffff9200079ee70 RCX: 0000000000000000 [ 98.913090][ T5053] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90003cf73c8 [ 98.922528][ T5053] RBP: ffffc90003cf7460 R08: dffffc0000000000 R09: ffffc90003cf73a0 [ 98.931855][ T5053] R10: fffff5200079ee79 R11: 1ffff9200079ee74 R12: dffffc0000000000 [ 98.952114][ T5053] R13: 0000000000000000 R14: 0000000000040c40 R15: 000000000000000c [ 98.960814][ T5053] FS: 00007ff6621c96c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 98.971879][ T5053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.979028][ T5053] CR2: 0000000000000000 CR3: 000000001ec6a000 CR4: 00000000003506e0 [ 98.987975][ T5053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.025890][ T5053] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.037394][ T5053] Call Trace: [ 99.040719][ T5053] [ 99.043662][ T5053] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.050335][ T5053] ? zone_statistics+0x170/0x170 [ 99.055927][ T5053] kmalloc_large_node+0x7d/0x190 [ 99.060946][ T5053] __kmalloc_node+0x232/0x3b0 [ 99.066048][ T5053] ext4_expand_extra_isize_ea+0xd55/0x19a0 [ 99.071899][ T5053] __ext4_expand_extra_isize+0x301/0x3e0 [ 99.077811][ T5053] __ext4_mark_inode_dirty+0x469/0x700 [ 99.083320][ T5053] ext4_evict_inode+0xa81/0x1080 [ 99.088685][ T5053] ? _raw_spin_unlock+0x24/0x40 [ 99.093574][ T5053] ? ext4_inode_is_fast_symlink+0x350/0x350 [ 99.099934][ T5053] ? do_raw_spin_unlock+0x11d/0x230 [ 99.105821][ T5053] ? ext4_inode_is_fast_symlink+0x350/0x350 [ 99.111739][ T5053] evict+0x485/0x870 [ 99.116079][ T5053] ? __lock_acquire+0x7c60/0x7c60 [ 99.121147][ T5053] ? proc_nr_inodes+0x320/0x320 [ 99.126149][ T5053] ? do_raw_spin_unlock+0x11d/0x230 [ 99.131857][ T5053] ? _raw_spin_unlock+0x24/0x40 [ 99.137011][ T5053] ? iput+0x706/0x8a0 [ 99.141204][ T5053] ext4_orphan_cleanup+0xaa9/0x12e0 [ 99.146881][ T5053] ? ext4_orphan_del+0xb90/0xb90 [ 99.152029][ T5053] ? errseq_check_and_advance+0x62/0x120 [ 99.157906][ T5053] ext4_fill_super+0x9288/0x9a00 [ 99.162892][ T5053] ? ext4_mount+0x40/0x40 [ 99.168993][ T5053] ? set_blocksize+0x1f1/0x370 [ 99.173868][ T5053] ? sb_set_blocksize+0xa5/0xe0 [ 99.179231][ T5053] mount_bdev+0x287/0x3c0 [ 99.183935][ T5053] ? ext4_mount+0x40/0x40 [ 99.188421][ T5053] legacy_get_tree+0xe6/0x180 [ 99.193118][ T5053] ? ext4_errno_to_code+0x160/0x160 [ 99.198622][ T5053] vfs_get_tree+0x88/0x270 [ 99.203359][ T5053] do_new_mount+0x24a/0xa40 [ 99.207959][ T5053] __se_sys_mount+0x2d6/0x3c0 [ 99.212642][ T5053] ? __x64_sys_mount+0xc0/0xc0 [ 99.217617][ T5053] ? lockdep_hardirqs_on+0x94/0x140 [ 99.222854][ T5053] ? __x64_sys_mount+0x1c/0xc0 [ 99.227785][ T5053] do_syscall_64+0x4c/0xa0 [ 99.232221][ T5053] ? clear_bhb_loop+0x30/0x80 [ 99.237754][ T5053] ? clear_bhb_loop+0x30/0x80 [ 99.242647][ T5053] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.248697][ T5053] RIP: 0033:0x7ff663f6338a [ 99.253277][ T5053] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.273702][ T5053] RSP: 002b:00007ff6621c8e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 99.282709][ T5053] RAX: ffffffffffffffda RBX: 00007ff6621c8ef0 RCX: 00007ff663f6338a [ 99.291217][ T5053] RDX: 00002000000002c0 RSI: 00002000000001c0 RDI: 00007ff6621c8eb0 [ 99.299413][ T5053] RBP: 00002000000002c0 R08: 00007ff6621c8ef0 R09: 0000000000800700 [ 99.307761][ T5053] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 99.316127][ T5053] R13: 00007ff6621c8eb0 R14: 000000000000044b R15: 0000200000000200 [ 99.324397][ T5053] [ 99.327644][ T5053] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 99.335024][ T5053] CPU: 1 PID: 5053 Comm: syz.4.234 Not tainted 5.15.189-syzkaller #0 [ 99.343095][ T5053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.353344][ T5053] Call Trace: [ 99.356792][ T5053] [ 99.359716][ T5053] dump_stack_lvl+0x168/0x230 [ 99.364412][ T5053] ? show_regs_print_info+0x20/0x20 [ 99.369619][ T5053] ? load_image+0x3b0/0x3b0 [ 99.374123][ T5053] panic+0x2c9/0x7f0 [ 99.378028][ T5053] ? bpf_jit_dump+0xd0/0xd0 [ 99.382557][ T5053] ? __alloc_pages+0x391/0x470 [ 99.387439][ T5053] __warn+0x248/0x2b0 [ 99.391436][ T5053] ? __alloc_pages+0x391/0x470 [ 99.396380][ T5053] report_bug+0x1b7/0x2e0 [ 99.400702][ T5053] handle_bug+0x3a/0x70 [ 99.404903][ T5053] exc_invalid_op+0x16/0x40 [ 99.409409][ T5053] asm_exc_invalid_op+0x16/0x20 [ 99.414266][ T5053] RIP: 0010:__alloc_pages+0x391/0x470 [ 99.419989][ T5053] Code: 31 ff e9 b2 fe ff ff e8 7d b2 f5 07 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fd ff ff 4c 89 e7 e8 44 ac 09 00 e9 43 fd ff ff <0f> 0b 45 31 ff e9 ef fe ff ff 65 44 8b 2d 35 9a 4f 7e 41 83 fd 08 [ 99.440245][ T5053] RSP: 0018:ffffc90003cf7360 EFLAGS: 00010246 [ 99.446328][ T5053] RAX: ffffc90003cf73a0 RBX: 1ffff9200079ee70 RCX: 0000000000000000 [ 99.454471][ T5053] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90003cf73c8 [ 99.462792][ T5053] RBP: ffffc90003cf7460 R08: dffffc0000000000 R09: ffffc90003cf73a0 [ 99.471986][ T5053] R10: fffff5200079ee79 R11: 1ffff9200079ee74 R12: dffffc0000000000 [ 99.479973][ T5053] R13: 0000000000000000 R14: 0000000000040c40 R15: 000000000000000c [ 99.488570][ T5053] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.494881][ T5053] ? zone_statistics+0x170/0x170 [ 99.499890][ T5053] kmalloc_large_node+0x7d/0x190 [ 99.504987][ T5053] __kmalloc_node+0x232/0x3b0 [ 99.509686][ T5053] ext4_expand_extra_isize_ea+0xd55/0x19a0 [ 99.516035][ T5053] __ext4_expand_extra_isize+0x301/0x3e0 [ 99.522092][ T5053] __ext4_mark_inode_dirty+0x469/0x700 [ 99.528020][ T5053] ext4_evict_inode+0xa81/0x1080 [ 99.533057][ T5053] ? _raw_spin_unlock+0x24/0x40 [ 99.538260][ T5053] ? ext4_inode_is_fast_symlink+0x350/0x350 [ 99.544537][ T5053] ? do_raw_spin_unlock+0x11d/0x230 [ 99.549773][ T5053] ? ext4_inode_is_fast_symlink+0x350/0x350 [ 99.555675][ T5053] evict+0x485/0x870 [ 99.559602][ T5053] ? __lock_acquire+0x7c60/0x7c60 [ 99.564750][ T5053] ? proc_nr_inodes+0x320/0x320 [ 99.569936][ T5053] ? do_raw_spin_unlock+0x11d/0x230 [ 99.575225][ T5053] ? _raw_spin_unlock+0x24/0x40 [ 99.580075][ T5053] ? iput+0x706/0x8a0 [ 99.584051][ T5053] ext4_orphan_cleanup+0xaa9/0x12e0 [ 99.589260][ T5053] ? ext4_orphan_del+0xb90/0xb90 [ 99.594297][ T5053] ? errseq_check_and_advance+0x62/0x120 [ 99.599923][ T5053] ext4_fill_super+0x9288/0x9a00 [ 99.604866][ T5053] ? ext4_mount+0x40/0x40 [ 99.609282][ T5053] ? set_blocksize+0x1f1/0x370 [ 99.614037][ T5053] ? sb_set_blocksize+0xa5/0xe0 [ 99.618896][ T5053] mount_bdev+0x287/0x3c0 [ 99.623325][ T5053] ? ext4_mount+0x40/0x40 [ 99.627644][ T5053] legacy_get_tree+0xe6/0x180 [ 99.632338][ T5053] ? ext4_errno_to_code+0x160/0x160 [ 99.637722][ T5053] vfs_get_tree+0x88/0x270 [ 99.642320][ T5053] do_new_mount+0x24a/0xa40 [ 99.646843][ T5053] __se_sys_mount+0x2d6/0x3c0 [ 99.651538][ T5053] ? __x64_sys_mount+0xc0/0xc0 [ 99.656313][ T5053] ? lockdep_hardirqs_on+0x94/0x140 [ 99.661529][ T5053] ? __x64_sys_mount+0x1c/0xc0 [ 99.666666][ T5053] do_syscall_64+0x4c/0xa0 [ 99.671240][ T5053] ? clear_bhb_loop+0x30/0x80 [ 99.676628][ T5053] ? clear_bhb_loop+0x30/0x80 [ 99.681538][ T5053] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.688313][ T5053] RIP: 0033:0x7ff663f6338a [ 99.692830][ T5053] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.713263][ T5053] RSP: 002b:00007ff6621c8e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 99.721868][ T5053] RAX: ffffffffffffffda RBX: 00007ff6621c8ef0 RCX: 00007ff663f6338a [ 99.730389][ T5053] RDX: 00002000000002c0 RSI: 00002000000001c0 RDI: 00007ff6621c8eb0 [ 99.738452][ T5053] RBP: 00002000000002c0 R08: 00007ff6621c8ef0 R09: 0000000000800700 [ 99.746626][ T5053] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 99.754591][ T5053] R13: 00007ff6621c8eb0 R14: 000000000000044b R15: 0000200000000200 [ 99.762921][ T5053] [ 99.766281][ T5053] Kernel Offset: disabled [ 99.770883][ T5053] Rebooting in 86400 seconds..