last executing test programs: 18.858652751s ago: executing program 1 (id=90): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="3300000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_init1(0x800) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 18.545334497s ago: executing program 1 (id=96): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r4 = gettid() rt_sigaction(0x16, 0x0, 0x0, 0x8, &(0x7f0000000200)) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x2) flock(r5, 0x1) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x8a}, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x800000000000}, {0x0, 0x5}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0x48, 0x1, {{'sha512-arm\x00'}}}]}, 0x180}}, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r8, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) tkill(r4, 0x16) 15.720701683s ago: executing program 1 (id=104): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) 14.749852801s ago: executing program 1 (id=108): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r2, 0x0, 0x0) dup2(r2, r0) flock(r0, 0x2) 12.783882189s ago: executing program 1 (id=118): r0 = socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) r6 = add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r7 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000040)={'fscrypt:', @auto=[0x63, 0x30, 0x62, 0x39, 0x5, 0x2, 0x64, 0x66, 0x63, 0x35, 0x34, 0x34, 0x66, 0x64, 0x64, 0x32]}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r7, r6, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r7, 0x0, &(0x7f0000000000)='\')\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{}]}, @struct={0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x5f, 0x2e]}}, &(0x7f0000002200)=""/4110, 0x3f, 0x100e, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="190000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000000)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r9}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket(0x840000000002, 0x3, 0xff) 11.069521554s ago: executing program 1 (id=120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000340)) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbdf252500000008000200"], 0x1c}, 0x1, 0x0, 0x0, 0x4008020}, 0x40010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x18) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000080)=ANY=[]) prctl$PR_SET_FPEMU(0xa, 0x2) 8.505198154s ago: executing program 4 (id=126): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) listxattr(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 8.240042959s ago: executing program 3 (id=128): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff000000000000000000000000000000000000000002"], 0x254}}, 0x0) 8.051076602s ago: executing program 3 (id=130): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000440)=""/178, 0xb2, 0x0, &(0x7f0000000180)=""/36, 0x24}}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xe8d0, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRESDEC=r0], 0x0, 0x30e, &(0x7f0000000c00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000000000500000000000000000018110000", @ANYRES16=r4, @ANYRES8=r2, @ANYRES32=r3, @ANYBLOB="29d652bb75734a2570d7a08b072f287441ee9b2941828ac85ed5782aca306e1461af098916494f252869e6bada64c428f1db2d7405ba4c409ba7aedf2c2fa76bafb669faed8b", @ANYBLOB="6cba77479b64e910af92d328f19430b358292c513065578ca415e336446dcf89d0c8f6bb96", @ANYRES8, @ANYRES8, @ANYRES8=r2, @ANYRESHEX=r2], &(0x7f0000000200)='syzkaller\x00', 0x3, 0xffffffae, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000840)={'#! ', './file0'}, 0xb) close(0xffffffffffffffff) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x0, 0xfffffffe, 0x3ff, 0x11) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 7.761854218s ago: executing program 3 (id=131): ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r2}, &(0x7f0000000580), &(0x7f0000000940)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}]}}) 7.416101425s ago: executing program 3 (id=132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r4 = gettid() rt_sigaction(0x16, 0x0, 0x0, 0x8, &(0x7f0000000200)) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x2) flock(r5, 0x1) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000580)={[0x48, 0x0, 0xa65a, 0xfff, 0x10000, 0x0, 0x80, 0x3, 0x6, 0x0, 0x5, 0x100000001, 0x8, 0x100, 0x7, 0x7f], 0x8080000}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r8, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) tkill(r4, 0x16) 7.12871228s ago: executing program 4 (id=134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @multicast2=0xac14140a}}) 6.343559956s ago: executing program 3 (id=135): uname(0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r4, &(0x7f00000021c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9d6}}], 0x18}}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) 6.177487009s ago: executing program 0 (id=136): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) io_submit(r1, 0x2, &(0x7f0000000600)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) shutdown(r0, 0x0) 5.228018238s ago: executing program 4 (id=137): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x82040, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 5.10856575s ago: executing program 0 (id=138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340", 0x9}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000050) 2.966233342s ago: executing program 4 (id=141): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x18, 0x14, 0x609, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x8040) 2.910521243s ago: executing program 2 (id=142): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) preadv(r0, &(0x7f0000002800)=[{&(0x7f0000000600)=""/106, 0x6a}, {0x0}], 0x2, 0x3, 0x100) 2.770484736s ago: executing program 3 (id=143): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") 2.660075448s ago: executing program 2 (id=144): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000600), &(0x7f00000006c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r4, 0x0, 0x9) 2.647546429s ago: executing program 0 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r4 = gettid() rt_sigaction(0x16, 0x0, 0x0, 0x8, &(0x7f0000000200)) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x2) flock(r5, 0x1) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000580)={[0x48, 0x0, 0xa65a, 0xfff, 0x10000, 0x0, 0x80, 0x3, 0x6, 0x0, 0x5, 0x100000001, 0x8, 0x100, 0x7, 0x7f], 0x8080000}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r8, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) tkill(r4, 0x16) 2.328088435s ago: executing program 4 (id=146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/242, 0xf2, 0x1, &(0x7f00000005c0)=""/226, 0xe2}, &(0x7f00000001c0)=0x40) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 1.587933759s ago: executing program 0 (id=147): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) llistxattr(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.332052894s ago: executing program 2 (id=148): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[], 0xffdd) 581.035069ms ago: executing program 4 (id=149): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x71, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='status\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000010001e1500"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r2], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) mkdir(&(0x7f0000000700)='./file1\x00', 0x34) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x225e, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850018010000646c0125000000c9000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000340000/0x4000)=nil, 0x4017, 0x3000, 0x3, &(0x7f0000001000/0x3000)=nil) pipe(&(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r8 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) add_key$user(&(0x7f0000000280), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000580)="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", 0x12d, 0xffffffffffffffff) r9 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r9}, &(0x7f0000000080)) read$FUSE(r8, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) unshare(0x20000600) 542.68618ms ago: executing program 0 (id=150): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x2a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 388.145573ms ago: executing program 2 (id=151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x602, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000000001c0"]) 259.073235ms ago: executing program 2 (id=152): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 180.415387ms ago: executing program 0 (id=153): uname(0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r4, &(0x7f00000021c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9d6}}], 0x18}}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) 0s ago: executing program 2 (id=154): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.152' (ED25519) to the list of known hosts. [ 63.989459][ T4172] cgroup: Unknown subsys name 'net' [ 64.122945][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.677870][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.628582][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 67.675964][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 67.690502][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 67.750656][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 67.828182][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 67.859787][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.867230][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.875285][ T4186] device bridge_slave_0 entered promiscuous mode [ 67.895545][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.902753][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.911349][ T4185] device bridge_slave_0 entered promiscuous mode [ 67.922744][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.933132][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.941930][ T4185] device bridge_slave_1 entered promiscuous mode [ 67.962586][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.973698][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.981788][ T4186] device bridge_slave_1 entered promiscuous mode [ 68.037694][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.044792][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.052928][ T4189] device bridge_slave_0 entered promiscuous mode [ 68.070129][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.085953][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.095537][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.102883][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.111650][ T4189] device bridge_slave_1 entered promiscuous mode [ 68.119034][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.126171][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.134590][ T4192] device bridge_slave_0 entered promiscuous mode [ 68.143480][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.161532][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.195887][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.203086][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.211575][ T4192] device bridge_slave_1 entered promiscuous mode [ 68.250506][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.270143][ T4185] team0: Port device team_slave_0 added [ 68.285540][ T4186] team0: Port device team_slave_0 added [ 68.293623][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.311305][ T4185] team0: Port device team_slave_1 added [ 68.329275][ T4186] team0: Port device team_slave_1 added [ 68.335215][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.342420][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.350601][ T4182] device bridge_slave_0 entered promiscuous mode [ 68.367483][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.390709][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.398221][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.406075][ T4182] device bridge_slave_1 entered promiscuous mode [ 68.423406][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.434872][ T4189] team0: Port device team_slave_0 added [ 68.473436][ T4189] team0: Port device team_slave_1 added [ 68.489445][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.496493][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.523281][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.536870][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.543855][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.569972][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.609688][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.620755][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.647072][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.658727][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.665693][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.691987][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.704838][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.716896][ T4192] team0: Port device team_slave_0 added [ 68.724467][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.734325][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.742212][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.769669][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.782391][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.789731][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.816110][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.837466][ T4192] team0: Port device team_slave_1 added [ 68.885065][ T4182] team0: Port device team_slave_0 added [ 68.917252][ T4182] team0: Port device team_slave_1 added [ 68.948672][ T4189] device hsr_slave_0 entered promiscuous mode [ 68.959324][ T4189] device hsr_slave_1 entered promiscuous mode [ 68.966612][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.973603][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.000461][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.022068][ T4185] device hsr_slave_0 entered promiscuous mode [ 69.029372][ T4185] device hsr_slave_1 entered promiscuous mode [ 69.035943][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.043867][ T4185] Cannot create hsr debugfs directory [ 69.052608][ T4186] device hsr_slave_0 entered promiscuous mode [ 69.059772][ T4186] device hsr_slave_1 entered promiscuous mode [ 69.066314][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.074090][ T4186] Cannot create hsr debugfs directory [ 69.080723][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.088529][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.114592][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.151926][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.159375][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.185985][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.227675][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.235972][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.263020][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 69.263900][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.280294][ T4194] Bluetooth: hci3: command 0x0409 tx timeout [ 69.286533][ T4194] Bluetooth: hci1: command 0x0409 tx timeout [ 69.292788][ T4194] Bluetooth: hci0: command 0x0409 tx timeout [ 69.334129][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 69.352074][ T4192] device hsr_slave_0 entered promiscuous mode [ 69.359069][ T4192] device hsr_slave_1 entered promiscuous mode [ 69.365729][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.373728][ T4192] Cannot create hsr debugfs directory [ 69.439367][ T4182] device hsr_slave_0 entered promiscuous mode [ 69.446316][ T4182] device hsr_slave_1 entered promiscuous mode [ 69.453393][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.461710][ T4182] Cannot create hsr debugfs directory [ 69.716714][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.728110][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.739058][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.749970][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.824427][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.833718][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.848595][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.871197][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.930245][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.957345][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.975552][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.994216][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.005826][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.020011][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.037386][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.048441][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.072250][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.082457][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.101654][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.113360][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.125404][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.135330][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.146588][ T3051] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.153872][ T3051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.162494][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.211777][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.224275][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.236343][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.245423][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.256156][ T3051] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.263279][ T3051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.272611][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.281997][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.290990][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.299920][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.308908][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.317620][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.326073][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.334623][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.343688][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.352369][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.362328][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.370949][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.410423][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.445680][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.465914][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.503129][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.531976][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.584485][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.608251][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.616198][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.630071][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.654518][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.663946][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.671645][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.689998][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.711887][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.719243][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.730371][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.739288][ T240] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.746343][ T240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.754876][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.763251][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.771427][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.803531][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.814115][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.824228][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.834526][ T3051] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.841703][ T3051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.850419][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.863648][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.872570][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.883085][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.892340][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.900740][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.908599][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.923780][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.935435][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.944504][ T3051] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.951637][ T3051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.960516][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.970310][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.979309][ T3051] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.986435][ T3051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.018642][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.027155][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.035980][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.049796][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.059461][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.068561][ T3051] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.075631][ T3051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.083856][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.093637][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.102399][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.111732][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.120268][ T3051] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.127369][ T3051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.135142][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.144430][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.155832][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.165247][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.179039][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.217275][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.225262][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.235379][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.245467][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.255625][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.271330][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.280436][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.289528][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.298141][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.306591][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.330384][ T4258] Bluetooth: hci0: command 0x041b tx timeout [ 71.337034][ T4258] Bluetooth: hci1: command 0x041b tx timeout [ 71.337771][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.353756][ T4258] Bluetooth: hci3: command 0x041b tx timeout [ 71.355347][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.378609][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.392584][ T4258] Bluetooth: hci4: command 0x041b tx timeout [ 71.401560][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.413679][ T4267] Bluetooth: hci2: command 0x041b tx timeout [ 71.423315][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.433310][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.442681][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.452614][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.461442][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.470493][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.480796][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.489615][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.498407][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.506993][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.541902][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.558955][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.570300][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.579626][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.597233][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.628673][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.644297][ T4186] device veth0_vlan entered promiscuous mode [ 71.669269][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.677781][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.704753][ T4186] device veth1_vlan entered promiscuous mode [ 71.733612][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.742056][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.760899][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.772333][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.792846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.822025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.841783][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.862879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.876816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.920176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.930128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.940368][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.947523][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.958240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.967701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.976171][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.983297][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.992171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.001228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.010756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.019887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.029152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.039319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.061317][ T4186] device veth0_macvtap entered promiscuous mode [ 72.077362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.085655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.099564][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.113330][ T4192] device veth0_vlan entered promiscuous mode [ 72.128670][ T4186] device veth1_macvtap entered promiscuous mode [ 72.145516][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.163487][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.175206][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.190363][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.202675][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.210799][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.218624][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.227968][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.236964][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.245737][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.261272][ T4192] device veth1_vlan entered promiscuous mode [ 72.282520][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.293605][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.302005][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.313487][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.325871][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.337494][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.361854][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.374817][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.390305][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.401925][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.413446][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.424993][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.439915][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.452231][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.474093][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.505477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.515826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.525884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.535981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.546463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.555138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.579048][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.589379][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.598482][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.609424][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.630527][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.641972][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.652122][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.661359][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.675562][ T4185] device veth0_vlan entered promiscuous mode [ 72.690350][ T4182] device veth0_vlan entered promiscuous mode [ 72.704095][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.714447][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.742649][ T4185] device veth1_vlan entered promiscuous mode [ 72.772991][ T4182] device veth1_vlan entered promiscuous mode [ 72.782185][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.802206][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.815726][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.825376][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.859695][ T4192] device veth0_macvtap entered promiscuous mode [ 72.905138][ T4185] device veth0_macvtap entered promiscuous mode [ 72.920389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.932747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.944688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.955428][ T4192] device veth1_macvtap entered promiscuous mode [ 72.982761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.991363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.000729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.010622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.027377][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.054364][ T4185] device veth1_macvtap entered promiscuous mode [ 73.061762][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.073147][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.083515][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.099668][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.111122][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.137791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.145965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.157347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.165986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.177132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.185771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.203790][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.217486][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.231482][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.249883][ T4182] device veth0_macvtap entered promiscuous mode [ 73.261408][ T4182] device veth1_macvtap entered promiscuous mode [ 73.272577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.281000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.292655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.302326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.312186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.322427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.335193][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.344481][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.353798][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.362923][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.390151][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.395621][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.409110][ T4256] Bluetooth: hci4: command 0x040f tx timeout [ 73.409350][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.422957][ T4256] Bluetooth: hci3: command 0x040f tx timeout [ 73.423093][ T4256] Bluetooth: hci1: command 0x040f tx timeout [ 73.423175][ T4256] Bluetooth: hci0: command 0x040f tx timeout [ 73.424358][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.451621][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.462098][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.473938][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.486959][ T4188] Bluetooth: hci2: command 0x040f tx timeout [ 73.495190][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.507697][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.517806][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.528339][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.539821][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.550833][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.562095][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.571587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.581084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.590321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.599191][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.608077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.619752][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.630780][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.640994][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.657307][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.668731][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.688409][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.702711][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.713136][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.723916][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.736134][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.747788][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.760755][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.773781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.784422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.799410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.810366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.822421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.831136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.843728][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.852740][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.861795][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.874221][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.888731][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.898793][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.907859][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.916636][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.928324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.936973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.947703][ T4189] device veth0_vlan entered promiscuous mode [ 74.012057][ T4189] device veth1_vlan entered promiscuous mode [ 74.163535][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.174758][ T4189] device veth0_macvtap entered promiscuous mode [ 74.182677][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.213182][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.222403][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.231210][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.240576][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.251299][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.260168][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.278550][ T4189] device veth1_macvtap entered promiscuous mode [ 74.298215][ T240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.308895][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.314663][ T240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.321025][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.332934][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.352317][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.362652][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.373286][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.383800][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.394599][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.405679][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.417910][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.428597][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.439949][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.466805][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.474897][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.485457][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.489663][ T240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.495871][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.505132][ T240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.515265][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.525460][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.536233][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.547719][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.557604][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.568070][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.578234][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.590840][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.600900][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.612765][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.623892][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.631479][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 74.647554][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.656156][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.685739][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.699795][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.711857][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.720724][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.726768][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.737011][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.765013][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.772937][ T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 74.794531][ T13] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 74.804549][ T13] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 74.822481][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.835533][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.946668][ T13] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.957224][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 74.965253][ T13] usb 1-1: SerialNumber: syz [ 75.045460][ T4295] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 75.066497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.495380][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 75.519128][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 75.569649][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 75.602985][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 75.813282][ T13] cdc_acm 1-1:1.0: skipping garbage [ 75.820048][ T13] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 75.861717][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 75.889641][ T4300] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.897084][ T4300] IPv6: NLM_F_CREATE should be set when creating new route [ 75.990415][ T4267] usb 1-1: USB disconnect, device number 2 [ 76.046247][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.064934][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.144393][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.165929][ T4305] loop3: detected capacity change from 0 to 1024 [ 76.174339][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.225906][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.243066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.294186][ T4305] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 76.295047][ T4308] loop4: detected capacity change from 0 to 256 [ 77.121440][ T4308] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 77.202095][ T4305] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 77.640024][ T4333] Zero length message leads to an empty skb [ 78.510797][ T4330] loop2: detected capacity change from 0 to 8192 [ 78.607498][ T4330] loop2: p1 p2 p4 < > [ 78.640100][ T4330] loop2: partition table partially beyond EOD, truncated [ 78.675605][ T4330] loop2: p1 start 16777216 is beyond EOD, truncated [ 78.703276][ T4330] loop2: p2 size 515840 extends beyond EOD, truncated [ 78.742890][ T4330] loop2: p4 start 16777216 is beyond EOD, truncated [ 80.025643][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 80.178151][ T4327] loop0: detected capacity change from 0 to 40427 [ 80.604905][ T4337] loop3: detected capacity change from 0 to 40427 [ 80.650067][ T4337] ======================================================= [ 80.650067][ T4337] WARNING: The mand mount option has been deprecated and [ 80.650067][ T4337] and is ignored by this kernel. Remove the mand [ 80.650067][ T4337] option from the mount to silence this warning. [ 80.650067][ T4337] ======================================================= [ 80.671026][ T4360] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.790801][ T4337] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 80.846666][ T4366] x_tables: ip_tables: ah match: only valid for protocol 51 [ 81.028804][ T4366] loop4: detected capacity change from 0 to 512 [ 81.219233][ T4337] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 81.295995][ T4366] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 81.303340][ T4366] EXT4-fs (loop4): inline encryption not supported [ 81.312127][ T4366] EXT4-fs (loop4): Test dummy encryption mode enabled [ 81.319090][ T4366] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 81.326280][ T4366] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.339632][ T4366] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.487713][ T4366] EXT4-fs (loop4): 1 truncate cleaned up [ 81.493504][ T4366] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 81.836392][ C1] sched: RT throttling activated [ 82.111817][ T4337] F2FS-fs (loop3): invalid crc value [ 82.186619][ T4337] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 82.313911][ T26] audit: type=1326 audit(1757740920.442:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d70bc9ba9 code=0x7ffc0000 [ 82.453714][ T26] audit: type=1326 audit(1757740920.492:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d70bc9ba9 code=0x7ffc0000 [ 82.591051][ T26] audit: type=1326 audit(1757740920.492:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d70bc9ba9 code=0x7ffc0000 [ 82.716622][ T4240] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 82.746877][ T26] audit: type=1326 audit(1757740920.492:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d70bc9ba9 code=0x7ffc0000 [ 82.854128][ T26] audit: type=1326 audit(1757740920.512:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f3d70bc9ba9 code=0x7ffc0000 [ 83.085359][ T26] audit: type=1326 audit(1757740920.512:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d70bc9ba9 code=0x7ffc0000 [ 83.137018][ T4240] usb 1-1: not running at top speed; connect to a high speed hub [ 83.198674][ T26] audit: type=1326 audit(1757740920.512:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d70bc9ba9 code=0x7ffc0000 [ 83.222353][ T26] audit: type=1326 audit(1757740920.512:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d70bc8510 code=0x7ffc0000 [ 83.247573][ T4240] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 83.266531][ T4240] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.284665][ T26] audit: type=1326 audit(1757740920.532:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d70bc97ab code=0x7ffc0000 [ 83.296446][ T4240] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 83.314576][ T26] audit: type=1326 audit(1757740920.532:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d70bc97ab code=0x7ffc0000 [ 83.336475][ T4240] usb 1-1: config 1 has no interface number 1 [ 83.344233][ T4240] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 83.436171][ T4240] usb 1-1: config 1 interface 2 has no altsetting 0 [ 83.454468][ T4356] loop2: detected capacity change from 0 to 40427 [ 83.616587][ T4240] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.625688][ T4240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.634150][ T4240] usb 1-1: Product: syz [ 83.643009][ T4240] usb 1-1: Manufacturer: syz [ 83.653675][ T4240] usb 1-1: SerialNumber: syz [ 83.771177][ T4384] loop3: detected capacity change from 0 to 512 [ 83.776688][ T4188] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.827241][ T4384] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.23: casefold flag without casefold feature [ 83.857571][ T4384] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.23: couldn't read orphan inode 15 (err -117) [ 83.870026][ T4384] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.096883][ T4240] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 84.115375][ T4240] usb 1-1: 2:1 : format type 9 is not supported yet [ 84.135664][ T4240] usb 1-1: selecting invalid altsetting 0 [ 84.229264][ T4240] usb 1-1: USB disconnect, device number 3 [ 84.316670][ T4188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.336008][ T4188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.358802][ T4188] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.379292][ T4188] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.391248][ T4188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.430705][ T4188] usb 5-1: config 0 descriptor?? [ 84.541162][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.859069][ T4390] loop2: detected capacity change from 0 to 40427 [ 84.894542][ T4390] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 84.921761][ T4188] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 84.957170][ T4390] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 84.979900][ T4390] F2FS-fs (loop2): invalid crc value [ 85.025599][ T4188] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 85.028358][ T4390] F2FS-fs (loop2): Found nat_bits in checkpoint [ 85.142181][ T4188] usb 5-1: USB disconnect, device number 2 [ 85.164184][ T4390] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 85.167993][ T4395] loop1: detected capacity change from 0 to 40427 [ 85.183270][ T4390] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 85.259240][ T4409] fido_id[4409]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 85.299012][ T4395] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 85.312423][ T4395] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 85.328376][ T4395] F2FS-fs (loop1): invalid crc value [ 85.350662][ T4395] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.233889][ T4395] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 86.253277][ T4395] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 86.707607][ T1108] cfg80211: failed to load regulatory.db [ 87.803641][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 87.803657][ T26] audit: type=1326 audit(1757740925.932:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeda30fba9 code=0x7ffc0000 [ 87.889061][ T26] audit: type=1326 audit(1757740925.942:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbeda30fba9 code=0x7ffc0000 [ 87.892201][ T4420] loop3: detected capacity change from 0 to 40427 [ 87.942817][ T26] audit: type=1326 audit(1757740925.942:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeda30fba9 code=0x7ffc0000 [ 87.947080][ T4420] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 87.974908][ T26] audit: type=1326 audit(1757740925.942:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fbeda30fba9 code=0x7ffc0000 [ 88.001460][ T26] audit: type=1326 audit(1757740925.942:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeda30fba9 code=0x7ffc0000 [ 88.024509][ T4420] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 88.045142][ T26] audit: type=1326 audit(1757740925.942:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbeda30e510 code=0x7ffc0000 [ 88.077485][ T1108] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 88.094540][ T26] audit: type=1326 audit(1757740925.942:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbeda30f7ab code=0x7ffc0000 [ 88.139640][ T4420] F2FS-fs (loop3): Found nat_bits in checkpoint [ 88.146521][ T26] audit: type=1326 audit(1757740925.942:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbeda30f7ab code=0x7ffc0000 [ 88.188862][ T26] audit: type=1326 audit(1757740925.952:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbeda30f7ab code=0x7ffc0000 [ 88.218570][ T26] audit: type=1326 audit(1757740925.952:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.2.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbeda30f7ab code=0x7ffc0000 [ 88.250008][ T4420] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 88.266562][ T4420] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 88.285606][ T4447] tipc: Started in network mode [ 88.310614][ T4447] tipc: Node identity ac14140f, cluster identity 4711 [ 88.332253][ T4447] tipc: New replicast peer: 255.255.255.83 [ 88.338917][ T4447] tipc: Enabled bearer , priority 10 [ 88.546530][ T1108] usb 3-1: not running at top speed; connect to a high speed hub [ 88.656530][ T4456] syz.3.33[4456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.657028][ T4456] syz.3.33[4456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.708968][ T1108] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 89.453456][ T1108] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.525080][ T1108] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 89.574155][ T1108] usb 3-1: config 1 has no interface number 1 [ 89.606185][ T1108] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 89.655635][ T1108] usb 3-1: config 1 interface 2 has no altsetting 0 [ 89.682958][ T21] tipc: Node number set to 2886997007 [ 89.836901][ T1108] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.856280][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.903386][ T1108] usb 3-1: Product: syz [ 89.914625][ T1108] usb 3-1: Manufacturer: syz [ 89.932048][ T1108] usb 3-1: SerialNumber: syz [ 90.095468][ T4468] tipc: Enabled bearer , priority 0 [ 90.151978][ T4463] tipc: Resetting bearer [ 90.316749][ T1108] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 90.333918][ T1108] usb 3-1: 2:1 : format type 9 is not supported yet [ 90.351163][ T1108] usb 3-1: selecting invalid altsetting 0 [ 90.428657][ T1108] usb 3-1: USB disconnect, device number 2 [ 90.539105][ T4463] tipc: Disabling bearer [ 90.672871][ T4460] loop4: detected capacity change from 0 to 40427 [ 90.759064][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.785101][ T4460] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 90.796542][ T4460] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 90.812792][ T4460] F2FS-fs (loop4): invalid crc value [ 90.846223][ T4460] F2FS-fs (loop4): Found nat_bits in checkpoint [ 90.925244][ T4460] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 90.933705][ T4460] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 92.166247][ T4495] loop3: detected capacity change from 0 to 512 [ 92.356607][ T4495] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.57: casefold flag without casefold feature [ 92.380092][ T4495] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.57: couldn't read orphan inode 15 (err -117) [ 92.404338][ T4495] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 92.709420][ T4501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.53'. [ 93.804839][ T4522] loop2: detected capacity change from 0 to 128 [ 93.851539][ T4524] loop3: detected capacity change from 0 to 128 [ 93.894412][ T4524] EXT4-fs (loop3): Test dummy encryption mode enabled [ 93.953022][ T4524] EXT4-fs (loop3): Test dummy encryption mode enabled [ 93.964029][ T4524] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 93.989570][ T4524] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 94.072044][ T4528] x_tables: ip_tables: ah match: only valid for protocol 51 [ 94.187742][ T4528] loop1: detected capacity change from 0 to 512 [ 94.380961][ T4524] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none. [ 94.419950][ T4528] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 94.427425][ T4528] EXT4-fs (loop1): inline encryption not supported [ 94.435017][ T4528] EXT4-fs (loop1): Test dummy encryption mode enabled [ 94.442058][ T4528] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 94.449405][ T4528] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 94.557840][ T4528] EXT4-fs (loop1): 1 truncate cleaned up [ 94.563596][ T4528] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 95.301825][ T4524] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.639097][ T4517] loop4: detected capacity change from 0 to 40427 [ 97.257894][ T4549] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 99.065493][ T4572] loop1: detected capacity change from 0 to 128 [ 100.017477][ T4581] loop3: detected capacity change from 0 to 128 [ 100.160434][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 100.160449][ T26] audit: type=1800 audit(1757740938.292:92): pid=4586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.80" name="bus" dev="loop3" ino=1048593 res=0 errno=0 [ 100.917257][ T4586] attempt to access beyond end of device [ 100.917257][ T4586] loop3: rw=2049, want=1041, limit=128 [ 101.229549][ T4602] loop0: detected capacity change from 0 to 128 [ 101.689328][ T4619] loop4: detected capacity change from 0 to 128 [ 103.463058][ T4628] input: syz0 as /devices/virtual/input/input5 [ 105.126122][ T4651] loop1: detected capacity change from 0 to 1024 [ 105.209646][ T4651] EXT4-fs (loop1): inline encryption not supported [ 105.209769][ T4651] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.281957][ T4651] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 105.358772][ T4651] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.104: Allocating blocks 497-513 which overlap fs metadata [ 105.392507][ T4651] EXT4-fs (loop1): pa ffff888074b61620: logic 624, phys. 113, len 25 [ 105.401130][ T4651] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 24, pa_free 25 [ 105.472773][ T26] audit: type=1326 audit(1757740943.602:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d938afba9 code=0x7ffc0000 [ 105.561848][ T26] audit: type=1326 audit(1757740943.692:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d938afba9 code=0x7ffc0000 [ 105.622621][ T26] audit: type=1326 audit(1757740943.752:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f5d938afba9 code=0x7ffc0000 [ 105.682679][ T26] audit: type=1326 audit(1757740943.752:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4662 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d938afba9 code=0x7ffc0000 [ 106.741351][ T4671] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 107.321065][ T4687] loop0: detected capacity change from 0 to 1024 [ 107.878110][ T26] audit: type=1107 audit(1757740946.012:97): pid=4686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 110.175887][ T4719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.122'. [ 111.786167][ T4729] loop4: detected capacity change from 0 to 256 [ 111.887034][ T4729] FAT-fs (loop4): bogus number of FAT sectors [ 111.895151][ T4729] FAT-fs (loop4): Can't find a valid FAT filesystem [ 111.976480][ T4296] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 112.089136][ T4733] netlink: 300 bytes leftover after parsing attributes in process `syz.3.128'. [ 112.321750][ T4738] loop3: detected capacity change from 0 to 128 [ 112.367856][ T4296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.394736][ T4296] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 112.405800][ T4296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.418862][ T4296] usb 3-1: config 0 descriptor?? [ 115.044644][ T4761] loop4: detected capacity change from 0 to 512 [ 115.076604][ T4296] usbhid 3-1:0.0: can't add hid device: -71 [ 115.091448][ T4296] usbhid: probe of 3-1:0.0 failed with error -71 [ 115.093462][ T4761] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 115.154264][ T4296] usb 3-1: USB disconnect, device number 3 [ 115.166062][ T4761] EXT4-fs (loop4): inline encryption not supported [ 115.211995][ T4761] EXT4-fs (loop4): Test dummy encryption mode enabled [ 115.239428][ T4761] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 115.266517][ T4761] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.868183][ T4761] EXT4-fs (loop4): 1 truncate cleaned up [ 115.979919][ T4761] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 116.617896][ T4765] syz.0.138 (4765) used greatest stack depth: 17912 bytes left [ 120.073395][ T4782] loop3: detected capacity change from 0 to 512 [ 120.296700][ T4782] ------------[ cut here ]------------ [ 120.330857][ T4782] EA inode 11 i_nlink=2 [ 120.331161][ T4782] WARNING: CPU: 1 PID: 4782 at fs/ext4/xattr.c:1021 ext4_xattr_inode_update_ref+0x517/0x570 [ 120.705516][ T4782] Modules linked in: [ 120.849034][ T4782] CPU: 1 PID: 4782 Comm: syz.3.143 Not tainted syzkaller #0 [ 121.071544][ T4782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.128398][ T4782] RIP: 0010:ext4_xattr_inode_update_ref+0x517/0x570 [ 121.135224][ T4782] Code: 7b 40 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 7b e6 a2 ff 49 8b 37 48 c7 c7 20 72 1d 8a 44 89 f2 e8 29 db 84 07 <0f> 0b 48 8b 5c 24 10 4c 8b 7c 24 18 4c 8d 6c 24 60 e9 00 fe ff ff [ 121.156324][ T4782] RSP: 0018:ffffc900033ff140 EFLAGS: 00010246 [ 121.192246][ T4782] RAX: 88aab5a42e613400 RBX: ffff88805e600c98 RCX: 0000000000080000 [ 121.216492][ T4782] RDX: ffffc9000e13a000 RSI: 0000000000024254 RDI: 0000000000024255 [ 121.224626][ T4782] RBP: ffffc900033ff230 R08: dffffc0000000000 R09: ffffed1017224f2c [ 121.251201][ T4782] R10: ffffed1017224f2c R11: 1ffff11017224f2b R12: dffffc0000000000 [ 121.277332][ T4782] R13: ffffc900033ff1a0 R14: 0000000000000002 R15: ffff88805e600cd8 [ 121.285472][ T4782] FS: 00007fc28ecd56c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 121.306545][ T4782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.326587][ T4782] CR2: 00007f5d91af6668 CR3: 000000007daf2000 CR4: 00000000003506f0 [ 121.334708][ T4782] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.357643][ T4782] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 121.391028][ T4782] Call Trace: [ 121.394451][ T4782] [ 121.411069][ T4782] ? ext4_xattr_block_csum+0x500/0x500 [ 121.418382][ T4782] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 121.436600][ T4782] ? mb_cache_entry_create+0x62e/0x890 [ 121.452448][ T4782] ext4_xattr_set_entry+0xed0/0x3d30 [ 121.472356][ T4782] ? rcu_is_watching+0x11/0xa0 [ 121.492038][ T4782] ? mb_cache_entry_create+0x676/0x890 [ 121.502136][ T4782] ? ext4_xattr_block_set+0xd9a/0x2d30 [ 121.526457][ T4782] ? ext4_xattr_ibody_set+0x330/0x330 [ 121.532017][ T4782] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 121.551458][ T4782] ? ext4_xattr_block_find+0x500/0x500 [ 121.566598][ T4782] ext4_xattr_ibody_set+0x112/0x330 [ 121.583865][ T4782] ext4_expand_extra_isize_ea+0xf9a/0x19a0 [ 121.607244][ T4782] __ext4_expand_extra_isize+0x301/0x3e0 [ 121.620606][ T4782] __ext4_mark_inode_dirty+0x469/0x700 [ 121.636532][ T4782] ext4_evict_inode+0xa81/0x1080 [ 121.652563][ T4782] ? _raw_spin_unlock+0x24/0x40 [ 121.672672][ T4782] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 121.692573][ T4782] ? do_raw_spin_unlock+0x11d/0x230 [ 121.707096][ T4782] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 121.713157][ T4782] evict+0x485/0x870 [ 121.736506][ T4782] ? __lock_acquire+0x7c60/0x7c60 [ 121.741714][ T4782] ? proc_nr_inodes+0x320/0x320 [ 121.772437][ T4782] ? do_raw_spin_unlock+0x11d/0x230 [ 121.778087][ T4782] ? _raw_spin_unlock+0x24/0x40 [ 121.783102][ T4782] ? iput+0x706/0x8a0 [ 121.815944][ T4782] ext4_orphan_cleanup+0xaa9/0x12e0 [ 121.821619][ T4782] ? ext4_orphan_del+0xb90/0xb90 [ 121.852252][ T4782] ? errseq_check_and_advance+0x62/0x120 [ 121.858375][ T4782] ext4_fill_super+0x92f0/0x9a60 [ 121.863489][ T4782] ? ext4_mount+0x40/0x40 [ 121.880371][ T4782] ? set_blocksize+0x1f1/0x370 [ 121.903429][ T4782] ? sb_set_blocksize+0xa5/0xe0 [ 121.912153][ T4782] mount_bdev+0x287/0x3c0 [ 121.924756][ T4782] ? ext4_mount+0x40/0x40 [ 121.929758][ T4782] legacy_get_tree+0xe6/0x180 [ 121.934579][ T4782] ? ext4_errno_to_code+0x160/0x160 [ 121.946135][ T4782] vfs_get_tree+0x88/0x270 [ 121.951258][ T4782] do_new_mount+0x24a/0xa40 [ 121.955906][ T4782] __se_sys_mount+0x2d6/0x3c0 [ 121.967046][ T4782] ? __x64_sys_mount+0xc0/0xc0 [ 121.971967][ T4782] ? lockdep_hardirqs_on+0x94/0x140 [ 121.982417][ T4782] ? __x64_sys_mount+0x1c/0xc0 [ 121.988881][ T4782] do_syscall_64+0x4c/0xa0 [ 121.993413][ T4782] ? clear_bhb_loop+0x30/0x80 [ 122.023299][ T4782] ? clear_bhb_loop+0x30/0x80 [ 122.046687][ T4782] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.057088][ T4782] RIP: 0033:0x7fc290a6f34a [ 122.069527][ T4782] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.125632][ T4782] RSP: 002b:00007fc28ecd4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 122.175400][ T4782] RAX: ffffffffffffffda RBX: 00007fc28ecd4ef0 RCX: 00007fc290a6f34a [ 122.203773][ T4782] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fc28ecd4eb0 [ 122.216707][ T4782] RBP: 0000200000000180 R08: 00007fc28ecd4ef0 R09: 0000000000800700 [ 122.225545][ T4782] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 122.282171][ T4782] R13: 00007fc28ecd4eb0 R14: 0000000000000473 R15: 0000200000000680 [ 122.296478][ T4782] [ 122.299672][ T4782] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 122.306989][ T4782] CPU: 1 PID: 4782 Comm: syz.3.143 Not tainted syzkaller #0 [ 122.314299][ T4782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.324385][ T4782] Call Trace: [ 122.327694][ T4782] [ 122.330648][ T4782] dump_stack_lvl+0x168/0x230 [ 122.335569][ T4782] ? show_regs_print_info+0x20/0x20 [ 122.340796][ T4782] ? load_image+0x3b0/0x3b0 [ 122.345348][ T4782] panic+0x2c9/0x7f0 [ 122.349270][ T4782] ? bpf_jit_dump+0xd0/0xd0 [ 122.353805][ T4782] ? ext4_xattr_inode_update_ref+0x517/0x570 [ 122.359832][ T4782] __warn+0x248/0x2b0 [ 122.363842][ T4782] ? ext4_xattr_inode_update_ref+0x517/0x570 [ 122.369865][ T4782] report_bug+0x1b7/0x2e0 [ 122.374246][ T4782] handle_bug+0x3a/0x70 [ 122.378424][ T4782] exc_invalid_op+0x16/0x40 [ 122.382977][ T4782] asm_exc_invalid_op+0x16/0x20 [ 122.387850][ T4782] RIP: 0010:ext4_xattr_inode_update_ref+0x517/0x570 [ 122.394472][ T4782] Code: 7b 40 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 7b e6 a2 ff 49 8b 37 48 c7 c7 20 72 1d 8a 44 89 f2 e8 29 db 84 07 <0f> 0b 48 8b 5c 24 10 4c 8b 7c 24 18 4c 8d 6c 24 60 e9 00 fe ff ff [ 122.414105][ T4782] RSP: 0018:ffffc900033ff140 EFLAGS: 00010246 [ 122.420208][ T4782] RAX: 88aab5a42e613400 RBX: ffff88805e600c98 RCX: 0000000000080000 [ 122.428208][ T4782] RDX: ffffc9000e13a000 RSI: 0000000000024254 RDI: 0000000000024255 [ 122.436218][ T4782] RBP: ffffc900033ff230 R08: dffffc0000000000 R09: ffffed1017224f2c [ 122.444222][ T4782] R10: ffffed1017224f2c R11: 1ffff11017224f2b R12: dffffc0000000000 [ 122.452239][ T4782] R13: ffffc900033ff1a0 R14: 0000000000000002 R15: ffff88805e600cd8 [ 122.460265][ T4782] ? ext4_xattr_block_csum+0x500/0x500 [ 122.465767][ T4782] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 122.471254][ T4782] ? mb_cache_entry_create+0x62e/0x890 [ 122.476801][ T4782] ext4_xattr_set_entry+0xed0/0x3d30 [ 122.482122][ T4782] ? rcu_is_watching+0x11/0xa0 [ 122.486920][ T4782] ? mb_cache_entry_create+0x676/0x890 [ 122.492423][ T4782] ? ext4_xattr_block_set+0xd9a/0x2d30 [ 122.497927][ T4782] ? ext4_xattr_ibody_set+0x330/0x330 [ 122.503344][ T4782] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 122.509098][ T4782] ? ext4_xattr_block_find+0x500/0x500 [ 122.514595][ T4782] ext4_xattr_ibody_set+0x112/0x330 [ 122.519845][ T4782] ext4_expand_extra_isize_ea+0xf9a/0x19a0 [ 122.525730][ T4782] __ext4_expand_extra_isize+0x301/0x3e0 [ 122.531416][ T4782] __ext4_mark_inode_dirty+0x469/0x700 [ 122.536917][ T4782] ext4_evict_inode+0xa81/0x1080 [ 122.541877][ T4782] ? _raw_spin_unlock+0x24/0x40 [ 122.546772][ T4782] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 122.552697][ T4782] ? do_raw_spin_unlock+0x11d/0x230 [ 122.557927][ T4782] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 122.563998][ T4782] evict+0x485/0x870 [ 122.567935][ T4782] ? __lock_acquire+0x7c60/0x7c60 [ 122.572998][ T4782] ? proc_nr_inodes+0x320/0x320 [ 122.577882][ T4782] ? do_raw_spin_unlock+0x11d/0x230 [ 122.583119][ T4782] ? _raw_spin_unlock+0x24/0x40 [ 122.587997][ T4782] ? iput+0x706/0x8a0 [ 122.592015][ T4782] ext4_orphan_cleanup+0xaa9/0x12e0 [ 122.597261][ T4782] ? ext4_orphan_del+0xb90/0xb90 [ 122.602231][ T4782] ? errseq_check_and_advance+0x62/0x120 [ 122.607897][ T4782] ext4_fill_super+0x92f0/0x9a60 [ 122.612895][ T4782] ? ext4_mount+0x40/0x40 [ 122.617245][ T4782] ? set_blocksize+0x1f1/0x370 [ 122.622040][ T4782] ? sb_set_blocksize+0xa5/0xe0 [ 122.626928][ T4782] mount_bdev+0x287/0x3c0 [ 122.631283][ T4782] ? ext4_mount+0x40/0x40 [ 122.635646][ T4782] legacy_get_tree+0xe6/0x180 [ 122.640340][ T4782] ? ext4_errno_to_code+0x160/0x160 [ 122.645560][ T4782] vfs_get_tree+0x88/0x270 [ 122.650032][ T4782] do_new_mount+0x24a/0xa40 [ 122.654572][ T4782] __se_sys_mount+0x2d6/0x3c0 [ 122.659281][ T4782] ? __x64_sys_mount+0xc0/0xc0 [ 122.664072][ T4782] ? lockdep_hardirqs_on+0x94/0x140 [ 122.669295][ T4782] ? __x64_sys_mount+0x1c/0xc0 [ 122.674091][ T4782] do_syscall_64+0x4c/0xa0 [ 122.678588][ T4782] ? clear_bhb_loop+0x30/0x80 [ 122.683296][ T4782] ? clear_bhb_loop+0x30/0x80 [ 122.688001][ T4782] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.693933][ T4782] RIP: 0033:0x7fc290a6f34a [ 122.698370][ T4782] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.717996][ T4782] RSP: 002b:00007fc28ecd4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 122.726443][ T4782] RAX: ffffffffffffffda RBX: 00007fc28ecd4ef0 RCX: 00007fc290a6f34a [ 122.734438][ T4782] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fc28ecd4eb0 [ 122.742435][ T4782] RBP: 0000200000000180 R08: 00007fc28ecd4ef0 R09: 0000000000800700 [ 122.750428][ T4782] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 122.758415][ T4782] R13: 00007fc28ecd4eb0 R14: 0000000000000473 R15: 0000200000000680 [ 122.766437][ T4782] [ 122.769796][ T4782] Kernel Offset: disabled [ 122.774312][ T4782] Rebooting in 86400 seconds..