last executing test programs: 14.330640421s ago: executing program 4 (id=187): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 13.793049509s ago: executing program 2 (id=196): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000600)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x121d, &(0x7f0000000100)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 13.616196462s ago: executing program 4 (id=198): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 13.381100075s ago: executing program 4 (id=200): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc) 13.380723235s ago: executing program 2 (id=201): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) 13.204126198s ago: executing program 4 (id=202): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioperm(0xfffffffffffffffb, 0x1, 0x5) socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xc7f}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) time(&(0x7f0000000140)) 13.187734048s ago: executing program 2 (id=203): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") unshare(0x0) symlink(0x0, &(0x7f0000000040)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 12.942011472s ago: executing program 4 (id=204): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000400085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) 12.801100844s ago: executing program 2 (id=207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16=r3, @ANYRES64=r0], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[], 0x0) 12.468122489s ago: executing program 4 (id=213): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x40) 12.070126605s ago: executing program 32 (id=213): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x40) 12.050367395s ago: executing program 3 (id=217): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0x3}, {0x6}]}) write$ppp(r0, &(0x7f0000000200)='xS', 0x2) 11.752842309s ago: executing program 3 (id=220): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) socket(0x1e, 0x4, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x6f88, 0x0, 0x9, 0x0, 0x1}, &(0x7f0000000180), 0x0) 11.465069834s ago: executing program 3 (id=222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000740)={0x77359400}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(r4, 0xffffffffffffffff, 0x0) 10.756546984s ago: executing program 1 (id=226): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc) 10.611816326s ago: executing program 0 (id=228): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 10.493143728s ago: executing program 1 (id=229): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5", 0x6c}], 0x1}, 0x0) 10.402746589s ago: executing program 0 (id=230): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) 10.37511669s ago: executing program 1 (id=231): r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2000, 0x0) 10.211224302s ago: executing program 3 (id=232): mknod$loop(&(0x7f0000000400)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) 10.208483822s ago: executing program 1 (id=233): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) mkdirat(0xffffffffffffff9c, 0x0, 0xa4) creat(0x0, 0xd931d3864d39dcca) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000000c0)=0x13) syz_clone(0x8004a000, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000380)) 9.65335629s ago: executing program 0 (id=234): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x7) write$ppp(r0, &(0x7f0000000200)='xS', 0x2) 9.525163411s ago: executing program 2 (id=235): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) chmod(0x0, 0x100) 9.342524444s ago: executing program 2 (id=236): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af, @void, @value}, 0xa5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r3}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 9.188600127s ago: executing program 0 (id=237): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f0000ffd000/0x3000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000040000000000000000"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x9}, 0x18) rt_sigpending(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100ff03850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) 9.165988087s ago: executing program 1 (id=238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) 8.92115815s ago: executing program 3 (id=239): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 8.910893661s ago: executing program 0 (id=240): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5", 0x6c}], 0x1}, 0x0) 72.339059ms ago: executing program 3 (id=241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000740)={0x77359400}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(r4, 0xffffffffffffffff, 0x0) 577.12µs ago: executing program 1 (id=242): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000004c0)=ANY=[@ANYBLOB="cf599d594a0987000000000086dd60000000001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000008"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) 0s ago: executing program 0 (id=243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x41cd6f38b2d5c95a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. [ 68.027866][ T4240] cgroup: Unknown subsys name 'net' [ 68.174638][ T4240] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.616719][ T4240] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.182330][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.188926][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.633066][ T4271] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.633276][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.641161][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.649137][ T4270] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.655691][ T4271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.663868][ T4270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.669442][ T4271] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.676469][ T4270] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.690232][ T4271] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.691197][ T4270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.697540][ T4271] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.704627][ T4270] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.712386][ T4271] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.719537][ T4270] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.733541][ T4271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.733687][ T4272] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.747967][ T4271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.756220][ T4271] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.763552][ T4271] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.771129][ T4271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.776249][ T4270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.778499][ T4271] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.788694][ T4274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.793483][ T4271] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.800283][ T4274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.807069][ T4271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.814037][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.828830][ T4271] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.846202][ T4269] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.855448][ T4271] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.251968][ T4255] chnl_net:caif_netlink_parms(): no params data found [ 72.333463][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 72.375526][ T4252] chnl_net:caif_netlink_parms(): no params data found [ 72.455558][ T4256] chnl_net:caif_netlink_parms(): no params data found [ 72.492063][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.499977][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.510860][ T4255] device bridge_slave_0 entered promiscuous mode [ 72.521875][ T4255] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.529139][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.537023][ T4255] device bridge_slave_1 entered promiscuous mode [ 72.560495][ T4253] chnl_net:caif_netlink_parms(): no params data found [ 72.636744][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.644008][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.651929][ T4251] device bridge_slave_0 entered promiscuous mode [ 72.662797][ T4255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.694828][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.702212][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.710770][ T4251] device bridge_slave_1 entered promiscuous mode [ 72.719984][ T4255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.729517][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.736620][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.744593][ T4252] device bridge_slave_0 entered promiscuous mode [ 72.781084][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.788401][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.796124][ T4252] device bridge_slave_1 entered promiscuous mode [ 72.832318][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.839650][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.847453][ T4256] device bridge_slave_0 entered promiscuous mode [ 72.868369][ T4255] team0: Port device team_slave_0 added [ 72.884995][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.894901][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.902227][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.910468][ T4256] device bridge_slave_1 entered promiscuous mode [ 72.935343][ T4255] team0: Port device team_slave_1 added [ 72.943500][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.962456][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.971902][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.979146][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.986996][ T4253] device bridge_slave_0 entered promiscuous mode [ 73.021561][ T4256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.033017][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.042491][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.050296][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.058544][ T4253] device bridge_slave_1 entered promiscuous mode [ 73.083417][ T4256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.118802][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.125774][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.152036][ T4255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.166148][ T4251] team0: Port device team_slave_0 added [ 73.193888][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.203514][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.211011][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.237032][ T4255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.250522][ T4251] team0: Port device team_slave_1 added [ 73.268792][ T4252] team0: Port device team_slave_0 added [ 73.276866][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.305498][ T4256] team0: Port device team_slave_0 added [ 73.313596][ T4252] team0: Port device team_slave_1 added [ 73.336920][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.344187][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.370721][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.383373][ T4256] team0: Port device team_slave_1 added [ 73.406815][ T4253] team0: Port device team_slave_0 added [ 73.413265][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.423776][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.450233][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.495239][ T4253] team0: Port device team_slave_1 added [ 73.505918][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.513096][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.539137][ T4256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.551405][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.558709][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.584700][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.599281][ T4255] device hsr_slave_0 entered promiscuous mode [ 73.606069][ T4255] device hsr_slave_1 entered promiscuous mode [ 73.630320][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.637294][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.663852][ T4256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.676319][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.683376][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.709689][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.725105][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.732445][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.758905][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.817284][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.824540][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.850484][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.888339][ T4251] device hsr_slave_0 entered promiscuous mode [ 73.895065][ T4251] device hsr_slave_1 entered promiscuous mode [ 73.899204][ T4269] Bluetooth: hci3: command 0x0409 tx timeout [ 73.907358][ T4269] Bluetooth: hci1: command 0x0409 tx timeout [ 73.908305][ T4271] Bluetooth: hci0: command 0x0409 tx timeout [ 73.914421][ T4258] Bluetooth: hci2: command 0x0409 tx timeout [ 73.920492][ T4274] Bluetooth: hci4: command 0x0409 tx timeout [ 73.932445][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.940309][ T4251] Cannot create hsr debugfs directory [ 73.964802][ T4252] device hsr_slave_0 entered promiscuous mode [ 73.971678][ T4252] device hsr_slave_1 entered promiscuous mode [ 73.978767][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.986336][ T4252] Cannot create hsr debugfs directory [ 74.004140][ T4256] device hsr_slave_0 entered promiscuous mode [ 74.011975][ T4256] device hsr_slave_1 entered promiscuous mode [ 74.018824][ T4256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.026408][ T4256] Cannot create hsr debugfs directory [ 74.142496][ T4253] device hsr_slave_0 entered promiscuous mode [ 74.149629][ T4253] device hsr_slave_1 entered promiscuous mode [ 74.156214][ T4253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.163848][ T4253] Cannot create hsr debugfs directory [ 74.415172][ T4255] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.427974][ T4255] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.446385][ T4255] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.461324][ T4255] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.514669][ T4252] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.530110][ T4252] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.545306][ T4252] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.573328][ T4252] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.584074][ T4251] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.614317][ T4251] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.636018][ T4251] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.653795][ T4251] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.667044][ T4253] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.681440][ T4253] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.691214][ T4253] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.731481][ T4253] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.812514][ T4256] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.824042][ T4256] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.857632][ T4256] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.875166][ T4255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.893718][ T4256] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.935191][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.945829][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.962685][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.986634][ T4255] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.996350][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.005150][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.022156][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.044690][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.053934][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.063481][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.070805][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.080039][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.089622][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.098238][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.105324][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.113433][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.133494][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.155109][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.164139][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.174110][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.184588][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.191714][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.200967][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.210674][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.219371][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.226474][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.235854][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.244632][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.253836][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.274802][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.284497][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.293813][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.306701][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.326096][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.345993][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.355969][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.365870][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.375932][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.385057][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.394127][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.403106][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.412112][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.419248][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.427128][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.436208][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.444853][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.453595][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.484699][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.492022][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.505555][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.514411][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.523500][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.532284][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.542129][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.551227][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.558369][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.566161][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.575276][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.592003][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.601606][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.610256][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.619323][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.639280][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.650393][ T4255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.663172][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.672741][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.681741][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.691144][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.727004][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.739307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.764512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.789069][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.796225][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.811510][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.824564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.841230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.852622][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.868512][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.875631][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.899738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.918538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.948164][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.956877][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.969413][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.978081][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 75.978220][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.984108][ T4274] Bluetooth: hci1: command 0x041b tx timeout [ 75.993736][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.998105][ T4271] Bluetooth: hci2: command 0x041b tx timeout [ 76.006846][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.011946][ T4269] Bluetooth: hci3: command 0x041b tx timeout [ 76.012027][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 76.033455][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.051583][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.066749][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.094834][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.118089][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.127556][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.140597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.153440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.163360][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.173525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.205447][ T4253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.229474][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.267188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.284581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.303619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.335478][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.359756][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.395410][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.408146][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.420467][ T4256] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.457288][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.514684][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.529703][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.538681][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.545787][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.555796][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.565173][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.573929][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.581035][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.589352][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.598741][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.637697][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.659185][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.666691][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.694326][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.712187][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.762491][ T4255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.775175][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.788479][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.797310][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.806197][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.815187][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.827423][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.836749][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.863929][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.875578][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.891099][ T4252] device veth0_vlan entered promiscuous mode [ 76.912916][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.922221][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.933595][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.942623][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.987477][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.002769][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.013040][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.025656][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.041612][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.054211][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.064417][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.083773][ T4255] device veth0_vlan entered promiscuous mode [ 77.095892][ T4252] device veth1_vlan entered promiscuous mode [ 77.106681][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.138366][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.146614][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.156511][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.169889][ T4255] device veth1_vlan entered promiscuous mode [ 77.190683][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.210013][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.224049][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.248867][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.256394][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.311446][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.330865][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.341971][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.358568][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.384944][ T4255] device veth0_macvtap entered promiscuous mode [ 77.403448][ T4252] device veth0_macvtap entered promiscuous mode [ 77.430366][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.444823][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.454300][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.463479][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.473976][ T4255] device veth1_macvtap entered promiscuous mode [ 77.493117][ T4252] device veth1_macvtap entered promiscuous mode [ 77.522230][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.531332][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.546496][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.555763][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.569686][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.577187][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.611513][ T4251] device veth0_vlan entered promiscuous mode [ 77.623000][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.634772][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.646954][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.655451][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.670959][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.680493][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.691926][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.703038][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.714934][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.726225][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.744353][ T4251] device veth1_vlan entered promiscuous mode [ 77.758918][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.771719][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.782655][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.823822][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.834243][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.851056][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.867604][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.886284][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.897177][ T4255] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.914288][ T4255] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.924873][ T4255] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.933839][ T4255] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.955248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.963402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.972175][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.989753][ T4252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.999055][ T4252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.007806][ T4252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.016682][ T4252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.058050][ T4274] Bluetooth: hci1: command 0x040f tx timeout [ 78.064106][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 78.071237][ T4271] Bluetooth: hci4: command 0x040f tx timeout [ 78.077288][ T4271] Bluetooth: hci3: command 0x040f tx timeout [ 78.083809][ T4273] Bluetooth: hci0: command 0x040f tx timeout [ 78.100129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.112769][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.121720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.134587][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.215180][ T4251] device veth0_macvtap entered promiscuous mode [ 78.231663][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.253589][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.263832][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.272932][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.281891][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.290484][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.299744][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.307533][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.315713][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.324126][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.332446][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.357288][ T4256] device veth0_vlan entered promiscuous mode [ 78.371225][ T4253] device veth0_vlan entered promiscuous mode [ 78.387030][ T4251] device veth1_macvtap entered promiscuous mode [ 78.419056][ T4256] device veth1_vlan entered promiscuous mode [ 78.444709][ T4253] device veth1_vlan entered promiscuous mode [ 78.464566][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.477375][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.487779][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.500504][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.510437][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.521176][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.533579][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.558635][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.566763][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.576473][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.593204][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.598370][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.609239][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.613247][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.633848][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.645142][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.658629][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.691422][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.701149][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.713484][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.722365][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.731139][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.742613][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.751854][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.761711][ T4251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.770712][ T4251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.780162][ T4251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.788996][ T4251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.807657][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.809882][ T4256] device veth0_macvtap entered promiscuous mode [ 78.822388][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.834475][ T4253] device veth0_macvtap entered promiscuous mode [ 78.862790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.871254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.881621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.892428][ T4253] device veth1_macvtap entered promiscuous mode [ 78.912553][ T4256] device veth1_macvtap entered promiscuous mode [ 78.913294][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.933346][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.970090][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.980514][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.997382][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.007306][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.019959][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.029991][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.040610][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.055098][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.065621][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.078240][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.098781][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.131791][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.159795][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.175110][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.187109][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.198450][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.208977][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.219643][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.230047][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.241782][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.255166][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.282462][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.295345][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.305686][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.316760][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.326988][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.338719][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.350535][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.361208][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.388729][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.417197][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.436668][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.463540][ T27] audit: type=1326 audit(1748608790.222:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ccdd8e969 code=0x7ffc0000 [ 79.498597][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.522917][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.539780][ T4343] loop0: detected capacity change from 0 to 512 [ 79.546457][ T27] audit: type=1326 audit(1748608790.272:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3ccdd8e969 code=0x7ffc0000 [ 79.546780][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.592001][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.604897][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.616048][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.620134][ T27] audit: type=1326 audit(1748608790.272:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ccdd8e969 code=0x7ffc0000 [ 79.646551][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.677027][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.690094][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.710167][ T4256] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.719681][ T4256] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.728534][ T4256] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.737437][ T4256] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.752456][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.760677][ T27] audit: type=1326 audit(1748608790.272:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3ccdd8e969 code=0x7ffc0000 [ 79.783567][ T27] audit: type=1326 audit(1748608790.272:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ccdd8e969 code=0x7ffc0000 [ 79.784948][ T4343] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 79.805567][ T27] audit: type=1326 audit(1748608790.272:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ccdd8e969 code=0x7ffc0000 [ 79.805607][ T27] audit: type=1326 audit(1748608790.272:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ccdd8e969 code=0x7ffc0000 [ 79.805641][ T27] audit: type=1326 audit(1748608790.272:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ccdd8e969 code=0x7ffc0000 [ 79.862313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.881808][ T27] audit: type=1326 audit(1748608790.282:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ccdd8e969 code=0x7ffc0000 [ 79.923813][ T4343] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.964664][ T27] audit: type=1326 audit(1748608790.282:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4342 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3ccdd8e969 code=0x7ffc0000 [ 79.974484][ T4253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.987351][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.022157][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.045948][ T4253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.063247][ T4253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.074359][ T4253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.109546][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 80.116497][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.140929][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 80.146984][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 80.154904][ T4271] Bluetooth: hci0: command 0x0419 tx timeout [ 80.161847][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 80.167906][ T4258] Bluetooth: hci1: command 0x0419 tx timeout [ 80.208543][ T4351] netlink: 'syz.1.7': attribute type 3 has an invalid length. [ 80.216682][ T4351] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7'. [ 80.358451][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.366448][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.428582][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.475871][ T4355] loop1: detected capacity change from 0 to 2048 [ 80.666083][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.707423][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.961777][ T4359] xt_connbytes: Forcing CT accounting to be enabled [ 80.968719][ T4359] Cannot find set identified by id 0 to match [ 81.211986][ T4357] lo speed is unknown, defaulting to 1000 [ 81.218458][ T4357] lo speed is unknown, defaulting to 1000 [ 81.231932][ T4357] lo speed is unknown, defaulting to 1000 [ 81.259149][ T4357] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 81.300183][ T4357] infiniband s…z0: RDMA CMA: cma_listen_on_dev, error -98 [ 81.425175][ T4357] lo speed is unknown, defaulting to 1000 [ 81.432276][ T4357] lo speed is unknown, defaulting to 1000 [ 81.439039][ T4357] lo speed is unknown, defaulting to 1000 [ 81.445719][ T4357] lo speed is unknown, defaulting to 1000 [ 81.452452][ T4357] lo speed is unknown, defaulting to 1000 [ 81.483501][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.623546][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.665053][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.712186][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.731906][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.753306][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.780046][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.794675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.808114][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.834503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.890887][ T4369] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 45395 - 0 [ 81.936198][ T4369] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 45395 - 0 [ 81.961624][ T4369] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 45395 - 0 [ 81.981922][ T4369] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 45395 - 0 [ 82.003628][ T4369] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 47449 - 0 [ 82.043867][ T4369] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 47449 - 0 [ 82.063121][ T4369] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 47449 - 0 [ 82.084191][ T4369] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 47449 - 0 [ 82.096282][ T4374] netlink: 'syz.2.12': attribute type 1 has an invalid length. [ 82.096433][ T4369] device geneve2 entered promiscuous mode [ 82.120376][ T4374] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12'. [ 82.409589][ T4385] loop1: detected capacity change from 0 to 764 [ 82.455256][ T4376] loop3: detected capacity change from 0 to 1024 [ 82.498516][ T4388] netlink: 'syz.0.15': attribute type 3 has an invalid length. [ 82.522721][ T4388] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15'. [ 82.558895][ T4376] ext4: Unknown parameter 'uid<00000000000000000000' [ 82.932824][ T4396] lo speed is unknown, defaulting to 1000 [ 83.025868][ T4399] loop4: detected capacity change from 0 to 2048 [ 83.076179][ T4400] lo speed is unknown, defaulting to 1000 [ 83.105259][ T4399] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.127490][ T4401] loop2: detected capacity change from 0 to 2048 [ 83.219512][ T4399] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 83.256897][ T4401] EXT4-fs (loop2): failed to initialize system zone (-117) [ 83.289052][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 83.308068][ T4405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.311520][ T4401] EXT4-fs (loop2): mount failed [ 83.320660][ T4399] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 11 with max blocks 1 with error 28 [ 83.380323][ T4399] EXT4-fs (loop4): This should not happen!! Data will be lost [ 83.380323][ T4399] [ 83.401645][ T4399] EXT4-fs (loop4): Total free blocks count 0 [ 83.420843][ T4399] EXT4-fs (loop4): Free/Dirty block details [ 83.438124][ T4399] EXT4-fs (loop4): free_blocks=2415919504 [ 83.456915][ T4399] EXT4-fs (loop4): dirty_blocks=16 [ 83.472498][ T4399] EXT4-fs (loop4): Block reservation details [ 83.507112][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.527795][ T4399] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 83.642629][ T4396] loop2: detected capacity change from 0 to 164 [ 83.692092][ T46] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 84.256756][ T4420] loop4: detected capacity change from 0 to 2048 [ 84.269352][ T4420] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.459308][ T4420] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 84.488437][ T4420] random: crng reseeded on system resumption [ 84.837850][ T27] kauditd_printk_skb: 56 callbacks suppressed [ 84.837869][ T27] audit: type=1326 audit(1748608795.582:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.4.23" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f441a98e969 code=0x0 [ 85.069806][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 85.263324][ T4439] loop4: detected capacity change from 0 to 512 [ 85.312918][ T4439] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 85.344533][ T27] audit: type=1326 audit(1748608796.102:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4438 comm="syz.0.33" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ccdd8e969 code=0x0 [ 85.377297][ T4442] process 'syz.3.34' launched './file1' with NULL argv: empty string added [ 85.402497][ T4445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 85.454650][ T4447] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 85.468304][ T4439] EXT4-fs (loop4): 1 orphan inode deleted [ 85.470929][ T4445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.482965][ T4439] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 85.497413][ T4364] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 85.515608][ T4364] EXT4-fs error (device loop4): ext4_release_dquot:6838: comm kworker/u4:8: Failed to release dquot type 1 [ 85.578401][ T4439] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.644426][ T4445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.812296][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 85.840536][ T46] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 85.867270][ T46] EXT4-fs error (device loop4): ext4_release_dquot:6838: comm kworker/u4:3: Failed to release dquot type 1 [ 86.036299][ T4462] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 86.091110][ T4466] loop1: detected capacity change from 0 to 512 [ 86.185124][ T4466] EXT4-fs (loop1): 1 orphan inode deleted [ 86.207980][ T46] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 86.224091][ T4466] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 86.224210][ T46] EXT4-fs error (device loop1): ext4_release_dquot:6838: comm kworker/u4:3: Failed to release dquot type 1 [ 86.263409][ T4472] loop4: detected capacity change from 0 to 1024 [ 86.283389][ T4466] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.318561][ T4472] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.371720][ T4472] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 86.403812][ T4472] EXT4-fs (loop4): orphan cleanup on readonly fs [ 86.454269][ T4472] EXT4-fs error (device loop4): ext4_free_blocks:6210: comm syz.4.46: Freeing blocks not in datazone - block = 0, count = 4096 [ 86.514510][ T4472] EXT4-fs (loop4): Remounting filesystem read-only [ 86.528136][ T4472] EXT4-fs (loop4): 1 orphan inode deleted [ 86.534179][ T4472] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.545321][ T14] cfg80211: failed to load regulatory.db [ 86.567045][ T4472] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 16: comm syz.4.46: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 86.633339][ T4486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 86.718667][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 86.850680][ T4494] syz.4.56[4494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.850810][ T4494] syz.4.56[4494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.923920][ T4494] loop4: detected capacity change from 0 to 512 [ 86.982400][ T4494] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.040202][ T4494] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 87.059143][ T4494] EXT4-fs (loop4): 1 truncate cleaned up [ 87.064832][ T4494] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 87.315721][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 87.586578][ T27] audit: type=1800 audit(1748608798.342:70): pid=4466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.44" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 87.623157][ T4480] infiniband syz0: set active [ 87.639798][ T4480] infiniband syz0: added batadv_slave_1 [ 87.647673][ T4480] rdma_rxe: unable to create cq [ 87.661549][ T4480] infiniband syz0: Couldn't create ib_mad CQ [ 87.668097][ T4480] infiniband syz0: Couldn't open port 1 [ 87.687035][ T4480] RDS/IB: syz0: added [ 87.691643][ T4480] smc: adding ib device syz0 with port count 1 [ 87.698146][ T4480] smc: ib device syz0 port 1 has pnetid [ 87.859099][ T4524] loop3: detected capacity change from 0 to 2048 [ 87.863607][ T4526] xt_hashlimit: max too large, truncated to 1048576 [ 87.866266][ T4524] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.926589][ T4528] loop4: detected capacity change from 0 to 1024 [ 87.943557][ T4524] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.957529][ T4524] random: crng reseeded on system resumption [ 88.010132][ T27] audit: type=1326 audit(1748608798.772:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.69" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73a7b8e969 code=0x0 [ 88.050061][ T4528] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 88.198808][ T9] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 88.235624][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 88.268585][ T9] EXT4-fs (loop4): This should not happen!! Data will be lost [ 88.268585][ T9] [ 88.285047][ T9] EXT4-fs (loop4): Total free blocks count 0 [ 88.291375][ T9] EXT4-fs (loop4): Free/Dirty block details [ 88.297367][ T9] EXT4-fs (loop4): free_blocks=68451041280 [ 88.309101][ T9] EXT4-fs (loop4): dirty_blocks=16 [ 88.314467][ T9] EXT4-fs (loop4): Block reservation details [ 88.325052][ T9] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 88.335630][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 88.534720][ T4545] loop4: detected capacity change from 0 to 128 [ 88.554676][ T4545] EXT4-fs: Ignoring removed nobh option [ 88.583217][ T4545] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 88.602440][ T4545] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.640477][ T4548] program syz.2.78 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.830579][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 89.179932][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 89.186798][ T9] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 89.354557][ T4560] loop3: detected capacity change from 0 to 2048 [ 89.365361][ T4560] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.505369][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6838: comm kworker/u4:0: Failed to release dquot type 1 [ 89.540683][ T4560] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 89.589944][ T4560] random: crng reseeded on system resumption [ 89.956519][ T27] audit: type=1326 audit(1748608800.702:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4553 comm="syz.3.81" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73a7b8e969 code=0x0 [ 90.101291][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 90.183089][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 90.240316][ T4569] loop0: detected capacity change from 0 to 1024 [ 90.272062][ T4569] ======================================================= [ 90.272062][ T4569] WARNING: The mand mount option has been deprecated and [ 90.272062][ T4569] and is ignored by this kernel. Remove the mand [ 90.272062][ T4569] option from the mount to silence this warning. [ 90.272062][ T4569] ======================================================= [ 90.327553][ T4575] loop3: detected capacity change from 0 to 512 [ 90.374512][ T27] audit: type=1326 audit(1748608801.132:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4577 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f778e969 code=0x7ffc0000 [ 90.406297][ T4575] EXT4-fs (loop3): 1 orphan inode deleted [ 90.416365][ T4575] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 90.428289][ T27] audit: type=1326 audit(1748608801.162:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4577 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f778e969 code=0x7ffc0000 [ 90.435341][ T9] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 90.450484][ T27] audit: type=1326 audit(1748608801.162:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4577 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f65f778e969 code=0x7ffc0000 [ 90.467496][ T4575] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.482827][ T27] audit: type=1326 audit(1748608801.162:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4577 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f778e969 code=0x7ffc0000 [ 90.520808][ T27] audit: type=1326 audit(1748608801.162:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4577 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f778e969 code=0x7ffc0000 [ 90.548659][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6838: comm kworker/u4:0: Failed to release dquot type 1 [ 90.558648][ T4569] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 90.618101][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 90.648928][ T4564] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 90.681559][ T4564] EXT4-fs error (device loop3): ext4_release_dquot:6838: comm kworker/u4:10: Failed to release dquot type 1 [ 90.703083][ T4589] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 90.709931][ T4589] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 90.731862][ T4569] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.87: Allocating blocks 385-513 which overlap fs metadata [ 90.764511][ T4595] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 90.771072][ T4595] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 90.812605][ T4589] vhci_hcd vhci_hcd.0: Device attached [ 90.821553][ T4599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'. [ 90.834914][ T4595] vhci_hcd vhci_hcd.0: Device attached [ 90.850514][ T4599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.859177][ T4567] EXT4-fs (loop0): pa ffff888073ffc8c0: logic 16, phys. 129, len 24 [ 90.867437][ T4567] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 90.902954][ T4589] proc: Bad value for 'gid' [ 90.925774][ T4589] loop4: detected capacity change from 0 to 128 [ 91.017670][ T4599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.043293][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 91.068844][ T4595] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 91.075519][ T4595] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 91.093794][ T4606] tipc: Started in network mode [ 91.099414][ T4242] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 91.123527][ T4606] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 91.149784][ T4606] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 91.178052][ T4595] vhci_hcd vhci_hcd.0: Device attached [ 91.208086][ T4606] tipc: Enabled bearer , priority 10 [ 91.247985][ T4589] netlink: 64 bytes leftover after parsing attributes in process `+}[@'. [ 91.291329][ T4607] vhci_hcd: connection closed [ 91.291824][ T4596] vhci_hcd: connection reset by peer [ 91.302779][ T4564] vhci_hcd: stop threads [ 91.307689][ T4590] vhci_hcd: connection closed [ 91.308690][ T4564] vhci_hcd: release socket [ 91.348608][ T4564] vhci_hcd: disconnect device [ 91.495614][ T4614] loop0: detected capacity change from 0 to 2048 [ 91.506405][ T4614] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.705558][ T4614] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 91.738665][ T4614] random: crng reseeded on system resumption [ 92.146334][ T27] audit: type=1326 audit(1748608802.902:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.0.98" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ccdd8e969 code=0x0 [ 92.171964][ T4564] vhci_hcd: stop threads [ 92.195329][ T4564] vhci_hcd: release socket [ 92.221506][ T4564] vhci_hcd: disconnect device [ 92.253069][ T4564] vhci_hcd: stop threads [ 92.368567][ T126] tipc: Node number set to 1 [ 92.375630][ T4564] vhci_hcd: release socket [ 92.375823][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 92.380737][ T4564] vhci_hcd: disconnect device [ 92.496210][ T4625] loop3: detected capacity change from 0 to 1024 [ 92.584130][ T4632] Zero length message leads to an empty skb [ 92.586042][ T4629] loop0: detected capacity change from 0 to 512 [ 92.597447][ T4625] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 92.726018][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 92.735487][ T4629] EXT4-fs (loop0): 1 orphan inode deleted [ 92.743785][ T4629] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 92.753737][ T4629] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.916801][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 92.923945][ T27] audit: type=1326 audit(1748608803.682:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4650 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a7b8e969 code=0x7ffc0000 [ 92.959269][ T4360] EXT4-fs error (device loop0): ext4_release_dquot:6838: comm kworker/u4:7: Failed to release dquot type 1 [ 93.396535][ T4664] loop2: detected capacity change from 0 to 2048 [ 93.407803][ T4664] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.487371][ T4663] netlink: 48 bytes leftover after parsing attributes in process `syz.4.117'. [ 93.960121][ T4664] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 93.978640][ T4661] random: crng reseeded on system resumption [ 94.439996][ T4684] hub 8-0:1.0: USB hub found [ 94.448049][ T4684] hub 8-0:1.0: 1 port detected [ 95.412511][ T4689] lo speed is unknown, defaulting to 1000 [ 95.668572][ T4690] capability: warning: `syz.0.123' uses deprecated v2 capabilities in a way that may be insecure [ 96.037402][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 96.269161][ T4693] loop4: detected capacity change from 0 to 512 [ 96.297865][ T4242] vhci_hcd: vhci_device speed not set [ 96.333704][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 96.333718][ T27] audit: type=1326 audit(1748608807.092:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4668 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a638e969 code=0x7ffc0000 [ 96.380162][ T27] audit: type=1326 audit(1748608807.132:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4668 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70a638e969 code=0x7ffc0000 [ 96.402879][ T27] audit: type=1326 audit(1748608807.132:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4668 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a638e969 code=0x7ffc0000 [ 96.425454][ T27] audit: type=1326 audit(1748608807.132:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4668 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a638e969 code=0x7ffc0000 [ 96.430096][ T4693] EXT4-fs (loop4): 1 orphan inode deleted [ 96.447852][ T27] audit: type=1326 audit(1748608807.132:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4668 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70a638e969 code=0x7ffc0000 [ 96.447892][ T27] audit: type=1326 audit(1748608807.132:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4668 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a638e969 code=0x7ffc0000 [ 96.447928][ T27] audit: type=1326 audit(1748608807.132:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4668 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70a638e969 code=0x7ffc0000 [ 96.447962][ T27] audit: type=1326 audit(1748608807.132:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4668 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a638e969 code=0x7ffc0000 [ 96.447996][ T27] audit: type=1326 audit(1748608807.142:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4668 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70a638e969 code=0x7ffc0000 [ 96.483062][ T4699] loop1: detected capacity change from 0 to 128 [ 96.499232][ T27] audit: type=1326 audit(1748608807.142:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4668 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a638e969 code=0x7ffc0000 [ 96.531760][ T11] EXT4-fs error (device loop4): ext4_release_dquot:6838: comm kworker/u4:1: Failed to release dquot type 1 [ 96.547849][ T4693] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 96.708866][ T4693] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.974208][ T4669] syz.1.119: attempt to access beyond end of device [ 96.974208][ T4669] loop1: rw=2049, sector=145, nr_sectors = 800 limit=128 [ 97.019474][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 97.078107][ T4561] EXT4-fs error (device loop4): ext4_release_dquot:6838: comm kworker/u4:9: Failed to release dquot type 1 [ 97.734437][ T4723] loop3: detected capacity change from 0 to 512 [ 98.526403][ T4724] loop2: detected capacity change from 0 to 2048 [ 98.531501][ T4724] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.575504][ T4720] sched: RT throttling activated [ 98.792818][ T4723] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 98.809198][ T4723] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.834371][ T4723] EXT4-fs warning (device loop3): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.849241][ T4723] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 98.873936][ T4723] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.132: bg 0: block 40: padding at end of block bitmap is not set [ 98.897467][ T4723] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 98.907406][ T4723] EXT4-fs (loop3): 1 truncate cleaned up [ 98.913736][ T4723] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 98.925716][ T4724] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 98.952334][ T4718] EXT4-fs error (device loop3): ext4_get_link:104: inode #16: comm syz.3.132: bad symlink. [ 98.962644][ T4722] random: crng reseeded on system resumption [ 99.202607][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 99.498543][ T4300] usb usb42-port1: attempt power cycle [ 99.573109][ T4743] loop0: detected capacity change from 0 to 2048 [ 99.690073][ T4747] loop3: detected capacity change from 0 to 128 [ 99.837982][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 99.919240][ T4755] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 99.919240][ T4755] program syz.1.144 not setting count and/or reply_len properly [ 100.043896][ T4754] syz.1.144 (4754) used greatest stack depth: 17216 bytes left [ 100.158711][ T4300] usb usb42-port1: unable to enumerate USB device [ 100.615238][ T4781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'. [ 100.834034][ T4783] loop3: detected capacity change from 0 to 2048 [ 100.843898][ T4783] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.046054][ T4783] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 101.070579][ T4783] random: crng reseeded on system resumption [ 102.017186][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.035635][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.036460][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 102.045926][ T4805] device bridge_slave_0 left promiscuous mode [ 102.056707][ T4805] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.106372][ T4805] device bridge_slave_1 left promiscuous mode [ 102.137987][ T4805] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.152660][ T4805] bond0: (slave bond_slave_0): Releasing backup interface [ 102.184657][ T4805] bond0: (slave bond_slave_1): Releasing backup interface [ 102.282692][ T4805] team0: Port device team_slave_0 removed [ 102.326831][ T4805] team0: Port device team_slave_1 removed [ 102.333661][ T4805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.341137][ T4805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.351640][ T4805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.359642][ T4805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.386540][ T4813] netdevsim netdevsim0: Direct firmware load for @ failed with error -2 [ 102.399137][ T4813] netdevsim netdevsim0: Falling back to sysfs fallback for: @ [ 103.556037][ T4821] netlink: 236 bytes leftover after parsing attributes in process `syz.3.171'. [ 104.699859][ T4839] loop3: detected capacity change from 0 to 2048 [ 104.710226][ T4839] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.135849][ T4839] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 105.161840][ T4839] random: crng reseeded on system resumption [ 105.418857][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 105.418875][ T27] audit: type=1326 audit(1748608816.122:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4828 comm="syz.3.177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73a7b8e969 code=0x0 [ 105.659432][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 105.756709][ T4856] loop0: detected capacity change from 0 to 512 [ 105.847175][ T4856] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #17: comm syz.0.182: iget: bogus i_mode (0) [ 105.889341][ T4856] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.182: couldn't read orphan inode 17 (err -117) [ 105.916646][ T4856] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 106.000718][ T4864] loop4: detected capacity change from 0 to 512 [ 106.018026][ T4866] netlink: 288 bytes leftover after parsing attributes in process `syz.3.188'. [ 106.031029][ T4856] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.182: bg 0: block 7: invalid block bitmap [ 106.074276][ T4864] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 106.086832][ T4864] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.123765][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 106.124074][ T4872] loop1: detected capacity change from 0 to 256 [ 106.203447][ T4864] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 106.253955][ T4872] FAT-fs (loop1): Directory bread(block 64) failed [ 106.299162][ T4864] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 106.313649][ T4872] FAT-fs (loop1): Directory bread(block 65) failed [ 106.335618][ T4864] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.187: Failed to acquire dquot type 0 [ 106.353524][ T4872] FAT-fs (loop1): Directory bread(block 66) failed [ 106.365863][ T4872] FAT-fs (loop1): Directory bread(block 67) failed [ 106.383122][ T4872] FAT-fs (loop1): Directory bread(block 68) failed [ 106.390762][ T4872] FAT-fs (loop1): Directory bread(block 69) failed [ 106.397391][ T4872] FAT-fs (loop1): Directory bread(block 70) failed [ 106.404201][ T4872] FAT-fs (loop1): Directory bread(block 71) failed [ 106.411240][ T4872] FAT-fs (loop1): Directory bread(block 72) failed [ 106.418571][ T4872] FAT-fs (loop1): Directory bread(block 73) failed [ 106.564670][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 106.646667][ T4886] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 106.714862][ T4889] loop3: detected capacity change from 0 to 2048 [ 106.722128][ T4889] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.753619][ T4889] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 106.765274][ T4889] random: crng reseeded on system resumption [ 106.877894][ T27] audit: type=1326 audit(1748608817.582:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4882 comm="syz.3.195" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73a7b8e969 code=0x0 [ 106.953865][ T4899] netlink: 76 bytes leftover after parsing attributes in process `syz.2.201'. [ 107.032241][ T4902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 107.066132][ T27] audit: type=1326 audit(1748608817.822:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4904 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441a98e969 code=0x7ffc0000 [ 107.106802][ T27] audit: type=1326 audit(1748608817.822:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4904 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441a98e969 code=0x7ffc0000 [ 107.108986][ T4905] loop2: detected capacity change from 0 to 2048 [ 107.143830][ T27] audit: type=1326 audit(1748608817.822:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4904 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f441a98e969 code=0x7ffc0000 [ 107.186936][ T27] audit: type=1326 audit(1748608817.822:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4904 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441a98e969 code=0x7ffc0000 [ 107.246461][ T4905] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 107.254261][ T27] audit: type=1326 audit(1748608817.822:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4904 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441a98e969 code=0x7ffc0000 [ 107.368297][ T27] audit: type=1326 audit(1748608817.822:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4904 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f441a98e969 code=0x7ffc0000 [ 107.431154][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 107.635806][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 107.834400][ T4314] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.014019][ T4314] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.039159][ T4301] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.131989][ T4314] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.234169][ T4301] usb 3-1: device descriptor read/64, error -71 [ 108.255664][ T4314] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.522297][ T4937] loop1: detected capacity change from 0 to 1024 [ 108.537605][ T4937] EXT4-fs: Ignoring removed bh option [ 108.543276][ T4301] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.567889][ T4937] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.612024][ T4937] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 108.683729][ T4943] device syzkaller1 entered promiscuous mode [ 108.703118][ T4301] usb 3-1: device descriptor read/64, error -71 [ 108.848541][ T4301] usb usb3-port1: attempt power cycle [ 108.888096][ T4274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.896996][ T4274] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.904939][ T4274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.918707][ T4274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.943111][ T4271] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 108.952498][ T4271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.006734][ T4949] loop3: detected capacity change from 0 to 2048 [ 109.013920][ T4949] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.038526][ T4947] lo speed is unknown, defaulting to 1000 [ 109.048846][ T4949] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 109.066130][ T4949] random: crng reseeded on system resumption [ 109.288138][ T4301] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.353185][ T4301] usb 3-1: device descriptor read/8, error -71 [ 109.428226][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 109.641204][ T4301] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.667412][ T4947] chnl_net:caif_netlink_parms(): no params data found [ 109.715402][ T4301] usb 3-1: device descriptor read/8, error -71 [ 109.943768][ T4301] usb usb3-port1: unable to enumerate USB device [ 109.963289][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 110.144858][ T4981] loop1: detected capacity change from 0 to 512 [ 110.175256][ T4947] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.186765][ T4947] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.197820][ T4947] device bridge_slave_0 entered promiscuous mode [ 110.226868][ T4981] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 110.260167][ T4947] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.302992][ T4947] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.317278][ T4981] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.342798][ T4947] device bridge_slave_1 entered promiscuous mode [ 110.444453][ T27] kauditd_printk_skb: 35 callbacks suppressed [ 110.444468][ T27] audit: type=1326 audit(1748608821.202:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4980 comm="syz.1.233" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70a638e969 code=0x0 [ 110.497071][ T4986] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 110.671933][ T4947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.701488][ T4947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.758473][ T27] audit: type=1326 audit(1748608821.522:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4991 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f778e969 code=0x7ffc0000 [ 110.816728][ T27] audit: type=1326 audit(1748608821.522:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4991 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f778e969 code=0x7ffc0000 [ 110.882723][ T27] audit: type=1326 audit(1748608821.542:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4991 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f65f778e969 code=0x7ffc0000 [ 110.911545][ T4947] team0: Port device team_slave_0 added [ 110.968219][ T27] audit: type=1326 audit(1748608821.542:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4991 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f778e969 code=0x7ffc0000 [ 110.976198][ T4947] team0: Port device team_slave_1 added [ 111.018433][ T4273] Bluetooth: hci2: command 0x0409 tx timeout [ 111.040372][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 111.087873][ T27] audit: type=1326 audit(1748608821.542:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4991 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65f778e969 code=0x7ffc0000 [ 111.193280][ C0] hrtimer: interrupt took 122149119 ns [ 120.061686][ T4273] Bluetooth: hci2: command 0x041b tx timeout [ 225.117726][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 225.124960][ C1] rcu: 0-...!: (1 GPs behind) idle=dbfc/1/0x4000000000000000 softirq=11315/11316 fqs=1 [ 225.136131][ C1] (detected by 1, t=10502 jiffies, g=12009, q=161 ncpus=2) [ 225.143567][ C1] Sending NMI from CPU 1 to CPUs 0: [ 225.148898][ C0] NMI backtrace for cpu 0 [ 225.148931][ C0] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted 6.1.140-syzkaller #0 [ 225.148948][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.148961][ C0] Workqueue: bat_events batadv_bla_periodic_work [ 225.149008][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x13/0x60 [ 225.149029][ C0] Code: 48 8b 3d 50 ab 7d 0c 48 89 de 5b e9 07 ad 50 00 00 00 cc cc 00 00 cc 48 8b 04 24 65 48 8b 0d 24 98 81 7e 65 8b 15 25 98 81 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 [ 225.149047][ C0] RSP: 0018:ffffc90000007d18 EFLAGS: 00000046 [ 225.149061][ C0] RAX: ffffffff8170efc5 RBX: 00000000fffffffb RCX: ffff88813fe83b80 [ 225.149073][ C0] RDX: 0000000000010201 RSI: 0000000000000004 RDI: 00000000ffffffff [ 225.149084][ C0] RBP: ffffc90000007e98 R08: dffffc0000000000 R09: ffffed10171c54b1 [ 225.149097][ C0] R10: ffffed10171c54b1 R11: 1ffff110171c54b0 R12: ffff88807bc78340 [ 225.149109][ C0] R13: dffffc0000000000 R14: ffff88807bc78368 R15: 0000000000000002 [ 225.149121][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 225.149135][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.149147][ C0] CR2: 00005555584a6808 CR3: 000000005bd26000 CR4: 00000000003506f0 [ 225.149162][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 225.149171][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 225.149182][ C0] Call Trace: [ 225.149188][ C0] [ 225.149194][ C0] __hrtimer_run_queues+0x425/0xc80 [ 225.149223][ C0] ? taprio_free_sched_cb+0x190/0x190 [ 225.149251][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 225.149268][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 225.149293][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 225.149321][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 225.149348][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 225.149375][ C0] [ 225.149380][ C0] [ 225.149385][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 225.149403][ C0] RIP: 0010:lock_release+0xcd/0x910 [ 225.149425][ C0] Code: 69 16 9b 0c 0f 83 22 05 00 00 41 89 de c1 eb 06 48 8d 3c dd 28 80 fe 8d be 08 00 00 00 e8 bb e2 6e 00 4c 0f a3 35 3b 14 9b 0c <73> 0d e8 cc 99 07 00 84 c0 0f 84 29 05 00 00 48 c7 c0 e4 b4 fe 8d [ 225.149438][ C0] RSP: 0018:ffffc90000107960 EFLAGS: 00000257 [ 225.149451][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81636be5 [ 225.149462][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8dfe8028 [ 225.149473][ C0] RBP: ffffc90000107a68 R08: dffffc0000000000 R09: fffffbfff1bfd006 [ 225.149485][ C0] R10: fffffbfff1bfd006 R11: 1ffffffff1bfd005 R12: fffffffffffffff8 [ 225.149498][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000020f38 [ 225.149514][ C0] ? lock_release+0xc5/0x910 [ 225.149540][ C0] ? batadv_bla_purge_backbone_gw+0x450/0x4f0 [ 225.149564][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 225.149589][ C0] ? __lock_acquire+0x7c50/0x7c50 [ 225.149615][ C0] ? __rwlock_init+0x140/0x140 [ 225.149639][ C0] ? __local_bh_enable_ip+0x12a/0x1b0 [ 225.149671][ C0] ? _local_bh_enable+0xa0/0xa0 [ 225.149695][ C0] ? batadv_primary_if_get_selected+0x77/0x400 [ 225.149721][ C0] ? batadv_bla_purge_backbone_gw+0x450/0x4f0 [ 225.149745][ C0] _raw_spin_unlock_bh+0x17/0x30 [ 225.149769][ C0] batadv_bla_purge_backbone_gw+0x450/0x4f0 [ 225.149799][ C0] batadv_bla_periodic_work+0xbc/0xb60 [ 225.149827][ C0] ? read_lock_is_recursive+0x10/0x10 [ 225.149848][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 225.149872][ C0] ? batadv_bla_init+0x6f0/0x6f0 [ 225.149895][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 225.149922][ C0] ? process_one_work+0x7a1/0x1160 [ 225.149940][ C0] process_one_work+0x898/0x1160 [ 225.149965][ C0] ? worker_detach_from_pool+0x240/0x240 [ 225.149985][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 225.150008][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 225.150031][ C0] ? kthread_data+0x4b/0xc0 [ 225.150056][ C0] worker_thread+0xaa2/0x1250 [ 225.150088][ C0] kthread+0x29d/0x330 [ 225.150111][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 225.150128][ C0] ? kthread_blkcg+0xd0/0xd0 [ 225.150152][ C0] ret_from_fork+0x1f/0x30 [ 225.150182][ C0] [ 225.150893][ C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g12009 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 225.596189][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 225.606375][ C1] rcu: RCU grace-period kthread stack dump: [ 225.612664][ C1] task:rcu_preempt state:R running task stack:28192 pid:16 ppid:2 flags:0x00004000 [ 225.623688][ C1] Call Trace: [ 225.627008][ C1] [ 225.630141][ C1] __schedule+0x10e9/0x40d0 [ 225.634776][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 225.640019][ C1] ? _raw_spin_unlock+0x40/0x40 [ 225.644996][ C1] ? release_firmware_map_entry+0x18a/0x18a [ 225.651016][ C1] schedule+0xb9/0x180 [ 225.655197][ C1] schedule_timeout+0x15c/0x280 [ 225.660084][ C1] ? console_conditional_schedule+0x40/0x40 [ 225.666185][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 225.672116][ C1] ? update_process_times+0x1b0/0x1b0 [ 225.677635][ C1] ? prepare_to_swait_event+0x335/0x350 [ 225.683326][ C1] rcu_gp_fqs_loop+0x2f2/0x1310 [ 225.688315][ C1] ? dump_blkd_tasks+0x810/0x810 [ 225.693493][ C1] ? rcu_gp_init+0x14b0/0x14b0 [ 225.698388][ C1] ? rcu_gp_cleanup+0xb4c/0xca0 [ 225.703331][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 225.708575][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 225.714022][ C1] rcu_gp_kthread+0x95/0x380 [ 225.718803][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 225.724356][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 225.731038][ C1] ? __kthread_parkme+0x162/0x1c0 [ 225.736506][ C1] kthread+0x29d/0x330 [ 225.740732][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 225.745988][ C1] ? kthread_blkcg+0xd0/0xd0 [ 225.750640][ C1] ret_from_fork+0x1f/0x30 [ 225.755137][ C1] [ 225.758230][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 225.764819][ C1] CPU: 1 PID: 1118 Comm: kworker/u4:5 Not tainted 6.1.140-syzkaller #0 [ 225.773177][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.783380][ C1] Workqueue: events_unbound toggle_allocation_gate [ 225.790192][ C1] RIP: 0010:smp_call_function_many_cond+0xe7b/0x1270 [ 225.797364][ C1] Code: 00 00 00 41 8b 1f 89 de 83 e6 01 31 ff e8 6d e9 0a 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 f9 e5 0a 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 de e5 0a [ 225.818013][ C1] RSP: 0018:ffffc90004bcf800 EFLAGS: 00000293 [ 225.824778][ C1] RAX: ffffffff8175f132 RBX: dffffc0000000000 RCX: ffff888025fc9dc0 [ 225.832960][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 225.842011][ C1] RBP: ffffc90004bcf960 R08: dffffc0000000000 R09: fffffbfff2117049 [ 225.850118][ C1] R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: 1ffff110171c85a5 [ 225.858385][ C1] R13: ffff8880b8f3bb00 R14: 0000000000000000 R15: ffff8880b8e42d28 [ 225.866923][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 225.876157][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.882875][ C1] CR2: 00007ffdcccaff8c CR3: 000000000c68e000 CR4: 00000000003506e0 [ 225.890886][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 225.899770][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 225.908471][ C1] Call Trace: [ 225.911858][ C1] [ 225.914905][ C1] ? text_poke_sync+0x20/0x20 [ 225.919629][ C1] ? smp_call_function_many+0x30/0x30 [ 225.925308][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4e0 [ 225.931275][ C1] ? text_poke+0x90/0x90 [ 225.935994][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 225.942262][ C1] ? text_poke_loc_init+0xd6/0x570 [ 225.947406][ C1] ? text_poke_sync+0x20/0x20 [ 225.952361][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 225.958287][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4e0 [ 225.963804][ C1] text_poke_bp_batch+0x2b0/0x7d0 [ 225.968891][ C1] ? arch_jump_label_transform_apply+0xe/0x20 [ 225.974985][ C1] ? text_poke_loc_init+0x570/0x570 [ 225.980688][ C1] ? arch_jump_label_transform_queue+0x76/0xd0 [ 225.987026][ C1] text_poke_finish+0x16/0x30 [ 225.991767][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 225.997945][ C1] static_key_enable_cpuslocked+0x11f/0x240 [ 226.005696][ C1] static_key_enable+0x16/0x20 [ 226.010724][ C1] toggle_allocation_gate+0xb4/0x430 [ 226.016165][ C1] ? show_object+0xa0/0xa0 [ 226.020630][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 226.027008][ C1] ? read_lock_is_recursive+0x10/0x10 [ 226.032439][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 226.038373][ C1] ? _raw_spin_unlock+0x40/0x40 [ 226.043257][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 226.048660][ C1] ? process_one_work+0x7a1/0x1160 [ 226.053992][ C1] process_one_work+0x898/0x1160 [ 226.060034][ C1] ? worker_detach_from_pool+0x240/0x240 [ 226.065719][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 226.071043][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 226.076747][ C1] ? kthread_data+0x4b/0xc0 [ 226.081472][ C1] worker_thread+0xaa2/0x1250 [ 226.086284][ C1] kthread+0x29d/0x330 [ 226.090394][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 226.095631][ C1] ? kthread_blkcg+0xd0/0xd0 [ 226.100349][ C1] ret_from_fork+0x1f/0x30 [ 226.105601][ C1]