last executing test programs: 11.602304384s ago: executing program 4 (id=329): write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffe0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') socket$key(0xf, 0x3, 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001004000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x4, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nomblk_io_submit}, {@nombcache}]}, 0x1, 0x4dd, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x0) 10.824080001s ago: executing program 3 (id=339): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 10.690706467s ago: executing program 2 (id=340): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$qrtrtun(r0, 0x0, 0x0) 9.196268987s ago: executing program 1 (id=341): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xffffffff, 0x5, 0xb7a4, 0xd47, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x204, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x0, 0x9, 0x4, 0x0, 0xfff, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x6602, 0x10000, 0x405, 0x8, 0x240000, 0x91ba, 0x7, 0xb, 0x10000009, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x200, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x1, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0x40fd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x3, 0x10, 0x7, 0x3, 0x0, 0xfffffffe, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x2, 0xebe, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10020, 0x1, 0x100009, 0x9, 0xff, 0xfff, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x5, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x80008, 0x6, 0x400, 0x40, 0x0, 0x0, 0x1000, 0x546c, 0x981, 0x5aa, 0x10, 0x7, 0x2, 0x7, 0xc4a, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x2003, 0x942, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x10001, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x1, 0x1, 0x7, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x1ff, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x3, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x5, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0xfffffffd, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0xf, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x4f, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x4, 0x818a, 0x10, 0x3, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x7, 0xfffffffd, 0x8000004, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x6, 0xb6, 0x101, 0x401, 0x0, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x4, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x5, 0x1, 0x8000000, 0xe, 0xf2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x3, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xdd, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x202, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x6, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x7, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x7, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8b6, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x202, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x7, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0x200, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x7496, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0xb24, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x1ff, 0x4, 0x8, 0x4000ff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x200, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x9, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x2, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0x4, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x6, 0x1, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x800005, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x100, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x2d8, 0x3ff, 0x0, 0x1, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39f, 0x71, 0xfff, 0x7, 0x8]}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 8.969612349s ago: executing program 3 (id=343): semctl$SEM_STAT(0x0, 0x1, 0x12, &(0x7f0000000040)=""/8) 8.92594069s ago: executing program 2 (id=344): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 7.617085342s ago: executing program 1 (id=345): setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) mlock2(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1) 7.511115867s ago: executing program 4 (id=346): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffe0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x4, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nomblk_io_submit}, {@nombcache}]}, 0x1, 0x4dd, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x0) 7.43823708s ago: executing program 3 (id=347): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000008050000010b"], 0x9) 7.43715996s ago: executing program 0 (id=348): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") creat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x140) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x0) 7.328075375s ago: executing program 2 (id=349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000140)) 7.297386017s ago: executing program 1 (id=350): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x17e}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81c", 0x8b}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002280)="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", 0x547}], 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) 6.972428752s ago: executing program 3 (id=351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x58, r1, 0x1, 0xffbfffff, 0x400000, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e25}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x58}, 0x1, 0x620b}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) lseek(r5, 0x1, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, 0x0, 0x20004056) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7056}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x98, &(0x7f0000000480)=""/152, 0x0, 0x0, '\x00', r3}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000001340)=@framed, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.924507564s ago: executing program 2 (id=352): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fadvise64(0xffffffffffffffff, 0x1, 0xfffffffffffffff8, 0x5) 6.880056887s ago: executing program 1 (id=353): semtimedop(0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='attr\x00') getdents64(r1, &(0x7f0000000380)=""/151, 0x97) 4.297581708s ago: executing program 4 (id=354): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0xc0104d03, &(0x7f0000000140)) 4.060251439s ago: executing program 0 (id=355): syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) signalfd(r2, 0x0, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000b80)='.pending_reads\x00', 0x1090c1, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000cc0)) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r4, 0x100000000000011, 0x2000, 0x2f93) 3.936002735s ago: executing program 2 (id=356): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdd, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3.904476056s ago: executing program 3 (id=357): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffe0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') socket$key(0xf, 0x3, 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001004000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x4, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nomblk_io_submit}, {@nombcache}]}, 0x1, 0x4dd, &(0x7f0000001040)="$eJzs3U1vG1sZAODXk8/m5t6kUIkPAS2lpaCqduK2UdUFKhsQqiohKlYs2pC4URQ7jmKnNCGL9D8gUYkV/AQWSCyQumLPDnYIqSyQCkSgBomF0diTNkltE0pqV/HzSKOZM+OZ95y6c87kdeITwMC6EBE7ETEaEQ8jYirbn8uWuNNa0te92t1e2NvdXsjFaNz/W655PN0XB85JfZRdczwivvftiB/m3o5b29xamS+XS+tZuVCvrBVqm1t/Wq7ML5WWSqvF4tzs3Myt6zeLJ9bW85VfvvzW8t3v/+bXX3zxu52v/zit1mR27GA7Dpo+3qWHOh1oNX3kdZzUcETc/V8q/gEbytoz2u+K8E6SiPhURFxM7/9Gv2sDAPRCozEVjamDZQDgtEuaObBcks9yAZORJPl8K4d3LiaScrVWv/qourG62MqVTcdI8mi5XJrJcoXTMZJLy7NZrmy/XDxSvh4RZyPiJ2NnmuX8QrW82M8HHwAYYB8dGf//OdYa/wGAU2683xUAAHrO+A8Ag8f4DwCDx/gPAIPH+A8Ag8f4DwCDx/gPAAPlu/fupUtjL/v+68XHmxsr1cfXFku1lXxlYyG/UF1fyy9Vq0vN7+yp/LfrlavVtdkbsfGkUC/V6oXa5taDSnVjtf6g+b3eD0ojPWkVANDN2fPP/5CLiJ3bZ5pLHJjLwVgNp1vS7woAfdNx4irg1BvudwWAvvEzPtBmit7XRrr9itCzrqcBH7Arn5P/h0El/w+DS/4fBpf8PwyuRiNnzn8AGDBy/EC3z//j3T7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFNvsrnkknw2F/hkJEk+H/FxREzHSO7Rcrk0ExGfRMTvx0bG0vJseuJov2sOALy75C+5bP6vK1OXJo8eHc39ayyy4f5HP7v/0yfz9fr6bLr/72NnstfUn2X7i10DmWoQAPpkf5zeH8f3vdrdXpjc3V5I172sz8tvtiYXTePuZUvryHAMN9fjzQeHiX/ksnJL+rwydALxd55GxGdb8V8dan+umRuZzmY+PRo/jf1xT+Mnh+InzWOtdfpv8ekTqAsMmudp/3On3f2XxIXmuv39P97sof5/+/3f3lv9X/K6/xvq0P9dOG6MG7/9TsdjTyM+P9wufi7rXscvf6ND/EvHjP/HL3zp4uEz32j8POJKtI1/6IxCvbJWqG1uXVuuzC+VlkqrxeLc7NzMres3i4Vmjrqwn6l+219vX/2kW/snOsRvvfPjzfjt2n/5mO3/xb8f/uDLXeJ/7Svt3/9zXeKnY+JXjxl/fuJXHafvTuMvtm9/dk7n9l89ZvwXf95aPOZLAYAeqG1urcyXy6V1Gz3bSJ/dPoBq2OjbRvo/4CSu85n3WNV+90zA+/bmpu93TQAAAAAAAAAAAAAAgE568QdP/W4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9d/AgAA//+9GtUM") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x0) 3.888461817s ago: executing program 1 (id=358): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000100)={[{@errors_remount}, {@dioread_lock}, {@i_version}, {@stripe={'stripe', 0x3d, 0xf0}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, 0x0) 3.736033984s ago: executing program 4 (id=359): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 2.280706683s ago: executing program 0 (id=360): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r0, &(0x7f0000002940)=[{&(0x7f0000000140)='<', 0x1}], 0x1, 0x8, 0x3) 536.769325ms ago: executing program 0 (id=361): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {0xa4}, {0x6, 0x0, 0x0, 0x7fff0000}]}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) 434.040689ms ago: executing program 3 (id=362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 327.953585ms ago: executing program 2 (id=363): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$eJzs3ctvVNUfAPDvvZ0+aH8/W4hB2UgTYyBRWlrAEGMixC0h+Ni5qrQQpFBCa7RIQklwozFuXJi4ciH+F0ri1oVbF25cGEPSGMNCDMqYO71TZjqddvqYmT4+n+S299G553vbfHvOnDnn3gB2rcHsSxpxICKuJRH9FccKkR8cXPi5B3/ePJ8tSRSLb/2RxM1byVzluZL8e1/+4n/7I/kpjdjXUVvu9OyNy2OTkxPX8+3hmSvXhqdnbxy5dGXs4sTFiaujL4+ePHH8xMmRoxu6vkLF+pk7733Q/8nZd7756lEy8u0vZ5M4FY/z2LLrWvra7g2VnP3OBqO44OGTvWnp68kNnnur+Ku/+necSZbuYMu6EBH7I6IzIp6J/uio+Gv2x8dvtDU4oKmKSZTrKGDXSVbP/87aXT3NCQZooXI7oPzefrn3wbXSJrdKgFaYP73QSbaQ+50RUc7/wkLfYPSU+gZ6HyRV/TxJRGysZ25BVsaPP5y9ky1Rpx8OaI652+Ve7qX1f1LKzYHoKW31Pkir8j+tWLL9b66z/MEl2/IfWmfudkQ8m9f/XbHu/H93neXLfwAAAAAAANg8905HxEvLjf9LF8f/dC0z/qcvIk5tQvmrf/6X3s9Xkk0oDqgwfzri1Zrxv/9Ujg4e6Mg/5/9/aTxAZ3rh0uTE0Yh4KiIOR2d3tj1SfdqqAcJHPtv3Zb3yK8f/ZUtWfnksYH6q+4UlE3HHx2bGNufqYXebvx3xsDT+92C+p3r8T1b/JzX1/6evZwl+rcEy9r1w91zVjt+e/HtYPf+BZil+HXFo2fk/T5rbycr35xgutQeGy62CWs999Pl39cqX/9A+Wf3fu3L+dyeV9+uZXtv5uyLi2GyhWO/4etv/XcnbHeXzZz4cm5m5PhLRlZyp3T+6tphhpyrnQzlfsvw//PzK/X+L7f+KPNwTEXMNlrn/cd+v9Y6p/6F9svwfX7n+H6iu/9e60hOjdwe+z28xVuNcQ/X/8VKdfjjfo/8PKtXej6PRBG1LuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwzaUR8b9I0qHF9TQdGoroi4inozednJqeefHC1PtXx7Nj1c//71/YTsrP/x+o2B5dsn0sIvZGxBcde0rbQ+enJsfbffEAAAAAAAAAAAAAAAAAAACwRfSV5vwXu5fO/8/83tHu6ICmK+Tf5TvsPoV1v7LYvamBAC23/vwHtrvG87+zqXEArVc//x8+Kpa0NByghbT/YfdaZ/77uAB2APU/7FYN9un1NDsOoB0arv/nmxsHAAAAAACwKfYevPdzEhFzr+wpLZmu/JjB/rCzpe0OAGgbY3hh9ypMtTsCoF28xweSxbW/l53sX3/0f9KcgAAAAAAAAAAAAACAGocOrH3+/5xJg7AjpBErPMLb2H7YyVaoypdLfjU/7CD1H/3RSN2faCHANmb+P7BaPb7x+f/FW2sKCAAAAAAAAAAAAACo1XPj8tjk5MT16dntt/La1ghjbStzY1sijE1debzaz5QfM7+2M3dGxNa4wFavlG/B0cYw2vg/CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqPJfAAAA//8MwS/R") r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x500, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 267.030078ms ago: executing program 1 (id=364): r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r2, 0xfffffffd}, &(0x7f00000000c0)=0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280), 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000080)={r5, 0xff0d}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r5, 0x2, 0x8}, &(0x7f00000000c0)=0xc) 260.221158ms ago: executing program 0 (id=365): write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x19, 0x1, {0x3c8, {0x1, 0x4, 0x5}, 0x91, 0x0, 0x0, 0x7fffffffffffffff, 0x8001, 0x2, 0xbf43, 0x20000008000009, 0x3, 0x1000, 0x0, 0x1, 0x4, 0x100000004, 0xb, 0x8000000000404, 0x8004, 0xe}}, 0xa0) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5393, &(0x7f00000001c0)) 0s ago: executing program 0 (id=366): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.6001405c935d7912', 0x14) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='1\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n', 0xc) close(r4) nanosleep(&(0x7f00000006c0)={0x1}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000700), 0x1, 0x2) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000740)={0x53, 0xffffffffffffffff, 0x10, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000780)="8f000000000000000000000000010000", 0x0, 0x3e8, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.64' (ED25519) to the list of known hosts. [ 67.569612][ T4260] cgroup: Unknown subsys name 'net' [ 67.704245][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.072051][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.446025][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.454390][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.456398][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.471469][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.478635][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.486417][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.495158][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.502400][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.510285][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.517625][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.525511][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.533083][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.540524][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.547888][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.555192][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.568916][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.577191][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.587075][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.594831][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.624162][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.642658][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.650626][ T4278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.661368][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.669500][ T4278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.675019][ T4290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.678103][ T4278] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.691131][ T4278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.710771][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.718201][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.725447][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.024596][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 71.064458][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 71.081882][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.088334][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.217026][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 71.227177][ T4285] chnl_net:caif_netlink_parms(): no params data found [ 71.260008][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.267106][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.275743][ T4273] device bridge_slave_0 entered promiscuous mode [ 71.284034][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.293566][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.301511][ T4284] device bridge_slave_0 entered promiscuous mode [ 71.309316][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 71.323280][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.330459][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.338174][ T4284] device bridge_slave_1 entered promiscuous mode [ 71.364169][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.373372][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.380896][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.388806][ T4273] device bridge_slave_1 entered promiscuous mode [ 71.422130][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.479072][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.508476][ T4284] team0: Port device team_slave_0 added [ 71.520827][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.527923][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.536268][ T4274] device bridge_slave_0 entered promiscuous mode [ 71.550369][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.557462][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.566091][ T4285] device bridge_slave_0 entered promiscuous mode [ 71.576601][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.587172][ T4284] team0: Port device team_slave_1 added [ 71.608335][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.615488][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.642279][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.653928][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.661211][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.669329][ T4274] device bridge_slave_1 entered promiscuous mode [ 71.676737][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.684499][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.694790][ T4285] device bridge_slave_1 entered promiscuous mode [ 71.726076][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.733204][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.759201][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.781809][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.789218][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.796969][ T4279] device bridge_slave_0 entered promiscuous mode [ 71.822885][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.832337][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.840154][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.848118][ T4279] device bridge_slave_1 entered promiscuous mode [ 71.856787][ T4273] team0: Port device team_slave_0 added [ 71.864474][ T4273] team0: Port device team_slave_1 added [ 71.878486][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.889586][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.905990][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.923553][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.930666][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.956840][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.004003][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.011122][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.037253][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.054923][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.071851][ T4285] team0: Port device team_slave_0 added [ 72.091394][ T4274] team0: Port device team_slave_0 added [ 72.101316][ T4284] device hsr_slave_0 entered promiscuous mode [ 72.109185][ T4284] device hsr_slave_1 entered promiscuous mode [ 72.117318][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.127599][ T4285] team0: Port device team_slave_1 added [ 72.143632][ T4273] device hsr_slave_0 entered promiscuous mode [ 72.150447][ T4273] device hsr_slave_1 entered promiscuous mode [ 72.156889][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.165112][ T4273] Cannot create hsr debugfs directory [ 72.171909][ T4274] team0: Port device team_slave_1 added [ 72.227355][ T4279] team0: Port device team_slave_0 added [ 72.239422][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.246391][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.272721][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.288250][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.295774][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.322248][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.344067][ T4279] team0: Port device team_slave_1 added [ 72.365078][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.372344][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.398490][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.411429][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.418386][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.444405][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.488175][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.495291][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.521712][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.538586][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.545766][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.571799][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.603905][ T4285] device hsr_slave_0 entered promiscuous mode [ 72.612543][ T4285] device hsr_slave_1 entered promiscuous mode [ 72.619360][ T4285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.626925][ T4285] Cannot create hsr debugfs directory [ 72.678371][ T4274] device hsr_slave_0 entered promiscuous mode [ 72.684930][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 72.690524][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 72.698040][ T4274] device hsr_slave_1 entered promiscuous mode [ 72.704722][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.712347][ T4274] Cannot create hsr debugfs directory [ 72.743856][ T4279] device hsr_slave_0 entered promiscuous mode [ 72.751049][ T4279] device hsr_slave_1 entered promiscuous mode [ 72.757636][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.765304][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 72.765333][ T4279] Cannot create hsr debugfs directory [ 72.772090][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 72.783079][ T4278] Bluetooth: hci4: command 0x0409 tx timeout [ 73.010284][ T4284] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.020618][ T4284] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.035078][ T4284] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.044556][ T4284] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.089362][ T4273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.098257][ T4273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.116244][ T4273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.128623][ T4273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.187695][ T4279] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.202415][ T4279] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.213535][ T4279] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.232458][ T4279] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.285571][ T4285] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.296334][ T4285] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.307141][ T4285] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.345608][ T4285] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.359115][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.371863][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.399841][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.408793][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.426742][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.443511][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.452167][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.481720][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.504593][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.525947][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.536855][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.546523][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.557538][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.564812][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.573341][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.597428][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.606194][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.614922][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.622007][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.635365][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.644597][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.653074][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.660980][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.668682][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.680710][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.692398][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.704549][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.715442][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.724620][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.733724][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.753181][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.762071][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.771451][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.778534][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.786556][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.796361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.805349][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.812486][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.842387][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.852997][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.865472][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.877588][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.887075][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.895931][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.903098][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.912017][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.920567][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.929028][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.937680][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.946490][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.953610][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.962465][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.971234][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.980869][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.989724][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.998431][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.014239][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.032729][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.042575][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.059430][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.075411][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.103578][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.119736][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.127661][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.143219][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.154435][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.173237][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.198294][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.211961][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.224833][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.235766][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.247722][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.258553][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.273209][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.289437][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.297362][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.307426][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.317414][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.335422][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.351072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.360911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.368763][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.389974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.398350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.412143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.422987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.431925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.440961][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.448279][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.491390][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.502802][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.513973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.529438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.538107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.546991][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.554144][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.563396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.573250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.582506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.592249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.601468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.610682][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.620297][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.627423][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.635643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.644339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.653352][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.660470][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.676224][ T4285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.687751][ T4285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.729609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.737894][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.746706][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.757402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.769267][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 74.775296][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 74.778567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.790704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.809433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.823306][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.839830][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 74.845864][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 74.852162][ T4278] Bluetooth: hci4: command 0x041b tx timeout [ 74.869477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.885040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.909614][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.918485][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.945783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.954626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.963216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.972726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.981568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.989118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.997426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.005831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.025184][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.049674][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.071175][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.091120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.109851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.170777][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.200869][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.250081][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.284502][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.311355][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.344459][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.366303][ T4284] device veth0_vlan entered promiscuous mode [ 75.430767][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.450117][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.459396][ T4284] device veth1_vlan entered promiscuous mode [ 75.470095][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.491185][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.500259][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.512878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.521651][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.598685][ T4284] device veth0_macvtap entered promiscuous mode [ 75.618963][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.627272][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.662755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.679562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.689983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.710135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.750770][ T4284] device veth1_macvtap entered promiscuous mode [ 75.757860][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.769981][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.778266][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.800783][ T4279] device veth0_vlan entered promiscuous mode [ 75.815495][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.841448][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.860533][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.868500][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.878034][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.892916][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.908062][ T4279] device veth1_vlan entered promiscuous mode [ 75.920628][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.948119][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.955415][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.970862][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.978347][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.987375][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.000995][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.010586][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.018004][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.031649][ T4284] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.041571][ T4284] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.050434][ T4284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.059990][ T4284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.094223][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.105724][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.118273][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.165233][ T4279] device veth0_macvtap entered promiscuous mode [ 76.184575][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.201905][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.229402][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.237951][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.246664][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.257642][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.266094][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.291483][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.300598][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.309947][ T4279] device veth1_macvtap entered promiscuous mode [ 76.333651][ T4285] device veth0_vlan entered promiscuous mode [ 76.395312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.408295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.417487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.426818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.438704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.449816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.457817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.474829][ T4274] device veth0_vlan entered promiscuous mode [ 76.487963][ T4273] device veth0_vlan entered promiscuous mode [ 76.506306][ T4285] device veth1_vlan entered promiscuous mode [ 76.515240][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.527877][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.536718][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.546973][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.558548][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.570764][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.580981][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.591781][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.606292][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.631671][ T4274] device veth1_vlan entered promiscuous mode [ 76.639797][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.648281][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.657338][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.665354][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.673957][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.687075][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.696067][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.704853][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.719715][ T4273] device veth1_vlan entered promiscuous mode [ 76.729569][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.738716][ T4279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.748401][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.762085][ T4279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.774828][ T4279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.784009][ T4279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.809326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.817760][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.827688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.836048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.843960][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 76.850005][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 76.888259][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.897225][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.912336][ T4274] device veth0_macvtap entered promiscuous mode [ 76.929836][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 76.935869][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 76.942886][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 76.955958][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.965521][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.974416][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.983379][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.992610][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.004432][ T4285] device veth0_macvtap entered promiscuous mode [ 77.016267][ T4274] device veth1_macvtap entered promiscuous mode [ 77.019702][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.040150][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.062139][ T4273] device veth0_macvtap entered promiscuous mode [ 77.074550][ T4273] device veth1_macvtap entered promiscuous mode [ 77.084515][ T4285] device veth1_macvtap entered promiscuous mode [ 77.092337][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.100760][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.110489][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.118355][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.126542][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.134747][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.149871][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.157724][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.197649][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.213217][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.224353][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.235013][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.247036][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.259057][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.267787][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.281931][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.303186][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.315412][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.326351][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.337498][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.347447][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.357986][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.371012][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.379216][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.393563][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.405001][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.418544][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.428467][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.440007][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.449895][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.460394][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.472107][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.485106][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.485133][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.501140][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.533709][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.553039][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.563656][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.578009][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.591407][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.604613][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.617529][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.630698][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.643305][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.667341][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.678829][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.689551][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.699406][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.710006][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.726754][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.734401][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.747159][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.757528][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.768034][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.779742][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.790212][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.800950][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.811525][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.823169][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.855869][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.866052][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.883133][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.907056][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.920550][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.932696][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.943980][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.963732][ T4273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.986108][ T4273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.996072][ T4273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.005060][ T4273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.011788][ T4363] 9pnet_fd: Insufficient options for proto=fd [ 78.040350][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.070201][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.079943][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.089193][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.103333][ T4285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.112954][ T4285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.121821][ T4285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.131025][ T4285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.350565][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.376476][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.395258][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.402754][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.429093][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.446196][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.509128][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.516977][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.555667][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.563336][ T4375] loop1: detected capacity change from 0 to 1024 [ 78.573479][ T4375] ======================================================= [ 78.573479][ T4375] WARNING: The mand mount option has been deprecated and [ 78.573479][ T4375] and is ignored by this kernel. Remove the mand [ 78.573479][ T4375] option from the mount to silence this warning. [ 78.573479][ T4375] ======================================================= [ 78.616498][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.629996][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.638119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.713679][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.741554][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.807041][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.841283][ T4375] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 78.851144][ T4375] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.876782][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.915580][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.929115][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 78.929126][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 78.961127][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 78.983966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.000450][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 79.000470][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 79.006497][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 79.219329][ T4392] loop3: detected capacity change from 0 to 1024 [ 79.288229][ T4392] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 79.331892][ T4392] EXT4-fs (loop3): barriers disabled [ 79.386823][ T4392] JBD2: no valid journal superblock found [ 79.420931][ T4392] EXT4-fs (loop3): error loading journal [ 80.401450][ T4405] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.458523][ T4413] syz.0.22 uses obsolete (PF_INET,SOCK_PACKET) [ 80.877566][ T4426] loop2: detected capacity change from 0 to 128 [ 80.905833][ T4426] EXT4-fs (loop2): Test dummy encryption mode enabled [ 80.987683][ T4426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 81.026862][ T4426] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.689232][ T4418] loop3: detected capacity change from 0 to 40427 [ 82.031017][ T4418] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x3ffff [ 82.118364][ T4418] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x30e4 [ 82.263180][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 82.279896][ T4418] F2FS-fs (loop3): invalid crc value [ 82.441898][ T4418] F2FS-fs (loop3): Found nat_bits in checkpoint [ 82.653873][ T4418] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 82.808761][ T4418] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 82.889863][ T4418] F2FS-fs (loop3) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20 [ 82.914175][ T4319] smpboot: CPU 1 is now offline [ 82.968127][ T4469] loop1: detected capacity change from 0 to 1024 [ 83.006302][ T4472] x86: Booting SMP configuration: [ 83.025593][ T26] audit: type=1800 audit(1789742148.730:2): pid=4474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.24" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 83.054595][ T4472] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 83.064172][ T4418] F2FS-fs (loop3) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x178/0x910 [ 83.093100][ T4469] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 83.192570][ T4469] EXT4-fs (loop1): barriers disabled [ 83.227738][ T4469] JBD2: no valid journal superblock found [ 83.268165][ T4469] EXT4-fs (loop1): error loading journal [ 83.332474][ T4274] syz-executor: attempt to access beyond end of device [ 83.332474][ T4274] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 84.501180][ T4478] sched: RT throttling activated [ 84.933050][ T4484] loop1: detected capacity change from 0 to 512 [ 85.009685][ T4484] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 85.063735][ T4484] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.42: Unimplemented hash flags: 0x0001 [ 85.145821][ T4484] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.42: Corrupt directory, running e2fsck is recommended [ 85.450192][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 85.859613][ T4508] md: loop0 has zero or unknown size, marking faulty! [ 85.883673][ T4516] loop3: detected capacity change from 0 to 512 [ 85.920434][ T4508] md: loop1 has zero or unknown size, marking faulty! [ 86.230745][ T4523] netlink: 'syz.1.49': attribute type 3 has an invalid length. [ 86.272816][ T4523] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.49'. [ 86.362362][ T4529] loop1: detected capacity change from 0 to 128 [ 86.442718][ T14] cfg80211: failed to load regulatory.db [ 86.450137][ T4529] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 86.503885][ T4529] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.589345][ T4536] FAULT_INJECTION: forcing a failure. [ 86.589345][ T4536] name failslab, interval 1, probability 0, space 0, times 1 [ 86.659424][ T4536] CPU: 0 PID: 4536 Comm: syz.4.51 Not tainted syzkaller #0 [ 86.666667][ T4536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.676765][ T4536] Call Trace: [ 86.680069][ T4536] [ 86.683026][ T4536] dump_stack_lvl+0x188/0x24e [ 86.687750][ T4536] ? show_regs_print_info+0x12/0x12 [ 86.692992][ T4536] ? load_image+0x410/0x410 [ 86.697539][ T4536] ? __might_sleep+0xd0/0xd0 [ 86.702162][ T4536] ? __lock_acquire+0x7c40/0x7c40 [ 86.707234][ T4536] should_fail_ex+0x390/0x4c0 [ 86.711956][ T4536] should_failslab+0x5/0x20 [ 86.716486][ T4536] slab_pre_alloc_hook+0x59/0x300 [ 86.721557][ T4536] kmem_cache_alloc+0x56/0x2f0 [ 86.726342][ T4536] ? getname_flags+0xb7/0x500 [ 86.731051][ T4536] getname_flags+0xb7/0x500 [ 86.735592][ T4536] user_path_at_empty+0x28/0x60 [ 86.740462][ T4536] path_removexattr+0xdf/0x480 [ 86.745232][ T4536] ? listxattr+0x2e0/0x2e0 [ 86.749671][ T4536] ? do_futex+0x310/0x320 [ 86.754004][ T4536] ? __ia32_sys_get_robust_list+0x100/0x100 [ 86.759906][ T4536] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 86.765902][ T4536] ? lock_chain_count+0x20/0x20 [ 86.770770][ T4536] ? syscall_enter_from_user_mode+0x21/0x80 [ 86.776686][ T4536] __x64_sys_lremovexattr+0x59/0x70 [ 86.781926][ T4536] do_syscall_64+0x4c/0xa0 [ 86.786351][ T4536] ? clear_bhb_loop+0x60/0xb0 [ 86.791041][ T4536] ? clear_bhb_loop+0x60/0xb0 [ 86.795737][ T4536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.801646][ T4536] RIP: 0033:0x7f237759e159 [ 86.806087][ T4536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.825713][ T4536] RSP: 002b:00007f23784b1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 86.834144][ T4536] RAX: ffffffffffffffda RBX: 00007f2377825fa0 RCX: 00007f237759e159 [ 86.842125][ T4536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.850105][ T4536] RBP: 00007f237763506b R08: 0000000000000000 R09: 0000000000000000 [ 86.858085][ T4536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.866065][ T4536] R13: 00007f2377826038 R14: 00007f2377825fa0 R15: 00007ffc416d6d78 [ 86.874057][ T4536] [ 87.051009][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 87.185199][ T11] kworker/u4:1: attempt to access beyond end of device [ 87.185199][ T11] loop3: rw=1, sector=4816, nr_sectors = 5672 limit=512 [ 87.209239][ T4545] loop2: detected capacity change from 0 to 512 [ 87.217019][ T4505] loop0: detected capacity change from 0 to 40427 [ 87.250536][ T4545] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.324974][ T4505] F2FS-fs (loop0): invalid crc value [ 87.340656][ T4545] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.384156][ T4545] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.396956][ T4505] F2FS-fs (loop0): Found nat_bits in checkpoint [ 87.603580][ T4505] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 87.660451][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 87.802988][ T4285] syz-executor: attempt to access beyond end of device [ 87.802988][ T4285] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 87.832485][ T4567] md: could not open device unknown-block(7,0). [ 87.920973][ T4567] md: loop1 has zero or unknown size, marking faulty! [ 88.061710][ T4575] netlink: 'syz.3.62': attribute type 2 has an invalid length. [ 88.235944][ T4581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.63'. [ 88.286310][ T4581] Zero length message leads to an empty skb [ 88.548357][ T4593] EXT4-fs (sda1): shut down requested (1) [ 88.600349][ T4593] Aborting journal on device sda1-8. [ 88.679406][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.856714][ T4609] loop1: detected capacity change from 0 to 2048 [ 88.881624][ T7] usb 4-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 88.919153][ T7] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 88.961696][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.971867][ T4609] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 89.041817][ T4588] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.072351][ T7] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 90.519580][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 90.630042][ T4620] md: loop0 has zero or unknown size, marking faulty! [ 90.661419][ T4620] md: loop1 has zero or unknown size, marking faulty! [ 90.699597][ T4319] usb 4-1: USB disconnect, device number 2 [ 91.878380][ T4643] loop2: detected capacity change from 0 to 1024 [ 91.887698][ T4640] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 91.938387][ T4643] EXT4-fs: Ignoring removed bh option [ 92.006896][ T4643] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.191668][ T4656] capability: warning: `syz.3.86' uses deprecated v2 capabilities in a way that may be insecure [ 92.215874][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 92.385305][ T4660] loop2: detected capacity change from 0 to 1024 [ 92.399300][ T4661] md: loop0 has zero or unknown size, marking faulty! [ 92.429332][ T4661] md: loop1 has zero or unknown size, marking faulty! [ 92.446408][ T4660] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.538018][ T4660] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.630110][ T4660] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 92.719063][ T4660] System zones: 0-1, 3-36 [ 92.780754][ T4660] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 92.922472][ T4671] FAULT_INJECTION: forcing a failure. [ 92.922472][ T4671] name failslab, interval 1, probability 0, space 0, times 0 [ 92.984184][ T4671] CPU: 0 PID: 4671 Comm: syz.4.91 Not tainted syzkaller #0 [ 92.991490][ T4671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.001586][ T4671] Call Trace: [ 93.004889][ T4671] [ 93.007850][ T4671] dump_stack_lvl+0x188/0x24e [ 93.012562][ T4671] ? show_regs_print_info+0x12/0x12 [ 93.017814][ T4671] ? load_image+0x410/0x410 [ 93.022367][ T4671] ? __might_sleep+0xd0/0xd0 [ 93.026982][ T4671] ? __lock_acquire+0x7c40/0x7c40 [ 93.032048][ T4671] should_fail_ex+0x390/0x4c0 [ 93.036768][ T4671] should_failslab+0x5/0x20 [ 93.041299][ T4671] slab_pre_alloc_hook+0x59/0x300 [ 93.046352][ T4671] ? rdma_create_trans+0x15a/0x1590 [ 93.051576][ T4671] __kmem_cache_alloc_node+0x4f/0x270 [ 93.056960][ T4671] ? kasan_set_track+0x60/0x70 [ 93.061740][ T4671] ? rdma_create_trans+0x15a/0x1590 [ 93.066951][ T4671] __kmalloc_node_track_caller+0xa0/0x240 [ 93.072708][ T4671] ? do_new_mount+0x247/0xa40 [ 93.077399][ T4671] ? __se_sys_mount+0x2e3/0x3d0 [ 93.082264][ T4671] kstrdup+0x37/0x70 [ 93.086173][ T4671] rdma_create_trans+0x15a/0x1590 [ 93.091230][ T4671] ? handle_rerror+0x280/0x280 [ 93.096011][ T4671] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 93.102028][ T4671] ? lock_chain_count+0x20/0x20 [ 93.106903][ T4671] ? kasan_quarantine_put+0xd4/0x210 [ 93.112207][ T4671] ? lockdep_hardirqs_on+0x94/0x140 [ 93.117422][ T4671] ? p9_client_create+0x758/0x1040 [ 93.122548][ T4671] ? __kmem_cache_free+0xb6/0x200 [ 93.127594][ T4671] p9_client_create+0x7ef/0x1040 [ 93.132579][ T4671] ? do_trace_9p_fid_put+0x20/0x20 [ 93.137707][ T4671] ? lockdep_softirqs_off+0x430/0x430 [ 93.143122][ T4671] ? __raw_spin_lock_init+0x41/0x100 [ 93.148422][ T4671] v9fs_session_init+0x1a9/0x1780 [ 93.153482][ T4671] ? v9fs_show_options+0x610/0x610 [ 93.158612][ T4671] v9fs_mount+0xcc/0xb60 [ 93.162882][ T4671] ? rcu_is_watching+0x11/0xa0 [ 93.167662][ T4671] ? end_current_label_crit_section+0x170/0x170 [ 93.173917][ T4671] ? trace_xrep_findroot_block+0x280/0x280 [ 93.179738][ T4671] ? vfs_parse_fs_param+0x420/0x420 [ 93.184961][ T4671] legacy_get_tree+0xe6/0x180 [ 93.189663][ T4671] ? trace_xrep_findroot_block+0x280/0x280 [ 93.195494][ T4671] vfs_get_tree+0x88/0x270 [ 93.199935][ T4671] do_new_mount+0x247/0xa40 [ 93.204459][ T4671] __se_sys_mount+0x2e3/0x3d0 [ 93.209155][ T4671] ? __x64_sys_mount+0xc0/0xc0 [ 93.213942][ T4671] ? lockdep_hardirqs_on+0x94/0x140 [ 93.219163][ T4671] ? __x64_sys_mount+0x1c/0xc0 [ 93.223949][ T4671] do_syscall_64+0x4c/0xa0 [ 93.228372][ T4671] ? clear_bhb_loop+0x60/0xb0 [ 93.233059][ T4671] ? clear_bhb_loop+0x60/0xb0 [ 93.237753][ T4671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.243670][ T4671] RIP: 0033:0x7f237759e159 [ 93.248102][ T4671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.267722][ T4671] RSP: 002b:00007f23784b1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 93.276151][ T4671] RAX: ffffffffffffffda RBX: 00007f2377825fa0 RCX: 00007f237759e159 [ 93.284142][ T4671] RDX: 0000200000000300 RSI: 0000200000000180 RDI: 00002000000000c0 [ 93.292129][ T4671] RBP: 00007f237763506b R08: 0000200000000340 R09: 0000000000000000 [ 93.300111][ T4671] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.308105][ T4671] R13: 00007f2377826038 R14: 00007f2377825fa0 R15: 00007ffc416d6d78 [ 93.316094][ T4671] [ 93.375281][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 93.524547][ T4679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 95.344028][ T4694] md: loop0 has zero or unknown size, marking faulty! [ 95.374014][ T4694] md: loop1 has zero or unknown size, marking faulty! [ 95.584430][ T4696] loop1: detected capacity change from 0 to 128 [ 95.639507][ T4696] EXT4-fs (loop1): Test dummy encryption mode enabled [ 95.689811][ T4696] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 95.733053][ T4696] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.205392][ T4706] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 97.299777][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 97.617483][ T4724] loop1: detected capacity change from 0 to 1024 [ 97.679755][ T4724] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.825271][ T4724] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 97.860879][ T4732] md: loop0 has zero or unknown size, marking faulty! [ 97.908402][ T4724] sg_write: data in/out 401408/136 bytes for SCSI command 0x0-- guessing data in; [ 97.908402][ T4724] program syz.1.110 not setting count and/or reply_len properly [ 97.940701][ T4732] md: could not open device unknown-block(7,1). [ 98.187134][ T4743] loop3: detected capacity change from 0 to 128 [ 98.199410][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 98.243438][ T4743] EXT4-fs (loop3): Test dummy encryption mode enabled [ 98.254048][ T4745] loop2: detected capacity change from 0 to 128 [ 99.603725][ T4743] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 99.632583][ T4743] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.196676][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 101.355988][ T4759] loop0: detected capacity change from 0 to 512 [ 101.457479][ T4759] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 101.650839][ T4285] EXT4-fs (loop0): unmounting filesystem. [ 101.708010][ T4772] md: loop0 has zero or unknown size, marking faulty! [ 101.750150][ T4772] md: loop1 has zero or unknown size, marking faulty! [ 101.783622][ T4774] bond0: Error: CAN devices cannot be enslaved [ 101.940437][ T4777] tipc: Enabling of bearer rejected, failed to enable media [ 102.017526][ T4779] X25: received unknown 00 with LCI 000 [ 102.203234][ T4758] loop1: detected capacity change from 0 to 40427 [ 102.252449][ T4758] F2FS-fs (loop1): invalid crc value [ 102.294964][ T4758] F2FS-fs (loop1): Found nat_bits in checkpoint [ 102.473942][ T4758] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 102.852895][ T4284] syz-executor: attempt to access beyond end of device [ 102.852895][ T4284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.314246][ T4806] loop3: detected capacity change from 0 to 512 [ 104.120409][ T4806] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 104.129472][ T4806] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.699621][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 105.853664][ T4816] md: loop0 has zero or unknown size, marking faulty! [ 105.878802][ T4818] X25: received unknown 00 with LCI 000 [ 105.895320][ T4816] md: could not open device unknown-block(7,1). [ 106.084476][ T4829] FAULT_INJECTION: forcing a failure. [ 106.084476][ T4829] name failslab, interval 1, probability 0, space 0, times 0 [ 106.203361][ T4829] CPU: 0 PID: 4829 Comm: syz.0.142 Not tainted syzkaller #0 [ 106.210678][ T4829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.220743][ T4829] Call Trace: [ 106.224058][ T4829] [ 106.227000][ T4829] dump_stack_lvl+0x188/0x24e [ 106.231698][ T4829] ? show_regs_print_info+0x12/0x12 [ 106.236906][ T4829] ? load_image+0x410/0x410 [ 106.241437][ T4829] ? __might_sleep+0xd0/0xd0 [ 106.246041][ T4829] ? __lock_acquire+0x7c40/0x7c40 [ 106.251083][ T4829] should_fail_ex+0x390/0x4c0 [ 106.255784][ T4829] should_failslab+0x5/0x20 [ 106.260290][ T4829] slab_pre_alloc_hook+0x59/0x300 [ 106.265324][ T4829] ? __kernfs_new_node+0xa6/0x7f0 [ 106.270366][ T4829] ? rcu_is_watching+0x11/0xa0 [ 106.275152][ T4829] kmem_cache_alloc+0x56/0x2f0 [ 106.279936][ T4829] ? __kernfs_new_node+0xe1/0x7f0 [ 106.284973][ T4829] __kernfs_new_node+0xe1/0x7f0 [ 106.289831][ T4829] ? vsnprintf+0x1b22/0x1c20 [ 106.294440][ T4829] ? kernfs_new_node+0x250/0x250 [ 106.299391][ T4829] ? snprintf+0xe5/0x140 [ 106.303657][ T4829] ? vscnprintf+0x80/0x80 [ 106.308000][ T4829] kernfs_new_node+0x148/0x250 [ 106.312779][ T4829] __kernfs_create_file+0x47/0x2e0 [ 106.317904][ T4829] cgroup_addrm_files+0x80c/0xd50 [ 106.322956][ T4829] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 106.329131][ T4829] ? mark_lock+0x94/0x320 [ 106.333501][ T4829] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 106.339509][ T4829] ? __local_bh_enable_ip+0x136/0x1c0 [ 106.344894][ T4829] ? lockdep_hardirqs_on+0x94/0x140 [ 106.350123][ T4829] css_populate_dir+0x157/0x3b0 [ 106.354989][ T4829] cgroup_apply_control_enable+0x641/0xb00 [ 106.360819][ T4829] cgroup_mkdir+0xc7f/0xe70 [ 106.365341][ T4829] ? css_task_iter_end+0x280/0x280 [ 106.370475][ T4829] ? kernfs_iop_permission+0x26d/0x350 [ 106.375952][ T4829] ? css_task_iter_end+0x280/0x280 [ 106.381081][ T4829] kernfs_iop_mkdir+0x23d/0x3d0 [ 106.385954][ T4829] vfs_mkdir+0x386/0x570 [ 106.390220][ T4829] do_mkdirat+0x1d8/0x440 [ 106.394560][ T4829] ? vfs_mkdir+0x570/0x570 [ 106.398991][ T4829] __x64_sys_mkdirat+0x85/0x90 [ 106.403785][ T4829] do_syscall_64+0x4c/0xa0 [ 106.408225][ T4829] ? clear_bhb_loop+0x60/0xb0 [ 106.412920][ T4829] ? clear_bhb_loop+0x60/0xb0 [ 106.417619][ T4829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.423530][ T4829] RIP: 0033:0x7ff36af9e159 [ 106.427965][ T4829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.447599][ T4829] RSP: 002b:00007ff36bdeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 106.456064][ T4829] RAX: ffffffffffffffda RBX: 00007ff36b225fa0 RCX: 00007ff36af9e159 [ 106.464069][ T4829] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 106.472059][ T4829] RBP: 00007ff36b03506b R08: 0000000000000000 R09: 0000000000000000 [ 106.480040][ T4829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.488018][ T4829] R13: 00007ff36b226038 R14: 00007ff36b225fa0 R15: 00007fffe59a1ee8 [ 106.496009][ T4829] [ 106.721770][ T4840] can0: slcan on pts0. [ 107.041177][ T4839] can0 (unregistered): slcan off pts0. [ 107.449163][ T4860] md: loop0 has zero or unknown size, marking faulty! [ 107.479478][ T4860] md: loop1 has zero or unknown size, marking faulty! [ 107.815744][ T4847] loop2: detected capacity change from 0 to 40427 [ 107.870199][ T4847] F2FS-fs (loop2): invalid crc value [ 107.905778][ T4847] F2FS-fs (loop2): Found nat_bits in checkpoint [ 107.953243][ T4873] device geneve2 entered promiscuous mode [ 108.075372][ T4847] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 108.320080][ T4279] syz-executor: attempt to access beyond end of device [ 108.320080][ T4279] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 109.143169][ T4895] md: loop0 has zero or unknown size, marking faulty! [ 109.177887][ T4895] md: loop1 has zero or unknown size, marking faulty! [ 109.598136][ T4829] cgroup: cgroup_addrm_files: failed to add throttle.read_bps_device, err=-12 [ 109.701926][ T4910] device geneve2 entered promiscuous mode [ 111.833861][ T4936] loop0: detected capacity change from 0 to 512 [ 112.087514][ T4936] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 112.155878][ T4936] ext4 filesystem being mounted at /26/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.214905][ T4951] loop1: detected capacity change from 0 to 512 [ 112.249767][ T4951] EXT4-fs: Ignoring removed bh option [ 112.307806][ T4951] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.186: corrupted in-inode xattr [ 112.411068][ T4951] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.186: couldn't read orphan inode 15 (err -117) [ 112.477458][ T4951] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 112.574026][ T4285] EXT4-fs (loop0): unmounting filesystem. [ 112.591464][ T4951] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.186: Unrecognised inode hash code 4 [ 112.672632][ T4951] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.186: Corrupt directory, running e2fsck is recommended [ 112.740045][ T4951] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.186: Unrecognised inode hash code 4 [ 112.803151][ T4951] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.186: Corrupt directory, running e2fsck is recommended [ 112.976797][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 113.188408][ T4976] device geneve3 entered promiscuous mode [ 113.972321][ T4997] netlink: 76 bytes leftover after parsing attributes in process `syz.1.204'. [ 114.076241][ T4999] netlink: 76 bytes leftover after parsing attributes in process `syz.1.204'. [ 114.418438][ T5011] device geneve2 entered promiscuous mode [ 116.221677][ T5038] netlink: 76 bytes leftover after parsing attributes in process `syz.2.219'. [ 116.254480][ T5037] loop0: detected capacity change from 0 to 1024 [ 116.276128][ T5038] netlink: 76 bytes leftover after parsing attributes in process `syz.2.219'. [ 116.409059][ T5037] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 116.446841][ T5037] EXT4-fs (loop0): barriers disabled [ 116.468946][ T5037] JBD2: no valid journal superblock found [ 116.474673][ T5037] EXT4-fs (loop0): error loading journal [ 117.149681][ T5073] netlink: 76 bytes leftover after parsing attributes in process `syz.2.231'. [ 118.724395][ T5083] loop2: detected capacity change from 0 to 164 [ 118.897520][ T5085] netlink: 40 bytes leftover after parsing attributes in process `syz.0.236'. [ 118.906844][ T5083] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 119.000105][ T5088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.236'. [ 119.195863][ T5093] loop2: detected capacity change from 0 to 512 [ 119.206220][ T5094] device geneve4 entered promiscuous mode [ 119.257663][ T5096] loop1: detected capacity change from 0 to 128 [ 119.286427][ T5093] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.239: iget: bad i_size value: 38620345925642 [ 119.301331][ T5098] FAULT_INJECTION: forcing a failure. [ 119.301331][ T5098] name failslab, interval 1, probability 0, space 0, times 0 [ 119.322389][ T5096] EXT4-fs (loop1): Test dummy encryption mode enabled [ 119.363938][ T5093] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.239: couldn't read orphan inode 15 (err -117) [ 119.393335][ T5098] CPU: 0 PID: 5098 Comm: syz.0.242 Not tainted syzkaller #0 [ 119.400754][ T5098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.410871][ T5098] Call Trace: [ 119.414174][ T5098] [ 119.417129][ T5098] dump_stack_lvl+0x188/0x24e [ 119.421860][ T5098] ? show_regs_print_info+0x12/0x12 [ 119.427095][ T5098] ? load_image+0x410/0x410 [ 119.431637][ T5098] ? __might_sleep+0xd0/0xd0 [ 119.436255][ T5098] ? __lock_acquire+0x7c40/0x7c40 [ 119.441320][ T5098] should_fail_ex+0x390/0x4c0 [ 119.446050][ T5098] should_failslab+0x5/0x20 [ 119.450585][ T5098] slab_pre_alloc_hook+0x59/0x300 [ 119.455669][ T5098] ? allocate_cgrp_cset_links+0xaa/0x320 [ 119.461346][ T5098] __kmem_cache_alloc_node+0x4f/0x270 [ 119.466756][ T5098] ? allocate_cgrp_cset_links+0xaa/0x320 [ 119.472413][ T5098] kmalloc_trace+0x26/0xe0 [ 119.476848][ T5098] allocate_cgrp_cset_links+0xaa/0x320 [ 119.482310][ T5098] find_css_set+0xa0e/0x15c0 [ 119.486908][ T5098] ? cgroup_migrate_prepare_dst+0x610/0x610 [ 119.492804][ T5098] ? mark_lock+0x94/0x320 [ 119.497145][ T5098] cgroup_migrate_prepare_dst+0x114/0x610 [ 119.502885][ T5098] cgroup_attach_task+0x546/0x870 [ 119.507928][ T5098] ? cgroup_attach_task+0x20f/0x870 [ 119.513139][ T5098] ? cgroup_migrate_execute+0xf20/0xf20 [ 119.518703][ T5098] ? get_task_cred+0x1f/0x370 [ 119.523403][ T5098] ? get_task_cred+0x2f0/0x370 [ 119.528206][ T5098] ? get_task_cred+0x1f/0x370 [ 119.532907][ T5098] __cgroup1_procs_write+0x2f2/0x3f0 [ 119.538223][ T5098] ? cgroup_pidlist_destroy_work_fn+0x1f0/0x1f0 [ 119.544493][ T5098] ? cgroup_pidlist_stop+0xf0/0xf0 [ 119.549627][ T5098] cgroup_file_write+0x2c9/0x6a0 [ 119.554582][ T5098] ? kernfs_fop_write_iter+0x1d8/0x520 [ 119.560070][ T5098] ? cgroup_seqfile_stop+0xd0/0xd0 [ 119.565207][ T5098] ? __virt_addr_valid+0x188/0x540 [ 119.570336][ T5098] ? __virt_addr_valid+0x188/0x540 [ 119.575473][ T5098] ? cgroup_seqfile_stop+0xd0/0xd0 [ 119.580598][ T5098] kernfs_fop_write_iter+0x3a0/0x520 [ 119.585906][ T5098] vfs_write+0x482/0x9a0 [ 119.590172][ T5098] ? file_end_write+0x250/0x250 [ 119.595049][ T5098] ? __fget_files+0x3fc/0x460 [ 119.599752][ T5098] ? __fdget_pos+0x2ae/0x360 [ 119.604366][ T5098] ? ksys_write+0x70/0x260 [ 119.608811][ T5098] ksys_write+0x14d/0x260 [ 119.613172][ T5098] ? __ia32_sys_read+0x80/0x80 [ 119.617956][ T5098] ? lockdep_hardirqs_on+0x94/0x140 [ 119.623174][ T5098] do_syscall_64+0x4c/0xa0 [ 119.627604][ T5098] ? clear_bhb_loop+0x60/0xb0 [ 119.632291][ T5098] ? clear_bhb_loop+0x60/0xb0 [ 119.636979][ T5098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.642899][ T5098] RIP: 0033:0x7ff36af9e159 [ 119.647324][ T5098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.666948][ T5098] RSP: 002b:00007ff36bdeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.675379][ T5098] RAX: ffffffffffffffda RBX: 00007ff36b225fa0 RCX: 00007ff36af9e159 [ 119.683362][ T5098] RDX: 0000000000000015 RSI: 0000200000000640 RDI: 0000000000000004 [ 119.691358][ T5098] RBP: 00007ff36b03506b R08: 0000000000000000 R09: 0000000000000000 [ 119.699341][ T5098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.707321][ T5098] R13: 00007ff36b226038 R14: 00007ff36b225fa0 R15: 00007fffe59a1ee8 [ 119.715316][ T5098] [ 119.739556][ T5093] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 119.786748][ T5096] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 119.809512][ T5103] loop3: detected capacity change from 0 to 1024 [ 119.832043][ T5096] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.845932][ T5103] EXT4-fs: Ignoring removed bh option [ 119.862339][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 120.016524][ T5103] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.277491][ T5103] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 121.312719][ T5103] EXT4-fs (loop3): orphan cleanup on readonly fs [ 121.345083][ T5103] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.243: Freeing blocks not in datazone - block = 0, count = 4096 [ 121.368745][ T5111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'. [ 121.451744][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 121.513916][ T5103] EXT4-fs (loop3): 1 orphan inode deleted [ 121.545358][ T5103] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 121.596651][ T5103] EXT4-fs (loop3): unmounting filesystem. [ 121.696092][ T5103] syz.3.243: attempt to access beyond end of device [ 121.696092][ T5103] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 121.769042][ T5103] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 121.974126][ T5145] device geneve2 entered promiscuous mode [ 122.023825][ T5148] loop1: detected capacity change from 0 to 512 [ 122.083696][ T5148] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.255: iget: bad i_size value: 38620345925642 [ 123.409844][ T5148] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.255: couldn't read orphan inode 15 (err -117) [ 123.454983][ T5148] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 123.598696][ T5163] capability: warning: `syz.2.260' uses 32-bit capabilities (legacy support in use) [ 123.738041][ T59] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:4: bg 0: block 5: invalid block bitmap [ 123.794048][ T59] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 268 with error 28 [ 123.806721][ T59] EXT4-fs (loop1): This should not happen!! Data will be lost [ 123.806721][ T59] [ 123.821632][ T59] EXT4-fs (loop1): Total free blocks count 0 [ 123.827654][ T59] EXT4-fs (loop1): Free/Dirty block details [ 123.834775][ T59] EXT4-fs (loop1): free_blocks=0 [ 123.846713][ T59] EXT4-fs (loop1): dirty_blocks=272 [ 123.853153][ T59] EXT4-fs (loop1): Block reservation details [ 123.863900][ T59] EXT4-fs (loop1): i_reserved_data_blocks=272 [ 123.949407][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 125.222396][ T5173] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 125.290780][ T5171] loop4: detected capacity change from 0 to 128 [ 125.330353][ T5171] EXT4-fs (loop4): Test dummy encryption mode enabled [ 125.470315][ T5171] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 125.515494][ T5171] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.572210][ T5183] loop3: detected capacity change from 0 to 512 [ 125.757805][ T5183] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 127.157935][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 127.165428][ T5183] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.269: bg 0: block 4: invalid block bitmap [ 127.238910][ T5183] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 127.289260][ T5183] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.269: invalid indirect mapped block 1 (level 1) [ 127.310049][ T4322] Bluetooth: hci5: Frame reassembly failed (-84) [ 127.316788][ T4337] Bluetooth: hci5: Frame reassembly failed (-84) [ 127.363384][ T5183] EXT4-fs (loop3): 1 truncate cleaned up [ 127.409238][ T5183] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 128.876338][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 129.074558][ T5209] netlink: 'syz.1.279': attribute type 10 has an invalid length. [ 129.116152][ T5209] team0: Port device netdevsim0 added [ 129.144686][ T5209] netlink: 'syz.1.279': attribute type 10 has an invalid length. [ 129.196327][ T5209] team0: Port device netdevsim0 removed [ 129.202161][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 129.220103][ T5209] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 129.318946][ T4280] Bluetooth: hci5: command 0x1003 tx timeout [ 129.320501][ T4283] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 129.343515][ T5192] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 129.390683][ T14] usb 3-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 129.484598][ T5218] sctp: [Deprecated]: syz.1.282 (pid 5218) Use of int in max_burst socket option. [ 129.484598][ T5218] Use struct sctp_assoc_value instead [ 129.531160][ T14] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 129.570933][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.610002][ T5204] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.626375][ T14] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 130.885042][ T14] usb 3-1: USB disconnect, device number 2 [ 131.301097][ T5234] autofs4:pid:5234:autofs_fill_super: called with bogus options [ 131.640064][ T5243] can0: slcan on pts0. [ 131.902342][ T5244] Bluetooth: MGMT ver 1.22 [ 131.980277][ T5239] can0 (unregistered): slcan off pts0. [ 131.989261][ T5253] loop2: detected capacity change from 0 to 512 [ 132.074615][ T5254] sctp: [Deprecated]: syz.4.295 (pid 5254) Use of int in max_burst socket option. [ 132.074615][ T5254] Use struct sctp_assoc_value instead [ 132.131661][ T5253] EXT4-fs: Ignoring removed bh option [ 132.173576][ T5253] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.294: corrupted in-inode xattr [ 132.223614][ T5253] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.294: couldn't read orphan inode 15 (err -117) [ 132.266698][ T5253] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 132.487810][ T5263] loop1: detected capacity change from 0 to 512 [ 132.502954][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 132.522792][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.529155][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.541000][ T5263] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 132.598127][ T5267] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 132.610512][ T5263] EXT4-fs (loop1): 1 truncate cleaned up [ 132.635199][ T5263] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 132.706985][ T5270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 132.812867][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 132.966402][ T5277] loop2: detected capacity change from 0 to 128 [ 133.004151][ T5277] EXT4-fs (loop2): Test dummy encryption mode enabled [ 133.040754][ T5277] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 133.129172][ T5277] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 134.592370][ T5283] sctp: [Deprecated]: syz.0.307 (pid 5283) Use of int in max_burst socket option. [ 134.592370][ T5283] Use struct sctp_assoc_value instead [ 134.729491][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 134.797089][ T5289] FAULT_INJECTION: forcing a failure. [ 134.797089][ T5289] name failslab, interval 1, probability 0, space 0, times 0 [ 134.853112][ T5289] CPU: 0 PID: 5289 Comm: syz.4.308 Not tainted syzkaller #0 [ 134.860419][ T5289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.870468][ T5289] Call Trace: [ 134.873744][ T5289] [ 134.876672][ T5289] dump_stack_lvl+0x188/0x24e [ 134.881359][ T5289] ? show_regs_print_info+0x12/0x12 [ 134.886553][ T5289] ? load_image+0x410/0x410 [ 134.891063][ T5289] ? __might_sleep+0xd0/0xd0 [ 134.895654][ T5289] ? __lock_acquire+0x7c40/0x7c40 [ 134.900703][ T5289] ? node_tag_clear+0x1ec/0x310 [ 134.905581][ T5289] should_fail_ex+0x390/0x4c0 [ 134.910283][ T5289] should_failslab+0x5/0x20 [ 134.914799][ T5289] slab_pre_alloc_hook+0x59/0x300 [ 134.919866][ T5289] ? __kernfs_new_node+0xa6/0x7f0 [ 134.924927][ T5289] __kmem_cache_alloc_node+0x4f/0x270 [ 134.930323][ T5289] ? __kernfs_new_node+0xa6/0x7f0 [ 134.935360][ T5289] __kmalloc_node_track_caller+0xa0/0x240 [ 134.941101][ T5289] kstrdup_const+0x56/0x90 [ 134.945534][ T5289] __kernfs_new_node+0xa6/0x7f0 [ 134.950403][ T5289] ? vsnprintf+0x1b22/0x1c20 [ 134.955022][ T5289] ? kernfs_new_node+0x250/0x250 [ 134.959985][ T5289] ? snprintf+0xe5/0x140 [ 134.964244][ T5289] ? vscnprintf+0x80/0x80 [ 134.968589][ T5289] kernfs_new_node+0x148/0x250 [ 134.973390][ T5289] __kernfs_create_file+0x47/0x2e0 [ 134.978518][ T5289] cgroup_addrm_files+0x80c/0xd50 [ 134.983562][ T5289] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 134.989738][ T5289] ? mark_lock+0x94/0x320 [ 134.994087][ T5289] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 135.000089][ T5289] ? __local_bh_enable_ip+0x136/0x1c0 [ 135.005472][ T5289] ? lockdep_hardirqs_on+0x94/0x140 [ 135.010696][ T5289] css_populate_dir+0x157/0x3b0 [ 135.015563][ T5289] cgroup_apply_control_enable+0x641/0xb00 [ 135.021387][ T5289] cgroup_mkdir+0xc7f/0xe70 [ 135.025903][ T5289] ? css_task_iter_end+0x280/0x280 [ 135.031037][ T5289] ? kernfs_iop_permission+0x26d/0x350 [ 135.036509][ T5289] ? css_task_iter_end+0x280/0x280 [ 135.041629][ T5289] kernfs_iop_mkdir+0x23d/0x3d0 [ 135.046494][ T5289] vfs_mkdir+0x386/0x570 [ 135.050756][ T5289] do_mkdirat+0x1d8/0x440 [ 135.055116][ T5289] ? vfs_mkdir+0x570/0x570 [ 135.059550][ T5289] __x64_sys_mkdirat+0x85/0x90 [ 135.064329][ T5289] do_syscall_64+0x4c/0xa0 [ 135.068761][ T5289] ? clear_bhb_loop+0x60/0xb0 [ 135.073446][ T5289] ? clear_bhb_loop+0x60/0xb0 [ 135.078135][ T5289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.084065][ T5289] RIP: 0033:0x7f237759e159 [ 135.088492][ T5289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.108122][ T5289] RSP: 002b:00007f23784b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 135.116543][ T5289] RAX: ffffffffffffffda RBX: 00007f2377825fa0 RCX: 00007f237759e159 [ 135.124529][ T5289] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 135.132508][ T5289] RBP: 00007f237763506b R08: 0000000000000000 R09: 0000000000000000 [ 135.140488][ T5289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.148464][ T5289] R13: 00007f2377826038 R14: 00007f2377825fa0 R15: 00007ffc416d6d78 [ 135.156458][ T5289] [ 135.168193][ T5295] loop2: detected capacity change from 0 to 512 [ 135.192382][ T5295] EXT4-fs: Ignoring removed bh option [ 135.299870][ T5295] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.311: corrupted in-inode xattr [ 135.339473][ T5295] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.311: couldn't read orphan inode 15 (err -117) [ 135.395970][ T5295] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 135.523611][ T5311] loop1: detected capacity change from 0 to 512 [ 135.537418][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 135.565003][ T5311] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 135.730407][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 136.212475][ T26] audit: type=1326 audit(1789742201.920:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.2.321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f463579e159 code=0x0 [ 136.461937][ T5326] loop1: detected capacity change from 0 to 128 [ 136.495648][ T5328] 9pnet_fd: Insufficient options for proto=fd [ 136.505251][ T5326] EXT4-fs (loop1): Test dummy encryption mode enabled [ 136.527590][ T5326] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 136.561765][ T5326] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.329349][ T5289] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12 [ 138.414156][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 138.607728][ T5340] loop1: detected capacity change from 0 to 1024 [ 138.659281][ T5340] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.710134][ T5340] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 138.765907][ T5340] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 138.796344][ T5351] loop2: detected capacity change from 0 to 512 [ 138.806293][ T5340] System zones: 0-1, 3-36 [ 138.850082][ T5340] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 138.880834][ T5351] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.331: bg 0: block 4: invalid block bitmap [ 138.998645][ T5351] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 139.055272][ T5351] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.331: invalid indirect mapped block 1 (level 1) [ 139.091877][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 139.117953][ T5351] EXT4-fs (loop2): 1 truncate cleaned up [ 139.158930][ T5351] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 139.441447][ T5365] loop4: detected capacity change from 0 to 128 [ 139.463294][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 140.757841][ T5365] EXT4-fs (loop4): Test dummy encryption mode enabled [ 140.851028][ T5365] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 140.977865][ T5365] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.638227][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 142.823890][ T5397] loop0: detected capacity change from 0 to 512 [ 142.832815][ T5396] loop4: detected capacity change from 0 to 128 [ 142.882983][ T5397] EXT4-fs: Ignoring removed bh option [ 142.888489][ T5396] EXT4-fs (loop4): Test dummy encryption mode enabled [ 142.932707][ T5397] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.348: corrupted in-inode xattr [ 142.946501][ T5396] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 142.977604][ T5396] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.988929][ T5397] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.348: couldn't read orphan inode 15 (err -117) [ 143.185213][ T5397] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 145.855531][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 146.099667][ T4285] EXT4-fs (loop0): unmounting filesystem. [ 146.348020][ T5427] loop3: detected capacity change from 0 to 128 [ 146.384685][ T5427] EXT4-fs (loop3): Test dummy encryption mode enabled [ 146.393200][ T5432] loop1: detected capacity change from 0 to 512 [ 147.736791][ T5427] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 147.747182][ T5432] EXT4-fs: Ignoring removed i_version option [ 147.768085][ T5432] EXT4-fs: Ignoring removed bh option [ 147.782194][ T5427] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 147.797028][ T5437] FAULT_INJECTION: forcing a failure. [ 147.797028][ T5437] name failslab, interval 1, probability 0, space 0, times 0 [ 147.918026][ T5432] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.358: inode #13: comm syz.1.358: iget: illegal inode # [ 148.085330][ T5437] CPU: 0 PID: 5437 Comm: syz.4.359 Not tainted syzkaller #0 [ 148.092740][ T5437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.102891][ T5437] Call Trace: [ 148.106166][ T5437] [ 148.109101][ T5437] dump_stack_lvl+0x188/0x24e [ 148.113792][ T5437] ? show_regs_print_info+0x12/0x12 [ 148.119001][ T5437] ? load_image+0x410/0x410 [ 148.123514][ T5437] ? __might_sleep+0xd0/0xd0 [ 148.128129][ T5437] ? __lock_acquire+0x7c40/0x7c40 [ 148.133282][ T5437] should_fail_ex+0x390/0x4c0 [ 148.138054][ T5437] should_failslab+0x5/0x20 [ 148.142590][ T5437] slab_pre_alloc_hook+0x59/0x300 [ 148.147650][ T5437] kmem_cache_alloc+0x56/0x2f0 [ 148.152438][ T5437] ? getname_flags+0xb7/0x500 [ 148.157144][ T5437] getname_flags+0xb7/0x500 [ 148.161659][ T5437] __x64_sys_mkdirat+0x78/0x90 [ 148.166419][ T5437] do_syscall_64+0x4c/0xa0 [ 148.170844][ T5437] ? clear_bhb_loop+0x60/0xb0 [ 148.175516][ T5437] ? clear_bhb_loop+0x60/0xb0 [ 148.180222][ T5437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.186153][ T5437] RIP: 0033:0x7f237759e159 [ 148.190595][ T5437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.210212][ T5437] RSP: 002b:00007f23784b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 148.218638][ T5437] RAX: ffffffffffffffda RBX: 00007f2377825fa0 RCX: 00007f237759e159 [ 148.226618][ T5437] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 148.234601][ T5437] RBP: 00007f237763506b R08: 0000000000000000 R09: 0000000000000000 [ 148.242587][ T5437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.250570][ T5437] R13: 00007f2377826038 R14: 00007f2377825fa0 R15: 00007ffc416d6d78 [ 148.258560][ T5437] [ 149.526440][ T5440] < [ 149.527565][ T5432] EXT4-fs (loop1): Remounting filesystem read-only [ 149.576182][ T5432] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.358: couldn't read orphan inode 13 (err -117) [ 149.638690][ T5432] EXT4-fs (loop1): Remounting filesystem read-only [ 149.748953][ T5432] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 149.761083][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 149.919266][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 149.947303][ T5447] loop2: detected capacity change from 0 to 1024 [ 150.006814][ T5447] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 150.054776][ T5447] EXT4-fs (loop2): barriers disabled [ 150.078979][ T5447] JBD2: no valid journal superblock found [ 150.105054][ T5447] EXT4-fs (loop2): error loading journal [ 150.215535][ T5455] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 150.432512][ T5455] [ 150.434870][ T5455] ====================================================== [ 150.441876][ T5455] WARNING: possible circular locking dependency detected [ 150.448892][ T5455] syzkaller #0 Not tainted [ 150.453291][ T5455] ------------------------------------------------------ [ 150.460385][ T5455] syz.0.366/5455 is trying to acquire lock: [ 150.466272][ T5455] ffffffff8d805a08 (tpg_instances_lock){+.+.}-{3:3}, at: tcm_alloc+0x1d/0x2c0 [ 150.475154][ T5455] [ 150.475154][ T5455] but task is already holding lock: [ 150.482513][ T5455] ffff88807c97f310 (&gi->lock){+.+.}-{3:3}, at: config_usb_cfg_link+0x55/0x250 [ 150.491505][ T5455] [ 150.491505][ T5455] which lock already depends on the new lock. [ 150.491505][ T5455] [ 150.501908][ T5455] [ 150.501908][ T5455] the existing dependency chain (in reverse order) is: [ 150.510923][ T5455] [ 150.510923][ T5455] -> #2 (&gi->lock){+.+.}-{3:3}: [ 150.518033][ T5455] __mutex_lock+0x12d/0xae0 [ 150.523059][ T5455] config_usb_cfg_link+0x55/0x250 [ 150.528639][ T5455] configfs_symlink+0x5a4/0x13c0 [ 150.534182][ T5455] vfs_symlink+0x245/0x3d0 [ 150.539113][ T5455] do_symlinkat+0x1b6/0x400 [ 150.544134][ T5455] __x64_sys_symlinkat+0x95/0xa0 [ 150.549614][ T5455] do_syscall_64+0x4c/0xa0 [ 150.554581][ T5455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.561017][ T5455] [ 150.561017][ T5455] -> #1 (&sb->s_type->i_mutex_key#24){++++}-{3:3}: [ 150.569729][ T5455] down_write+0x36/0x60 [ 150.574418][ T5455] configfs_depend_item_unlocked+0x14f/0x430 [ 150.580934][ T5455] usbg_make_tpg+0x1dd/0x550 [ 150.586064][ T5455] target_fabric_make_tpg+0xa0/0x6d0 [ 150.591878][ T5455] configfs_mkdir+0x511/0x9e0 [ 150.597086][ T5455] vfs_mkdir+0x386/0x570 [ 150.601855][ T5455] do_mkdirat+0x1d8/0x440 [ 150.606715][ T5455] __x64_sys_mkdirat+0x85/0x90 [ 150.612017][ T5455] do_syscall_64+0x4c/0xa0 [ 150.616959][ T5455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.623386][ T5455] [ 150.623386][ T5455] -> #0 (tpg_instances_lock){+.+.}-{3:3}: [ 150.631295][ T5455] __lock_acquire+0x2d18/0x7c40 [ 150.636678][ T5455] lock_acquire+0x1bb/0x4a0 [ 150.641707][ T5455] __mutex_lock+0x12d/0xae0 [ 150.646739][ T5455] tcm_alloc+0x1d/0x2c0 [ 150.651432][ T5455] usb_get_function+0x59/0xa0 [ 150.656646][ T5455] config_usb_cfg_link+0x144/0x250 [ 150.662300][ T5455] configfs_symlink+0x5a4/0x13c0 [ 150.667763][ T5455] vfs_symlink+0x245/0x3d0 [ 150.672706][ T5455] do_symlinkat+0x1b6/0x400 [ 150.677752][ T5455] __x64_sys_symlinkat+0x95/0xa0 [ 150.683216][ T5455] do_syscall_64+0x4c/0xa0 [ 150.688161][ T5455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.694586][ T5455] [ 150.694586][ T5455] other info that might help us debug this: [ 150.694586][ T5455] [ 150.704831][ T5455] Chain exists of: [ 150.704831][ T5455] tpg_instances_lock --> &sb->s_type->i_mutex_key#24 --> &gi->lock [ 150.704831][ T5455] [ 150.718666][ T5455] Possible unsafe locking scenario: [ 150.718666][ T5455] [ 150.726118][ T5455] CPU0 CPU1 [ 150.731484][ T5455] ---- ---- [ 150.736850][ T5455] lock(&gi->lock); [ 150.740755][ T5455] lock(&sb->s_type->i_mutex_key#24); [ 150.748743][ T5455] lock(&gi->lock); [ 150.755163][ T5455] lock(tpg_instances_lock); [ 150.759846][ T5455] [ 150.759846][ T5455] *** DEADLOCK *** [ 150.759846][ T5455] [ 150.767999][ T5455] 3 locks held by syz.0.366/5455: [ 150.773046][ T5455] #0: ffff888147ed4460 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 150.782296][ T5455] #1: ffff888056160150 (&sb->s_type->i_mutex_key#24){++++}-{3:3}, at: configfs_symlink+0x47b/0x13c0 [ 150.793201][ T5455] #2: ffff88807c97f310 (&gi->lock){+.+.}-{3:3}, at: config_usb_cfg_link+0x55/0x250 [ 150.802615][ T5455] [ 150.802615][ T5455] stack backtrace: [ 150.808504][ T5455] CPU: 0 PID: 5455 Comm: syz.0.366 Not tainted syzkaller #0 [ 150.815792][ T5455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.825854][ T5455] Call Trace: [ 150.829143][ T5455] [ 150.832081][ T5455] dump_stack_lvl+0x188/0x24e [ 150.836799][ T5455] ? load_image+0x410/0x410 [ 150.841324][ T5455] ? show_regs_print_info+0x12/0x12 [ 150.846534][ T5455] ? print_circular_bug+0x12b/0x1a0 [ 150.851753][ T5455] check_noncircular+0x296/0x330 [ 150.856706][ T5455] ? add_chain_block+0x9b0/0x9b0 [ 150.861666][ T5455] ? lockdep_lock+0xf1/0x1f0 [ 150.866270][ T5455] ? _find_first_zero_bit+0xd2/0x100 [ 150.871567][ T5455] __lock_acquire+0x2d18/0x7c40 [ 150.876437][ T5455] ? pidfd_create+0xd0/0xf0 [ 150.880955][ T5455] ? stack_trace_save+0xf0/0xf0 [ 150.885814][ T5455] ? verify_lock_unused+0x140/0x140 [ 150.891033][ T5455] ? verify_lock_unused+0x140/0x140 [ 150.896249][ T5455] lock_acquire+0x1bb/0x4a0 [ 150.900766][ T5455] ? tcm_alloc+0x1d/0x2c0 [ 150.905111][ T5455] ? __might_sleep+0xd0/0xd0 [ 150.909718][ T5455] ? read_lock_is_recursive+0x10/0x10 [ 150.915098][ T5455] ? __mutex_trylock_common+0x15c/0x260 [ 150.920651][ T5455] __mutex_lock+0x12d/0xae0 [ 150.925177][ T5455] ? tcm_alloc+0x1d/0x2c0 [ 150.929535][ T5455] ? rcu_is_watching+0x11/0xa0 [ 150.934319][ T5455] ? trace_contention_end+0x5f/0x170 [ 150.939710][ T5455] ? __mutex_lock+0x1ab/0xae0 [ 150.944402][ T5455] ? tcm_alloc+0x1d/0x2c0 [ 150.948752][ T5455] ? mutex_lock_nested+0x10/0x10 [ 150.953708][ T5455] ? config_usb_cfg_link+0x55/0x250 [ 150.958932][ T5455] ? mutex_lock_nested+0x10/0x10 [ 150.963905][ T5455] tcm_alloc+0x1d/0x2c0 [ 150.968079][ T5455] usb_get_function+0x59/0xa0 [ 150.972768][ T5455] config_usb_cfg_link+0x144/0x250 [ 150.977891][ T5455] configfs_symlink+0x5a4/0x13c0 [ 150.982835][ T5455] ? end_current_label_crit_section+0x14b/0x170 [ 150.989087][ T5455] ? common_perm+0x15d/0x1b0 [ 150.993692][ T5455] ? from_kgid+0x14f/0x6a0 [ 150.998120][ T5455] ? make_kgid+0x650/0x650 [ 151.002567][ T5455] ? apparmor_path_symlink+0x1ac/0x230 [ 151.008070][ T5455] ? lookup_one_qstr_excl+0x11c/0x240 [ 151.013464][ T5455] ? detach_groups+0x370/0x370 [ 151.018240][ T5455] ? inode_permission+0xef/0x480 [ 151.023183][ T5455] ? bpf_lsm_inode_symlink+0x5/0x10 [ 151.028405][ T5455] ? security_inode_symlink+0xb2/0x100 [ 151.033890][ T5455] vfs_symlink+0x245/0x3d0 [ 151.038318][ T5455] do_symlinkat+0x1b6/0x400 [ 151.042826][ T5455] ? vfs_symlink+0x3d0/0x3d0 [ 151.047431][ T5455] __x64_sys_symlinkat+0x95/0xa0 [ 151.052387][ T5455] do_syscall_64+0x4c/0xa0 [ 151.056809][ T5455] ? clear_bhb_loop+0x60/0xb0 [ 151.061494][ T5455] ? clear_bhb_loop+0x60/0xb0 [ 151.066183][ T5455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.072092][ T5455] RIP: 0033:0x7ff36af9e159 [ 151.076521][ T5455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.096134][ T5455] RSP: 002b:00007ff36bdeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 151.104555][ T5455] RAX: ffffffffffffffda RBX: 00007ff36b225fa0 RCX: 00007ff36af9e159 [ 151.112537][ T5455] RDX: 0000200000000600 RSI: ffffffffffffff9c RDI: 00002000000005c0 [ 151.120509][ T5455] RBP: 00007ff36b03506b R08: 0000000000000000 R09: 0000000000000000 [ 151.128493][ T5455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.136481][ T5455] R13: 00007ff36b226038 R14: 00007ff36b225fa0 R15: 00007fffe59a1ee8 [ 151.144482][ T5455] [ 151.548860][ T4319] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 151.730031][ T4319] usb 1-1: Dual-Role OTG device on HNP port [ 151.736271][ T4319] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 151.746483][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.756004][ T7] Using the BOT protocol [ 151.763502][ T7] Using the UAS protocol [ 151.770515][ T4319] scsi host1: uas [ 151.784215][ T39] scsi 1:0:0:0: Direct-Access LIO-ORG RAMDISK-MCP 4.0 PQ: 0 ANSI: 6 [ 151.800038][ T4334] sd 1:0:0:0: [sdb] 512 512-byte logical blocks: (262 kB/256 KiB) [ 151.808714][ T39] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 151.815962][ T4334] sd 1:0:0:0: [sdb] Write Protect is off [ 151.821942][ T4334] sd 1:0:0:0: [sdb] Mode Sense: 43 00 00 08 [ 151.830890][ T4334] sd 1:0:0:0: [sdb] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA [ 151.855524][ T4334] sd 1:0:0:0: [sdb] Attached SCSI disk [ 151.883963][ T5463] udevd[5463]: failed to execute '/lib/udev/ata_id' 'ata_id --export /dev/sdb': Input/output error