last executing test programs: 3m37.040287935s ago: executing program 0 (id=70): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 3m36.116765462s ago: executing program 0 (id=73): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2000004, &(0x7f0000002480)=ANY=[@ANYBLOB="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"/1286], 0x21, 0x11f4, &(0x7f0000001280)="$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") r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x110}, 0x2}, 0x0) 3m33.560256385s ago: executing program 0 (id=82): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x83, 0xffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m32.237854208s ago: executing program 0 (id=86): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) truncate(&(0x7f0000000000)='./file1\x00', 0xfbb0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x309c00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 3m30.352730284s ago: executing program 0 (id=91): r0 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m29.36497578s ago: executing program 0 (id=97): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @empty, 0xfffffffc}, 0x1c) 3m26.406111256s ago: executing program 32 (id=97): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @empty, 0xfffffffc}, 0x1c) 9.943593496s ago: executing program 5 (id=794): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000002000000000000040017028500000017000000850000000f00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xb, 0x0, &(0x7f0000000900)="e02742e8680d85ff978276", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 9.282985813s ago: executing program 5 (id=797): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x22401) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) 6.459294357s ago: executing program 5 (id=809): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000380)={[{@acl}]}, 0x1, 0x561, &(0x7f0000000f80)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000000), &(0x7f00000002c0)="ff7f000000000000000000004406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), &(0x7f0000000340)=ANY=[], 0xfe37, 0x0) 5.895911059s ago: executing program 3 (id=813): ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x1d, 0x20, 0x1e5, 0x0}) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf9, 0x2}}}, 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010000", 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041817aaaaaaaaaa10"], 0x1a) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="040e0402030c"], 0x7) 5.361857641s ago: executing program 4 (id=815): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150007000000", @ANYRES64=r0], 0x38}}, 0x10) 5.133124005s ago: executing program 1 (id=816): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000032c0)='./file0\x00', r0, &(0x7f0000003300)='./file0\x00') ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) 5.112218658s ago: executing program 5 (id=817): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2000004, &(0x7f0000002480)=ANY=[@ANYBLOB="00e789da34e04a1ffb124b2c2fb684c70b90bbb45efd97899a16f2df4fa2e8f06ac2c5352509e3c51d882eb3ec0dd3b1c96e980163890d2d0d1b8d3d62f6d77b0209e166e2ca4c35483d49316daf522556a16cab12d75a852bc680da7ea837480feb2060a1e20a59b7745235030000004ed0351cb5b416ba1c57217be5a338392f831617ee8c35bb61f0a9eeed3b1226b18c4b455ab222d7ae1b5258d5643d70000000000000000000ae468a387d9e63008000000000000063a454d1ab8760076a893752105f030c49caf2fdb69e1b974ac90855ac250f8f73e16bc593730b88d7a3346b945e276875915040ce4901262cd8ce8191ee84e3ce5526a0a43b707cc711a3311f840cad641a013c6dd783aa895227b3d50a86e15a57e26666aaa296b7ddc4c8f421cf9d76d344bf6522f5d1138659d3de84ce13b085a2ed9d66c93767378423521cc4ea440e0ac3b953e1ca1675a716a97a5c3106aba648f119eeab4747b9b53000475e0a34514ccf397ea6f170e018122a98f135beac48d2ed195e20fdd226c7f5a20000ad1fcfbee59924e161280a8b78fe34b2fa3efa7c1d4268bf090000ecb4ece3234c232659fee3ff9e6d21e008a570bb490a65b84ea8b6d6507355cb1112fae6e3456bf8da53e1df20458e59456822dbb8dbd7ce0f928d5fbd6414fe8ab5277f3fd5ce6be044993f93e697a69484cc0e65ec742443c84e21a440998c8d69c12c2db7aee2872c6e0671d639e8f6bece219dcd0f69b9867dfc3187c882c035809c81832d7416f90c734be30c2faf0c22bfc8d95dfc7b9bac96b838c98ae5a75b9dc9e967ef5edf311bbebd7ca803cea8f5b9ec5b3edd6c44d633b71bde97a3c10a468432ff3d4e63ce3ecfa640d44b70b68744d26e72389e6c61767725d2c692443bc949c28b1a374e541bd352ca2f3bf64d883862dc24d8e27d86b6e38bc269f110c3d563f8e4ec9a98016b6b58157deeefa8fa022514bdc75f794094700cb8fa2b61310cbf9058bce5f2399055929e0fc732e0d5db926fe1b09a2993ff038d8099c229bda0801f8b81719d73b4abac97f704a0942051bae38b00b69d7fa69d738f99f73b19082ec0c99442d97ddbf68a4822aa2a2673478f81f14f67beee619b9d9882f7eabfb5000000000000000000003ff8795b5ec2de11479e781396117c84449647684239c9b9475b389a6a76d36c31f39539d928d2c58f188b4bf713d0915df4cc7de48a930935dbb01c9422d604467d209fd1421c7fc503cabde4bb193ff3654377c6e4fb72dcfc835f760bae7447068c2e43433e3d77c6805b559a04f3ebb741a9bbf57274b1da7800000000000000000000000000000000000000001c4f225672f3465b2638e921d80d58dca4ee4592d8cc0c06b2e390b7b1c713a46bc8ece9be25f055a59032576bc00a844c32b46040a607eaeb886ec0cb8e90c5a4075caa8a358ab81e78ad794a20f772b73466a43cd696401521793e54b1c4aa58d506b661f393e7233337473f36c2dbb15ae673afe82ebe45cc6f776162e43b74d9b9ca6f68d6bc8261600b27431e0f6f4f1e0947f69d2d812ebc9d2a8869b14a84dbdcdc5055b97a241e2f707740bb966b6c58408aceb9f6a943f614d2a6093c60c0dfb511b02f191ef6fa6e5a1a86687a44ec6098439a2ef55a4ba07e2b0f62ae86e1458f63f6b8b2d2b9990495f17b6d1052b19472a97d41204a8be48e380be2e6885c7de0807f2c154ad4f25b16027bc4aeb85dc798e7eef25631bfd79c8e0aff725dcd4b91c61bf8d72f74e4dbae00"/1286], 0x21, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81b"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x14, 0x4, 0xa, 0x401, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40045001}, 0x8000) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x110}, 0x2}, 0x0) 4.774731599s ago: executing program 2 (id=818): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000100000000000000001008510000006", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 4.366042624s ago: executing program 3 (id=819): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 4.339050723s ago: executing program 4 (id=820): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000002000000000000040017028500000017000000850000000f00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xd, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.315392162s ago: executing program 1 (id=821): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRES64=0x77359400, @ANYRESOCT, @ANYRES64=0x0, @ANYRES8=0x0, @ANYRES8=r0], 0x48}}, 0x0) 3.914709009s ago: executing program 2 (id=822): syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 3.533973475s ago: executing program 4 (id=823): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000001c0)={[{@usrquota}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x13, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, 'wlan0\x00'}}, 0x1e) 3.533720815s ago: executing program 1 (id=824): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x0, r2}, 0x10) 3.288095899s ago: executing program 3 (id=825): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 3.21916635s ago: executing program 2 (id=826): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70fd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) getsockname$packet(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x14002) 2.76254203s ago: executing program 5 (id=827): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000380)={[{@acl}]}, 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000000), &(0x7f00000002c0)="ff7f000000000000000000004406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), &(0x7f0000000340)=ANY=[], 0xfe37, 0x0) 2.413885665s ago: executing program 3 (id=828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r1, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x38}}, 0x0) 2.311589337s ago: executing program 1 (id=829): ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x1d, 0x20, 0x1e5, 0x0}) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf9, 0x2}}}, 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010000", 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041817aaaaaaaaaa10"], 0x1a) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="040e0402030c"], 0x7) 2.186621211s ago: executing program 2 (id=830): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680", @ANYRES64=r0], 0x38}}, 0x10) 2.148151766s ago: executing program 4 (id=831): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000032c0)='./file0\x00', r0, &(0x7f0000003300)='./file0\x00') ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) 1.311789492s ago: executing program 3 (id=832): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000100851000000600000018", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 1.282698762s ago: executing program 2 (id=833): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000002000000000000040017028500000017000000850000000f00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xd, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.222476795s ago: executing program 1 (id=834): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x4f27, 0x5, 0x1022, 0x401, 0x1, 0x6dc2, 0xfff, 0x5, 0x5, 0x3df, 0x800e, 0x3ff, 0x4, 0xfffff350, 0x9, 0x9, 0x0, 0x4, 0x2, 0x9, 0x80000089, 0xfffffffe, 0x8, 0xfffffff5, 0x8000, 0x0, 0x3a2, 0x0, 0x1e9f, 0xc6, 0xdffffffa]}) 1.042390305s ago: executing program 5 (id=835): syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x38, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001000010400000000f61c000000480000", @ANYRES32=r1, @ANYBLOB="ae"], 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x4981, 0x0) setsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000600)="d0d43d954be91fe9b0d243c69fb8", 0xe, 0x80810, &(0x7f00000000c0)={0x11, 0x86dd, r11, 0x1, 0x3, 0x6, @remote}, 0x14) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x86dd, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) 819.007366ms ago: executing program 4 (id=836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0) 474.348899ms ago: executing program 2 (id=837): ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x1d, 0x20, 0x1e5, &(0x7f0000000600)}) syz_emit_vhci(0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010000", 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041817aaaaaaaaaa10"], 0x1a) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="040e0402030c"], 0x7) 442.409046ms ago: executing program 3 (id=838): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0xffffffff, 0x3, "000080f100df0000009c6783d29c0800"}) close(r0) r2 = syz_open_pts(r1, 0x42) r3 = dup3(r2, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x8084, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 352.684463ms ago: executing program 1 (id=839): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 4 (id=840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x40, 0x0, 0x0, 0x1, 0x7, 0x3, 0x1ba5, 0x6, 0x9, 0x8001, 0x3, 0xe6c4, 0x10000, 0x3, 0x3, 0xa971, 0x7f, 0x5, 0x2, 0x8, 0x1, 0x5, 0x8, 0x9, 0xa4, 0x5, 0x5, 0x6, 0xe72, 0x1, 0x0, 0x4, 0x3, 0x5, 0x3, 0x7fff, 0x3, 0xd, 0x113, 0x8, 0xd, 0x9, 0x401, 0xffff, 0x6, 0x4, 0x2a9a, 0xfffffff9, 0x5, 0x1, 0x7, 0x0, 0x5, 0x1, 0x100, 0x9, 0x3fc000, 0x5, 0x8, 0x7, 0x40, 0x6, 0xfffff81c, 0x4, 0x2, 0xb9c7, 0x40, 0x400, 0x3, 0x2, 0x6c85, 0x88a, 0x3, 0xffff, 0x7, 0xb4c5, 0x4, 0x4, 0x4, 0x4, 0x2, 0xbe42, 0x5, 0x6, 0x7, 0x71, 0x4, 0x2, 0x6, 0xbd, 0x7, 0xfffffdc4, 0x2, 0xc, 0x0, 0x4, 0x2, 0xd0, 0x10, 0x0, 0x19, 0x5, 0x9, 0x8, 0xfffffffa, 0xfffffffc, 0x9c3b, 0x81, 0x7, 0x5, 0xffff, 0xfffffff9, 0x9, 0x6b, 0x7, 0x1, 0x9, 0xff, 0x9, 0x7, 0xfff, 0x6, 0x1, 0x3, 0x5, 0x7, 0xc, 0x2, 0x4, 0x5bb, 0x7, 0x3, 0x679, 0x7, 0x2, 0x5, 0x0, 0xd, 0x10000, 0x7fffffff, 0x5, 0x81, 0x342, 0x2, 0x6, 0x10, 0x6a, 0xd7, 0x10001, 0xcf5, 0xfffffffc, 0x9, 0x2, 0x3, 0x2bd621da, 0xe8, 0x9, 0x6, 0x8, 0x8, 0x5, 0x4, 0x629, 0x0, 0x7a409af, 0xff, 0x8, 0x4, 0x9, 0xe, 0x73b052b9, 0x6, 0x10, 0x3, 0xa, 0x0, 0x1, 0x5a, 0xfff, 0x0, 0x1c, 0xe7a7, 0xfffffffa, 0x6, 0x3, 0xa, 0xfff, 0x2, 0x2, 0x29e, 0x5, 0x47f, 0x0, 0x8, 0x4, 0x9b8, 0x7fff, 0x8, 0xffff, 0x10000, 0x400, 0x0, 0x0, 0xffffff39, 0x5, 0x6a80, 0x10001, 0x4, 0x3, 0x8000, 0x1, 0x2, 0x8, 0xd, 0xce2, 0xffffffe1, 0x3, 0x7, 0x2, 0x4, 0x0, 0x4, 0x4931, 0x80, 0x9, 0x81, 0xd, 0x0, 0x6, 0x2, 0x0, 0xafd7, 0xe, 0x0, 0x9, 0x3c115f2c, 0x2, 0x5, 0x3, 0x1, 0x419, 0x2, 0x9, 0xfffffffd, 0x0, 0x9, 0x2, 0x3, 0x1, 0x101, 0x1, 0x1, 0x3fffc, 0x2626, 0x6]}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffffffff, 0x3, 0x9, 0x1, 0x800, 0x9c3, 0x4, 0x0, 0x8, 0xffffffff, 0x3, 0x8, 0x8, 0xfffffffd, 0x8, 0x8001, 0x100, 0x3, 0x0, 0x588e, 0x1, 0x1e00, 0x101, 0x7, 0x80000000, 0xf8f1, 0x0, 0x401, 0x10, 0x1, 0xc00000, 0xfffffff7, 0x400, 0x7f, 0x80000000, 0x3, 0x6ade, 0x0, 0x4, 0x401, 0x1, 0x5, 0x8, 0x1, 0x7, 0x3, 0x80, 0x7fffffff, 0x2, 0x9, 0x3, 0x80, 0x8, 0xe, 0x1c9, 0x0, 0x2, 0x4, 0xfffffffa, 0x4, 0x1, 0x4, 0x3, 0x1, 0x8, 0x2, 0xe757, 0xfffffff7, 0x8001, 0x45f, 0x1ff, 0xe, 0xd, 0x7d3, 0x4, 0xb, 0x58c4637b, 0x5, 0x0, 0x1, 0x2, 0x6, 0xb90, 0x203, 0x6, 0x200, 0x7, 0x10000, 0x4, 0xffffff25, 0xa04, 0x78da, 0x0, 0x0, 0xffffffff, 0x80000001, 0x0, 0x5, 0x465, 0x1000006, 0xcd17, 0x9, 0x6, 0x2, 0xfffffffc, 0xfffffff7, 0x7f, 0x2, 0x6, 0x1, 0x40000, 0x6, 0x6, 0x0, 0x40, 0x8, 0x3, 0x23, 0x0, 0x6, 0x1, 0x2fe, 0x96, 0x0, 0x2, 0x5, 0x2, 0x9, 0x8, 0x0, 0x0, 0x7, 0x6, 0x80, 0x100, 0x7, 0x7f, 0x2, 0x200, 0x8, 0xe330fdc7, 0x9, 0x5, 0x7e, 0x2, 0x0, 0x5, 0xffff0000, 0x2, 0x81, 0x401, 0x7, 0x8, 0xffff669d, 0xffffff94, 0x7, 0x5, 0x10001, 0x7, 0x7, 0x4, 0x5, 0xb2fb, 0x1, 0x7ff, 0x85, 0xffffffff, 0x4ac, 0xfc9, 0x80000000, 0x1, 0xfb, 0x6, 0xb, 0x3, 0x40, 0x3, 0x2, 0x83, 0x6, 0x56a, 0x0, 0x9, 0x9, 0x1, 0x7, 0x9, 0x4, 0xe, 0x6, 0x6, 0x8, 0x0, 0xfffffffe, 0x5, 0x44, 0x4, 0x2, 0x1, 0xfffffff1, 0x6, 0x80000000, 0x4, 0x100, 0xfffffff7, 0x2a8, 0x2, 0x9, 0x7f, 0x4, 0x8, 0xffffffff, 0x6ed916d9, 0xfffffff8, 0x38, 0x3, 0x2, 0xd0, 0x36a0, 0xc, 0x3, 0x2, 0x1, 0x7df0, 0x9, 0x2009, 0x5, 0xfff, 0xc, 0x87, 0x8, 0x8, 0x80000000, 0x5, 0x3, 0x800, 0x1c43, 0x7, 0xa66, 0x6, 0x18000, 0x6, 0x4, 0x86f9, 0x6, 0x80, 0x200, 0x28000, 0x401, 0xffff, 0x4d, 0x2, 0xfc, 0x7, 0x2]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.160' (ED25519) to the list of known hosts. [ 198.487200][ T5759] cgroup: Unknown subsys name 'net' [ 198.623546][ T5759] cgroup: Unknown subsys name 'cpuset' [ 198.645945][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 205.848808][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 210.778683][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.788439][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.800170][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.814693][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.815656][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.831473][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.831820][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.840938][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.925127][ T5078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.937323][ T5078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.963193][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.980702][ T5078] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.007922][ T5078] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.039855][ T5078] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.058320][ T5078] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.069197][ T5078] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.069539][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.086834][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.102955][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.165237][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.379975][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.417097][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.428129][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.445290][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.457831][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.466713][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 212.961759][ T5781] Bluetooth: hci1: command tx timeout [ 212.967510][ T5781] Bluetooth: hci0: command tx timeout [ 213.011532][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 213.201253][ T5781] Bluetooth: hci2: command tx timeout [ 213.277342][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 213.284537][ T5781] Bluetooth: hci3: command tx timeout [ 213.522796][ T5781] Bluetooth: hci4: command tx timeout [ 213.623291][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 213.677942][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 213.753548][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.761450][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.770427][ T5777] bridge_slave_0: entered allmulticast mode [ 213.782208][ T5777] bridge_slave_0: entered promiscuous mode [ 213.925335][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.933171][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.946634][ T5777] bridge_slave_1: entered allmulticast mode [ 213.957140][ T5777] bridge_slave_1: entered promiscuous mode [ 214.366052][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.380338][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.388312][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.420955][ T5785] bridge_slave_0: entered allmulticast mode [ 214.443133][ T5785] bridge_slave_0: entered promiscuous mode [ 214.529640][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.584371][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.592927][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.602184][ T5785] bridge_slave_1: entered allmulticast mode [ 214.613274][ T5785] bridge_slave_1: entered promiscuous mode [ 214.983280][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.991130][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.000008][ T5792] bridge_slave_0: entered allmulticast mode [ 215.013460][ T5792] bridge_slave_0: entered promiscuous mode [ 215.040988][ T5781] Bluetooth: hci0: command tx timeout [ 215.046624][ T5781] Bluetooth: hci1: command tx timeout [ 215.057163][ T5777] team0: Port device team_slave_0 added [ 215.172505][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.180088][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.189232][ T5792] bridge_slave_1: entered allmulticast mode [ 215.198228][ T5792] bridge_slave_1: entered promiscuous mode [ 215.217259][ T5777] team0: Port device team_slave_1 added [ 215.263407][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.273434][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.280925][ T5781] Bluetooth: hci2: command tx timeout [ 215.281229][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.294248][ T5780] bridge_slave_0: entered allmulticast mode [ 215.303587][ T5780] bridge_slave_0: entered promiscuous mode [ 215.361153][ T5781] Bluetooth: hci3: command tx timeout [ 215.378301][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.386069][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.394149][ T5787] bridge_slave_0: entered allmulticast mode [ 215.403080][ T5787] bridge_slave_0: entered promiscuous mode [ 215.423762][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.433879][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.441810][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.449577][ T5780] bridge_slave_1: entered allmulticast mode [ 215.459717][ T5780] bridge_slave_1: entered promiscuous mode [ 215.525284][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.533097][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.542053][ T5787] bridge_slave_1: entered allmulticast mode [ 215.551549][ T5787] bridge_slave_1: entered promiscuous mode [ 215.600739][ T5781] Bluetooth: hci4: command tx timeout [ 215.634345][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.646710][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.653903][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.680085][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.792164][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.812582][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.819643][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.846052][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.899241][ T5785] team0: Port device team_slave_0 added [ 215.917549][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.984994][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.004233][ T5785] team0: Port device team_slave_1 added [ 216.019310][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.074841][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.158792][ T5792] team0: Port device team_slave_0 added [ 216.291598][ T5792] team0: Port device team_slave_1 added [ 216.327607][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.334859][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.361526][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.390763][ T5780] team0: Port device team_slave_0 added [ 216.461167][ T5787] team0: Port device team_slave_0 added [ 216.469742][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.477187][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.503596][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.523964][ T5780] team0: Port device team_slave_1 added [ 216.546101][ T5777] hsr_slave_0: entered promiscuous mode [ 216.555225][ T5777] hsr_slave_1: entered promiscuous mode [ 216.602420][ T5787] team0: Port device team_slave_1 added [ 216.660958][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.668106][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.694356][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.805731][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.813110][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.839692][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.854772][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.862304][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.895565][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.915061][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.922630][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.948949][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.030179][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.037400][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.064059][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.106542][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.113766][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.120864][ T5781] Bluetooth: hci1: command tx timeout [ 217.140624][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.146046][ T51] Bluetooth: hci0: command tx timeout [ 217.350153][ T5785] hsr_slave_0: entered promiscuous mode [ 217.359510][ T5785] hsr_slave_1: entered promiscuous mode [ 217.360949][ T5781] Bluetooth: hci2: command tx timeout [ 217.369025][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 217.376936][ T5785] Cannot create hsr debugfs directory [ 217.441105][ T5781] Bluetooth: hci3: command tx timeout [ 217.590398][ T5792] hsr_slave_0: entered promiscuous mode [ 217.599653][ T5792] hsr_slave_1: entered promiscuous mode [ 217.609104][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 217.615132][ T5792] Cannot create hsr debugfs directory [ 217.680784][ T5781] Bluetooth: hci4: command tx timeout [ 217.688847][ T5787] hsr_slave_0: entered promiscuous mode [ 217.698027][ T5787] hsr_slave_1: entered promiscuous mode [ 217.706560][ T5787] debugfs: 'hsr0' already exists in 'hsr' [ 217.712627][ T5787] Cannot create hsr debugfs directory [ 217.769274][ T5780] hsr_slave_0: entered promiscuous mode [ 217.781383][ T5780] hsr_slave_1: entered promiscuous mode [ 217.791243][ T5780] debugfs: 'hsr0' already exists in 'hsr' [ 217.797147][ T5780] Cannot create hsr debugfs directory [ 219.201141][ T5781] Bluetooth: hci1: command tx timeout [ 219.206853][ T51] Bluetooth: hci0: command tx timeout [ 219.328767][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 219.382560][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.403040][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 219.441440][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 219.451140][ T5781] Bluetooth: hci2: command tx timeout [ 219.520815][ T5781] Bluetooth: hci3: command tx timeout [ 219.564623][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.593676][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.631971][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.695605][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.762055][ T5781] Bluetooth: hci4: command tx timeout [ 219.893434][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 219.988990][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.021041][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.057536][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.416601][ T5780] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.469623][ T5780] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 220.544307][ T5780] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 220.573884][ T5780] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 220.909094][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.924132][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 220.979724][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.015112][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.059316][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.251839][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.278013][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.390035][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.397656][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.497786][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.505479][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.561409][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.584689][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.687985][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.695547][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.804453][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.812038][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.877600][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.063339][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.071391][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.088034][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.095632][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.366854][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.647747][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.815704][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.823428][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.935771][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.943503][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.079113][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.424457][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.566866][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.574587][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.808846][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.817101][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.946578][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.518056][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.675522][ T5792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.865246][ T5777] veth0_vlan: entered promiscuous mode [ 224.980712][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.027304][ T5777] veth1_vlan: entered promiscuous mode [ 225.165910][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.332727][ T5787] veth0_vlan: entered promiscuous mode [ 225.569286][ T5787] veth1_vlan: entered promiscuous mode [ 225.695493][ T5777] veth0_macvtap: entered promiscuous mode [ 225.814883][ T5777] veth1_macvtap: entered promiscuous mode [ 225.879438][ T5785] veth0_vlan: entered promiscuous mode [ 226.097905][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.127678][ T5785] veth1_vlan: entered promiscuous mode [ 226.222597][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.313198][ T5787] veth0_macvtap: entered promiscuous mode [ 226.373304][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.411940][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.433803][ T5787] veth1_macvtap: entered promiscuous mode [ 226.456005][ T3525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.531361][ T3525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.585024][ T3525] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.759453][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.857860][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.956456][ T1123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.005246][ T5785] veth0_macvtap: entered promiscuous mode [ 227.046692][ T1123] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.137193][ T1138] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.190866][ T1138] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.234659][ T5785] veth1_macvtap: entered promiscuous mode [ 227.350000][ T5792] veth0_vlan: entered promiscuous mode [ 227.539677][ T5780] veth0_vlan: entered promiscuous mode [ 227.600231][ T5792] veth1_vlan: entered promiscuous mode [ 227.677135][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.823410][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.906813][ T5780] veth1_vlan: entered promiscuous mode [ 227.968472][ T1123] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.021664][ T1123] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.083222][ T1123] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.133012][ T1123] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.324050][ T5792] veth0_macvtap: entered promiscuous mode [ 228.398708][ T5792] veth1_macvtap: entered promiscuous mode [ 228.588126][ T5780] veth0_macvtap: entered promiscuous mode [ 228.690557][ T5780] veth1_macvtap: entered promiscuous mode [ 228.799875][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.928302][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.097393][ T1147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.149890][ T1147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.210987][ T1147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.254665][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.319692][ T1147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.380397][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.515584][ T1147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.573415][ T1147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.676488][ T1147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.731633][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.040983][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.049044][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.369386][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.377606][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.972863][ T5777] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 234.177219][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.185911][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.511697][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.519933][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.763950][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.771814][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 235.941483][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.949838][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.492437][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.500807][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.933440][ T5965] ======================================================= [ 236.933440][ T5965] WARNING: The mand mount option has been deprecated and [ 236.933440][ T5965] and is ignored by this kernel. Remove the mand [ 236.933440][ T5965] option from the mount to silence this warning. [ 236.933440][ T5965] ======================================================= [ 237.815160][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.823452][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.215718][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.229640][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.462327][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.470380][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.677938][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.686361][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.907121][ T5989] loop4: detected capacity change from 0 to 128 [ 239.950210][ T5992] loop2: detected capacity change from 0 to 136 [ 240.061129][ T5989] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.190033][ T5989] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.614007][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 240.844419][ T5780] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.519720][ T6005] loop3: detected capacity change from 0 to 512 [ 241.625654][ T6005] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 241.641202][ T6005] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 241.652560][ T6005] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 241.846265][ T6005] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 241.872657][ T6005] System zones: 0-2, 18-18, 34-35 [ 241.979906][ T6005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 242.152517][ T6005] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 242.259686][ T6005] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 242.281660][ T6016] loop1: detected capacity change from 0 to 1024 [ 242.312356][ T6005] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 242.431946][ T6016] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 242.618386][ T6016] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.22: lblock 2 mapped to illegal pblock 2 (length 1) [ 242.669604][ T6005] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.19: bg 0: block 353: padding at end of block bitmap is not set [ 242.703484][ T6016] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 242.735618][ T6016] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.22: lblock 0 mapped to illegal pblock 48 (length 1) [ 242.813553][ T6016] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 242.823729][ T6016] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.22: Failed to acquire dquot type 0 [ 242.938593][ T6016] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 243.000895][ T6016] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.22: mark_inode_dirty error [ 243.077364][ T6016] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 243.149976][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.166579][ T6016] EXT4-fs (loop1): 1 orphan inode deleted [ 243.184734][ T12] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 243.208261][ T12] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 243.217274][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 243.263783][ T6016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.521265][ T6016] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.22: Invalid inode table block 1 in block_group 0 [ 243.556261][ T6016] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 244.139435][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.184602][ T5777] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 244.281773][ T5777] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 244.384028][ T5777] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 244.412364][ T6027] loop0: detected capacity change from 0 to 512 [ 244.434803][ T6027] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.476645][ T6027] EXT4-fs: Ignoring removed orlov option [ 244.631529][ T6027] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.27: corrupted in-inode xattr: bad e_name length [ 244.687985][ T6027] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.27: couldn't read orphan inode 15 (err -117) [ 244.811399][ T6027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.199640][ T6032] loop4: detected capacity change from 0 to 512 [ 245.316247][ T6032] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 245.344296][ T6034] loop1: detected capacity change from 0 to 1024 [ 245.417340][ T6032] EXT4-fs (loop4): orphan cleanup on readonly fs [ 245.435844][ T6032] EXT4-fs error (device loop4): ext4_orphan_get:1391: comm syz.4.30: inode #15: comm syz.4.30: iget: illegal inode # [ 245.546997][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.569873][ T6032] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.30: couldn't read orphan inode 15 (err -117) [ 245.675573][ T6034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.721090][ T6032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 245.897175][ T6032] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 246.026138][ T6032] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 246.158000][ T6034] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.28: error while reading EA inode 24 err=-116 [ 246.195224][ T6034] EXT4-fs error (device loop1): ext4_xattr_block_find:1879: inode #15: comm syz.1.28: corrupted xattr block 113: invalid header [ 246.468494][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.748220][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.629432][ T6049] syzkaller0: entered promiscuous mode [ 247.652940][ T6049] syzkaller0: entered allmulticast mode [ 247.676751][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 248.328595][ T6055] loop2: detected capacity change from 0 to 164 [ 248.486155][ T6055] Unable to read rock-ridge attributes [ 248.621763][ T6055] Unable to read rock-ridge attributes [ 250.061695][ T6065] loop1: detected capacity change from 0 to 4096 [ 250.225680][ T6065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.451090][ T30] audit: type=1800 audit(1769355420.894:2): pid=6065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.42" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 250.912553][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.334345][ T6077] loop2: detected capacity change from 0 to 512 [ 251.403007][ T6077] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 251.651286][ T6077] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.45: invalid indirect mapped block 4294967295 (level 0) [ 251.764298][ T6077] EXT4-fs (loop2): Remounting filesystem read-only [ 251.802251][ T6077] EXT4-fs (loop2): 1 orphan inode deleted [ 251.802371][ T6077] EXT4-fs (loop2): 1 truncate cleaned up [ 251.804832][ T6077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.421783][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.521296][ T6093] loop1: detected capacity change from 0 to 8192 [ 254.689719][ T6106] loop0: detected capacity change from 0 to 136 [ 255.008355][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 255.941657][ T6116] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 256.078504][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 256.087837][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 256.111414][ T6122] 9p: Bad value for 'rfdno' [ 256.158051][ T6124] loop4: detected capacity change from 0 to 164 [ 256.267594][ T6124] Unable to read rock-ridge attributes [ 256.414425][ T6124] Unable to read rock-ridge attributes [ 256.456065][ T6124] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 256.585327][ T6112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.034483][ T6116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.252438][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 257.334275][ T6123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.423068][ T6123] bond1: (slave bond0): making interface the new active one [ 257.471179][ T6123] bond1: (slave bond0): Enslaving as an active interface with an up link [ 258.453565][ T6136] loop3: detected capacity change from 0 to 512 [ 258.475796][ T6136] EXT4-fs: Ignoring removed nomblk_io_submit option [ 258.537180][ T6136] EXT4-fs: Ignoring removed orlov option [ 258.893067][ T6136] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.71: corrupted in-inode xattr: bad e_name length [ 258.937249][ T6136] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.71: couldn't read orphan inode 15 (err -117) [ 259.017987][ T6136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.553910][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.836547][ T6146] loop4: detected capacity change from 0 to 136 [ 260.092807][ T6148] loop1: detected capacity change from 0 to 128 [ 260.266659][ T6148] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.329560][ T6148] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.499787][ T6142] loop0: detected capacity change from 0 to 8192 [ 260.674656][ T6151] loop3: detected capacity change from 0 to 1024 [ 260.685844][ T6155] 9p: Bad value for 'rfdno' [ 260.835354][ T6151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.062608][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 261.847583][ T6161] capability: warning: `syz.0.82' uses deprecated v2 capabilities in a way that may be insecure [ 261.957507][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.113178][ T6164] loop1: detected capacity change from 0 to 512 [ 262.385471][ T6164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.046048][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.196654][ T6174] loop0: detected capacity change from 0 to 512 [ 263.237628][ T6175] loop2: detected capacity change from 0 to 512 [ 263.326922][ T6174] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 263.335359][ T6175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.432725][ T6175] EXT4-fs: Ignoring removed orlov option [ 263.463530][ T6174] EXT4-fs (loop0): 1 truncate cleaned up [ 263.492388][ T6174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.641159][ T6175] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.87: corrupted in-inode xattr: bad e_name length [ 263.807036][ T6175] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.87: couldn't read orphan inode 15 (err -117) [ 263.876678][ T6175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.452545][ T6185] loop3: detected capacity change from 0 to 128 [ 264.521436][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.555668][ T6185] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 264.594876][ T6185] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.166670][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.183797][ T5792] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 265.185511][ T1123] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.493980][ T1123] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.747678][ T1123] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.778905][ T6194] loop2: detected capacity change from 0 to 1024 [ 266.048926][ T6194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.127601][ T1123] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.198922][ T6189] loop4: detected capacity change from 0 to 8192 [ 266.986826][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.077578][ T1123] bridge_slave_1: left allmulticast mode [ 267.084036][ T1123] bridge_slave_1: left promiscuous mode [ 267.090991][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.156038][ T1123] bridge_slave_0: left allmulticast mode [ 267.162287][ T1123] bridge_slave_0: left promiscuous mode [ 267.169090][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.152060][ T1123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.175827][ T1123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.195442][ T1123] bond0 (unregistering): Released all slaves [ 268.690013][ T6208] loop3: detected capacity change from 0 to 512 [ 268.936289][ T6208] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 269.165372][ T1123] hsr_slave_0: left promiscuous mode [ 269.196511][ T1123] hsr_slave_1: left promiscuous mode [ 269.233148][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.240897][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.330074][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.337832][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.538209][ T1123] veth1_macvtap: left promiscuous mode [ 269.580971][ T1123] veth0_macvtap: left promiscuous mode [ 269.586973][ T1123] veth1_vlan: left promiscuous mode [ 269.625703][ T1123] veth0_vlan: left promiscuous mode [ 269.808835][ T6213] 9p: Bad value for 'wfdno' [ 270.134277][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.149622][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.161703][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.188687][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.220042][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.096514][ T6232] tmpfs: Bad value for 'mpol' [ 271.816377][ T6235] loop3: detected capacity change from 0 to 1024 [ 272.077859][ T6235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.326110][ T51] Bluetooth: hci2: command tx timeout [ 272.865114][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.183069][ T1123] team0 (unregistering): Port device team_slave_1 removed [ 273.223737][ T6253] loop4: detected capacity change from 0 to 512 [ 273.316740][ T1123] team0 (unregistering): Port device team_slave_0 removed [ 273.371515][ T6253] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 273.436261][ T6255] 9p: Bad value for 'wfdno' [ 274.401032][ T51] Bluetooth: hci2: command tx timeout [ 274.757144][ T6265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.121'. [ 276.482825][ T51] Bluetooth: hci2: command tx timeout [ 276.680634][ T6289] loop4: detected capacity change from 0 to 512 [ 276.712956][ T5837] kernel read not supported for file /59/syscall (pid: 5837 comm: kworker/1:3) [ 276.779730][ T6289] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 277.671761][ T6218] chnl_net:caif_netlink_parms(): no params data found [ 278.438010][ T6308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.136'. [ 278.560946][ T51] Bluetooth: hci2: command tx timeout [ 279.948608][ T6218] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.956414][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.068435][ T5834] kernel read not supported for file /67/syscall (pid: 5834 comm: kworker/0:3) [ 280.071702][ T6218] bridge_slave_0: entered allmulticast mode [ 280.133553][ T6218] bridge_slave_0: entered promiscuous mode [ 280.189995][ T6331] loop2: detected capacity change from 0 to 512 [ 280.233618][ T6218] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.241397][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.279860][ T6218] bridge_slave_1: entered allmulticast mode [ 280.324390][ T6331] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 280.340389][ T6218] bridge_slave_1: entered promiscuous mode [ 280.798382][ T6218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.993238][ T6218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.464638][ T6218] team0: Port device team_slave_0 added [ 281.547203][ T6218] team0: Port device team_slave_1 added [ 282.111080][ T6218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.118379][ T6218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.145442][ T6218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.209571][ T6351] loop1: detected capacity change from 0 to 512 [ 282.288816][ T6351] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 282.298539][ T6351] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 282.347962][ T6218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.361913][ T6218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.388766][ T6218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.432750][ T6351] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 282.479637][ T6351] System zones: 0-2, 18-18, 34-35 [ 282.509973][ T6351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 283.067817][ T5834] kernel read not supported for file /65/syscall (pid: 5834 comm: kworker/0:3) [ 283.188537][ T6218] hsr_slave_0: entered promiscuous mode [ 283.255220][ T6218] hsr_slave_1: entered promiscuous mode [ 283.285432][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.319603][ T6218] debugfs: 'hsr0' already exists in 'hsr' [ 283.326871][ T6218] Cannot create hsr debugfs directory [ 283.657223][ T6366] loop2: detected capacity change from 0 to 512 [ 283.834743][ T6366] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 284.208034][ T6369] loop1: detected capacity change from 0 to 1024 [ 285.789126][ T6384] loop3: detected capacity change from 0 to 512 [ 285.865132][ T6384] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 285.900815][ T6384] EXT4-fs (loop3): orphan cleanup on readonly fs [ 285.985563][ T6384] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.165: inode #15: comm syz.3.165: iget: illegal inode # [ 286.103317][ T6384] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.165: couldn't read orphan inode 15 (err -117) [ 286.212259][ T6384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 286.328860][ T6390] tipc: Started in network mode [ 286.334622][ T6390] tipc: Node identity 2a3cebbae50c, cluster identity 4711 [ 286.343174][ T6390] tipc: Enabled bearer , priority 0 [ 286.548618][ T6385] tipc: Disabling bearer [ 286.792969][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.945839][ T6218] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 287.096153][ T6397] loop2: detected capacity change from 0 to 512 [ 287.141186][ T6218] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 287.163474][ T6397] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 287.177682][ T6397] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 287.255993][ T6399] netlink: 20 bytes leftover after parsing attributes in process `syz.4.169'. [ 287.295522][ T6218] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 287.332305][ T6397] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 287.371232][ T6397] System zones: 0-2, 18-18, 34-35 [ 287.399510][ T6397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 287.531880][ T6218] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 288.068850][ T6407] loop1: detected capacity change from 0 to 1024 [ 288.119463][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.246599][ T6407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.342520][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.128495][ T6218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.484400][ T6218] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.571060][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.578667][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.757456][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.765254][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.875480][ T6435] loop2: detected capacity change from 0 to 512 [ 291.024919][ T6435] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 291.168062][ T6435] EXT4-fs (loop2): orphan cleanup on readonly fs [ 291.209126][ T6435] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.179: inode #15: comm syz.2.179: iget: illegal inode # [ 291.296122][ T6435] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.179: couldn't read orphan inode 15 (err -117) [ 291.320122][ T6440] tipc: Started in network mode [ 291.325614][ T6440] tipc: Node identity e6bed2f83ff2, cluster identity 4711 [ 291.334008][ T6440] tipc: Enabled bearer , priority 0 [ 291.348522][ T6442] netlink: 20 bytes leftover after parsing attributes in process `syz.3.181'. [ 291.422877][ T6435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 291.552600][ T6436] tipc: Disabling bearer [ 292.162802][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.159134][ T6457] loop1: detected capacity change from 0 to 512 [ 293.285567][ T6457] EXT4-fs: Ignoring removed nobh option [ 293.391664][ T6457] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 293.543435][ T6457] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 293.613772][ T6457] EXT4-fs (loop1): 1 truncate cleaned up [ 293.674071][ T6457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.304543][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.315280][ T6472] syzkaller0: entered promiscuous mode [ 294.321507][ T6472] syzkaller0: entered allmulticast mode [ 294.928570][ T6218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.064287][ T6492] tipc: Enabled bearer , priority 0 [ 296.073920][ T6493] loop1: detected capacity change from 0 to 512 [ 296.193194][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.198622][ T6493] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 296.199866][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.263471][ T6487] tipc: Disabling bearer [ 296.308300][ T6493] EXT4-fs (loop1): orphan cleanup on readonly fs [ 296.404078][ T6493] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.195: inode #15: comm syz.1.195: iget: illegal inode # [ 296.544250][ T6493] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.195: couldn't read orphan inode 15 (err -117) [ 296.673905][ T6493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 297.366914][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.372590][ T6515] random: crng reseeded on system resumption [ 298.387928][ T6513] loop1: detected capacity change from 0 to 512 [ 298.491264][ T6513] EXT4-fs: Ignoring removed nobh option [ 298.551027][ T6513] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 298.759015][ T6513] EXT4-fs (loop1): 1 truncate cleaned up [ 298.801668][ T6218] veth0_vlan: entered promiscuous mode [ 298.839158][ T6513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.197260][ T6218] veth1_vlan: entered promiscuous mode [ 299.632350][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.048344][ T6218] veth0_macvtap: entered promiscuous mode [ 300.248377][ T6218] veth1_macvtap: entered promiscuous mode [ 300.505364][ T6534] loop3: detected capacity change from 0 to 512 [ 300.637469][ T6218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.745871][ T6534] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 300.863339][ T6218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.038169][ T1123] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.052925][ T6538] tipc: Enabling of bearer rejected, failed to enable media [ 301.127453][ T1123] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.188711][ T1123] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.262783][ T1123] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.325501][ T6561] loop4: detected capacity change from 0 to 512 [ 303.376923][ T6561] EXT4-fs: Ignoring removed nobh option [ 303.406952][ T6561] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 303.568929][ T6561] EXT4-fs (loop4): 1 truncate cleaned up [ 303.623557][ T6561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.846001][ T6568] syzkaller0: entered promiscuous mode [ 303.854632][ T6568] syzkaller0: entered allmulticast mode [ 304.132352][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.955346][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 305.218308][ T6582] loop3: detected capacity change from 0 to 512 [ 305.319520][ T6582] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 305.720160][ T6592] tipc: Enabling of bearer rejected, failed to enable media [ 307.213836][ T6604] loop1: detected capacity change from 0 to 512 [ 307.275518][ T6604] EXT4-fs: Ignoring removed nomblk_io_submit option [ 307.328951][ T6604] EXT4-fs: Ignoring removed orlov option [ 307.503189][ T6604] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.225: corrupted in-inode xattr: bad e_name length [ 307.596693][ T6604] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.225: couldn't read orphan inode 15 (err -117) [ 307.632229][ T6604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.203693][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.276622][ T6614] loop4: detected capacity change from 0 to 1024 [ 309.054776][ T6623] syzkaller0: entered promiscuous mode [ 309.060804][ T6623] syzkaller0: entered allmulticast mode [ 309.838615][ T6630] loop4: detected capacity change from 0 to 512 [ 309.929214][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 310.056614][ T6630] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 311.149144][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.158088][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.272094][ T6648] loop4: detected capacity change from 0 to 512 [ 311.356086][ T6648] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 311.369725][ T6648] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 311.559914][ T6648] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 311.646380][ T6648] System zones: 0-2, 18-18, 34-35 [ 311.686076][ T6648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 311.916185][ T6660] loop1: detected capacity change from 0 to 512 [ 311.937521][ T6648] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 312.015683][ T6660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 312.091556][ T6648] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 312.111365][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.119540][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.129940][ T6660] EXT4-fs: Ignoring removed orlov option [ 312.131056][ T6648] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 312.251648][ T6660] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.238: corrupted in-inode xattr: bad e_name length [ 312.279102][ T6607] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 312.453520][ T6660] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.238: couldn't read orphan inode 15 (err -117) [ 312.527546][ T6660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.983624][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.514034][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.060333][ T6673] loop5: detected capacity change from 0 to 512 [ 314.338236][ T6673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.697728][ T6681] syzkaller0: entered promiscuous mode [ 314.703576][ T6681] syzkaller0: entered allmulticast mode [ 315.009735][ T6686] Bluetooth: MGMT ver 1.23 [ 315.157572][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.544648][ T6691] tipc: Started in network mode [ 315.549870][ T6691] tipc: Node identity 080211000001, cluster identity 4711 [ 315.565095][ T6691] tipc: Enabled bearer , priority 0 [ 315.732353][ T6686] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 316.522137][ T6699] loop1: detected capacity change from 0 to 512 [ 316.561054][ T5834] tipc: Node number set to 134418688 [ 316.621166][ T6699] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 316.630823][ T6699] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 316.672219][ T6699] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 316.701202][ T6699] System zones: 0-2, 18-18, 34-35 [ 316.750863][ T6699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 316.788450][ T6704] loop4: detected capacity change from 0 to 512 [ 316.897289][ T6704] EXT4-fs: Ignoring removed nomblk_io_submit option [ 316.908187][ T6704] EXT4-fs: Ignoring removed orlov option [ 316.921238][ T6699] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 317.013622][ T6704] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.253: corrupted in-inode xattr: bad e_name length [ 317.022096][ T6699] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 317.038394][ T6699] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 317.139955][ T6704] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.253: couldn't read orphan inode 15 (err -117) [ 317.278766][ T6704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.532729][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.848116][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.677166][ T6732] Zero length message leads to an empty skb [ 320.234752][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.261'. [ 321.122978][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 321.789717][ T30] audit: type=1326 audit(1769355492.244:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.3.266" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73fd539 code=0x0 [ 322.124503][ T6763] loop1: detected capacity change from 0 to 512 [ 322.166743][ T6763] EXT4-fs: Ignoring removed nomblk_io_submit option [ 322.220017][ T6763] EXT4-fs: Ignoring removed orlov option [ 322.356073][ T6763] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.268: corrupted in-inode xattr: bad e_name length [ 322.439898][ T6763] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.268: couldn't read orphan inode 15 (err -117) [ 322.525385][ T6763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.467698][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.921781][ T6791] tipc: Enabling of bearer rejected, failed to enable media [ 328.331361][ T6820] 9p: Bad value for 'wfdno' [ 328.726583][ T6823] loop5: detected capacity change from 0 to 512 [ 328.754607][ T6823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 328.793737][ T6823] EXT4-fs: Ignoring removed orlov option [ 329.520808][ T6823] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.285: corrupted in-inode xattr: bad e_name length [ 329.632643][ T6823] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.285: couldn't read orphan inode 15 (err -117) [ 329.927031][ T6823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.994404][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.080964][ T5078] Bluetooth: hci4: command 0x0406 tx timeout [ 334.087228][ T5078] Bluetooth: hci3: command 0x0406 tx timeout [ 335.253954][ T6815] Set syz1 is full, maxelem 65536 reached [ 335.396106][ T6854] tipc: Enabling of bearer rejected, failed to enable media [ 336.668141][ T6870] 9p: Bad value for 'wfdno' [ 336.877278][ T6873] loop1: detected capacity change from 0 to 512 [ 336.961529][ T6873] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 336.972116][ T6873] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 337.070779][ T6873] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 337.103246][ T6873] System zones: 0-2, 18-18, 34-35 [ 337.245998][ T6873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 337.551748][ T6873] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 337.642205][ T6873] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 337.737519][ T6873] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 337.808960][ T6885] loop4: detected capacity change from 0 to 512 [ 337.867022][ T6885] EXT4-fs: Ignoring removed nomblk_io_submit option [ 337.895958][ T6885] EXT4-fs: Ignoring removed orlov option [ 338.027605][ T6885] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.301: corrupted in-inode xattr: bad e_name length [ 338.085807][ T6889] loop3: detected capacity change from 0 to 512 [ 338.121299][ T6885] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.301: couldn't read orphan inode 15 (err -117) [ 338.152611][ T6885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.193048][ T6888] loop5: detected capacity change from 0 to 1024 [ 338.228377][ T6889] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 338.357405][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.537791][ T6888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.074652][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.445987][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.582045][ T6898] random: crng reseeded on system resumption [ 339.755002][ T6900] tipc: Enabling of bearer rejected, failed to enable media [ 339.969436][ T6906] 9p: Bad value for 'wfdno' [ 341.429679][ T6919] loop5: detected capacity change from 0 to 512 [ 341.521184][ T6919] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 341.530696][ T6919] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 341.638079][ T6919] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 341.683312][ T6919] System zones: 0-2, 18-18, 34-35 [ 341.724656][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 341.779275][ T6919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 341.827360][ T6925] loop4: detected capacity change from 0 to 512 [ 341.885931][ T6925] EXT4-fs: Ignoring removed nomblk_io_submit option [ 341.903827][ T6926] loop3: detected capacity change from 0 to 512 [ 341.958389][ T6925] EXT4-fs: Ignoring removed orlov option [ 341.970541][ T6919] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 341.991373][ T6919] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 341.999644][ T6919] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 342.037611][ T6926] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 342.113727][ T6925] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.318: corrupted in-inode xattr: bad e_name length [ 342.178042][ T6929] loop2: detected capacity change from 0 to 1024 [ 342.233837][ T6925] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.318: couldn't read orphan inode 15 (err -117) [ 342.368530][ T6925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.389246][ T6929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.763070][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.017954][ T6935] random: crng reseeded on system resumption [ 343.097815][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.254251][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.863508][ T6940] 9p: Bad value for 'wfdno' [ 344.884067][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 345.001427][ T6956] tmpfs: Unknown parameter '01777777777777777777777' [ 345.800222][ T6960] loop4: detected capacity change from 0 to 512 [ 345.854980][ T6965] random: crng reseeded on system resumption [ 345.866485][ T6962] loop2: detected capacity change from 0 to 512 [ 345.899523][ T6962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 345.968411][ T6960] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 345.978110][ T6960] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 345.989927][ T6962] EXT4-fs: Ignoring removed orlov option [ 346.094009][ T6966] loop5: detected capacity change from 0 to 1024 [ 346.139420][ T6962] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.335: corrupted in-inode xattr: bad e_name length [ 346.211278][ T6960] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 346.259993][ T6962] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.335: couldn't read orphan inode 15 (err -117) [ 346.274209][ T6960] System zones: 0-2, 18-18, 34-35 [ 346.310082][ T6960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 346.393520][ T6962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.395425][ T6966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.586786][ T6960] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 346.647785][ T6960] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 346.709914][ T6960] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 347.126581][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.206217][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.302756][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.747040][ T6972] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 347.832793][ T6976] 9p: Bad value for 'wfdno' [ 348.838120][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 349.216301][ T6992] tmpfs: Unknown parameter '01777777777777777777777' [ 349.252873][ T6991] random: crng reseeded on system resumption [ 349.687182][ T6997] loop2: detected capacity change from 0 to 512 [ 349.728976][ T6997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 349.759342][ T6997] EXT4-fs: Ignoring removed orlov option [ 349.787555][ T6997] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.350: corrupted in-inode xattr: bad e_name length [ 349.831510][ T6997] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.350: couldn't read orphan inode 15 (err -117) [ 349.859551][ T6997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.895804][ T6998] loop1: detected capacity change from 0 to 1024 [ 350.172140][ T6998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.630230][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.939330][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.541588][ T7013] 9p: Bad value for 'wfdno' [ 351.802130][ T7009] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 351.951415][ T7017] loop1: detected capacity change from 0 to 2048 [ 352.106175][ T7017] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 352.374397][ T7025] tmpfs: Unknown parameter '01777777777777777777777' [ 352.444540][ T7024] netlink: 32 bytes leftover after parsing attributes in process `syz.3.361'. [ 353.502087][ T7032] random: crng reseeded on system resumption [ 353.914083][ T7038] loop2: detected capacity change from 0 to 512 [ 353.958303][ T7038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 354.018097][ T7038] EXT4-fs: Ignoring removed orlov option [ 354.169752][ T7036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.248710][ T7038] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.366: corrupted in-inode xattr: bad e_name length [ 354.278613][ T7036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.335180][ T7038] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.366: couldn't read orphan inode 15 (err -117) [ 354.418936][ T7036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.482159][ T7041] warning: `syz.3.365' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 354.488996][ T7038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.543727][ T7017] syz.1.358 (7017): drop_caches: 2 [ 354.990113][ T7044] loop5: detected capacity change from 0 to 1024 [ 355.137477][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.228373][ T7044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.886777][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.809123][ T7061] netlink: 32 bytes leftover after parsing attributes in process `syz.4.375'. [ 356.847377][ T7062] tmpfs: Unknown parameter '01777777777777777777777' [ 357.280339][ T7066] loop1: detected capacity change from 0 to 512 [ 357.334791][ T7066] EXT4-fs: Ignoring removed mblk_io_submit option [ 357.391294][ T7066] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 357.491137][ T7066] EXT4-fs (loop1): 1 truncate cleaned up [ 357.549665][ T7066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.654844][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.661757][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 357.846235][ T7073] EXT4-fs (loop1): shut down requested (2) [ 358.448136][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.138870][ T7083] tipc: Started in network mode [ 359.144226][ T7083] tipc: Node identity 26309d40053c, cluster identity 4711 [ 359.153003][ T7083] tipc: Enabled bearer , priority 0 [ 359.213616][ T7082] loop1: detected capacity change from 0 to 1024 [ 359.384273][ T7082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.456059][ T7077] loop3: detected capacity change from 0 to 8192 [ 359.482925][ T7079] tipc: Disabling bearer [ 359.957526][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.538300][ T7089] netlink: 32 bytes leftover after parsing attributes in process `syz.4.389'. [ 363.016484][ T7113] loop2: detected capacity change from 0 to 1024 [ 363.225226][ T7113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.904432][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.369851][ T7127] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 366.384267][ T7139] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 367.254457][ T7155] loop2: detected capacity change from 0 to 1024 [ 367.428470][ T7155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.256797][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.751737][ T7168] loop3: detected capacity change from 0 to 8192 [ 370.610983][ T30] audit: type=1326 audit(1769355541.064:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.2.424" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f61539 code=0x0 [ 370.790730][ T7181] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 372.138986][ T7198] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 372.170801][ T7196] loop3: detected capacity change from 0 to 1024 [ 372.299367][ T7196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.124590][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.137435][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 376.147005][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.446'. [ 376.167325][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 376.526098][ T7247] loop4: detected capacity change from 0 to 1024 [ 376.645259][ T7247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.274210][ T7259] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 377.286635][ T7259] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 377.411874][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.777169][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.461'. [ 379.787327][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.461'. [ 380.508084][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 382.601769][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 384.266295][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 384.453128][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.481'. [ 384.910028][ T7345] syzkaller0: entered promiscuous mode [ 384.916313][ T7345] syzkaller0: entered allmulticast mode [ 385.556614][ T7351] loop3: detected capacity change from 0 to 1024 [ 385.773587][ T7351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.789553][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.326213][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.495'. [ 388.455829][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 389.179077][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 389.451847][ T7383] Set syz1 is full, maxelem 65536 reached [ 389.651106][ T10] usb 3-1: config 0 has no interfaces? [ 389.704237][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 389.714175][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.722595][ T10] usb 3-1: Product: syz [ 389.726972][ T10] usb 3-1: Manufacturer: syz [ 389.731973][ T10] usb 3-1: SerialNumber: syz [ 389.809745][ T7391] loop1: detected capacity change from 0 to 1024 [ 389.821531][ T10] usb 3-1: config 0 descriptor?? [ 389.956774][ T7391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.439505][ T7383] Set syz1 is full, maxelem 65536 reached [ 390.536244][ T10] usb 3-1: USB disconnect, device number 2 [ 390.755719][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.131710][ T7402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.259753][ T7402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.372514][ T7404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.785390][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'. [ 392.476700][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 393.446131][ T7427] loop4: detected capacity change from 0 to 1024 [ 393.648466][ T7427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.449812][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.039550][ T7446] loop5: detected capacity change from 0 to 128 [ 395.347813][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 396.286003][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 397.387755][ T7468] loop2: detected capacity change from 0 to 1024 [ 397.645270][ T7468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.543112][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.229311][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 399.572134][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 400.032601][ T7494] 9p: Bad value for 'wfdno' [ 400.381792][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.544'. [ 401.197380][ T7508] loop3: detected capacity change from 0 to 1024 [ 401.387796][ T7508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.672722][ T7506] loop2: detected capacity change from 0 to 4096 [ 401.987203][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.048026][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 404.295884][ T7536] 9p: Bad value for 'wfdno' [ 404.767327][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'. [ 404.889839][ T7544] loop2: detected capacity change from 0 to 1024 [ 405.466819][ T7544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.315148][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.424759][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 407.214179][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 407.527314][ T7571] loop1: detected capacity change from 0 to 1024 [ 407.691684][ T7571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 407.773564][ T7571] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.876321][ T7565] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 408.128660][ T5839] IPVS: starting estimator thread 0... [ 408.144489][ T7579] batman_adv: batadv0: Adding interface: dummy0 [ 408.152278][ T7579] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.203642][ T7579] batman_adv: batadv0: Interface activated: dummy0 [ 408.253991][ T7580] IPVS: using max 144 ests per chain, 7200 per kthread [ 408.426026][ T7579] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 408.471926][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 408.490868][ T7581] batadv0: mtu less than device minimum [ 408.499584][ T7581] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 408.513275][ T7581] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 408.526758][ T7581] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 408.540214][ T7581] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 408.553819][ T7581] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 408.568216][ T7581] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 408.579467][ T7583] 9p: Bad value for 'wfdno' [ 408.581646][ T7581] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 408.597528][ T7581] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 410.100302][ T7595] loop3: detected capacity change from 0 to 1024 [ 410.381805][ T7595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.508258][ T7599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.798760][ T7599] bond0: (slave rose0): Enslaving as an active interface with an up link [ 411.243880][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.768003][ T7613] 9p: Bad value for 'rfdno' [ 413.974897][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 414.252652][ T7639] loop2: detected capacity change from 0 to 1024 [ 414.512037][ T7639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.285514][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.046301][ T7657] 9p: Bad value for 'rfdno' [ 418.057045][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 418.501226][ T7679] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 418.509810][ T7679] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 418.664309][ T7671] loop1: detected capacity change from 0 to 8192 [ 418.950733][ T30] audit: type=1800 audit(1769355589.384:5): pid=7685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.609" name="file1" dev="tmpfs" ino=724 res=0 errno=0 [ 419.085205][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.094121][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.439673][ T7690] loop3: detected capacity change from 0 to 1024 [ 420.128775][ T7694] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 420.550821][ T7701] 9p: Bad value for 'rfdno' [ 421.450077][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.617'. [ 421.837758][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 422.462489][ T7717] 2: renamed from team_slave_1 (while UP) [ 423.595836][ T7730] loop3: detected capacity change from 0 to 1024 [ 423.773771][ T7734] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 424.058024][ T7723] loop4: detected capacity change from 0 to 8192 [ 425.162686][ T7741] 9p: Bad value for 'rfdno' [ 427.039042][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 427.956796][ T7766] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 428.238569][ T7768] loop2: detected capacity change from 0 to 1024 [ 428.513056][ T7776] syzkaller0: entered promiscuous mode [ 428.518994][ T7776] syzkaller0: entered allmulticast mode [ 429.246212][ T7780] 9p: Bad value for 'rfdno' [ 430.881302][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 431.822610][ T7809] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 432.834530][ T7817] 9p: Bad value for 'rfdno' [ 433.043768][ T7820] loop4: detected capacity change from 0 to 1024 [ 433.273681][ T7820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.750330][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 433.926792][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.112324][ T7842] loop1: detected capacity change from 0 to 1024 [ 435.345446][ T7842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 435.461796][ T7842] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.551968][ T7856] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 436.068860][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 436.298930][ T7862] syzkaller0: entered promiscuous mode [ 436.306967][ T7862] syzkaller0: entered allmulticast mode [ 436.938831][ T7869] 9pnet_fd: Insufficient options for proto=fd [ 439.038219][ T7899] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 439.083000][ T7896] loop2: detected capacity change from 0 to 1024 [ 439.243598][ T7896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 439.293113][ T7896] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.425871][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 440.044015][ T7912] syzkaller0: entered promiscuous mode [ 440.049762][ T7912] syzkaller0: entered allmulticast mode [ 440.152302][ T7911] binder: 7909:7911 ioctl c0306201 80000240 returned -11 [ 440.494489][ T7917] 9pnet_fd: Insufficient options for proto=fd [ 441.580778][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 441.782666][ T5837] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 442.063463][ T5837] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 442.131045][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.168600][ T5837] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 442.178914][ T5837] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 442.187333][ T5837] usb 5-1: Manufacturer: syz [ 442.288526][ T7936] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 442.293763][ T5837] usb 5-1: config 0 descriptor?? [ 442.726349][ T5837] rc_core: IR keymap rc-hauppauge not found [ 442.732725][ T5837] Registered IR keymap rc-empty [ 442.851533][ T5837] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 442.943828][ T5837] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 443.058012][ T5837] usb 5-1: USB disconnect, device number 2 [ 443.681712][ T7960] binder: 7958:7960 ioctl c0306201 80000240 returned -11 [ 443.986245][ T7964] syzkaller0: entered promiscuous mode [ 443.992495][ T7964] syzkaller0: entered allmulticast mode [ 444.687751][ T7972] 9pnet_fd: Insufficient options for proto=fd [ 445.641339][ T7987] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 445.721334][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 446.377712][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.5.709'. [ 448.073777][ T8013] 9pnet_fd: Insufficient options for proto=fd [ 448.183970][ T8017] netlink: 32 bytes leftover after parsing attributes in process `syz.5.717'. [ 448.931692][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 449.251261][ T10] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 449.531467][ T10] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 449.539856][ T10] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 449.550238][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 449.660909][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 449.670259][ T10] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 449.682548][ T10] usb 6-1: Product: syz [ 449.687021][ T10] usb 6-1: Manufacturer: syz [ 449.693138][ T10] usb 6-1: SerialNumber: syz [ 449.784107][ T10] usb 6-1: config 0 descriptor?? [ 449.845446][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 449.853209][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 449.877302][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.727'. [ 449.963927][ T10] usb 6-1: selecting invalid altsetting 0 [ 450.357822][ T10] usb 6-1: USB disconnect, device number 2 [ 450.856643][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.932120][ T8056] 9pnet_fd: Insufficient options for proto=fd [ 452.122921][ T8062] netlink: 32 bytes leftover after parsing attributes in process `syz.4.735'. [ 452.615892][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 453.633448][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 454.345053][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.746'. [ 454.450891][ T8087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 454.458301][ T8087] IPv6: NLM_F_CREATE should be set when creating new route [ 454.912560][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 455.329719][ T8095] 9pnet_fd: Insufficient options for proto=fd [ 455.385608][ T8097] netlink: 32 bytes leftover after parsing attributes in process `syz.5.749'. [ 455.553247][ T8092] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 455.655678][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 455.845517][ T8100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.977843][ T8100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.061723][ T8102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.996735][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.759'. [ 457.071661][ T8121] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 457.079385][ T8121] IPv6: NLM_F_CREATE should be set when creating new route [ 457.106208][ T8119] loop4: detected capacity change from 0 to 1024 [ 457.247629][ T8119] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 457.626640][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 457.783869][ T8129] 9p: Bad value for 'rfdno' [ 458.016250][ T8134] netlink: 32 bytes leftover after parsing attributes in process `syz.3.763'. [ 458.782774][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 458.876037][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 459.368538][ T8138] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 460.649743][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.773'. [ 460.909236][ T8163] loop4: detected capacity change from 0 to 1024 [ 461.103061][ T8163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 461.230845][ T8163] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.603517][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 461.932206][ T8174] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 463.081657][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 463.715043][ T8184] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 464.073352][ T8195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.786'. [ 464.108965][ T8195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 464.116497][ T8195] IPv6: NLM_F_CREATE should be set when creating new route [ 465.081111][ T8204] loop1: detected capacity change from 0 to 1024 [ 465.223187][ T8204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.737617][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.581507][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 466.793109][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.801'. [ 466.841226][ T8228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 468.014253][ T8238] loop3: detected capacity change from 0 to 1024 [ 468.192279][ T8238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 468.265363][ T8238] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.665537][ T8249] loop5: detected capacity change from 0 to 1024 [ 468.850232][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 468.904732][ T8253] binder: 8251:8253 ioctl c0306201 80000240 returned -11 [ 468.948348][ T8249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.684029][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.942448][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 469.965649][ T8264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.815'. [ 470.007787][ T8265] autofs: Bad value for 'fd' [ 471.237773][ T8270] loop5: detected capacity change from 0 to 8192 [ 471.959107][ T8287] binder: 8283:8287 ioctl c0306201 80000240 returned -11 [ 472.014683][ T8288] netlink: 20 bytes leftover after parsing attributes in process `syz.2.826'. [ 472.051683][ T8285] loop4: detected capacity change from 0 to 1024 [ 472.274276][ T8285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 472.331321][ T8285] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.618690][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 472.743251][ T8293] loop5: detected capacity change from 0 to 1024 [ 473.001361][ T8293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.421592][ T8304] No control pipe specified [ 473.719232][ T6218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.660879][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 474.769603][ T8314] ===================================================== [ 474.777011][ T8314] BUG: KMSAN: uninit-value in cfg80211_classify8021d+0x99d/0x12b0 [ 474.785450][ T8314] cfg80211_classify8021d+0x99d/0x12b0 [ 474.791459][ T8314] ieee80211_select_queue+0x37a/0x9e0 [ 474.797068][ T8314] __ieee80211_subif_start_xmit+0x635/0x1e10 [ 474.803424][ T8314] ieee80211_subif_start_xmit+0xa8/0x6d0 [ 474.809304][ T8314] dev_hard_start_xmit+0x22f/0xa30 [ 474.814802][ T8314] __dev_queue_xmit+0x350d/0x5890 [ 474.820071][ T8314] packet_xmit+0x8f/0x710 [ 474.824712][ T8314] packet_sendmsg+0x91e7/0xa330 [ 474.829808][ T8314] __sock_sendmsg+0x333/0x3d0 [ 474.834936][ T8314] __sys_sendto+0x592/0x720 [ 474.839641][ T8314] __ia32_sys_sendto+0x12f/0x200 [ 474.844918][ T8314] ia32_sys_call+0x1a3d/0x4340 [ 474.849950][ T8314] __do_fast_syscall_32+0x14a/0x310 [ 474.855524][ T8314] do_fast_syscall_32+0x37/0x80 [ 474.860713][ T8314] do_SYSENTER_32+0x1f/0x30 [ 474.865452][ T8314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 474.872156][ T8314] [ 474.874666][ T8314] Uninit was created at: [ 474.879207][ T8314] kmem_cache_alloc_node_noprof+0x9de/0x1780 [ 474.885551][ T8314] kmalloc_reserve+0x13c/0x4b0 [ 474.890627][ T8314] __alloc_skb+0x805/0x1030 [ 474.895317][ T8314] alloc_skb_with_frags+0xc5/0xa60 [ 474.900792][ T8314] sock_alloc_send_pskb+0xacb/0xc60 [ 474.906233][ T8314] packet_sendmsg+0x7485/0xa330 [ 474.911436][ T8314] __sock_sendmsg+0x333/0x3d0 [ 474.916369][ T8314] __sys_sendto+0x592/0x720 [ 474.921287][ T8314] __ia32_sys_sendto+0x12f/0x200 [ 474.926446][ T8314] ia32_sys_call+0x1a3d/0x4340 [ 474.931686][ T8314] __do_fast_syscall_32+0x14a/0x310 [ 474.937151][ T8314] do_fast_syscall_32+0x37/0x80 [ 474.942369][ T8314] do_SYSENTER_32+0x1f/0x30 [ 474.947110][ T8314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 474.953793][ T8314] [ 474.956240][ T8314] CPU: 0 UID: 0 PID: 8314 Comm: syz.5.835 Not tainted syzkaller #0 PREEMPT(voluntary) [ 474.966192][ T8314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 474.976547][ T8314] ===================================================== [ 474.983728][ T8314] Disabling lock debugging due to kernel taint [ 474.989990][ T8314] Kernel panic - not syncing: kmsan.panic set ... [ 474.996573][ T8314] CPU: 0 UID: 0 PID: 8314 Comm: syz.5.835 Tainted: G B syzkaller #0 PREEMPT(voluntary) [ 475.008004][ T8314] Tainted: [B]=BAD_PAGE [ 475.012275][ T8314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 475.022474][ T8314] Call Trace: [ 475.025868][ T8314] [ 475.028905][ T8314] __dump_stack+0x26/0x30 [ 475.033444][ T8314] dump_stack_lvl+0x50/0x1c0 [ 475.038267][ T8314] ? dump_stack+0x12/0x25 [ 475.042799][ T8314] dump_stack+0x1e/0x25 [ 475.047149][ T8314] vpanic+0x435/0xd40 [ 475.051355][ T8314] panic+0x15d/0x160 [ 475.055522][ T8314] kmsan_report+0x31a/0x320 [ 475.060263][ T8314] ? __msan_warning+0x1b/0x30 [ 475.065164][ T8314] ? cfg80211_classify8021d+0x99d/0x12b0 [ 475.071002][ T8314] ? ieee80211_select_queue+0x37a/0x9e0 [ 475.076751][ T8314] ? __ieee80211_subif_start_xmit+0x635/0x1e10 [ 475.083144][ T8314] ? ieee80211_subif_start_xmit+0xa8/0x6d0 [ 475.089181][ T8314] ? dev_hard_start_xmit+0x22f/0xa30 [ 475.094680][ T8314] ? __dev_queue_xmit+0x350d/0x5890 [ 475.100088][ T8314] ? packet_xmit+0x8f/0x710 [ 475.104860][ T8314] ? packet_sendmsg+0x91e7/0xa330 [ 475.110108][ T8314] ? __sock_sendmsg+0x333/0x3d0 [ 475.115188][ T8314] ? __sys_sendto+0x592/0x720 [ 475.120052][ T8314] ? __ia32_sys_sendto+0x12f/0x200 [ 475.125354][ T8314] ? ia32_sys_call+0x1a3d/0x4340 [ 475.130533][ T8314] ? __do_fast_syscall_32+0x14a/0x310 [ 475.136313][ T8314] ? do_fast_syscall_32+0x37/0x80 [ 475.141567][ T8314] ? do_SYSENTER_32+0x1f/0x30 [ 475.146468][ T8314] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 475.153194][ T8314] ? kmsan_get_metadata+0xf1/0x160 [ 475.158555][ T8314] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 475.164622][ T8314] ? __siphash_unaligned+0x35a/0x9b0 [ 475.170159][ T8314] ? __flow_hash_from_keys+0x64e/0x780 [ 475.175832][ T8314] ? kmsan_get_metadata+0xf1/0x160 [ 475.181201][ T8314] ? kmsan_get_metadata+0xf1/0x160 [ 475.186623][ T8314] __msan_warning+0x1b/0x30 [ 475.191353][ T8314] cfg80211_classify8021d+0x99d/0x12b0 [ 475.197055][ T8314] ieee80211_select_queue+0x37a/0x9e0 [ 475.202708][ T8314] ? kmsan_get_metadata+0xf1/0x160 [ 475.208085][ T8314] __ieee80211_subif_start_xmit+0x635/0x1e10 [ 475.214343][ T8314] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 475.220499][ T8314] ieee80211_subif_start_xmit+0xa8/0x6d0 [ 475.226360][ T8314] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 475.232935][ T8314] ? kmsan_get_metadata+0xf1/0x160 [ 475.238304][ T8314] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 475.244393][ T8314] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 475.250896][ T8314] dev_hard_start_xmit+0x22f/0xa30 [ 475.256788][ T8314] __dev_queue_xmit+0x350d/0x5890 [ 475.262043][ T8314] ? __msan_warning+0x1b/0x30 [ 475.266979][ T8314] ? __dev_queue_xmit+0x27d/0x5890 [ 475.272313][ T8314] ? remove_node_from_stable_tree+0x690/0xd70 [ 475.278624][ T8314] packet_xmit+0x8f/0x710 [ 475.283146][ T8314] ? kmsan_get_metadata+0xf1/0x160 [ 475.288523][ T8314] packet_sendmsg+0x91e7/0xa330 [ 475.293607][ T8314] ? kmsan_get_metadata+0xf1/0x160 [ 475.298966][ T8314] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 475.305040][ T8314] ? aa_label_sk_perm+0x764/0x820 [ 475.310340][ T8314] ? __msan_warning+0x1b/0x30 [ 475.315239][ T8314] ? filter_irq_stacks+0x13f/0x190 [ 475.320672][ T8314] ? ip_fast_csum+0xf0/0x3f0 [ 475.325437][ T8314] ? kmsan_get_metadata+0xf1/0x160 [ 475.330800][ T8314] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 475.337461][ T8314] ? __pfx_packet_sendmsg+0x10/0x10 [ 475.342884][ T8314] ? __pfx_packet_sendmsg+0x10/0x10 [ 475.348311][ T8314] __sock_sendmsg+0x333/0x3d0 [ 475.353228][ T8314] __sys_sendto+0x592/0x720 [ 475.357932][ T8314] ? kmsan_get_metadata+0xf1/0x160 [ 475.363300][ T8314] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 475.369395][ T8314] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 475.376000][ T8314] __ia32_sys_sendto+0x12f/0x200 [ 475.381180][ T8314] ia32_sys_call+0x1a3d/0x4340 [ 475.386215][ T8314] __do_fast_syscall_32+0x14a/0x310 [ 475.391685][ T8314] do_fast_syscall_32+0x37/0x80 [ 475.396784][ T8314] do_SYSENTER_32+0x1f/0x30 [ 475.401514][ T8314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 475.408076][ T8314] RIP: 0023:0xf7f74539 [ 475.412279][ T8314] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 475.432167][ T8314] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 475.440768][ T8314] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000600 [ 475.448894][ T8314] RDX: 000000000000000e RSI: 0000000000080810 RDI: 00000000800000c0 [ 475.457003][ T8314] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 475.465106][ T8314] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 475.473208][ T8314] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.481364][ T8314] [ 475.484872][ T8314] Kernel Offset: disabled [ 475.489261][ T8314] Rebooting in 86400 seconds..