last executing test programs: 25.114365003s ago: executing program 2 (id=227): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000080)={0x9, 0x2}) getgroups(0x1, &(0x7f0000000340)=[0x0]) keyctl$chown(0x4, 0x0, 0x0, r1) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x7}, 0x2}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r4, 0xc018aec0, &(0x7f00000000c0)={0x1}) 24.067991863s ago: executing program 2 (id=234): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) 23.773231472s ago: executing program 2 (id=237): fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_robust_list(&(0x7f0000000140)={0x0, 0x4}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x8, 0xc1}) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x100c017, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x1, 0xc2f, &(0x7f0000000280)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x8470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x74614, 0x36a01}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x23}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c081}, 0x8002) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 23.293813438s ago: executing program 2 (id=241): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@usrquota}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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") openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) fstat(r0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) rename(&(0x7f0000000680)='./file0\x00', &(0x7f0000000300)='./file1\x00') 22.597938814s ago: executing program 2 (id=249): r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff133a, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x32, 0x35}, {0x0, 0x7}, {0xffffffff}, {0xfffffffc}, {}, {}, {0xffffffff, 0x200}, {}, {}, {}, {0x100}], 0x2}) 21.129125225s ago: executing program 2 (id=257): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioprio_get$pid(0x0, 0x0) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 20.162933608s ago: executing program 32 (id=257): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioprio_get$pid(0x0, 0x0) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) 13.089903866s ago: executing program 1 (id=296): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000680)={{0x80a0000, 0x4000, 0x8, 0x8a, 0x3, 0xd0, 0x42, 0x7, 0x0, 0x31, 0x19, 0x3}, {0x10000, 0x2, 0x0, 0x2, 0x43, 0x7, 0x7f, 0x6, 0x5, 0x6, 0x3}, {0xdddd0000, 0x4000, 0x9, 0x5, 0x1, 0x3, 0x0, 0xb, 0x0, 0x8, 0x8, 0x81}, {0x6000, 0x10000, 0x9, 0x0, 0x3, 0x2, 0xfd, 0xfb, 0x8, 0x9, 0xe, 0xf1}, {0xa000, 0x191c1fff, 0x10, 0x3, 0x5, 0x2, 0xab, 0x7f, 0x1, 0x83, 0xf7, 0x6}, {0x50000, 0x191bd000, 0xc, 0xa3, 0xb5, 0x8, 0x1, 0x5, 0x80, 0x13, 0x5, 0x8}, {0x6000, 0x1, 0x14, 0x5, 0x0, 0xc8, 0x4, 0x5, 0x3, 0xf, 0x2, 0x70}, {0x80a0000, 0xeeef0000, 0xc, 0x7, 0xf, 0x7, 0x14, 0xe2, 0x2, 0x8, 0xf0, 0x7}, {0xfec00000, 0x29ad}, {0x3000, 0xff}, 0x80000031, 0x0, 0x6000, 0x2024, 0xe, 0xa000, 0x54000, [0x2, 0x1000, 0x400000000063, 0x6]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000ca000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) 12.219442499s ago: executing program 0 (id=300): r0 = syz_io_uring_setup(0x1468, &(0x7f0000000300)={0x0, 0xa0ca, 0x800, 0x2, 0x243}, &(0x7f0000000280), &(0x7f0000000380)) prctl$PR_SET_MM(0x23, 0x5, &(0x7f00003fd000/0xc00000)=nil) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00922b74065bbb499cdec313f92674d6b8edaf647abb8a1c02fa03f496808f"], 0x1, 0x1cf, &(0x7f00000004c0)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE4YjdbYNriAnpjQwpCmEMSapsYm1bTkzJ4SZn81tgUJL8gmm0KMcS2dKWBwQqjr501LzrUOi24xtTx3YzvAcPs6zpqBP0Oi4BIPTQsH/MiBjEhoayjTWMi21XfClSOOvhNdqY6cMBnd7pmWwAGVpAJEroTxZsJ6E5BUeOpqaRinJCQ2bJBKS3AoMlRm27uFcLdDAgBRtKgwMDNsZYXELAddgjFEwCkbBKBgFo2AUjIJRMApGwSgYBSMCAAIAAP//QJCYyw==") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) 11.513955296s ago: executing program 0 (id=301): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4) fcntl$setstatus(r0, 0x4, 0x2000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r2 = syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x2000018, &(0x7f0000000000)=ANY=[], 0x0, 0x728, &(0x7f0000000b80)="$eJzs3U9v2/b5APBHjtO6/gFF8dtQFFmasmkPCZA6ktw6MHoYNJl22MqiQMpFgh2GokmGoE47NBuweIeul2477CXs0OveRN/EbnsNve80D6Qk/4stZ0kaBdnnY8T8knzI70Na4OOvQ1EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAESju9ZsthrRy/pbN5KTddeKfHPK+sn+vj80mdJvRKP6FwsL8cZo0Rs/3V/9evXtYpwfzZ2PhWqyEDv/9/prH/5kfm6y/ZSEnon7D3Y+/3R7+/ZXs05kRjbSflbm2WZnI02yMk9WV1aaV6+vl8l61kvLm+Uw3Uy6RdoZ5kVyqXs5aa2uLifp0s18q7+x1umlk4XX3ms3myvJR0uDtFOUef/qR0tl93rW62X9jTqmWl3FXEt+/WXxcTZMhmlnM0nu3N2+vXxaklVQ61GC2qcFtZvtdqvVbrdWPlj94FqzOd9uLsShBc0j4tAmSbM5P3nRxmuj1/Yjn+sD/vE4G/GjmTs0F3+c/pN9atdueFJz4/ofvciiH1txI5Jjv7qxFkXksXnC+rHvI/5QN66mU/ut6vfCuP5Pqvwb+6vPVd8uLoznLpxU/0/I5dl93Y8HsROfx6exHdtxO76aeUbP9msj0uhHFmXkkcVmdOolyXhJEquxEivRjF/F9ViPMpJYjyx6kUYZN6OMYaT1K6obRaTRiWHkUUQSl6IblyOJVqzGaixHEmksxc3IYyv6sRFr0an3cifu1ud9eUqOe0GtRwlqTwkaF/PqhVebf+gXgmZzfrzuuPp/ba/+/62uD/fffQbFiefDmUnj6V284QntTup/7O7+e7cy64wAAACAp61R//W9ceGlvfn1rJf+csZZAQAAAE9TfSvT+Wpytmq9GY1q/N/cD3hpdrkBAAAAT0cjLoz/CrAYb41ak3dCNY39AQAA4MVQ////hWqyWLXeisaB8f/E3AwTBAAAAJ7Yn/efsb8Txz5jtxxUw//5iGh8M7jxbuNep4rr3Dsz2u7M0T0O1881Xh3vpJ6szI/nuun5xvjpl3sPwfxhPLlz2rP+G0Vx9kkT2P9Lxtu3RtNbe2vqXhbXs1661M17H7ai03l1bpjeGP7ui7u/j6h6/0t/89VG3Lm7fXvpsy+3b9W5fFPt5Zt74yfCNv6LXH4bb45i3nw5HjrinWicrd+IMe53cdRv8+Dxj49lckivPEKf305iLi6OpouHj3+h6rO1dNLRLzZeHm//REf+7ST4nUvvjCbHZNGekkV9LtoHz/+Rc/FIWcQ7p2exPMli/8mYh7NYfsIsAGblzl4VOlx3z+7V/4fq7mNc5Z5Ndf82Lo1iLp2rL6zz5465ojePrSu7Z47U2Mevbn+Py6OYy5Pgk2psdcx/3eu3Vff7XbXBdyf2W/YmJ+Teb+Lq3IOd9+7Wsbe/aLeXV5rvN5sftONsfRjjSZXpvxaOZvpKqD0A/9Mu1vf/T/uMneMjzuyX5sb78XY1/dmBUXVVk/Yq3v/v3VKwFJ/Fl7Edt+JK/W6D+o6DY/tdPHAbwpW4OE72+FHr4oFPeLlyyqhuFDv53eVRYkcfLwMAL5KLp9Thvfo/+Sy+SURdQkdj9ysHxt0L++PuGI8wj9Ty6aPjg7UcAPhxpMUPjcXhnxpFNdNaXW11htfTpMi7HydFtraRJll/mBbd653+RpoMinyYd/Ne1fgkW0vLpNwaDPJimKznRTLIy+zGzyPrpcn4o9/LdLPTH2bdctBLO2WadPP+sNMdJmtZ2U0GW7/oZeXXu7u71cblIO1m61m3M8zyflLmW0U3XUqSMk3HgdfTIsnW0v4wW8+qZj8ZFNnLUdxMPsl7W5tpspaW3SIbDPOizmbSV9Zfz4vNerdLsz7ZAPCcuP9g5/NPt7dvf3V8YyFOXFU3/jl981Fj1scIABw2rUo/dPcZAAAAAAAAAAAAAAAwE6e8/+/xG40jS+Yi4sfq64Vr7H79TPqavMFjdj+dM8/JCX+48d2BJclT3PMrEfFcHOBpjRlfmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGP8JAAD//yNLSwY=") r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getdents64(r2, &(0x7f0000000380)=""/224, 0xe0) accept4(r0, 0x0, 0x0, 0x80800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffc}, 0x1c) sendmmsg$inet6(r4, 0x0, 0x0, 0x4400c800) 10.172558955s ago: executing program 1 (id=304): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='contention_end\x00', r0}, 0x18) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "e4fef4", 0x1}}}, 0xd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=@newlink={0x44, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}]}]}, 0x44}}, 0x40840) 10.055609467s ago: executing program 1 (id=305): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/174) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0xc000) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) 8.422004533s ago: executing program 1 (id=307): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0xd27}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, 0x0, 0x0}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r3, &(0x7f00000000c0)}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, 0x0, 0x90) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040040}, 0x1000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x4, 0x0, 0x4, 0xffffffff, 0x8000}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x0, 0x0, 0x1000}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x2040014) 8.230176932s ago: executing program 4 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000080)) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x800) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2e00}}, 0x1c}}, 0x8c0) syz_open_procfs(0x0, 0x0) read(r3, &(0x7f00000003c0)=""/4096, 0x1000) poll(0x0, 0x0, 0x9) 7.139846126s ago: executing program 4 (id=309): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x1000, {0x0, 0x0, 0x0, r3, {0xa}, {0xfff1, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_clsact]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005c80)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0xffe2, 0xfff1}, {0x7, 0xa}, {0x1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.769563543s ago: executing program 0 (id=311): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000180)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@debug}]}, 0x1, 0x514, &(0x7f0000000300)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000080)='asymmetric\x00', 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) 4.769331173s ago: executing program 4 (id=312): capset(0x0, &(0x7f0000000340)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x80000002, 0x4) 4.709537469s ago: executing program 3 (id=313): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_pidfd_open(0x0, 0x0) setns(r4, 0x8020000) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x6}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 4.465970402s ago: executing program 0 (id=314): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201005) 3.694339686s ago: executing program 3 (id=315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000010403000000000000b6c4f6610000050500010003"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) 3.679762927s ago: executing program 4 (id=316): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.585860757s ago: executing program 0 (id=317): ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x43403d0e, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) fallocate(r0, 0x20, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x100, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, 0x0, &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r2, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000340)={0x17c04, 0xffffffffffffffff, 0x7, 0x1c00, 0x2}) 3.585465847s ago: executing program 4 (id=318): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmmsg$unix(r4, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="4d0b2f47c78a", 0x6}, {&(0x7f0000000400)="3809128037747c947af389b894005e9cae3fc0976aae3a95679aca47e2e2623a26222fb5690360dfd9528931c8ee1a3603599846dc4393b45c53c7027d3c12d6c9475f848b76675af341932dd610531bc024259f1a49a115787d93252290c9880ce879f21997167838151e8360761faef980db54aebcc64ea53491f66520dd6a162f2efaebcd2fae580312f508b9c0a352e0ebd500eb873e57b631d963c357f14a8e624e503401ae242fcef6b5336b44b1fd6c0a3491e3aba492b03c3d9e497d25727b12f0775f5d67", 0xc9}], 0x2}}], 0x1, 0x44000) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create(0x10001) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) write(r0, &(0x7f0000000080)="09000300010001", 0x7) 3.565549158s ago: executing program 3 (id=319): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0xd, 0x9, 0x55c419728b64c31e, 0x2, 0x0, 0x70bd2a, 0x25dfdbfc}, 0x10}}, 0x24048800) 2.866864045s ago: executing program 4 (id=320): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv0}, {@nodelalloc}, {@max_batch_time}, {@nomblk_io_submit}], [{@flag='nomand'}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") statx(r0, 0x0, 0x800, 0x100, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) chown(&(0x7f0000000000)='./file2\x00', 0x0, r2) 2.765956805s ago: executing program 3 (id=321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6c, r0, 0x5e}, 0x38) 2.757357306s ago: executing program 1 (id=322): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 2.639058717s ago: executing program 3 (id=323): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x81800) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x8, 0x32, 0x205, 0x831a, 0x1, "03000000cb0b0e000800feffffbcd6ff0100", 0x808, 0x7fff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_pwait2(r3, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000280)={[0xe]}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) mount(0x0, 0x0, 0x0, 0x2200003, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() 2.513927869s ago: executing program 1 (id=324): r0 = socket(0x28, 0x5, 0x0) getpeername$packet(r0, 0x0, 0x0) symlink(&(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000040)='./file1\x00', 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x100, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setrlimit(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0xfffffffffffffffa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) getpid() openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/netstat\x00') read$FUSE(r5, &(0x7f0000000800)={0x2020}, 0x2020) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) 1.659804001s ago: executing program 3 (id=325): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$eJzslbFrFEEUxr+Z3du7BA1YaGFzKQJGMHu7G5U0FrEXhETU8jCTcLrJhcsVSUBIsBHEWvwD7KwtUlnYaWVtoYJgYUobBUdmdvZ2Nrt78bhgk/eDm/vmzbyZN7Nv34IgiFPL1y8/Pz+/ubB8BcAZzKBu7N+dbA635n966dSMfLcx9fjAGmqohgGQMjO6x+zvAXi76AB7ybJSZt6vzb9acxkcM6Z/BxyXjb4LBj+NVWbeAgz3jfnhphycpjthRCzYg268stqJRaCaUDXRaudVLRefiv9wn2HFHFDtwKzxrZ3dR+0Y6CUiFqmoyXSfwlAqkpMBJUM5Mez+dHyLHDesK1DP697TJ/uq7xt7YN1fCI7Q6HkwLBm9gDp832+argit8190s/Wd5LEl7FXHXRSNUSaPL87N5SzTUEJl+HD3iVio055YGH/kkDn1kRdkJqu8XAqOEeGz8U+q4hjdizeLXl5xnYY5qLaIY16Sf9idHbUwOyUuHB68L3p9+29Je/IC5gLtoRfqoj5OxvGtUq/zOct0xSvj4awuCZUpkdQP5gKXrPrkWl+FVn99s7W1szvXWW+viTWxEUXz14OrQXAtaunanLR2uTtS/xq6Pk1a69cqaqXHPGy3+/1euA30e+GgHyWtlUxLb7o/tA/X9Y9j9reU6edFv3jph5Ll92Dmx/W/UrNObgKvCI4gCIIgCIIgCIIgCIIgCKKUX5ZuguHD1KAry3Gj23r4bwAAAP//c8NPrw==") stat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x20) fadvise64(r0, 0xfcff, 0x20000, 0x3) 0s ago: executing program 0 (id=326): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000013000135e9ea1937843d9f6d619e0000001000fedbdf251c0000000c003500000000000000"], 0x2c}], 0x1}, 0x20040000) syz_open_dev$tty1(0xc, 0x4, 0x1) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_io_uring_setup(0x10f, &(0x7f00000001c0)={0x0, 0xb423, 0x0, 0x3, 0x2c6}, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) socket$inet6(0xa, 0x4, 0x6) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f411, 0x13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "002a14", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149014006040800", 0x58}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. [ 50.927270][ T4172] cgroup: Unknown subsys name 'net' [ 51.060308][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.211202][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.177307][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 54.203566][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 54.233114][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 54.255935][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 54.320493][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 54.374401][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.381680][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.390180][ T4182] device bridge_slave_0 entered promiscuous mode [ 54.416025][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.423074][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.432188][ T4182] device bridge_slave_1 entered promiscuous mode [ 54.502628][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.512061][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.520211][ T4193] device bridge_slave_0 entered promiscuous mode [ 54.528093][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.535259][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.543154][ T4184] device bridge_slave_0 entered promiscuous mode [ 54.550289][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.557688][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.565315][ T4183] device bridge_slave_0 entered promiscuous mode [ 54.579598][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.590881][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.600670][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.608194][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.616546][ T4193] device bridge_slave_1 entered promiscuous mode [ 54.623585][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.630970][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.638626][ T4184] device bridge_slave_1 entered promiscuous mode [ 54.645567][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.652926][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.660566][ T4183] device bridge_slave_1 entered promiscuous mode [ 54.667842][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.674911][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.683557][ T4189] device bridge_slave_0 entered promiscuous mode [ 54.718683][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.726295][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.733933][ T4189] device bridge_slave_1 entered promiscuous mode [ 54.749176][ T4182] team0: Port device team_slave_0 added [ 54.776519][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.794292][ T4182] team0: Port device team_slave_1 added [ 54.802404][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.813495][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.824421][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.849095][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.859544][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.878640][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.890338][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.928983][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.936241][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.962429][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.991671][ T4183] team0: Port device team_slave_0 added [ 55.006472][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.013447][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.040027][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.053176][ T4193] team0: Port device team_slave_0 added [ 55.061374][ T4193] team0: Port device team_slave_1 added [ 55.069536][ T4184] team0: Port device team_slave_0 added [ 55.076314][ T4183] team0: Port device team_slave_1 added [ 55.083728][ T4184] team0: Port device team_slave_1 added [ 55.091741][ T4189] team0: Port device team_slave_0 added [ 55.136292][ T4189] team0: Port device team_slave_1 added [ 55.179702][ T4182] device hsr_slave_0 entered promiscuous mode [ 55.186669][ T4182] device hsr_slave_1 entered promiscuous mode [ 55.193965][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.201239][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.227541][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.239576][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.246868][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.273383][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.285042][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.292907][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.322902][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.339581][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.346940][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.372948][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.384127][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.391405][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.417451][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.429326][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.436417][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.462452][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.477551][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.484525][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.510662][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.547729][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.554713][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.581120][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.635152][ T4184] device hsr_slave_0 entered promiscuous mode [ 55.642251][ T4184] device hsr_slave_1 entered promiscuous mode [ 55.648881][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.656752][ T4184] Cannot create hsr debugfs directory [ 55.669624][ T4189] device hsr_slave_0 entered promiscuous mode [ 55.677536][ T4189] device hsr_slave_1 entered promiscuous mode [ 55.683992][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.691594][ T4189] Cannot create hsr debugfs directory [ 55.743934][ T4183] device hsr_slave_0 entered promiscuous mode [ 55.750826][ T4183] device hsr_slave_1 entered promiscuous mode [ 55.757524][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.765082][ T4183] Cannot create hsr debugfs directory [ 55.780407][ T4193] device hsr_slave_0 entered promiscuous mode [ 55.787309][ T4193] device hsr_slave_1 entered promiscuous mode [ 55.793694][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.801527][ T4193] Cannot create hsr debugfs directory [ 55.866485][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 55.866492][ T1336] Bluetooth: hci4: command 0x0409 tx timeout [ 55.866945][ T1336] Bluetooth: hci2: command 0x0409 tx timeout [ 55.872688][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 55.891124][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 56.091831][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.101893][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.111360][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.129774][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.162467][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.186855][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.204024][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.215098][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.298103][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.313376][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.323568][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.337666][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.352556][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.379080][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.389809][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.419060][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.438645][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.447553][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.466729][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.489366][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.497829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.507722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.517439][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.524552][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.536319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.561199][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.569683][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.579116][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.588701][ T3098] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.595802][ T3098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.608006][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.631424][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.647495][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.657922][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.665614][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.688673][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.711301][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.724539][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.736897][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.749570][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.758733][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.769129][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.778572][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.787735][ T1222] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.794934][ T1222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.802622][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.811614][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.820023][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.828938][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.837713][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.845994][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.854417][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.862787][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.871245][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.887068][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.900262][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.923493][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.937018][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.948715][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.957347][ T1222] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.964451][ T1222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.973809][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.986482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.023667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.038218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.054044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.064718][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.080942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.088892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.097299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.111470][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.136488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.144977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.154719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.162585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.184082][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.193317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.203833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.212373][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.219812][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.229281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.238657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.247723][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.254790][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.262667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.271379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.280163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.299379][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.333155][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.342933][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.353212][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.362802][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.372574][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.381702][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.434952][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.446473][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.455496][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.473919][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.482398][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.491305][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.508048][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.516918][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.526849][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.535506][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.547304][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.574661][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.590230][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.601633][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.651025][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.662071][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.672323][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.683314][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.697833][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.711761][ T1222] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.719001][ T1222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.728235][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.736899][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.745221][ T1222] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.752293][ T1222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.760321][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.770472][ T4184] device veth0_vlan entered promiscuous mode [ 57.798509][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.806463][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.814374][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.827161][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.837489][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.847444][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.855030][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.863066][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.872494][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.884298][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.903402][ T4184] device veth1_vlan entered promiscuous mode [ 57.917845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.929562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.938227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.946503][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 57.947327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.952542][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 57.961145][ T4239] Bluetooth: hci3: command 0x041b tx timeout [ 57.966775][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 57.976466][ T4239] Bluetooth: hci0: command 0x041b tx timeout [ 57.983080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.993663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.003400][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.010508][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.018568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.036369][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.061997][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.072764][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.085062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.094515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.103686][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.110907][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.120019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.127752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.135131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.143553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.153061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.161731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.170809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.182851][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.198151][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.235264][ T4184] device veth0_macvtap entered promiscuous mode [ 58.262128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.271972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.284465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.293560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.303185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.311774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.321201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.333131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.341651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.357968][ T4184] device veth1_macvtap entered promiscuous mode [ 58.372501][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.382167][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.394020][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.407638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.417728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.446471][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.465065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.474435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.483581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.495020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.511609][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.524344][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.534477][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.552028][ T4189] device veth0_vlan entered promiscuous mode [ 58.559352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.568573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.577205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.587420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.597531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.606287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.614517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.623354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.631929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.640369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.648460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.657401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.671713][ T4182] device veth0_vlan entered promiscuous mode [ 58.681113][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.691242][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.700390][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.710190][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.722737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.734961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.761733][ T4182] device veth1_vlan entered promiscuous mode [ 58.782157][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.831485][ T4189] device veth1_vlan entered promiscuous mode [ 58.869523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.879299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.888623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.897651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.905493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.913908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.922801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.960843][ T4182] device veth0_macvtap entered promiscuous mode [ 58.973506][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.987040][ T4183] device veth0_vlan entered promiscuous mode [ 58.993733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.007057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.015587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.024907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.038766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.051759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.061198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.069913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.103173][ T4182] device veth1_macvtap entered promiscuous mode [ 59.134710][ T3098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.141702][ T4189] device veth0_macvtap entered promiscuous mode [ 59.149411][ T3098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.164517][ T4183] device veth1_vlan entered promiscuous mode [ 59.181498][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.193581][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.204881][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.218347][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.228988][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.238655][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.247090][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.255888][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.264201][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.273113][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.281930][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.293918][ T4189] device veth1_macvtap entered promiscuous mode [ 59.310754][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.336532][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.348665][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.373465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.388445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.412632][ T1222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.423233][ T1222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.424338][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.442532][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.452177][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.461629][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.506112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.513953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.523012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.532771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.541678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.550380][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.558395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.595993][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.605042][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.622279][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.639123][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.654488][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.667160][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.679162][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.688432][ T4193] device veth0_vlan entered promiscuous mode [ 59.701712][ T4183] device veth0_macvtap entered promiscuous mode [ 59.713555][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.746857][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.756357][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.767478][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.782735][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.794295][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.804788][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.818077][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.835278][ T4183] device veth1_macvtap entered promiscuous mode [ 59.853173][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.863175][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.880176][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.900367][ T4193] device veth1_vlan entered promiscuous mode [ 59.909644][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.920395][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.929714][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.931606][ T4294] loop2: detected capacity change from 0 to 512 [ 59.944172][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.976790][ T4294] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 60.000982][ T4294] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.019298][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.032228][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.043420][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 60.050009][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 60.051938][ T4294] EXT4-fs (loop2): 1 orphan inode deleted [ 60.056421][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 60.063824][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.068269][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 60.068352][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 60.084329][ T4294] EXT4-fs (loop2): 1 truncate cleaned up [ 60.087351][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.091696][ T4294] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 60.096892][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.140607][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.152123][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.178643][ T1222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.187911][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.202987][ T1222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.216494][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.231473][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.240495][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.250502][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.263736][ T4193] device veth0_macvtap entered promiscuous mode [ 60.291070][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.301125][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.310660][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.341385][ T4193] device veth1_macvtap entered promiscuous mode [ 60.364254][ T4300] loop2: detected capacity change from 0 to 1024 [ 60.367324][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.385425][ T4300] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 60.390681][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.410314][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.421969][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.435385][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.443289][ T4300] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 60.451445][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.499018][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.526312][ T3098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.556115][ T3098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.665440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.676428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.685013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.697553][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.706715][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.728616][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.163204][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.344782][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.355949][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.363937][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.375280][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.385802][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.394628][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.404713][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.415253][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.425081][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.437370][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.449093][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.460889][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.471903][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.482071][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.492750][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.502703][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.513128][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.522937][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.533668][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.544818][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.591654][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.601209][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.611355][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.623079][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.701194][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.710213][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.719211][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.728201][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.737191][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.746176][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.755683][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.765674][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.775675][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 61.785676][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 62.928240][ T4307] Bluetooth: hci2: command 0x0419 tx timeout [ 62.934688][ T4307] Bluetooth: hci1: command 0x0419 tx timeout [ 62.941489][ T3098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.970815][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.010732][ T4307] Bluetooth: hci3: command 0x0419 tx timeout [ 63.017467][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.031002][ T4307] Bluetooth: hci4: command 0x0419 tx timeout [ 63.038181][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.050731][ T4307] Bluetooth: hci0: command 0x0419 tx timeout [ 63.064976][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.107383][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.115377][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.177201][ T1165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.338717][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.380724][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.380880][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.404735][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.619902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.746795][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.754920][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.763717][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.771943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.797080][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.808889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.847525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.958134][ T4332] loop0: detected capacity change from 0 to 256 [ 65.270483][ T26] audit: type=1800 audit(1766538196.005:2): pid=4332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14" name="file1" dev="loop0" ino=1048590 res=0 errno=0 [ 65.458727][ T4332] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 65.604770][ T4332] FAT-fs (loop0): Filesystem has been set read-only [ 65.625327][ T4332] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 65.838329][ T4332] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 65.898817][ T4332] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 65.940850][ T4332] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 67.163335][ T4353] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 68.157993][ T4369] loop4: detected capacity change from 0 to 2048 [ 68.729435][ T4174] loop4: p1 < > p4 [ 68.748775][ T4174] loop4: p4 size 8388608 extends beyond EOD, truncated [ 68.786799][ T4369] loop4: p1 < > p4 [ 68.791494][ T4369] loop4: p4 size 8388608 extends beyond EOD, truncated [ 70.396795][ T4388] loop2: detected capacity change from 0 to 1024 [ 70.420935][ T4388] ======================================================= [ 70.420935][ T4388] WARNING: The mand mount option has been deprecated and [ 70.420935][ T4388] and is ignored by this kernel. Remove the mand [ 70.420935][ T4388] option from the mount to silence this warning. [ 70.420935][ T4388] ======================================================= [ 70.498233][ T4388] EXT4-fs (loop2): Ignoring removed bh option [ 70.541256][ T4388] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.694207][ T4388] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000000,init_itable=0x0000000000000009,barrier=0x0000000000000002,dioread_nolock,data_err=ignore,data_err=ignore,data_err=ignore,dioread_lock,abort,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none. [ 70.845910][ T1336] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 70.888591][ T4394] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.31: Allocating blocks 497-513 which overlap fs metadata [ 70.968686][ T4394] EXT4-fs (loop2): pa ffff888073c7b9a0: logic 128, phys. 385, len 8 [ 70.977179][ T4394] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 70.993206][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.999888][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.020111][ T4394] syz.2.31 (4394) used greatest stack depth: 20456 bytes left [ 71.241136][ T1336] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 71.273953][ T1336] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.300961][ T1336] usb 4-1: config 1 has no interface number 0 [ 71.338806][ T1336] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 71.419699][ T1336] usb 4-1: config 1 interface 105 has no altsetting 0 [ 71.437862][ T4408] loop2: detected capacity change from 0 to 512 [ 71.488051][ T4411] capability: warning: `syz.4.36' uses deprecated v2 capabilities in a way that may be insecure [ 71.517951][ T4408] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.615912][ T4408] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.645873][ T1336] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 71.666085][ T1336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.675598][ T1336] usb 4-1: Product: syz [ 71.680217][ T1336] usb 4-1: Manufacturer: syz [ 71.684966][ T1336] usb 4-1: SerialNumber: syz [ 71.988193][ T1336] aqc111: probe of 4-1:1.105 failed with error -22 [ 72.009053][ T4420] loop2: detected capacity change from 0 to 2048 [ 72.863231][ T4429] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.941411][ T4420] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,nolazytime,mb_optimize_scan=0x0000000000000000,,errors=continue. Quota mode: none. [ 73.691448][ T4419] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 73.768016][ T4419] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 73.781083][ T4419] EXT4-fs (loop2): This should not happen!! Data will be lost [ 73.781083][ T4419] [ 73.793635][ T4419] EXT4-fs (loop2): Total free blocks count 0 [ 74.433985][ T4419] EXT4-fs (loop2): Free/Dirty block details [ 74.441180][ T4419] EXT4-fs (loop2): free_blocks=2415919104 [ 74.447208][ T4419] EXT4-fs (loop2): dirty_blocks=16 [ 74.452993][ T4419] EXT4-fs (loop2): Block reservation details [ 74.478433][ T4232] usb 4-1: USB disconnect, device number 2 [ 74.494999][ T4419] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 74.532445][ T4419] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 74.587264][ T4419] EXT4-fs (loop2): This should not happen!! Data will be lost [ 74.587264][ T4419] [ 75.837031][ T4462] loop2: detected capacity change from 0 to 256 [ 75.872638][ T4462] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.927161][ T4462] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.109008][ T1325] cfg80211: failed to load regulatory.db [ 76.837809][ T4473] loop4: detected capacity change from 0 to 256 [ 76.994231][ T4473] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 77.094092][ T4473] process 'syz.4.46' launched './file0' with NULL argv: empty string added [ 77.118405][ T4480] loop0: detected capacity change from 0 to 512 [ 77.129501][ T4479] loop1: detected capacity change from 0 to 2048 [ 77.193175][ T4480] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 77.306475][ T4480] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 77.331890][ T4479] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000005,grpquota,errors=remount-ro,. Quota mode: writeback. [ 77.543897][ T4480] EXT4-fs (loop0): 1 truncate cleaned up [ 77.582755][ T4480] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,journal_ioprio=0x0000000000000006,errors=remount-ro,. Quota mode: none. [ 77.641434][ T4479] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.60: bg 0: block 2: invalid block bitmap [ 77.897135][ T4492] EXT4-fs error (device loop1): ext4_find_extent:929: inode #2: comm syz.1.60: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 77.951000][ T4480] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz.0.61: Siphash requires key [ 77.976007][ T4479] EXT4-fs (loop1): Remounting filesystem read-only [ 78.528995][ T4493] EXT4-fs warning (device loop0): dx_probe:845: inode #2: comm syz.0.61: Hash code is SIPHASH, but hash not in dirent [ 78.560167][ T4492] EXT4-fs (loop1): Remounting filesystem read-only [ 78.576733][ T4499] rtc_cmos 00:00: Alarms can be up to one day in the future [ 78.637476][ T4493] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.61: Corrupt directory, running e2fsck is recommended [ 80.574563][ T4512] loop0: detected capacity change from 0 to 1024 [ 80.675291][ T4516] loop1: detected capacity change from 0 to 512 [ 81.242101][ T4516] EXT4-fs error (device loop1): ext4_fill_super:4841: inode #2: comm syz.1.67: inode has both inline data and extents flags [ 81.268318][ T4516] EXT4-fs (loop1): get root inode failed [ 81.273974][ T4516] EXT4-fs (loop1): mount failed [ 81.737003][ T4517] input: syz1 as /devices/virtual/input/input6 [ 82.770183][ T4305] hfsplus: b-tree write err: -5, ino 3 [ 83.624501][ T4182] hfsplus: node 4:3 still has 2 user(s)! [ 85.058676][ T4536] loop4: detected capacity change from 0 to 128 [ 85.177422][ T4536] FAT-fs (loop4): bogus number of FAT structure [ 85.190497][ T4536] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 85.235719][ T4536] FAT-fs (loop4): Can't find a valid FAT filesystem [ 85.563796][ T4539] xt_TCPMSS: Only works on TCP SYN packets [ 86.158204][ T4554] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 86.203497][ T4553] loop0: detected capacity change from 0 to 256 [ 86.320412][ T4548] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 86.369845][ T4548] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 86.663022][ T4570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.87'. [ 86.811892][ T4574] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 86.818772][ T4574] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 86.877285][ T4574] vhci_hcd vhci_hcd.0: Device attached [ 86.932993][ T4574] loop4: detected capacity change from 0 to 1024 [ 87.051853][ T4574] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 87.295093][ T4577] vhci_hcd: connection closed [ 87.396324][ T154] vhci_hcd: stop threads [ 87.431617][ T154] vhci_hcd: release socket [ 87.537451][ T154] vhci_hcd: disconnect device [ 88.050601][ T4239] usb 42-1: enqueue for inactive port 0 [ 88.102522][ T4594] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.468259][ T4239] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 89.502699][ T4239] usb usb42-port1: attempt power cycle [ 89.669067][ T26] audit: type=1326 audit(1766538220.405:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4611 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac751da749 code=0x7ffc0000 [ 89.755724][ T26] audit: type=1326 audit(1766538220.435:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4611 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fac751da749 code=0x7ffc0000 [ 89.845733][ T26] audit: type=1326 audit(1766538220.435:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4611 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac751da749 code=0x7ffc0000 [ 89.868107][ T4239] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 89.919065][ T26] audit: type=1326 audit(1766538220.435:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4611 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac751da749 code=0x7ffc0000 [ 91.088399][ T4239] usb usb42-port1: Cannot enable. Maybe the USB cable is bad? [ 91.111942][ T4239] usb usb42-port1: unable to enumerate USB device [ 91.255917][ T4232] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 91.470512][ T4624] netlink: 'syz.0.104': attribute type 3 has an invalid length. [ 91.478244][ T4624] netlink: 'syz.0.104': attribute type 3 has an invalid length. [ 92.232978][ T4629] 9pnet: p9_errstr2errno: server reported unknown error n$[#Z [ 92.423591][ T4232] usb 2-1: unable to get BOS descriptor or descriptor too short [ 92.500400][ T4638] loop4: detected capacity change from 0 to 512 [ 92.515739][ T1325] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.521291][ T4232] usb 2-1: not running at top speed; connect to a high speed hub [ 92.616109][ T4232] usb 2-1: config 13 has an invalid interface number: 50 but max is 0 [ 92.655136][ T4232] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 92.656636][ T4638] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 92.685713][ T4232] usb 2-1: config 13 has no interface number 0 [ 92.705713][ T4232] usb 2-1: config 13 interface 50 altsetting 167 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 92.737425][ T4648] loop0: detected capacity change from 0 to 256 [ 92.744422][ T4638] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.764892][ T4647] loop3: detected capacity change from 0 to 2048 [ 92.787070][ T4232] usb 2-1: config 13 interface 50 has no altsetting 0 [ 92.874133][ T4647] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.885930][ T1325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.891219][ T4648] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 92.910954][ T4232] usb 2-1: string descriptor 0 read error: -71 [ 92.917481][ T1325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.928322][ T4232] usb 2-1: New USB device found, idVendor=1aca, idProduct=b2a3, bcdDevice=92.32 [ 92.949065][ T1325] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 92.993548][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.004324][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.045436][ T1325] usb 3-1: config 0 descriptor?? [ 93.056062][ T4232] usb 2-1: can't set config #13, error -71 [ 93.089824][ T4232] usb 2-1: USB disconnect, device number 2 [ 93.264744][ T4656] loop1: detected capacity change from 0 to 1024 [ 93.476710][ T4656] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nogrpid,noinit_itable,nogrpid,block_validity,max_dir_size_kb=0x00000000000007b1,nojournal_checksum,errors=remount-ro,jqfmt=vfsold,jqfmt=vfsv0,data_err=ignore,. Quota mode: none. [ 93.515441][ T4656] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.113: iget: bad extended attribute block 8388352 [ 93.561492][ T1325] hid-led 0003:1D34:000A.0001: unknown main item tag 0x0 [ 93.575758][ T1325] hid-led 0003:1D34:000A.0001: unknown main item tag 0x0 [ 93.582996][ T1325] hid-led 0003:1D34:000A.0001: unknown main item tag 0x0 [ 93.786169][ T4671] EXT4-fs error (device loop1): ext4_lookup:1858: comm syz.1.113: inode #12: comm syz.1.113: iget: illegal inode # [ 93.796412][ T4656] EXT4-fs (loop1): Remounting filesystem read-only [ 93.813608][ T4671] EXT4-fs (loop1): Remounting filesystem read-only [ 93.816200][ T1325] hid-led 0003:1D34:000A.0001: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 95.075649][ C1] sched: RT throttling activated [ 95.110182][ T1325] hid-led 0003:1D34:000A.0001: Dream Cheeky Webmail Notifier initialized [ 95.505296][ T4195] Bluetooth: Wrong link type (-22) [ 95.594612][ T4682] loop3: detected capacity change from 0 to 1024 [ 95.722337][ T1325] usb 3-1: USB disconnect, device number 2 [ 96.721748][ T4697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 96.848905][ T4692] fido_id[4692]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 97.327664][ T4698] input: syz1 as /devices/virtual/input/input8 [ 97.466217][ T4700] loop4: detected capacity change from 0 to 256 [ 98.313946][ T4707] loop1: detected capacity change from 0 to 164 [ 98.391188][ T4710] loop3: detected capacity change from 0 to 128 [ 98.427982][ T4710] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.462242][ T4710] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.429929][ T4719] loop1: detected capacity change from 0 to 256 [ 99.657207][ T4305] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.905081][ T4729] loop2: detected capacity change from 0 to 128 [ 99.958566][ T4195] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 99.969171][ T4195] CPU: 0 PID: 4195 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 99.976751][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.987097][ T4195] Workqueue: hci2 hci_rx_work [ 99.991820][ T4195] Call Trace: [ 99.995129][ T4195] [ 99.998090][ T4195] dump_stack_lvl+0x168/0x230 [ 100.002918][ T4195] ? show_regs_print_info+0x20/0x20 [ 100.008145][ T4195] ? load_image+0x3b0/0x3b0 [ 100.012694][ T4195] sysfs_create_dir_ns+0x252/0x280 [ 100.017830][ T4195] ? __lock_acquire+0x7c60/0x7c60 [ 100.023067][ T4195] ? sysfs_warn_dup+0xa0/0xa0 [ 100.027765][ T4195] ? le_conn_complete_evt+0xcbc/0x1590 [ 100.033349][ T4195] ? hci_event_packet+0xe05/0x12f0 [ 100.038489][ T4195] ? process_one_work+0x863/0x1000 [ 100.043639][ T4195] ? do_raw_spin_unlock+0x11d/0x230 [ 100.048874][ T4195] kobject_add_internal+0x662/0xd00 [ 100.054211][ T4195] kobject_add+0x152/0x210 [ 100.058667][ T4195] ? kobject_init+0x1d0/0x1d0 [ 100.063372][ T4195] ? klist_children_get+0x50/0x50 [ 100.068419][ T4195] ? get_device_parent+0x121/0x3f0 [ 100.073565][ T4195] device_add+0x483/0xfb0 [ 100.077935][ T4195] hci_conn_add_sysfs+0xd1/0x1e0 [ 100.082908][ T4195] le_conn_complete_evt+0xcbc/0x1590 [ 100.088236][ T4195] ? cs_le_create_conn+0x5e0/0x5e0 [ 100.092625][ T4738] loop1: detected capacity change from 0 to 256 [ 100.093376][ T4195] ? __mutex_trylock_common+0x14f/0x250 [ 100.105176][ T4195] hci_le_meta_evt+0x289/0x3b80 [ 100.110057][ T4195] ? hci_event_packet+0x36d/0x12f0 [ 100.115283][ T4195] ? hci_event_packet+0x2e2/0x12f0 [ 100.120539][ T4195] ? __lock_acquire+0x7c60/0x7c60 [ 100.125824][ T4195] ? hci_remote_host_features_evt+0x280/0x280 [ 100.132146][ T4195] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 100.137815][ T4195] ? mark_lock+0x94/0x320 [ 100.142174][ T4195] ? mutex_unlock+0x10/0x10 [ 100.146726][ T4195] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 100.152828][ T4195] ? lock_chain_count+0x20/0x20 [ 100.157729][ T4195] ? __rwlock_init+0x140/0x140 [ 100.162512][ T4195] hci_event_packet+0xe05/0x12f0 [ 100.167462][ T4195] ? lockdep_hardirqs_on+0x94/0x140 [ 100.172765][ T4195] ? rcu_lock_release+0x20/0x20 [ 100.177632][ T4195] ? hci_send_to_monitor+0x9c/0x4a0 [ 100.182942][ T4195] hci_rx_work+0x255/0xa10 [ 100.187374][ T4195] process_one_work+0x863/0x1000 [ 100.192329][ T4195] ? worker_detach_from_pool+0x240/0x240 [ 100.197973][ T4195] ? lockdep_hardirqs_off+0x70/0x100 [ 100.203264][ T4195] ? _raw_spin_lock_irq+0xab/0xe0 [ 100.208287][ T4195] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 100.213662][ T4195] ? wq_worker_running+0x97/0x170 [ 100.218684][ T4195] worker_thread+0xaa8/0x12a0 [ 100.223387][ T4195] kthread+0x436/0x520 [ 100.227454][ T4195] ? rcu_lock_release+0x20/0x20 [ 100.232312][ T4195] ? kthread_blkcg+0xd0/0xd0 [ 100.236901][ T4195] ret_from_fork+0x1f/0x30 [ 100.241330][ T4195] [ 100.245546][ T4195] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 100.260174][ T4195] Bluetooth: hci2: failed to register connection device [ 100.307491][ T4729] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.326161][ T4729] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.375587][ T4738] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 100.420746][ T4748] 9pnet: p9_errstr2errno: server reported unknown error n$[#Zˤ [ 100.585958][ T4232] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.799386][ T4756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.218694][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.703972][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.743792][ T4764] loop3: detected capacity change from 0 to 1024 [ 101.748607][ T4766] loop2: detected capacity change from 0 to 128 [ 101.750581][ T4232] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.770664][ T4232] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.781827][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.792838][ T4232] usb 5-1: config 0 descriptor?? [ 101.802908][ T4764] EXT4-fs (loop3): inline encryption not supported [ 101.834726][ T4764] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.935403][ T4766] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.955894][ T4766] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.957615][ T4764] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,delalloc,debug_want_extra_isize=0x000000000000005c,grpquota,auto_da_alloc,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,. Quota mode: writeback. [ 103.845818][ T4232] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 103.875270][ T4232] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 104.847456][ T4777] loop4: detected capacity change from 0 to 256 [ 104.983328][ T4777] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 105.185745][ T4239] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.326116][ T1106] usb 5-1: USB disconnect, device number 2 [ 105.925992][ T4239] usb 3-1: Using ep0 maxpacket: 32 [ 106.059350][ T4239] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 106.083887][ T4239] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 106.118207][ T4796] loop3: detected capacity change from 0 to 128 [ 106.124650][ T4239] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.243973][ T4796] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.305907][ T4239] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.325396][ T4239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.334102][ T4796] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.335521][ T4239] usb 3-1: Product: syz [ 106.365750][ T4239] usb 3-1: Manufacturer: syz [ 106.375783][ T4239] usb 3-1: SerialNumber: syz [ 106.435852][ T4796] EXT4-fs warning (device loop3): verify_group_input:165: Last group not full [ 106.814109][ T4803] loop3: detected capacity change from 0 to 256 [ 106.886000][ T4239] usb 3-1: 0:2 : does not exist [ 106.960954][ T4239] usb 3-1: USB disconnect, device number 3 [ 107.030283][ T4809] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 107.850849][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.568963][ T4816] mmap: syz.2.170 (4816) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 109.850793][ T4828] loop3: detected capacity change from 0 to 1024 [ 110.101514][ T4833] loop4: detected capacity change from 0 to 256 [ 110.179027][ T4837] loop1: detected capacity change from 0 to 128 [ 110.579399][ T4837] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 110.937526][ T4341] hfsplus: b-tree write err: -5, ino 4 [ 110.943443][ T4846] loop4: detected capacity change from 0 to 512 [ 111.122051][ T4846] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.179: bad orphan inode 13 [ 111.216506][ T4846] ext4_test_bit(bit=12, block=4) = 1 [ 111.221856][ T4846] is_bad_inode(inode)=0 [ 111.285785][ T4846] NEXT_ORPHAN(inode)=0 [ 111.306321][ T4846] max_ino=32 [ 111.309569][ T4846] i_nlink=1 [ 111.312754][ T4846] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.701402][ T4860] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.179: Unrecognised inode hash code 20 [ 111.713671][ T4860] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.179: Corrupt directory, running e2fsck is recommended [ 111.732309][ T4860] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.179: Unrecognised inode hash code 20 [ 111.743741][ T4860] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.179: Corrupt directory, running e2fsck is recommended [ 113.397118][ T1325] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.515874][ T4880] loop3: detected capacity change from 0 to 128 [ 113.548515][ T4880] EXT4-fs (loop3): Ignoring removed nobh option [ 114.396666][ T4880] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 114.416041][ T1325] usb 5-1: Using ep0 maxpacket: 16 [ 114.455874][ T4880] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.636106][ T1325] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.666651][ T1325] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.673645][ T1325] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 114.716898][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.738851][ T1325] usb 5-1: config 0 descriptor?? [ 116.148777][ T4868] udc-core: couldn't find an available UDC or it's busy [ 116.168197][ T4868] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 116.224580][ T1325] cougar 0003:060B:500A.0003: unexpected long global item [ 116.259725][ T1325] cougar 0003:060B:500A.0003: parse failed [ 116.275894][ T1325] cougar: probe of 0003:060B:500A.0003 failed with error -22 [ 116.284378][ T4904] loop3: detected capacity change from 0 to 4096 [ 116.365923][ T4908] loop1: detected capacity change from 0 to 512 [ 116.416186][ T1325] usb 5-1: USB disconnect, device number 3 [ 116.425198][ T4908] EXT4-fs (loop1): inline encryption not supported [ 116.493971][ T4908] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 116.523929][ T4908] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.201: invalid indirect mapped block 2683928664 (level 1) [ 116.608544][ T4908] EXT4-fs (loop1): 1 truncate cleaned up [ 116.623118][ T4908] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,init_itable=0x0000000000000b8f,nodiscard,inlinecrypt,usrjquota=.sb=0x0000000000000007,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,noload,,,errors=continue. Quota mode: writeback. [ 116.673845][ T4914] Illegal XDP return value 4294967294, expect packet loss! [ 116.969912][ T4923] loop2: detected capacity change from 0 to 128 [ 117.162991][ T4923] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,min_batch_time=0x000000000000000c,,errors=continue. Quota mode: none. [ 117.187315][ T4923] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.200940][ T26] audit: type=1800 audit(1766538247.939:7): pid=4908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.201" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 117.386865][ T4910] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 117.816748][ T4923] EXT4-fs (loop2): shut down requested (0) [ 119.222639][ T4936] loop4: detected capacity change from 0 to 256 [ 119.288913][ T4939] loop2: detected capacity change from 0 to 256 [ 119.333187][ T4936] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 119.369598][ T4939] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 119.413849][ T4936] loop4: Can't mount, would change RO state [ 119.624327][ T4945] loop1: detected capacity change from 0 to 256 [ 120.810663][ T4945] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.858691][ T4945] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 120.896904][ T4945] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 122.740534][ T4972] loop3: detected capacity change from 0 to 256 [ 123.032228][ T4972] exfat: Deprecated parameter 'namecase' [ 123.079935][ T4972] exfat: Unknown parameter 'keep_last_dots' [ 123.487166][ T4976] Zero length message leads to an empty skb [ 123.564305][ T4976] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.027544][ T4989] loop1: detected capacity change from 0 to 512 [ 124.669341][ T5000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.232'. [ 124.675443][ T4994] loop3: detected capacity change from 0 to 2048 [ 124.753025][ T4989] EXT4-fs (loop1): invalid journal inode [ 124.765853][ T4989] EXT4-fs (loop1): can't get journal size [ 124.803435][ T4989] EXT4-fs (loop1): 1 truncate cleaned up [ 124.860943][ T4989] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000004,norecovery,sysvgroups,grpquota,,errors=continue. Quota mode: writeback. [ 124.979917][ T4994] EXT4-fs (loop3): Ignoring removed nobh option [ 125.191818][ T4994] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,usrjquota=,nobh,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 125.218411][ T5013] loop2: detected capacity change from 0 to 2048 [ 125.242768][ T4994] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.299830][ T5013] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 125.392195][ T5020] loop4: detected capacity change from 0 to 512 [ 125.509083][ T26] audit: type=1800 audit(1766538256.249:8): pid=4994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.229" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 125.557095][ T5024] loop2: detected capacity change from 0 to 1024 [ 125.580158][ T5020] EXT4-fs (loop4): Ignoring removed oldalloc option [ 125.602832][ T5020] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.679965][ T5026] loop1: detected capacity change from 0 to 2048 [ 125.690288][ T5024] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,data_err=ignore,,errors=continue. Quota mode: writeback. [ 125.707483][ T5020] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2826: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 125.727480][ T5020] EXT4-fs (loop4): 1 truncate cleaned up [ 125.744595][ T5026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.761872][ T5020] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x000000000000007c,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 125.971929][ T5024] loop_set_status: loop2 () has still dirty pages (nrpages=3) [ 126.134834][ T5036] loop1: detected capacity change from 0 to 164 [ 126.174190][ T4184] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 126.195463][ T4184] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 126.241011][ T5036] Unable to read rock-ridge attributes [ 126.458598][ T5047] usb usb7: usbfs: process 5047 (syz.4.248) did not claim interface 0 before use [ 127.220606][ T5042] loop3: detected capacity change from 0 to 1024 [ 127.227262][ T5049] syz.0.253 uses obsolete (PF_INET,SOCK_PACKET) [ 127.270481][ T5049] syz.0.253 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 127.485116][ T5042] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 127.514813][ T5042] EXT4-fs (loop3): orphan cleanup on readonly fs [ 127.532083][ T5042] EXT4-fs error (device loop3): ext4_free_blocks:6218: comm syz.3.244: Freeing blocks not in datazone - block = 0, count = 4096 [ 127.744615][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.314729][ T5042] EXT4-fs (loop3): 1 orphan inode deleted [ 128.343380][ T5042] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.653994][ T5077] loop1: detected capacity change from 0 to 256 [ 128.711584][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.842029][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.853182][ T5077] attempt to access beyond end of device [ 128.853182][ T5077] loop1: rw=2049, want=260, limit=256 [ 128.944455][ T5081] loop3: detected capacity change from 0 to 512 [ 128.960237][ T5077] attempt to access beyond end of device [ 128.960237][ T5077] loop1: rw=2049, want=264, limit=256 [ 128.974253][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.996493][ T5077] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 129.034343][ T5077] attempt to access beyond end of device [ 129.034343][ T5077] loop1: rw=2049, want=324, limit=256 [ 130.069674][ T5094] loop4: detected capacity change from 0 to 256 [ 130.173312][ T5081] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.231647][ T5081] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.257162][ T5094] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.381283][ T5094] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.481372][ T5081] netlink: 'syz.3.263': attribute type 5 has an invalid length. [ 130.485819][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.625518][ T5109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.272'. [ 130.655882][ T5109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.272'. [ 130.668061][ T5109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.272'. [ 130.847010][ T4283] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 130.893385][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.914155][ T5084] chnl_net:caif_netlink_parms(): no params data found [ 131.125877][ T7] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 131.146273][ T4283] usb 4-1: device descriptor read/64, error -71 [ 131.157097][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 131.188396][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.222661][ T7] usb 2-1: Product: syz [ 131.235202][ T7] usb 2-1: Manufacturer: syz [ 131.269118][ T7] usb 2-1: SerialNumber: syz [ 131.335594][ T7] usb 2-1: config 0 descriptor?? [ 131.435823][ T4283] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.609029][ T7] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 131.645945][ T4283] usb 4-1: device descriptor read/64, error -71 [ 131.664868][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.775755][ T4283] usb usb4-port1: attempt power cycle [ 131.796771][ T7] usb 2-1: USB disconnect, device number 3 [ 131.826961][ T5084] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.844401][ T5084] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.871254][ T5084] device bridge_slave_0 entered promiscuous mode [ 131.919124][ T5084] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.932156][ T5084] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.940504][ T5084] device bridge_slave_1 entered promiscuous mode [ 132.066650][ T5084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.108985][ T5084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.307751][ T5149] loop3: detected capacity change from 0 to 256 [ 132.340280][ T5084] team0: Port device team_slave_0 added [ 132.392514][ T5084] team0: Port device team_slave_1 added [ 132.428585][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.435218][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.441108][ T5149] FAT-fs (loop3): Directory bread(block 1285) failed [ 132.546435][ T5155] loop1: detected capacity change from 0 to 512 [ 132.798321][ T5162] FAT-fs (loop3): Directory bread(block 1285) failed [ 133.200489][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.213182][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.685740][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 133.736866][ T5084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.755022][ T5155] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.786540][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.797528][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.824436][ T5084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.840540][ T5155] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.009485][ T144] device hsr_slave_0 left promiscuous mode [ 134.102995][ T144] device hsr_slave_1 left promiscuous mode [ 134.105827][ T5155] loop_set_status: loop1 () has still dirty pages (nrpages=4) [ 134.118309][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.129047][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.138729][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.160428][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.197010][ T144] device bridge_slave_1 left promiscuous mode [ 134.267826][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.293033][ T1325] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 134.304892][ T144] device bridge_slave_0 left promiscuous mode [ 134.311906][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.368967][ T144] device veth1_macvtap left promiscuous mode [ 134.375990][ T144] device veth0_macvtap left promiscuous mode [ 134.382189][ T144] device veth1_vlan left promiscuous mode [ 134.388771][ T144] device veth0_vlan left promiscuous mode [ 134.565871][ T1325] usb 5-1: Using ep0 maxpacket: 32 [ 134.603607][ T5187] netlink: 192 bytes leftover after parsing attributes in process `syz.1.290'. [ 134.696087][ T1325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.707548][ T1325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.744803][ T1325] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 134.765699][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.794695][ T1325] usb 5-1: config 0 descriptor?? [ 134.801728][ T5191] loop1: detected capacity change from 0 to 4096 [ 134.881100][ T5191] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.968225][ T5191] EXT4-fs (loop1): Cannot change journaled quota options when quota turned on [ 135.011206][ T144] team0 (unregistering): Port device team_slave_1 removed [ 135.030730][ T144] team0 (unregistering): Port device team_slave_0 removed [ 135.050086][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.072936][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.161694][ T5196] loop1: detected capacity change from 0 to 512 [ 135.188120][ T144] bond0 (unregistering): Released all slaves [ 135.194500][ T5196] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 135.214732][ T5196] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 135.235859][ T5196] System zones: 0-2, 18-18, 34-35 [ 135.243223][ T5196] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.285967][ T1325] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 135.288529][ T5084] device hsr_slave_0 entered promiscuous mode [ 135.375053][ T5084] device hsr_slave_1 entered promiscuous mode [ 135.390551][ T5084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.402430][ T5084] Cannot create hsr debugfs directory [ 135.419910][ T5200] loop1: detected capacity change from 0 to 2048 [ 135.464647][ T5200] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.705878][ T4298] Bluetooth: hci1: command 0x040f tx timeout [ 135.806468][ T5208] loop4: detected capacity change from 0 to 512 [ 136.428968][ T5212] loop3: detected capacity change from 0 to 128 [ 136.595544][ T5212] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.183513][ T5212] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.197097][ T5208] fscrypt: Error allocating hmac(sha512): -2 [ 137.203320][ T5208] EXT4-fs (loop4): Error processing option "test_dummy_encryption" [-2] [ 137.254139][ T1325] usb 5-1: USB disconnect, device number 4 [ 138.356738][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 138.761271][ T5084] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 138.809362][ T5084] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 139.059946][ T5084] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 139.972391][ T5245] loop4: detected capacity change from 0 to 8 [ 140.599367][ T5084] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 140.665815][ T5092] EXT4-fs error (device loop3): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 141.415681][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 141.922854][ T5084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.985814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.999081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.040027][ T5084] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.101826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.111808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.166261][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.173363][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.269675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.306801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.315532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.366108][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.373219][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.445977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.454689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 142.546325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 142.595783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 142.604629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 142.666928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.675578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.706330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.714779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 142.771058][ T5084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.822567][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.862642][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.880153][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.413216][ T5288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.309'. [ 144.088984][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.120165][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.181518][ T5084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.122959][ T5344] loop3: detected capacity change from 0 to 16 [ 147.166919][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.179290][ T5344] erofs: (device loop3): mounted with root inode @ nid 36. [ 147.197946][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.274379][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.285838][ T5344] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 147.307132][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.356558][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.388366][ T5345] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 147.409348][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.429589][ T5344] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 147.460966][ T5084] device veth0_vlan entered promiscuous mode [ 147.475050][ T5345] erofs: (device loop3): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 147.983291][ T5344] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 148.056056][ T5345] erofs: (device loop3): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 148.066465][ T5345] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 148.078974][ T5345] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 148.088286][ T5345] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 148.097741][ T5345] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 148.113257][ T5345] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 148.122748][ T5345] erofs: (device loop3): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 148.184273][ T5084] device veth1_vlan entered promiscuous mode [ 148.218136][ T5345] erofs: (device loop3): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 148.238599][ T5345] erofs: (device loop3): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 148.249144][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.298812][ T5345] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 148.360169][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.380797][ T5345] erofs: (device loop3): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 148.397284][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.447368][ T5345] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 148.457946][ T5084] device veth0_macvtap entered promiscuous mode [ 148.483803][ T5084] device veth1_macvtap entered promiscuous mode [ 148.496118][ T5345] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 148.563886][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.578100][ T5345] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 148.629314][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.635714][ T5345] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 148.690353][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.703725][ T5345] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 148.763083][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.774021][ T5345] attempt to access beyond end of device [ 148.774021][ T5345] loop3: rw=524288, want=848, limit=16 [ 148.804122][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.831908][ T5345] attempt to access beyond end of device [ 148.831908][ T5345] loop3: rw=524288, want=13478624104, limit=16 [ 148.852697][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.870550][ T5360] loop4: detected capacity change from 0 to 1024 [ 148.877879][ T5345] attempt to access beyond end of device [ 148.877879][ T5345] loop3: rw=524288, want=13478624080, limit=16 [ 148.907657][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.920425][ T5345] erofs: (device loop3): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 148.952973][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.960073][ T5345] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 149.005025][ T5084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.023751][ T5364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.326'. [ 149.035352][ T5345] erofs: (device loop3): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 149.066684][ T5360] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 149.110929][ T5360] EXT4-fs (loop4): Unrecognized mount option "nomand" or missing value [ 149.136827][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.170809][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.192796][ T5345] attempt to access beyond end of device [ 149.192796][ T5345] loop3: rw=524288, want=32, limit=16 [ 149.229978][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.268508][ T5345] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[3537] [ 149.280796][ T5345] ================================================================== [ 149.289008][ T5345] BUG: KASAN: vmalloc-out-of-bounds in hex_dump_to_buffer+0x3c0/0xd50 [ 149.297243][ T5345] Read of size 1 at addr ffffc90002f76000 by task syz.3.325/5345 [ 149.304951][ T5345] [ 149.307282][ T5345] CPU: 1 PID: 5345 Comm: syz.3.325 Not tainted syzkaller #0 [ 149.314575][ T5345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.324609][ T5345] Call Trace: [ 149.327868][ T5345] [ 149.330786][ T5345] dump_stack_lvl+0x168/0x230 [ 149.335448][ T5345] ? show_regs_print_info+0x20/0x20 [ 149.340634][ T5345] ? _printk+0xcc/0x110 [ 149.344781][ T5345] ? hex_dump_to_buffer+0x3c0/0xd50 [ 149.349967][ T5345] ? load_image+0x3b0/0x3b0 [ 149.354443][ T5345] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 149.359798][ T5345] print_address_description+0x60/0x2d0 [ 149.365325][ T5345] ? hex_dump_to_buffer+0x3c0/0xd50 [ 149.370503][ T5345] kasan_report+0xdf/0x130 [ 149.375173][ T5345] ? hex_dump_to_buffer+0x3c0/0xd50 [ 149.380354][ T5345] hex_dump_to_buffer+0x3c0/0xd50 [ 149.385384][ T5345] print_hex_dump+0x136/0x260 [ 149.390043][ T5345] ? hex_dump_to_buffer+0xd50/0xd50 [ 149.395232][ T5345] z_erofs_lz4_decompress+0xc7f/0x1180 [ 149.400687][ T5345] z_erofs_decompress+0x767/0xde0 [ 149.405694][ T5345] ? lock_chain_count+0x20/0x20 [ 149.410554][ T5345] ? z_erofs_put_shortlivedpage+0x16a/0x3c0 [ 149.416438][ T5345] z_erofs_decompress_queue+0x11a6/0x1990 [ 149.422333][ T5345] ? z_erofs_pagevec_ctor_init+0x670/0x670 [ 149.428171][ T5345] ? z_erofs_decompress_kickoff+0x2b9/0x2e0 [ 149.434041][ T5345] ? submit_bio+0x2be/0x560 [ 149.438534][ T5345] ? submit_bio_noacct+0x6d0/0x6d0 [ 149.443623][ T5345] ? bio_add_page+0x2d6/0x460 [ 149.448284][ T5345] z_erofs_runqueue+0x164c/0x1890 [ 149.453299][ T5345] ? z_erofs_do_read_page+0x26c0/0x26c0 [ 149.458844][ T5345] ? mutex_unlock+0x10/0x10 [ 149.463337][ T5345] z_erofs_readahead+0xb81/0x10c0 [ 149.468357][ T5345] ? z_erofs_readpage+0x6c0/0x6c0 [ 149.473368][ T5345] ? lockdep_hardirqs_on+0x94/0x140 [ 149.478567][ T5345] ? local_lock_release+0x97/0x170 [ 149.483748][ T5345] read_pages+0x165/0x920 [ 149.488058][ T5345] ? page_cache_ra_unbounded+0x930/0x930 [ 149.493671][ T5345] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 149.499118][ T5345] page_cache_ra_unbounded+0x830/0x930 [ 149.504578][ T5345] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 149.511079][ T5345] force_page_cache_ra+0x3e5/0x440 [ 149.516188][ T5345] generic_fadvise+0x520/0x7d0 [ 149.520962][ T5345] ? dump_task+0x600/0x600 [ 149.525366][ T5345] ? __fdget+0x18b/0x210 [ 149.529603][ T5345] __x64_sys_fadvise64+0x139/0x180 [ 149.534708][ T5345] do_syscall_64+0x4c/0xa0 [ 149.539103][ T5345] ? clear_bhb_loop+0x30/0x80 [ 149.543758][ T5345] ? clear_bhb_loop+0x30/0x80 [ 149.548411][ T5345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.554291][ T5345] RIP: 0033:0x7f794d311749 [ 149.558686][ T5345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.578357][ T5345] RSP: 002b:00007f794b557038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 149.586747][ T5345] RAX: ffffffffffffffda RBX: 00007f794d568090 RCX: 00007f794d311749 [ 149.594710][ T5345] RDX: 0000000000020000 RSI: 000000000000fcff RDI: 0000000000000004 [ 149.602664][ T5345] RBP: 00007f794d395f91 R08: 0000000000000000 R09: 0000000000000000 [ 149.610615][ T5345] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 149.618583][ T5345] R13: 00007f794d568128 R14: 00007f794d568090 R15: 00007ffee12bf428 [ 149.626738][ T5345] [ 149.629737][ T5345] [ 149.632041][ T5345] [ 149.634339][ T5345] Memory state around the buggy address: [ 149.639942][ T5345] ffffc90002f75f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 149.647984][ T5345] ffffc90002f75f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 149.656034][ T5345] >ffffc90002f76000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 149.664075][ T5345] ^ [ 149.668206][ T5345] ffffc90002f76080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 149.676245][ T5345] ffffc90002f76100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 149.684288][ T5345] ================================================================== [ 149.692335][ T5345] Disabling lock debugging due to kernel taint [ 149.699509][ T5345] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 149.706715][ T5345] CPU: 1 PID: 5345 Comm: syz.3.325 Tainted: G B syzkaller #0 [ 149.715413][ T5345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.725497][ T5345] Call Trace: [ 149.728794][ T5345] [ 149.729152][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.731773][ T5345] dump_stack_lvl+0x168/0x230 [ 149.731803][ T5345] ? show_regs_print_info+0x20/0x20 [ 149.749734][ T5345] ? load_image+0x3b0/0x3b0 [ 149.754278][ T5345] panic+0x2c9/0x7f0 [ 149.758190][ T5345] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 149.764327][ T5345] ? bpf_jit_dump+0xd0/0xd0 [ 149.768809][ T5345] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 149.774763][ T5345] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 149.780632][ T5345] ? _raw_spin_unlock+0x40/0x40 [ 149.785455][ T5345] ? hex_dump_to_buffer+0x3c0/0xd50 [ 149.790627][ T5345] check_panic_on_warn+0x80/0xa0 [ 149.795538][ T5345] ? hex_dump_to_buffer+0x3c0/0xd50 [ 149.800720][ T5345] end_report+0x6d/0xf0 [ 149.804854][ T5345] kasan_report+0x102/0x130 [ 149.809344][ T5345] ? hex_dump_to_buffer+0x3c0/0xd50 [ 149.814534][ T5345] hex_dump_to_buffer+0x3c0/0xd50 [ 149.819533][ T5345] print_hex_dump+0x136/0x260 [ 149.824185][ T5345] ? hex_dump_to_buffer+0xd50/0xd50 [ 149.829360][ T5345] z_erofs_lz4_decompress+0xc7f/0x1180 [ 149.834799][ T5345] z_erofs_decompress+0x767/0xde0 [ 149.839801][ T5345] ? lock_chain_count+0x20/0x20 [ 149.844626][ T5345] ? z_erofs_put_shortlivedpage+0x16a/0x3c0 [ 149.850504][ T5345] z_erofs_decompress_queue+0x11a6/0x1990 [ 149.856204][ T5345] ? z_erofs_pagevec_ctor_init+0x670/0x670 [ 149.862008][ T5345] ? z_erofs_decompress_kickoff+0x2b9/0x2e0 [ 149.867884][ T5345] ? submit_bio+0x2be/0x560 [ 149.872368][ T5345] ? submit_bio_noacct+0x6d0/0x6d0 [ 149.877459][ T5345] ? bio_add_page+0x2d6/0x460 [ 149.882129][ T5345] z_erofs_runqueue+0x164c/0x1890 [ 149.887136][ T5345] ? z_erofs_do_read_page+0x26c0/0x26c0 [ 149.892674][ T5345] ? mutex_unlock+0x10/0x10 [ 149.897158][ T5345] z_erofs_readahead+0xb81/0x10c0 [ 149.902157][ T5345] ? z_erofs_readpage+0x6c0/0x6c0 [ 149.907151][ T5345] ? lockdep_hardirqs_on+0x94/0x140 [ 149.912328][ T5345] ? local_lock_release+0x97/0x170 [ 149.917438][ T5345] read_pages+0x165/0x920 [ 149.921746][ T5345] ? page_cache_ra_unbounded+0x930/0x930 [ 149.927355][ T5345] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 149.932875][ T5345] page_cache_ra_unbounded+0x830/0x930 [ 149.938336][ T5345] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 149.944816][ T5345] force_page_cache_ra+0x3e5/0x440 [ 149.949918][ T5345] generic_fadvise+0x520/0x7d0 [ 149.954658][ T5345] ? dump_task+0x600/0x600 [ 149.959137][ T5345] ? __fdget+0x18b/0x210 [ 149.963351][ T5345] __x64_sys_fadvise64+0x139/0x180 [ 149.968449][ T5345] do_syscall_64+0x4c/0xa0 [ 149.972840][ T5345] ? clear_bhb_loop+0x30/0x80 [ 149.977490][ T5345] ? clear_bhb_loop+0x30/0x80 [ 149.982138][ T5345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.988004][ T5345] RIP: 0033:0x7f794d311749 [ 149.992397][ T5345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.012152][ T5345] RSP: 002b:00007f794b557038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 150.020547][ T5345] RAX: ffffffffffffffda RBX: 00007f794d568090 RCX: 00007f794d311749 [ 150.028511][ T5345] RDX: 0000000000020000 RSI: 000000000000fcff RDI: 0000000000000004 [ 150.036458][ T5345] RBP: 00007f794d395f91 R08: 0000000000000000 R09: 0000000000000000 [ 150.044404][ T5345] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 150.052351][ T5345] R13: 00007f794d568128 R14: 00007f794d568090 R15: 00007ffee12bf428 [ 150.060301][ T5345] [ 150.063695][ T5345] Kernel Offset: disabled [ 150.068037][ T5345] Rebooting in 86400 seconds..