last executing test programs: 15.836042029s ago: executing program 4 (id=238): io_uring_enter(0xffffffffffffffff, 0x32, 0x558a, 0x98a82480aebc2932, &(0x7f0000000580)={[0x5]}, 0x8) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000003c0)=0xffffffffffffff71) ioctl$int_in(r4, 0x5452, &(0x7f0000000440)=0x10001) write(r2, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x200000c0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 15.585000865s ago: executing program 4 (id=245): inotify_init1(0x800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r1, 0x20, &(0x7f00000007c0)={&(0x7f0000000800)=""/243, 0xfffffffffffffdb4, 0x0, 0x0}}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1d, 0x4, 0x3, 0x0, 0x1, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) io_uring_enter(r3, 0x12a, 0xffdfffdc, 0x17, 0x0, 0x0) 15.328141842s ago: executing program 2 (id=247): r0 = socket(0x1, 0x5, 0x0) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0x80, 0x2}]}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000200c}) 13.466835068s ago: executing program 0 (id=250): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20100, 0x0) pipe2$9p(0x0, 0x84800) syz_emit_ethernet(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x20000400) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x148000}) 13.034686728s ago: executing program 1 (id=251): open(&(0x7f00000000c0)='./file1\x00', 0x14d142, 0x82) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x800, 0x103) 12.905503622s ago: executing program 2 (id=252): r0 = gettid() timer_create(0x0, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000280)='bat\x13\x1b\r\xcbs\xecave_5\x00') 11.420224258s ago: executing program 1 (id=253): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) pipe(&(0x7f0000000380)) io_setup(0x3ff, &(0x7f0000001440)=0x0) io_submit(r1, 0x1, &(0x7f0000001480)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000001540)='m', 0x1}]) write(r0, 0x0, 0x0) 11.251509432s ago: executing program 3 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000001500)=""/4096) 11.040706588s ago: executing program 0 (id=255): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x204031, 0xffffffffffffffff, 0x94c1e000) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000001680), &(0x7f0000001740)='./file0\x00', 0x81, &(0x7f0000001780)=ANY=[@ANYRES8=0x0], 0x1, 0x1d9, &(0x7f00000017c0)="$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") getxattr(0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680), 0x318, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000016c0)={0x90000005}) epoll_pwait(r1, &(0x7f0000001700), 0x0, 0xfffeffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001340)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000001100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x12603, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) 10.877684412s ago: executing program 2 (id=256): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40042, 0x1) close(r0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f00000021c0)={0x90, 0x0, r2, {0x20000000000007, 0x4, 0x9, 0xe, 0x8001, 0x7, {0x1, 0x0, 0x1, 0x7, 0xe, 0x4, 0x4008000, 0x9, 0x7fd, 0x6000, 0x5, r3, r4, 0x0, 0x1001}}}, 0x90) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x10000, &(0x7f0000002380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 9.884610346s ago: executing program 3 (id=257): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f00000002c0)={&(0x7f0000000380)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000400)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000440)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000540)=0x3, 0x4) pipe2$9p(0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f00000005c0)="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", 0x411) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000a80)="cd89b0b00d", 0x5}], 0x1) write$binfmt_script(r3, &(0x7f0000000f80)={'#! ', './file0', [], 0xa, "5775ebb77549afc496bc5cc558c52be63e203db628daa190b16cc7216b9bfb1b0bd22d03f5e1cd7a3da150be3434e1d6c83af706cea87fffe560d236a8c26a760289f80eaa398ae77b0d26197822dd25b01733bd602efae482eced2ed31ee6ce67c841c25dfefcd739990462ff3626423e0e3ba7a4d4a86469f8cf3ac3d81d4f63be7d17a6caf4a8b071298bc35fdea671ea0025460ccfed3040fe1945a0d089bba38204ca6631e158a7717cf420623fad22082e3ae1b8e38748772095513a3f5028fb76790ef01caab610421c1ae48ffd68b5aefd4f399b8d28edddd9dde0d8afa1fd2df0d8c6ebbcf9493daea96589ee90969516953c83d70124dc91b26e3287986fdc096eda61a819b88e28facf71a064600e69747ab08f0379afde05c2b558f6058e2ef5c3a36ab3171bd99960ebb980380b7f76f8fce6987cf5eafb1384cefd64e1d214b14cff8f9ae739db32fb1e54d01856a3b277c3f02aeebe7f58f0708f4487afe3674a0a412461a9de083979f9c380a9336893f77c19f740aed24764a0165a52fa2d8152bb55f49fe1c1a52977f9244fdf648ef55acdbaab7827a33e5c66592b97b2b4ccf4d642d75a23a0bf43cb9dd6d4156cc58636f4d68d0370d827d0c6a0b0a3fb818e36d6716a49ec3bac8da32f9a8bd74c499768a4c62822d018ef9f7982ddf15e655670f9cec0162460e4b9a83a5f1cfd99dcb5dfe680039d9b9ee28132545ce12ff1f32c6ecf9181688260da9d4d610567eacf0c399e85c974fc752333c7d0ac1ba8e0213f07884fc77b0ba82aa058e596f04b7d44b409cd4a1fab3b3c0d4217493196f62e2cf9e4d9834e7f966ca42b76100ef5f6fa89700a0b4661056849331fb583b3e9659711ae466c61507319b7d1638ffca5f9130ca7fdb86276ada534473b4d2c21859a825ba6e502d2f912e224f1fdb70a57c42e2185a45edac6e09c1c7446dc889dd8ba711ac687257b35a1b923a960be298b680106299cd3ac4e06cae9352bfdd0427e13ce759b48140df351c8f9ae8fb9acabb9c3346e23433c4875d45ac7836d990cd13d35ac48700e315d7e9b11ca587cb9a764af1fda1bb8c36f15d1d642252e26a5c9d9c33a16dca4584f864467ad20b97ddffc6fcbbaf71716aa07e9f0c99bee7e22fac55dcf54f99af981bd0217b72a4cf46ce46f165d512fd49ff4e3cea29a63e0354177bfe5433b25c3496461b39153b68cbc5af714bde4043909c4679aedd01875badbb6f74cadcf9488769ebe8e173c746225f3decccfed3d295d90b29444b27c2e5a72943eb03d254940a65398e63d78f9b41ef8a17c0c2bd8e9057619ff39dc47105189d0c70a32c535790e68fff9c9a9ef708576c51bcc8868f8a2842b82af5c0466a3cb1fc229e3fd4434e2956d206fc8ca66c8494567db7034e223a4dd1313d3b2399616307fd3ef27acf6732a69cc5f"}, 0x411) close_range(r0, 0xffffffffffffffff, 0x0) 9.041093766s ago: executing program 2 (id=258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) listen(r0, 0xfff) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000200)=""/231) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000880), 0x318, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000008c0)) stat(&(0x7f0000000300)='./file0\x00', 0x0) statx(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x6000, 0x7ff, &(0x7f0000000400)) socket$netlink(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file2\x00', 0x942, 0x0) pwrite64(r1, 0x0, 0x0, 0x9000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, @void}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000680)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000006c0)='syz_tun\x00', 0x10) sendto$inet(r2, 0x0, 0x38, 0x20000800, &(0x7f0000000700)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000740)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000780)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x4000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}, {"2c20966cf0c74b3830b97205d3980c0bdd092162f26b000000000000"}}}}}}, 0x0) 8.862105501s ago: executing program 1 (id=259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000300)) 8.727938765s ago: executing program 4 (id=260): r0 = socket(0x1, 0x5, 0x0) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./dev/tap42\x00', 0x2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) 7.964876603s ago: executing program 0 (id=261): r0 = socket$inet6(0xa, 0x3, 0x102) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 7.890265775s ago: executing program 3 (id=262): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) syz_clone(0x2004011, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 6.826740781s ago: executing program 2 (id=263): bpf$TOKEN_CREATE(0x24, &(0x7f0000001880), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000040)=0xc, 0x6, 0x2) 6.816374381s ago: executing program 4 (id=264): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, 0x0) 6.161599768s ago: executing program 1 (id=265): syz_mount_image$vfat(&(0x7f0000000640), &(0x7f00000000c0)='./file1\x00', 0x2048cc, &(0x7f0000000340)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f77397fc18b433d0c59e692b381c145c5922679338b5ff21c0653a98440a5725268a242c026e564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000000015000000", @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES8, @ANYRES32], 0x1, 0x354, &(0x7f0000000680)="$eJzs3bFvG1UcB/BfTUja0tQZEBJIiCdYYLGS8A/UQq2EiAQKDSoMSFfigOWrHfmsIleIdkNs/B0VIxsSQmLOws7GloWNDhVGthM3thwBg3Mp/Xyk3Hu556/unc9n/ZbzO7z13Z3WXlHby3pRuZbiUkRUHkWsRSWOXThqK6P+cpz0IN6q3vrt1Q8//uS9+tbW9e2UbtRvvr2ZUrr62k9ffvX96z/3Xvjoh6s/rsTB2qeHf2z+fvDSwcuHf938olmkZpHanV7K0u1Op5fdzhtpt1m0ail9kDeyopGa7aLRnRrfyzv7+/2UtXdXL+93G0WRsnY/tRr91OukXrefss+zZjvVarW0ejnmWJm38/9h7vn+g52H29tZfQGT4Qx9O7vj0vS/3W49uzD3w7/zcKETAwDOpdn6vxIXR/tLqv+PS5T/Xv9f+Ff1P1PU/8+CYf2/fHT/TlP/AwAAAAAAAAAAAADA0+DRYFAdDAbV43b2r+z5sViu/7PtxIN7FyPyb+7u3N0Zt+Px+l40I49GrEc1HkcMJmL0pOCNd7eur6eRtVi9c3+cH7bPTec3ohpr0/nhdpjfSCkN7qc0nX9+9IsWk/xmVOPF+fnN8fFn8svx5hsn8rWoxq+fRSfy2I1h9kn+642U3nl/aya/MnrdxNJwc62MSwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGailibnr99dqp42P85P19dejGo/nr8+/Pnd9/qV4ZanccwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAY0X/XivL80b37DsP4pShwZGyJnb2nYiFHeKXK3Ha+6zT//N8TGPcuXJ0T56P+ZT8xQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAleLLod9kzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoExF/14ry/NGd4Gdss8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgafJ3AAAA//9quCNn") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys\x00', 0x1ff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 6.071004379s ago: executing program 0 (id=266): setresgid(0x0, 0xee00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000d40)='system.posix_acl_access\x00', &(0x7f000000b640)={{}, {0x1, 0x4}, [], {0x4, 0x1}, [{0x8, 0x1}, {0x8, 0x3}], {0x10, 0x3}, {0x20, 0x2}}, 0x34, 0x1) setreuid(0xffffffffffffffff, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./mnt\x00', 0x1ff) 5.128892583s ago: executing program 3 (id=267): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000b00)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000500)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000000640)='-', 0x1) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f0000000680)=[{&(0x7f00000006c0)="cd89", 0x2}], 0x1) write$binfmt_script(r3, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "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"}, 0x3b0) close_range(r0, 0xffffffffffffffff, 0x0) 4.387963061s ago: executing program 0 (id=268): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @loopback, 0x106}, 0x1c) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x1c}}, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c, 0x0}}], 0x1, 0xc040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fe9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) io_uring_setup(0x1c79, &(0x7f0000000600)={0x0, 0xc8a1, 0xc000, 0xc, 0xc1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000007f0000007f000000050000000c0000000700000000000001090000002c0005020100000000000008030000000a0000000000000202000000030000000500000f"], &(0x7f0000000800)=""/212, 0x9d, 0xd4, 0x0, 0x2}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.317039803s ago: executing program 4 (id=269): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x404, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES64, @ANYRESOCT, @ANYRES8], 0x3, 0x2ea, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', 0x0) mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000480)='./file0/../file0/file0\x00') chdir(&(0x7f00000004c0)='./file0/../file0/file0\x00') 3.275047799s ago: executing program 3 (id=270): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x80, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r0, 0x0, 0x0) 3.2116771s ago: executing program 1 (id=271): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0, 0xee01, 0x1000) openat(0xffffffffffffff9c, &(0x7f00000027c0)='./file0\x00', 0x20443, 0x0) 1.297475037s ago: executing program 4 (id=272): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f00000002c0)={&(0x7f0000000380)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000400)="dc", 0x1}], 0x1}, 0x48043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000440)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000540)=0x3, 0x4) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, 0x0, 0x0) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f0000000a00)=[{&(0x7f0000000a80)="cd89b0b00d", 0x5}], 0x1) write$binfmt_script(r3, &(0x7f0000000f80)={'#! ', './file0', [], 0xa, "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"}, 0x411) close_range(r0, 0xffffffffffffffff, 0x0) 1.107943062s ago: executing program 2 (id=273): getegid() socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000680)=@framed={{}, [@alu={0x7, 0x1, 0x3, 0x0, 0x7, 0x1}]}, &(0x7f0000000700)='syzkaller\x00'}, 0x94) unshare(0x28000600) r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 954.869756ms ago: executing program 0 (id=274): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='e:mygroup/myevent sched.sched_switch', 0x24) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracefs/events/mygroup/myevent/enable\x00', 0x2, 0x1) creat(&(0x7f0000002b00)='./tracefs/dynamic_events\x00', 0xa0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) open(0x0, 0x60840, 0x0) setxattr$system_posix_acl(&(0x7f0000000080)='./tracefs/events/mygroup/myevent/enable\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) 888.849017ms ago: executing program 3 (id=275): mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000d80)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000dc0)={0x18, 0x0, 0x0, {0xb6d}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000e00)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80), 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x64) chdir(&(0x7f0000000f00)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.stat\x00', 0x275a, 0x0) 0s ago: executing program 1 (id=276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_TDX_INIT_VM(r1, 0xc008aeba, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. [ 57.717355][ T4175] cgroup: Unknown subsys name 'net' [ 57.819836][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.328744][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.515864][ T4188] rdma_rxe: rxe_register_device failed with error -23 [ 60.526961][ T4188] rdma_rxe: failed to add rxe_eth0 [ 60.527740][ T4195] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.544757][ T4201] rdma_rxe: rxe_register_device failed with error -23 [ 60.554612][ T4187] rdma_rxe: rxe_register_device failed with error -23 [ 60.566257][ T4195] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.591968][ T4194] rdma_rxe: rxe_register_device failed with error -23 [ 60.599381][ T4201] rdma_rxe: failed to add rxe_eth0 [ 60.600927][ T4187] rdma_rxe: failed to add rxe_eth0 [ 60.613328][ T4194] rdma_rxe: failed to add rxe_eth0 [ 60.644806][ T4195] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.784056][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.783230][ T4195] infiniband rxe0: set active [ 60.795571][ T4195] infiniband rxe0: added rxe_eth0 [ 60.858989][ T4195] RDS/IB: rxe0: added [ 60.864010][ T4195] smc: adding ib device rxe0 with port count 1 [ 60.870508][ T4195] smc: ib device rxe0 port 1 has pnetid [ 60.892710][ T4189] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.903768][ T4195] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.907845][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 61.045272][ T4195] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.110050][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.125372][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.139691][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.148705][ T4188] device bridge_slave_0 entered promiscuous mode [ 61.163488][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 61.190885][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 61.209511][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.218692][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.228460][ T4188] device bridge_slave_1 entered promiscuous mode [ 61.243262][ T4195] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.365652][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.398429][ T4195] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.410537][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.568325][ T4188] team0: Port device team_slave_0 added [ 61.581930][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.589649][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.597982][ T4194] device bridge_slave_0 entered promiscuous mode [ 61.608431][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.615994][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.624283][ T4194] device bridge_slave_1 entered promiscuous mode [ 61.632771][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.640778][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.648925][ T4201] device bridge_slave_0 entered promiscuous mode [ 61.657135][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.664413][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.672914][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.681736][ T4188] team0: Port device team_slave_1 added [ 61.707062][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.714131][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.741089][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.753120][ T4195] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.753892][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.766799][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.793743][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.810884][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.818579][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.832426][ T4201] device bridge_slave_1 entered promiscuous mode [ 61.840189][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.853377][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.862044][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.910844][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.926078][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.981805][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.002695][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.035430][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.054794][ T4188] device hsr_slave_0 entered promiscuous mode [ 62.064178][ T4188] device hsr_slave_1 entered promiscuous mode [ 62.073789][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.086364][ T4194] team0: Port device team_slave_0 added [ 62.136507][ T4194] team0: Port device team_slave_1 added [ 62.188821][ T4201] team0: Port device team_slave_0 added [ 62.198500][ T4187] team0: Port device team_slave_0 added [ 62.226340][ T4201] team0: Port device team_slave_1 added [ 62.235506][ T4187] team0: Port device team_slave_1 added [ 62.253226][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.260219][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.286440][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.329168][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.337326][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.368860][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.418563][ T1108] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.439811][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.448155][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.474980][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.482518][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 62.491598][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.498651][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.531034][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.542168][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 62.551492][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 62.557561][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 62.572787][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.579785][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.609694][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 62.618499][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.633611][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.640626][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.667373][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.700197][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 62.727309][ T4194] device hsr_slave_0 entered promiscuous mode [ 62.734564][ T4194] device hsr_slave_1 entered promiscuous mode [ 62.742237][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.750347][ T4194] Cannot create hsr debugfs directory [ 62.767105][ T3853] infiniband rxe0: set active [ 62.774255][ T1108] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.854752][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.861720][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.868447][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.876349][ T4187] Cannot create hsr debugfs directory [ 62.900807][ T4201] device hsr_slave_0 entered promiscuous mode [ 62.907582][ T4201] device hsr_slave_1 entered promiscuous mode [ 62.914890][ T4201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.922707][ T4201] Cannot create hsr debugfs directory [ 63.040056][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.048100][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.056066][ T4195] device bridge_slave_0 entered promiscuous mode [ 63.088874][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.099049][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.107727][ T4195] device bridge_slave_1 entered promiscuous mode [ 63.131127][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.178697][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.202354][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.222345][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.249855][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.273382][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.304430][ T4195] team0: Port device team_slave_0 added [ 63.323310][ T4195] team0: Port device team_slave_1 added [ 63.358958][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.366126][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.392888][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.413470][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.420584][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.447916][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.490508][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.501074][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.517710][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.530248][ T4195] device hsr_slave_0 entered promiscuous mode [ 63.537372][ T4195] device hsr_slave_1 entered promiscuous mode [ 63.544987][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.552808][ T4195] Cannot create hsr debugfs directory [ 63.563217][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.634867][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.703449][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.712672][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.723868][ T4201] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.744357][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.757827][ T4201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.766722][ T4201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.788370][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.800293][ T4201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.818878][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.828557][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.838478][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.845791][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.854399][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.879681][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.887944][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.900859][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.946924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.956223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.965537][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.972717][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.983782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.993999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.005129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.016799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.025642][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.033229][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.042133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.080303][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.097925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.107688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.116560][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.123788][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.131797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.140856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.150781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.160018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.169590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.178800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.192341][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.202963][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.221111][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.239529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.249045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.261960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.272321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.282855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.291871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.300452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.309830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.320750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.329887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.342199][ T4195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.362226][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.374390][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.386122][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.395129][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.405012][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.413993][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.424477][ T4195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.436003][ T4195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.447236][ T4195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.500357][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.532784][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 64.535726][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.569997][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.578633][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.611711][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 64.619882][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 64.657295][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 64.664260][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.684726][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.691885][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 64.700724][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.707972][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.716380][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.726302][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.735020][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.742129][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.750029][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.759366][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.769340][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.822131][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.835109][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.846225][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.854116][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.863014][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.871884][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.881335][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.890113][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.908208][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.926881][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.937076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.946649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.960875][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.980076][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.990470][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.998490][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.007952][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.023504][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.034944][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.047671][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.060263][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.076444][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.088609][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.097663][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.160648][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.171142][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.190010][ T3095] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.197163][ T3095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.205983][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.215280][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.223950][ T3095] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.231014][ T3095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.242386][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.251055][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.260006][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.268747][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.277837][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.288389][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.297385][ T3095] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.304591][ T3095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.313366][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.322264][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.330717][ T3095] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.337863][ T3095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.348208][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.356630][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.377424][ T4194] device veth0_vlan entered promiscuous mode [ 65.387531][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.399625][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.408554][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.418996][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.428298][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.438337][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.455210][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.465710][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.474924][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.483338][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.499636][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.510227][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.529312][ T4194] device veth1_vlan entered promiscuous mode [ 65.537493][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.547023][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.555820][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.568240][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.577105][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.585605][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.595150][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.604180][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.668236][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.687248][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.699762][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.708764][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.718369][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.726839][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.736208][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.744289][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.752173][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.760218][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.768382][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.780995][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.790453][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.800259][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.809261][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.821218][ T4188] device veth0_vlan entered promiscuous mode [ 65.832486][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.848510][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.861104][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.878283][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.887910][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.914236][ T4188] device veth1_vlan entered promiscuous mode [ 65.946387][ T4194] device veth0_macvtap entered promiscuous mode [ 65.972623][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.984796][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.994212][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.008876][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.035032][ T4194] device veth1_macvtap entered promiscuous mode [ 66.063222][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.073675][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.082673][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.093043][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.103395][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.110994][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.126999][ T4188] device veth0_macvtap entered promiscuous mode [ 66.147379][ T4201] device veth0_vlan entered promiscuous mode [ 66.156296][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.173344][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.183557][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.194059][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.202990][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.222260][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.230161][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.248195][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.259752][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.267927][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.277068][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.287904][ T4188] device veth1_macvtap entered promiscuous mode [ 66.303689][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.314659][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.324917][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.337671][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.348775][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.365428][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.379388][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.402839][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.415105][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.427203][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.439068][ T4201] device veth1_vlan entered promiscuous mode [ 66.448458][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.459001][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.468029][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.478514][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.499356][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.508139][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.524048][ T3042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.539379][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.552552][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.564248][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.576079][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.586821][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.597260][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.606705][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.616532][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 66.638882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.647603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.656922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.692160][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 66.699531][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.708654][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.708689][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 66.723239][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 66.725419][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.738992][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.757563][ T4201] device veth0_macvtap entered promiscuous mode [ 66.772098][ T4275] Bluetooth: hci2: command 0x040f tx timeout [ 66.785988][ T4201] device veth1_macvtap entered promiscuous mode [ 66.831944][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.840249][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.848758][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.857935][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.877542][ T4195] device veth0_vlan entered promiscuous mode [ 66.892792][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.904707][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.915368][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.924089][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.940017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.950839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.968679][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.982675][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.993162][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.004257][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.017265][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.027929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.036450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.044508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.055699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.079348][ T4195] device veth1_vlan entered promiscuous mode [ 67.092045][ T4187] device veth0_vlan entered promiscuous mode [ 67.099204][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.110351][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.120633][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.131831][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.143555][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.165658][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.183735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.185508][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.194303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.208101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.216856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.225680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.244312][ T4201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.258405][ T4201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.267563][ T4201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.279694][ T4201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.291217][ T4187] device veth1_vlan entered promiscuous mode [ 67.322352][ T4195] device veth0_macvtap entered promiscuous mode [ 67.347631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.351528][ T3095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.361333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.369750][ T3095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.383380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.397189][ T4195] device veth1_macvtap entered promiscuous mode [ 67.416783][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.426373][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.429708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.443963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.452644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.472918][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.487078][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.508696][ T4187] device veth0_macvtap entered promiscuous mode [ 67.528464][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.541146][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.551350][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.563030][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.574017][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.589301][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.601880][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.625710][ T4187] device veth1_macvtap entered promiscuous mode [ 67.645879][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.656983][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.666315][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.676393][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.692838][ T3095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.700204][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.712069][ T3095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.718058][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.731132][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.743342][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.753821][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.764398][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.776331][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.799411][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.808778][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.820268][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.845015][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.856312][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.866516][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.877953][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.895616][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.896261][ T4312] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.910214][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.940003][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.952795][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.987250][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.998153][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.008428][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.017580][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.027389][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.055522][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.077923][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.093904][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.104975][ T3095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.118844][ T3095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.127093][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.138193][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.159957][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.170132][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.182697][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.194154][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.204842][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.216421][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.255791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.273396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.287570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.304801][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.315749][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.325614][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.334792][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.360519][ T4319] device syzkaller0 entered promiscuous mode [ 68.394636][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.412507][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.464249][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.485732][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.498792][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.536629][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.582098][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.597655][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.619180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.668893][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.690235][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.691270][ T4329] loop3: detected capacity change from 0 to 512 [ 68.710628][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 68.717211][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.741225][ T3095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.750735][ T3095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.763286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.774304][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 68.780546][ T4278] Bluetooth: hci1: command 0x0419 tx timeout [ 68.798307][ T4278] Bluetooth: hci4: command 0x0419 tx timeout [ 68.852167][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 68.981562][ T4336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 68.985444][ T26] audit: type=1800 audit(1792217440.025:2): pid=4329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7" name="file2" dev="loop3" ino=1048625 res=0 errno=0 [ 69.126009][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.160809][ T4342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.185451][ T4346] loop0: detected capacity change from 0 to 1764 [ 69.396012][ T4355] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.404570][ T4355] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.461484][ T4355] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.468759][ T4355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.477354][ T4355] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.484605][ T4355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.568098][ T4355] team0: Port device bridge0 added [ 69.687904][ T4360] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.719128][ T4360] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.940043][ T4360] syz.1.14 (4360) used greatest stack depth: 21120 bytes left [ 70.051202][ T4379] loop0: detected capacity change from 0 to 512 [ 70.112961][ T4379] ======================================================= [ 70.112961][ T4379] WARNING: The mand mount option has been deprecated and [ 70.112961][ T4379] and is ignored by this kernel. Remove the mand [ 70.112961][ T4379] option from the mount to silence this warning. [ 70.112961][ T4379] ======================================================= [ 70.252447][ T4379] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.691155][ T4396] device syzkaller0 entered promiscuous mode [ 71.170037][ T4411] kvm: emulating exchange as write [ 71.496856][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.504500][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.717909][ T4428] overlayfs: unrecognized mount option "sync" or missing value [ 71.937791][ T4436] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.193026][ T4447] loop0: detected capacity change from 0 to 512 [ 72.273565][ T4447] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.306754][ T4458] loop1: detected capacity change from 0 to 256 [ 72.484420][ T4464] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 72.496919][ T4463] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 72.545067][ T4467] capability: warning: `syz.3.57' uses deprecated v2 capabilities in a way that may be insecure [ 73.350160][ T4503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 73.856009][ T4516] loop4: detected capacity change from 0 to 128 [ 73.952107][ T4516] FAT-fs (loop4): bogus number of reserved sectors [ 73.985118][ T4516] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 74.025024][ T4516] FAT-fs (loop4): Can't find a valid FAT filesystem [ 74.221674][ T4523] loop0: detected capacity change from 0 to 128 [ 74.268502][ T4528] loop4: detected capacity change from 0 to 164 [ 74.333341][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.410527][ T4528] Unsupported NM flag settings (240) [ 74.446593][ T4523] attempt to access beyond end of device [ 74.446593][ T4523] loop0: rw=2049, want=250, limit=128 [ 74.555403][ T4523] attempt to access beyond end of device [ 74.555403][ T4523] loop0: rw=2049, want=154, limit=128 [ 74.949771][ T4553] loop4: detected capacity change from 0 to 164 [ 75.028152][ T4553] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 75.571130][ T4580] loop0: detected capacity change from 0 to 256 [ 75.595953][ T4581] FAULT_INJECTION: forcing a failure. [ 75.595953][ T4581] name failslab, interval 1, probability 0, space 0, times 1 [ 75.660561][ T4581] CPU: 1 PID: 4581 Comm: syz.4.95 Not tainted syzkaller #0 [ 75.667954][ T4581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 75.678132][ T4581] Call Trace: [ 75.681439][ T4581] [ 75.682778][ T4580] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.684389][ T4581] dump_stack_lvl+0x188/0x250 [ 75.699513][ T4581] ? show_regs_print_info+0x20/0x20 [ 75.704838][ T4581] ? load_image+0x410/0x410 [ 75.709387][ T4581] ? __lock_acquire+0x7d40/0x7d40 [ 75.714462][ T4581] should_fail+0x383/0x4b0 [ 75.719022][ T4581] should_failslab+0x5/0x20 [ 75.723662][ T4581] slab_pre_alloc_hook+0x51/0xc0 [ 75.728628][ T4581] __kmalloc_node+0x6d/0x3a0 [ 75.733259][ T4581] ? kvmalloc_node+0x84/0x130 [ 75.737975][ T4581] kvmalloc_node+0x84/0x130 [ 75.742520][ T4581] btf_new_fd+0x1e2/0x910 [ 75.746890][ T4581] __sys_bpf+0x58c/0x6f0 [ 75.751176][ T4581] ? bpf_link_show_fdinfo+0x380/0x380 [ 75.756646][ T4581] __x64_sys_bpf+0x78/0x90 [ 75.760711][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 75.761092][ T4581] do_syscall_64+0x4c/0xa0 [ 75.761117][ T4581] ? clear_bhb_loop+0x30/0x80 [ 75.778943][ T4581] ? clear_bhb_loop+0x30/0x80 [ 75.783771][ T4581] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.789696][ T4581] RIP: 0033:0x7f9abb489559 [ 75.794165][ T4581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.808775][ T4580] FAT-fs (loop0): Filesystem has been set read-only [ 75.813887][ T4581] RSP: 002b:00007f9ab96e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.813920][ T4581] RAX: ffffffffffffffda RBX: 00007f9abb710fa0 RCX: 00007f9abb489559 [ 75.813934][ T4581] RDX: 0000000000000028 RSI: 0000200000000400 RDI: 0000000000000012 [ 75.813947][ T4581] RBP: 00007f9abb520ab8 R08: 0000000000000000 R09: 0000000000000000 [ 75.813959][ T4581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.813971][ T4581] R13: 00007f9abb711038 R14: 00007f9abb710fa0 R15: 00007ffe789add68 [ 75.814000][ T4581] [ 76.045353][ T4592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.99'. [ 76.057281][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.086738][ T4592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'. [ 76.095966][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.139065][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.179495][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.229515][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.277902][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.310413][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.336885][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.366833][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.386118][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.406517][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.472440][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.517794][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.541730][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.564339][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.581540][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.601110][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.615508][ T4639] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.658605][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.668030][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.677296][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.739492][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.757016][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.769255][ T4580] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 76.780709][ T26] audit: type=1800 audit(1792217447.815:3): pid=4580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.94" name="file1" dev="loop0" ino=1048630 res=0 errno=0 [ 76.922397][ T4580] syz.0.94 (4580) used greatest stack depth: 20608 bytes left [ 77.341225][ T4673] FAULT_INJECTION: forcing a failure. [ 77.341225][ T4673] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 77.355208][ T4673] CPU: 1 PID: 4673 Comm: syz.1.123 Not tainted syzkaller #0 [ 77.362527][ T4673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 77.372643][ T4673] Call Trace: [ 77.376039][ T4673] [ 77.379103][ T4673] dump_stack_lvl+0x188/0x250 [ 77.383814][ T4673] ? show_regs_print_info+0x20/0x20 [ 77.389047][ T4673] ? load_image+0x410/0x410 [ 77.393671][ T4673] should_fail+0x383/0x4b0 [ 77.398104][ T4673] prepare_alloc_pages+0x1e3/0x5b0 [ 77.403501][ T4673] __alloc_pages+0x11b/0x480 [ 77.408097][ T4673] ? zone_statistics+0x170/0x170 [ 77.413072][ T4673] ? rcu_lock_acquire+0x30/0x30 [ 77.417943][ T4673] ? alloc_pages+0x452/0x560 [ 77.422542][ T4673] __get_free_pages+0x8/0x30 [ 77.427145][ T4673] __tlb_remove_page_size+0x1f2/0x3f0 [ 77.432633][ T4673] unmap_page_range+0xfcf/0x2410 [ 77.437597][ T4673] unmap_vmas+0x131/0x250 [ 77.441933][ T4673] ? unmap_page_range+0x2410/0x2410 [ 77.447305][ T4673] ? __mutex_lock_common+0x435/0x2400 [ 77.452777][ T4673] ? exit_mm_release+0x16/0x30 [ 77.457738][ T4673] exit_mmap+0x3b9/0x640 [ 77.462074][ T4673] ? vm_brk+0x20/0x20 [ 77.466068][ T4673] ? uprobe_clear_state+0x2f6/0x460 [ 77.471385][ T4673] __mmput+0x115/0x390 [ 77.475463][ T4673] exit_mm+0x632/0x7b0 [ 77.479636][ T4673] ? perf_pmu_migrate_context+0xb70/0xb70 [ 77.485372][ T4673] ? do_exit+0x2110/0x2110 [ 77.489791][ T4673] ? __ia32_sys_timer_delete+0x40/0x40 [ 77.495251][ T4673] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 77.500726][ T4673] ? tty_audit_exit+0x149/0x1f0 [ 77.505580][ T4673] do_exit+0x5b8/0x2110 [ 77.509741][ T4673] ? put_task_struct+0x80/0x80 [ 77.514594][ T4673] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 77.520584][ T4673] ? _raw_spin_lock_irq+0xb7/0xf0 [ 77.525735][ T4673] do_group_exit+0x12c/0x2f0 [ 77.530681][ T4673] ? lockdep_hardirqs_on+0x94/0x140 [ 77.535889][ T4673] get_signal+0x7eb/0x12e0 [ 77.540409][ T4673] arch_do_signal_or_restart+0xe6/0x12a0 [ 77.546047][ T4673] ? rcu_lock_release+0x9/0x20 [ 77.550825][ T4673] ? futex_exit_release+0x1c0/0x1c0 [ 77.556037][ T4673] ? get_sigframe_size+0x10/0x10 [ 77.560976][ T4673] ? __context_tracking_exit+0x4c/0x80 [ 77.566448][ T4673] ? exit_to_user_mode_loop+0x3b/0x130 [ 77.571908][ T4673] exit_to_user_mode_loop+0x9e/0x130 [ 77.577196][ T4673] exit_to_user_mode_prepare+0xee/0x180 [ 77.582831][ T4673] syscall_exit_to_user_mode+0x16/0x40 [ 77.588308][ T4673] do_syscall_64+0x58/0xa0 [ 77.592728][ T4673] ? clear_bhb_loop+0x30/0x80 [ 77.597415][ T4673] ? clear_bhb_loop+0x30/0x80 [ 77.602100][ T4673] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.607993][ T4673] RIP: 0033:0x7fb8a1505559 [ 77.612408][ T4673] Code: Unable to access opcode bytes at RIP 0x7fb8a150552f. [ 77.619869][ T4673] RSP: 002b:00007fb89f75d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 77.628298][ T4673] RAX: 0000000000000001 RBX: 00007fb8a178cfa8 RCX: 00007fb8a1505559 [ 77.637334][ T4673] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb8a178cfac [ 77.645512][ T4673] RBP: 00007fb8a178cfa0 R08: 000ff5099329b652 R09: 0000000000000000 [ 77.653495][ T4673] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000000 [ 77.661675][ T4673] R13: 00007fb8a178d038 R14: 00007ffd4b60f0d0 R15: 00007ffd4b60f1b8 [ 77.669816][ T4673] [ 77.848308][ T4680] FAULT_INJECTION: forcing a failure. [ 77.848308][ T4680] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 77.963895][ T4680] CPU: 0 PID: 4680 Comm: syz.2.127 Not tainted syzkaller #0 [ 77.971245][ T4680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 77.981424][ T4680] Call Trace: [ 77.984730][ T4680] [ 77.987770][ T4680] dump_stack_lvl+0x188/0x250 [ 77.992488][ T4680] ? show_regs_print_info+0x20/0x20 [ 77.997905][ T4680] ? load_image+0x410/0x410 [ 78.002435][ T4680] ? pcpu_alloc+0x11e6/0x16d0 [ 78.007318][ T4680] ? __lock_acquire+0x7d40/0x7d40 [ 78.012531][ T4680] should_fail+0x383/0x4b0 [ 78.016986][ T4680] _copy_from_user+0x2e/0x170 [ 78.021702][ T4680] bpf_prog_create_from_user+0xff/0x420 [ 78.027284][ T4680] ? seccomp_attach_filter+0xbb0/0xbb0 [ 78.033052][ T4680] do_seccomp+0x808/0x16a0 [ 78.037517][ T4680] ? __lock_acquire+0x7d40/0x7d40 [ 78.042574][ T4680] ? prctl_set_seccomp+0x60/0x60 [ 78.047533][ T4680] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 78.053557][ T4680] ? lockdep_hardirqs_on+0x94/0x140 [ 78.058790][ T4680] do_syscall_64+0x4c/0xa0 [ 78.063268][ T4680] ? clear_bhb_loop+0x30/0x80 [ 78.068067][ T4680] ? clear_bhb_loop+0x30/0x80 [ 78.072779][ T4680] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.078870][ T4680] RIP: 0033:0x7fd06909f559 [ 78.083329][ T4680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.103476][ T4680] RSP: 002b:00007fd0672f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 78.112267][ T4680] RAX: ffffffffffffffda RBX: 00007fd069326fa0 RCX: 00007fd06909f559 [ 78.120263][ T4680] RDX: 0000200000000ac0 RSI: 000000000000000a RDI: 0000000000000001 [ 78.128261][ T4680] RBP: 00007fd069136ab8 R08: 0000000000000000 R09: 0000000000000000 [ 78.136406][ T4680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.144426][ T4680] R13: 00007fd069327038 R14: 00007fd069326fa0 R15: 00007fffc94bdff8 [ 78.152641][ T4680] [ 78.282319][ T4687] loop1: detected capacity change from 0 to 128 [ 78.545793][ T26] audit: type=1326 audit(1792217449.585:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.1.133" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a1505559 code=0x7ffc0000 [ 78.595346][ T26] audit: type=1326 audit(1792217449.615:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.1.133" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a1505559 code=0x7ffc0000 [ 78.652116][ T26] audit: type=1326 audit(1792217449.615:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.1.133" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a1505559 code=0x7ffc0000 [ 78.704353][ T26] audit: type=1326 audit(1792217449.615:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.1.133" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb8a1505559 code=0x7ffc0000 [ 78.784637][ T26] audit: type=1326 audit(1792217449.615:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.1.133" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a1505559 code=0x7ffc0000 [ 78.814260][ T4708] loop4: detected capacity change from 0 to 512 [ 78.827198][ T26] audit: type=1326 audit(1792217449.615:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.1.133" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a1505559 code=0x7ffc0000 [ 78.865486][ T26] audit: type=1326 audit(1792217449.615:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.1.133" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a1505559 code=0x7ffc0000 [ 78.898670][ T26] audit: type=1326 audit(1792217449.615:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.1.133" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8a1505559 code=0x7ffc0000 [ 78.930982][ T26] audit: type=1326 audit(1792217449.615:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.1.133" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8a1505559 code=0x7ffc0000 [ 78.990058][ T4708] FAT-fs (loop4): error, clusters badly computed (1 != 0) [ 79.319688][ T4733] loop4: detected capacity change from 0 to 512 [ 80.095313][ T4769] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.365681][ T4778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.166'. [ 80.949395][ T4799] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 80.998872][ T4799] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 81.025396][ T4799] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 81.050905][ T4799] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 81.080018][ T4799] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 81.112743][ T4799] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 81.148189][ T4799] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 81.160142][ T4812] FAULT_INJECTION: forcing a failure. [ 81.160142][ T4812] name fail_futex, interval 1, probability 0, space 0, times 1 [ 81.169553][ T4799] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 81.176477][ T4812] CPU: 0 PID: 4812 Comm: syz.0.180 Not tainted syzkaller #0 [ 81.188617][ T4812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 81.198719][ T4812] Call Trace: [ 81.202126][ T4812] [ 81.205122][ T4812] dump_stack_lvl+0x188/0x250 [ 81.209935][ T4812] ? show_regs_print_info+0x20/0x20 [ 81.211581][ T4799] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 81.215162][ T4812] ? load_image+0x410/0x410 [ 81.215196][ T4812] ? mark_lock+0x94/0x320 [ 81.232706][ T4812] should_fail+0x383/0x4b0 [ 81.237385][ T4812] get_futex_key+0x1a1/0x12d0 [ 81.242133][ T4812] ? __lock_acquire+0x13b3/0x7d40 [ 81.247230][ T4812] ? futex_wait_restart+0x250/0x250 [ 81.249305][ T4799] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 81.252483][ T4812] futex_wake+0x101/0x540 [ 81.252522][ T4812] ? futex_wait+0x680/0x680 [ 81.252542][ T4812] ? verify_lock_unused+0x140/0x140 [ 81.275157][ T4812] ? verify_lock_unused+0x140/0x140 [ 81.280416][ T4812] do_futex+0xd83/0x12b0 [ 81.284703][ T4812] ? __se_sys_setns+0x755/0x15e0 [ 81.289713][ T4812] ? futex_exit_release+0x1c0/0x1c0 [ 81.295078][ T4812] ? __context_tracking_exit+0x4c/0x80 [ 81.300843][ T4812] __se_sys_futex+0x389/0x420 [ 81.305572][ T4812] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 81.311793][ T4812] ? __x64_sys_futex+0xf0/0xf0 [ 81.316866][ T4812] ? __x64_sys_futex+0x1d/0xf0 [ 81.321668][ T4812] do_syscall_64+0x4c/0xa0 [ 81.326680][ T4812] ? clear_bhb_loop+0x30/0x80 [ 81.331496][ T4812] ? clear_bhb_loop+0x30/0x80 [ 81.336215][ T4812] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.342245][ T4812] RIP: 0033:0x7fde881c0559 [ 81.346702][ T4812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.366692][ T4812] RSP: 002b:00007fde864180e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 81.375160][ T4812] RAX: ffffffffffffffda RBX: 00007fde88447fa8 RCX: 00007fde881c0559 [ 81.383353][ T4812] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fde88447fac [ 81.391617][ T4812] RBP: 00007fde88447fa0 R08: 0005d30b5a0ffb8c R09: 0000000000000000 [ 81.399965][ T4812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.408268][ T4812] R13: 00007fde88448038 R14: 00007ffc3cb74590 R15: 00007ffc3cb74678 [ 81.416298][ T4812] [ 81.559246][ T4811] md/raid:md0: device ram1 operational as raid disk 1 [ 81.626904][ T4811] md/raid:md0: not enough operational devices (2/3 failed) [ 81.746432][ T4811] md/raid:md0: failed to run raid set. [ 81.824150][ T4811] md: pers->run() failed ... [ 82.152593][ T4828] device syzkaller1 entered promiscuous mode [ 82.172286][ T4830] loop0: detected capacity change from 0 to 164 [ 82.296365][ T4830] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 82.526230][ T4838] FAULT_INJECTION: forcing a failure. [ 82.526230][ T4838] name failslab, interval 1, probability 0, space 0, times 0 [ 82.608145][ T4838] CPU: 1 PID: 4838 Comm: syz.0.189 Not tainted syzkaller #0 [ 82.615509][ T4838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 82.625607][ T4838] Call Trace: [ 82.628919][ T4838] [ 82.631879][ T4838] dump_stack_lvl+0x188/0x250 [ 82.633623][ T4844] mmap: syz.2.194 (4844): VmData 49217536 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 82.636789][ T4838] ? show_regs_print_info+0x20/0x20 [ 82.636819][ T4838] ? load_image+0x410/0x410 [ 82.636839][ T4838] ? __might_sleep+0xf0/0xf0 [ 82.658382][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 82.658396][ T26] audit: type=1800 audit(1792217453.695:15): pid=4842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.193" name="file2" dev="sda1" ino=2047 res=0 errno=0 [ 82.659947][ T4838] ? __lock_acquire+0x7d40/0x7d40 [ 82.696574][ T4838] should_fail+0x383/0x4b0 [ 82.700322][ T4846] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 82.701127][ T4838] should_failslab+0x5/0x20 [ 82.724011][ T4838] slab_pre_alloc_hook+0x51/0xc0 [ 82.729545][ T4838] ? __d_alloc+0x27/0x6d0 [ 82.734487][ T4838] kmem_cache_alloc+0x3d/0x280 [ 82.739358][ T4838] __d_alloc+0x27/0x6d0 [ 82.743629][ T4838] ? d_alloc_pseudo+0xe/0x70 [ 82.748360][ T4838] d_alloc_pseudo+0x19/0x70 [ 82.753005][ T4838] alloc_file_pseudo+0xe0/0x200 [ 82.758049][ T4838] ? alloc_empty_file_noaccount+0x80/0x80 [ 82.763907][ T4838] ? alloc_fd+0x59e/0x650 [ 82.768263][ T4838] sock_alloc_file+0xb3/0x240 [ 82.773307][ T4838] __sys_socket+0x11d/0x170 [ 82.777853][ T4838] __x64_sys_socket+0x76/0x80 [ 82.782553][ T4838] do_syscall_64+0x4c/0xa0 [ 82.787068][ T4838] ? clear_bhb_loop+0x30/0x80 [ 82.791864][ T4838] ? clear_bhb_loop+0x30/0x80 [ 82.796592][ T4838] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.802579][ T4838] RIP: 0033:0x7fde881c0559 [ 82.807001][ T4838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.826745][ T4838] RSP: 002b:00007fde86418028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 82.835180][ T4838] RAX: ffffffffffffffda RBX: 00007fde88447fa0 RCX: 00007fde881c0559 [ 82.843290][ T4838] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 82.851677][ T4838] RBP: 00007fde88257ab8 R08: 0000000000000000 R09: 0000000000000000 [ 82.859747][ T4838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.867821][ T4838] R13: 00007fde88448038 R14: 00007fde88447fa0 R15: 00007ffc3cb74678 [ 82.875813][ T4838] [ 83.373118][ T4859] loop0: detected capacity change from 0 to 256 [ 83.398434][ T4859] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.840327][ T4898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 83.885107][ T4898] netlink: 60 bytes leftover after parsing attributes in process `syz.0.214'. [ 84.122471][ T4920] loop1: detected capacity change from 0 to 764 [ 84.286273][ T26] audit: type=1326 audit(1792217455.325:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4929 comm="syz.2.230" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06909f559 code=0x7ffc0000 [ 84.360125][ T26] audit: type=1326 audit(1792217455.355:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4929 comm="syz.2.230" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06909f559 code=0x7ffc0000 [ 84.413509][ T4936] loop3: detected capacity change from 0 to 764 [ 84.471519][ T26] audit: type=1326 audit(1792217455.355:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4929 comm="syz.2.230" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd06909f559 code=0x7ffc0000 [ 84.524332][ T4943] loop1: detected capacity change from 0 to 256 [ 84.562954][ T4943] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.604266][ T26] audit: type=1326 audit(1792217455.355:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4929 comm="syz.2.230" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd06909f559 code=0x7ffc0000 [ 84.655680][ T4936] Symlink component flag not implemented [ 84.674992][ T4936] Symlink component flag not implemented (15) [ 85.084538][ T4965] netlink: 64 bytes leftover after parsing attributes in process `syz.0.244'. [ 85.170057][ T4965] device bridge_slave_0 left promiscuous mode [ 85.247462][ T4965] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.491634][ C0] hrtimer: interrupt took 537149 ns [ 85.665609][ T4965] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 85.761897][ T4965] Zero length message leads to an empty skb [ 85.970249][ T26] audit: type=1326 audit(1792217457.005:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.2.247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd06909f559 code=0x0 [ 86.868143][ T23] cfg80211: failed to load regulatory.db [ 90.263625][ T5000] CUSE: unknown device info "" [ 90.268716][ T5000] CUSE: unknown device info "" [ 90.310769][ T5000] CUSE: unknown device info "€" [ 90.345914][ T5000] CUSE: unknown device info "" [ 90.350935][ T5000] CUSE: unknown device info "ý" [ 90.416025][ T5000] CUSE: unknown device info "`" [ 90.421125][ T5000] CUSE: unknown device info "" [ 90.512715][ T5000] CUSE: unknown device info "" [ 90.534672][ T5000] CUSE: DEVNAME unspecified [ 90.599750][ T5001] loop0: detected capacity change from 0 to 16 [ 90.939584][ T5001] erofs: (device loop0): mounted with root inode @ nid 36. [ 95.064513][ T5030] loop1: detected capacity change from 0 to 512 [ 95.194283][ T5030] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.903115][ T5038] loop4: detected capacity change from 0 to 128 [ 97.035826][ T5038] FAT-fs (loop4): Invalid FSINFO signature: 0x00000004, 0x80417272 (sector = 1) [ 98.406602][ T5044] loop1: detected capacity change from 0 to 256 [ 99.190169][ T4187] FAT-fs (loop4): error, invalid access to FAT (entry 0xffff0000) [ 99.276816][ T4187] FAT-fs (loop4): Filesystem has been set read-only [ 99.432135][ T4187] FAT-fs (loop4): Invalid FSINFO signature: 0x00000004, 0x80417272 (sector = 1) [ 100.872965][ T5050] ================================================================== [ 100.881861][ T5050] BUG: KASAN: use-after-free in tracing_open_file_tr+0x170/0x2f0 [ 100.889806][ T5050] Read of size 8 at addr ffff888078762048 by task syz.0.274/5050 [ 100.897700][ T5050] [ 100.900105][ T5050] CPU: 1 PID: 5050 Comm: syz.0.274 Not tainted syzkaller #0 [ 100.907579][ T5050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.917775][ T5050] Call Trace: [ 100.921219][ T5050] [ 100.924454][ T5050] dump_stack_lvl+0x188/0x250 [ 100.929311][ T5050] ? show_regs_print_info+0x20/0x20 [ 100.934625][ T5050] ? _printk+0xda/0x130 [ 100.939015][ T5050] ? tracing_open_file_tr+0x170/0x2f0 [ 100.944757][ T5050] ? load_image+0x410/0x410 [ 100.949528][ T5050] print_address_description+0x60/0x2d0 [ 100.955279][ T5050] ? tracing_open_file_tr+0x170/0x2f0 [ 100.960841][ T5050] kasan_report+0xdf/0x130 [ 100.965590][ T5050] ? tracing_open_file_tr+0x170/0x2f0 [ 100.971120][ T5050] tracing_open_file_tr+0x170/0x2f0 [ 100.976654][ T5050] ? tracing_open_generic_tr+0x180/0x180 [ 100.982594][ T5050] do_dentry_open+0x7f7/0xf90 [ 100.987545][ T5050] ? vfs_open+0x2b/0x80 [ 100.992067][ T5050] path_openat+0x2718/0x2fb0 [ 100.997452][ T5050] ? ring_buffer_unlock_commit+0x472/0x5f0 [ 101.003476][ T5050] ? trace_event_buffer_lock_reserve+0xed/0x6a0 [ 101.010439][ T5050] ? do_filp_open+0x400/0x400 [ 101.015246][ T5050] ? trace_event_raw_event_lock+0x1d9/0x250 [ 101.021354][ T5050] ? perf_trace_lock_acquire+0x3f0/0x3f0 [ 101.027522][ T5050] do_filp_open+0x356/0x400 [ 101.032229][ T5050] ? vfs_tmpfile+0x300/0x300 [ 101.037536][ T5050] ? _raw_spin_unlock+0x24/0x40 [ 101.043208][ T5050] ? alloc_fd+0x59e/0x650 [ 101.048012][ T5050] do_sys_openat2+0x14b/0x500 [ 101.053002][ T5050] ? __lock_acquire+0x7d40/0x7d40 [ 101.058342][ T5050] ? do_sys_open+0xe0/0xe0 [ 101.063039][ T5050] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 101.069514][ T5050] ? lock_chain_count+0x20/0x20 [ 101.074741][ T5050] __x64_sys_openat+0x135/0x160 [ 101.080129][ T5050] do_syscall_64+0x4c/0xa0 [ 101.084722][ T5050] ? clear_bhb_loop+0x30/0x80 [ 101.089597][ T5050] ? clear_bhb_loop+0x30/0x80 [ 101.094465][ T5050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.100462][ T5050] RIP: 0033:0x7fde881c0559 [ 101.105038][ T5050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.124944][ T5050] RSP: 002b:00007fde86418028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.133744][ T5050] RAX: ffffffffffffffda RBX: 00007fde88447fa0 RCX: 00007fde881c0559 [ 101.141981][ T5050] RDX: 0000000000000002 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 101.150256][ T5050] RBP: 00007fde88257ab8 R08: 0000000000000000 R09: 0000000000000000 [ 101.158429][ T5050] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 101.166545][ T5050] R13: 00007fde88448038 R14: 00007fde88447fa0 R15: 00007ffc3cb74678 [ 101.175262][ T5050] [ 101.178392][ T5050] [ 101.180839][ T5050] Allocated by task 5050: [ 101.185299][ T5050] __kasan_slab_alloc+0x92/0xc0 [ 101.190412][ T5050] slab_post_alloc_hook+0x4c/0x380 [ 101.195829][ T5050] kmem_cache_alloc+0x15d/0x280 [ 101.200792][ T5050] trace_create_new_event+0x26/0x3d0 [ 101.206330][ T5050] trace_add_event_call+0xed/0x1c0 [ 101.211554][ T5050] trace_probe_register_event_call+0x328/0x3e0 [ 101.217865][ T5050] __trace_eprobe_create+0xaaf/0xc80 [ 101.223412][ T5050] trace_probe_create+0xc4/0x130 [ 101.228544][ T5050] create_dyn_event+0xa9/0x140 [ 101.233636][ T5050] trace_parse_run_command+0x1a8/0x2c0 [ 101.239362][ T5050] vfs_write+0x304/0xd70 [ 101.243906][ T5050] ksys_write+0x153/0x260 [ 101.248538][ T5050] do_syscall_64+0x4c/0xa0 [ 101.253127][ T5050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.259214][ T5050] [ 101.261728][ T5050] Freed by task 5054: [ 101.265771][ T5050] kasan_set_track+0x4b/0x70 [ 101.270459][ T5050] kasan_set_free_info+0x1f/0x40 [ 101.275534][ T5050] ____kasan_slab_free+0xd5/0x110 [ 101.280797][ T5050] slab_free_freelist_hook+0xec/0x170 [ 101.286345][ T5050] kmem_cache_free+0x8f/0x210 [ 101.291306][ T5050] __trace_remove_event_call+0x227/0x500 [ 101.297142][ T5050] trace_remove_event_call+0x21a/0x330 [ 101.302724][ T5050] eprobe_dyn_event_release+0x123/0x2d0 [ 101.308492][ T5050] dyn_event_open+0x1e5/0x2a0 [ 101.313329][ T5050] do_dentry_open+0x7f7/0xf90 [ 101.318270][ T5050] path_openat+0x2718/0x2fb0 [ 101.323066][ T5050] do_filp_open+0x1df/0x400 [ 101.327704][ T5050] do_sys_openat2+0x14b/0x500 [ 101.332470][ T5050] __x64_sys_creat+0x8c/0xb0 [ 101.337195][ T5050] do_syscall_64+0x4c/0xa0 [ 101.341840][ T5050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.347895][ T5050] [ 101.350401][ T5050] The buggy address belongs to the object at ffff888078762000 [ 101.350401][ T5050] which belongs to the cache trace_event_file of size 96 [ 101.365082][ T5050] The buggy address is located 72 bytes inside of [ 101.365082][ T5050] 96-byte region [ffff888078762000, ffff888078762060) [ 101.378657][ T5050] The buggy address belongs to the page: [ 101.384477][ T5050] page:ffffea0001e1d880 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78762 [ 101.394862][ T5050] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 101.402589][ T5050] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff8880178c5280 [ 101.411367][ T5050] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000 [ 101.420238][ T5050] page dumped because: kasan: bad access detected [ 101.426817][ T5050] page_owner tracks the page as allocated [ 101.432714][ T5050] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5050, ts 100576523576, free_ts 99490015636 [ 101.448907][ T5050] get_page_from_freelist+0x24f6/0x2670 [ 101.454803][ T5050] __alloc_pages+0x1ee/0x480 [ 101.459651][ T5050] new_slab+0xc0/0x4b0 [ 101.463916][ T5050] ___slab_alloc+0x807/0xdd0 [ 101.468620][ T5050] kmem_cache_alloc+0xf0/0x280 [ 101.473471][ T5050] trace_create_new_event+0x26/0x3d0 [ 101.479108][ T5050] trace_add_event_call+0xed/0x1c0 [ 101.484465][ T5050] trace_probe_register_event_call+0x328/0x3e0 [ 101.490793][ T5050] __trace_eprobe_create+0xaaf/0xc80 [ 101.496378][ T5050] trace_probe_create+0xc4/0x130 [ 101.501641][ T5050] create_dyn_event+0xa9/0x140 [ 101.506568][ T5050] trace_parse_run_command+0x1a8/0x2c0 [ 101.512136][ T5050] vfs_write+0x304/0xd70 [ 101.516507][ T5050] ksys_write+0x153/0x260 [ 101.520983][ T5050] do_syscall_64+0x4c/0xa0 [ 101.525610][ T5050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.531686][ T5050] page last free stack trace: [ 101.536415][ T5050] free_unref_page_prepare+0x637/0x6c0 [ 101.541969][ T5050] free_unref_page_list+0x119/0x830 [ 101.547502][ T5050] release_pages+0x185f/0x1bd0 [ 101.552572][ T5050] tlb_finish_mmu+0x1b4/0x370 [ 101.557617][ T5050] exit_mmap+0x3d0/0x640 [ 101.562329][ T5050] __mmput+0x115/0x390 [ 101.566497][ T5050] exit_mm+0x632/0x7b0 [ 101.570657][ T5050] do_exit+0x5b8/0x2110 [ 101.575012][ T5050] do_group_exit+0x12c/0x2f0 [ 101.579830][ T5050] __x64_sys_exit_group+0x3b/0x40 [ 101.585028][ T5050] do_syscall_64+0x4c/0xa0 [ 101.589639][ T5050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.595693][ T5050] [ 101.598302][ T5050] Memory state around the buggy address: [ 101.604033][ T5050] ffff888078761f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 101.612226][ T5050] ffff888078761f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 101.620448][ T5050] >ffff888078762000: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 101.628696][ T5050] ^ [ 101.635288][ T5050] ffff888078762080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 101.643525][ T5050] ffff888078762100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 101.651690][ T5050] ================================================================== [ 101.659894][ T5050] Disabling lock debugging due to kernel taint [ 102.886469][ T5050] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.893969][ T5050] CPU: 1 PID: 5050 Comm: syz.0.274 Tainted: G B syzkaller #0 [ 102.903009][ T5050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.913268][ T5050] Call Trace: [ 102.916649][ T5050] [ 102.919662][ T5050] dump_stack_lvl+0x188/0x250 [ 102.924557][ T5050] ? show_regs_print_info+0x20/0x20 [ 102.929980][ T5050] ? load_image+0x410/0x410 [ 102.934888][ T5050] panic+0x2f8/0x850 [ 102.939238][ T5050] ? bpf_jit_dump+0xd0/0xd0 [ 102.944037][ T5050] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 102.950123][ T5050] ? _raw_spin_unlock+0x40/0x40 [ 102.955109][ T5050] ? print_memory_metadata+0x314/0x400 [ 102.960907][ T5050] ? tracing_open_file_tr+0x170/0x2f0 [ 102.966522][ T5050] check_panic_on_warn+0x80/0xa0 [ 102.971619][ T5050] ? tracing_open_file_tr+0x170/0x2f0 [ 102.977108][ T5050] end_report+0x6d/0xf0 [ 102.981415][ T5050] kasan_report+0x102/0x130 [ 102.986287][ T5050] ? tracing_open_file_tr+0x170/0x2f0 [ 102.992137][ T5050] tracing_open_file_tr+0x170/0x2f0 [ 102.997549][ T5050] ? tracing_open_generic_tr+0x180/0x180 [ 103.003379][ T5050] do_dentry_open+0x7f7/0xf90 [ 103.008447][ T5050] ? vfs_open+0x2b/0x80 [ 103.012827][ T5050] path_openat+0x2718/0x2fb0 [ 103.017965][ T5050] ? ring_buffer_unlock_commit+0x472/0x5f0 [ 103.023931][ T5050] ? trace_event_buffer_lock_reserve+0xed/0x6a0 [ 103.030717][ T5050] ? do_filp_open+0x400/0x400 [ 103.035673][ T5050] ? trace_event_raw_event_lock+0x1d9/0x250 [ 103.041726][ T5050] ? perf_trace_lock_acquire+0x3f0/0x3f0 [ 103.048017][ T5050] do_filp_open+0x356/0x400 [ 103.052992][ T5050] ? vfs_tmpfile+0x300/0x300 [ 103.058415][ T5050] ? _raw_spin_unlock+0x24/0x40 [ 103.063362][ T5050] ? alloc_fd+0x59e/0x650 [ 103.068141][ T5050] do_sys_openat2+0x14b/0x500 [ 103.073134][ T5050] ? __lock_acquire+0x7d40/0x7d40 [ 103.078547][ T5050] ? do_sys_open+0xe0/0xe0 [ 103.083211][ T5050] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 103.089554][ T5050] ? lock_chain_count+0x20/0x20 [ 103.095249][ T5050] __x64_sys_openat+0x135/0x160 [ 103.100285][ T5050] do_syscall_64+0x4c/0xa0 [ 103.104835][ T5050] ? clear_bhb_loop+0x30/0x80 [ 103.109676][ T5050] ? clear_bhb_loop+0x30/0x80 [ 103.114646][ T5050] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.120631][ T5050] RIP: 0033:0x7fde881c0559 [ 103.125148][ T5050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.145087][ T5050] RSP: 002b:00007fde86418028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 103.153815][ T5050] RAX: ffffffffffffffda RBX: 00007fde88447fa0 RCX: 00007fde881c0559 [ 103.161967][ T5050] RDX: 0000000000000002 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 103.170125][ T5050] RBP: 00007fde88257ab8 R08: 0000000000000000 R09: 0000000000000000 [ 103.178321][ T5050] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 103.186487][ T5050] R13: 00007fde88448038 R14: 00007fde88447fa0 R15: 00007ffc3cb74678 [ 103.195057][ T5050] [ 103.198246][ T5050] Kernel Offset: disabled [ 103.202997][ T5050] Rebooting in 86400 seconds..