last executing test programs: 4.400340534s ago: executing program 1 (id=550): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1c, 0x7}, {}, {0x7, 0xfffb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) 4.013763518s ago: executing program 1 (id=556): syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f0000001800)=ANY=[], 0x0) syz_open_procfs(0x0, 0x0) ioperm(0x83, 0x6, 0x8) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.812224779s ago: executing program 1 (id=572): ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) gettid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) timer_create(0x0, 0x0, &(0x7f0000001400)) 2.642209932s ago: executing program 1 (id=575): syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000200)='./file0\x00', 0x14814, &(0x7f0000000640)=ANY=[], 0x1, 0x20e, &(0x7f0000000d00)="$eJzs27FqU1EYB/B/alpv7GAHJ1EMdHEq6hMYpIIYECoZdDJQXVoR0iUKYp/HWfAVfBmXDtItcnujbWMKrWmaGn8/OJyPfDnkuwfCd4ZzX916u7X5bufN4se9FLVmFpKH2U9WymioNpyLg3gpx9QyiR8TrQYA/srGRreVfJ11GUxRr9fq3lhdHpPpfJ5BOQAAAAAAAAAAAJyDs9z/X0g+jd7/373gegGAyVX3/5lHjeHc67W6t6vz2wj3/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDZ2R8Mrg/KUQzn4biapEjSSHItST1J+fms6wUAJrc/ON73T+r/SWpJ9H8AmAPPX7x82mq31zeazSL5vtvv9DvVXOUfP2mv32seWDlctdfvd64kKUd7/X6Vbx7PLx6cG8r1D8bml3J3tcqXuUfP2iP55WxexAYAwH9orfnbkf7+q7cna2vj8mV/rqIj54OR/l3PzfrYn1yY0qMAAKe08/7DVnd7+3Xv3IPa2VY1hgWd/J0v9WmVOmnQmPpmXorgW+0ylJFcjt34h4PidPsMzLfDP/1opphNQQAAAAAAAAAAAAAAwB8u4pWjJHdm/ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMyXnwEAAP//2d9NhA==") mkdirat(0xffffffffffffff9c, 0x0, 0x10) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001080)=""/4096, 0x1000) 2.329456888s ago: executing program 1 (id=579): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2.329270117s ago: executing program 4 (id=580): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x10}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000040)='./file1\x00', 0x121340, 0x1c5) 2.329066195s ago: executing program 5 (id=581): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1c, 0x7}, {}, {0x7, 0xfffb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) 2.223938582s ago: executing program 1 (id=582): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="20011500000011"], 0x0}) 2.073517363s ago: executing program 3 (id=584): syz_usb_connect(0x3, 0x2d, &(0x7f0000001180)={{0x12, 0x1, 0x201, 0x59, 0xd5, 0xd1, 0x10, 0xeb1a, 0x50a6, 0x662, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xf5, 0xc, 0x20, 0xc6, [{{0x9, 0x4, 0x74, 0x1, 0x0, 0x95, 0x34, 0x5}}, {{0x9, 0x4, 0x74, 0x1f, 0x0, 0xc1, 0xf4, 0x30, 0x9}}]}}]}}, 0x0) 2.050499974s ago: executing program 4 (id=586): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0xd96d, 0x101, 0x0, 0x4000, 0x0, 0x0}, 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x10}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/42, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f626172726965722c63726561746f723dbd3c66d52c6e6c733d646566617552742c756d61736b3d30303030303030303030303030303030303030303033372c756d61feb602acbda70144729eac18af17e021736b3d30303000537ad97378c970231c066c3e3e30303030303030"], 0x3, 0x6b7, &(0x7f0000000c40)="$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") 1.872650396s ago: executing program 5 (id=588): ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) timer_create(0x0, 0x0, &(0x7f0000001400)) 1.697059082s ago: executing program 0 (id=589): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 1.645802345s ago: executing program 4 (id=590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 1.644975847s ago: executing program 5 (id=591): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.461354007s ago: executing program 4 (id=592): syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000200)='./file0\x00', 0x14814, &(0x7f0000000640)=ANY=[], 0x1, 0x20e, &(0x7f0000000d00)="$eJzs27FqU1EYB/B/alpv7GAHJ1EMdHEq6hMYpIIYECoZdDJQXVoR0iUKYp/HWfAVfBmXDtItcnujbWMKrWmaGn8/OJyPfDnkuwfCd4ZzX916u7X5bufN4se9FLVmFpKH2U9WymioNpyLg3gpx9QyiR8TrQYA/srGRreVfJ11GUxRr9fq3lhdHpPpfJ5BOQAAAAAAAAAAAJyDs9z/X0g+jd7/373gegGAyVX3/5lHjeHc67W6t6vz2wj3/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDZ2R8Mrg/KUQzn4biapEjSSHItST1J+fms6wUAJrc/ON73T+r/SWpJ9H8AmAPPX7x82mq31zeazSL5vtvv9DvVXOUfP2mv32seWDlctdfvd64kKUd7/X6Vbx7PLx6cG8r1D8bml3J3tcqXuUfP2iP55WxexAYAwH9orfnbkf7+q7cna2vj8mV/rqIj54OR/l3PzfrYn1yY0qMAAKe08/7DVnd7+3Xv3IPa2VY1hgWd/J0v9WmVOmnQmPpmXorgW+0ylJFcjt34h4PidPsMzLfDP/1opphNQQAAAAAAAAAAAAAAwB8u4pWjJHdm/ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMyXnwEAAP//2d9NhA==") mkdirat(0xffffffffffffff9c, 0x0, 0x10) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001080)=""/4096, 0x1000) 1.458000932s ago: executing program 0 (id=593): r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)={[{0x8, 0x4e00, "e94727bb87356252"}]}) 1.385946119s ago: executing program 5 (id=594): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.268659798s ago: executing program 4 (id=595): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8957) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x40844) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) 1.268262025s ago: executing program 5 (id=596): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) 951.053326ms ago: executing program 3 (id=599): mkdir(0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x10}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000040)='./file1\x00', 0x121340, 0x1c5) 941.075247ms ago: executing program 2 (id=600): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1c, 0x7}, {}, {0x7, 0xfffb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) 780.884704ms ago: executing program 0 (id=601): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000cab000)=0xfffffffffffffe4c) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 722.173626ms ago: executing program 3 (id=602): syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0x17) 704.553324ms ago: executing program 2 (id=603): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 627.244426ms ago: executing program 0 (id=604): ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) timer_create(0x0, 0x0, &(0x7f0000001400)) 517.465777ms ago: executing program 3 (id=605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 517.187642ms ago: executing program 2 (id=606): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) 475.758522ms ago: executing program 3 (id=607): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 420.761384ms ago: executing program 0 (id=608): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 290.428544ms ago: executing program 2 (id=609): syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000200)='./file0\x00', 0x14814, &(0x7f0000000640)=ANY=[], 0x1, 0x20e, &(0x7f0000000d00)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x10) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001080)=""/4096, 0x1000) 289.897432ms ago: executing program 4 (id=610): syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f0000001800)=ANY=[], 0x0) syz_open_procfs(0x0, 0x0) ioperm(0x83, 0x6, 0x8) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 288.97321ms ago: executing program 5 (id=611): syz_usb_connect(0x3, 0x2d, &(0x7f0000001180)={{0x12, 0x1, 0x201, 0x59, 0xd5, 0xd1, 0x10, 0xeb1a, 0x50a6, 0x662, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xf5, 0xc, 0x20, 0xc6, [{{0x9, 0x4, 0x74, 0x1, 0x0, 0x95, 0x34, 0x5}}, {{0x9, 0x4, 0x74, 0x1f, 0x0, 0xc1, 0xf4, 0x30, 0x9}}]}}]}}, 0x0) 230.978529ms ago: executing program 0 (id=612): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa80, &(0x7f00000016c0)="$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") r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x2) 230.562108ms ago: executing program 3 (id=613): r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000080)={[{0x8, 0x4e00, "e94727bb87356252"}]}) 65.370085ms ago: executing program 2 (id=614): mkdir(0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x10}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000040)='./file1\x00', 0x121340, 0x1c5) 0s ago: executing program 2 (id=615): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 1'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts. [ 84.917250][ T5816] cgroup: Unknown subsys name 'net' [ 85.047249][ T5816] cgroup: Unknown subsys name 'cpuset' [ 85.055696][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.607483][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.647398][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.658806][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.667221][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.675736][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.687413][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.695867][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.703820][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.711614][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.724991][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.730352][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.732259][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.740502][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.752430][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.761543][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.762184][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.769892][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.783564][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.784086][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.798488][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.799129][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.813409][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.821635][ T5136] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.840998][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.841847][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.856649][ T5136] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.857125][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.871550][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.880057][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.880483][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.894579][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.901924][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.906504][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.909175][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.924894][ T5136] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.939250][ T5851] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.952434][ T5136] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.416664][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 91.506181][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 91.564144][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 91.710413][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 91.886565][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.898548][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.907448][ T5830] bridge_slave_0: entered allmulticast mode [ 91.918635][ T5830] bridge_slave_0: entered promiscuous mode [ 91.929827][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.941601][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.950325][ T5830] bridge_slave_1: entered allmulticast mode [ 91.962591][ T5830] bridge_slave_1: entered promiscuous mode [ 92.145346][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 92.158393][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.218992][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.238853][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.246478][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.254950][ T5832] bridge_slave_0: entered allmulticast mode [ 92.261799][ T5832] bridge_slave_0: entered promiscuous mode [ 92.269805][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.277347][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.285233][ T5827] bridge_slave_0: entered allmulticast mode [ 92.292084][ T5827] bridge_slave_0: entered promiscuous mode [ 92.301020][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 92.312253][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.319637][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.328923][ T5839] bridge_slave_0: entered allmulticast mode [ 92.336629][ T5839] bridge_slave_0: entered promiscuous mode [ 92.346192][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.353451][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.360633][ T5839] bridge_slave_1: entered allmulticast mode [ 92.367985][ T5839] bridge_slave_1: entered promiscuous mode [ 92.400033][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.407814][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.415513][ T5832] bridge_slave_1: entered allmulticast mode [ 92.422377][ T5832] bridge_slave_1: entered promiscuous mode [ 92.429885][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.437208][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.444656][ T5827] bridge_slave_1: entered allmulticast mode [ 92.451801][ T5827] bridge_slave_1: entered promiscuous mode [ 92.503535][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.515303][ T5830] team0: Port device team_slave_0 added [ 92.523963][ T5830] team0: Port device team_slave_1 added [ 92.531598][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.627081][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.671440][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.678802][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.705710][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.719249][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.726340][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.753285][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.777093][ T5839] team0: Port device team_slave_0 added [ 92.784899][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.797981][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.810493][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.848431][ T5839] team0: Port device team_slave_1 added [ 92.883929][ T5136] Bluetooth: hci3: command tx timeout [ 92.893198][ T5136] Bluetooth: hci2: command tx timeout [ 92.893213][ T5843] Bluetooth: hci0: command tx timeout [ 92.944958][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.951953][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.978142][ T5136] Bluetooth: hci4: command tx timeout [ 92.983253][ T5136] Bluetooth: hci1: command tx timeout [ 92.984107][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.013419][ T5827] team0: Port device team_slave_0 added [ 93.019446][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.032496][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.039942][ T5847] bridge_slave_0: entered allmulticast mode [ 93.051958][ T5136] Bluetooth: hci5: command tx timeout [ 93.054352][ T5847] bridge_slave_0: entered promiscuous mode [ 93.082849][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.090740][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.098432][ T5828] bridge_slave_0: entered allmulticast mode [ 93.105840][ T5828] bridge_slave_0: entered promiscuous mode [ 93.114364][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.121339][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.147795][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.169821][ T5832] team0: Port device team_slave_0 added [ 93.178317][ T5832] team0: Port device team_slave_1 added [ 93.186096][ T5827] team0: Port device team_slave_1 added [ 93.202486][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.209964][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.217344][ T5847] bridge_slave_1: entered allmulticast mode [ 93.224908][ T5847] bridge_slave_1: entered promiscuous mode [ 93.236083][ T5830] hsr_slave_0: entered promiscuous mode [ 93.242657][ T5830] hsr_slave_1: entered promiscuous mode [ 93.249924][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.257245][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.264979][ T5828] bridge_slave_1: entered allmulticast mode [ 93.271986][ T5828] bridge_slave_1: entered promiscuous mode [ 93.340405][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.368996][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.376730][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.404240][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.418773][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.426150][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.452602][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.464616][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.471587][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.497635][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.525627][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.537486][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.564865][ T5839] hsr_slave_0: entered promiscuous mode [ 93.571647][ T5839] hsr_slave_1: entered promiscuous mode [ 93.578165][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.586090][ T5839] Cannot create hsr debugfs directory [ 93.592196][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.599413][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.626059][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.681978][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.744365][ T5847] team0: Port device team_slave_0 added [ 93.758598][ T5847] team0: Port device team_slave_1 added [ 93.767515][ T5828] team0: Port device team_slave_0 added [ 93.775783][ T5828] team0: Port device team_slave_1 added [ 93.856426][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.863676][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.890249][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.907885][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.915062][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.941506][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.004342][ T5832] hsr_slave_0: entered promiscuous mode [ 94.010815][ T5832] hsr_slave_1: entered promiscuous mode [ 94.017935][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.026062][ T5832] Cannot create hsr debugfs directory [ 94.032158][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.041293][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.074537][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.087768][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.095105][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.121739][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.150351][ T5827] hsr_slave_0: entered promiscuous mode [ 94.156776][ T5827] hsr_slave_1: entered promiscuous mode [ 94.166184][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.174703][ T5827] Cannot create hsr debugfs directory [ 94.298294][ T5828] hsr_slave_0: entered promiscuous mode [ 94.305658][ T5828] hsr_slave_1: entered promiscuous mode [ 94.311837][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.320097][ T5828] Cannot create hsr debugfs directory [ 94.380949][ T5847] hsr_slave_0: entered promiscuous mode [ 94.387880][ T5847] hsr_slave_1: entered promiscuous mode [ 94.394530][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.402327][ T5847] Cannot create hsr debugfs directory [ 94.650726][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.691516][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.733245][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.772507][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.842336][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.852259][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.876319][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.886443][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.956867][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.965020][ T5136] Bluetooth: hci0: command tx timeout [ 94.969146][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.973294][ T5136] Bluetooth: hci2: command tx timeout [ 94.977625][ T5843] Bluetooth: hci3: command tx timeout [ 95.001748][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.012373][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.053421][ T5843] Bluetooth: hci1: command tx timeout [ 95.054870][ T5136] Bluetooth: hci4: command tx timeout [ 95.104272][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.115415][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.123404][ T5136] Bluetooth: hci5: command tx timeout [ 95.144475][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.156674][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.273438][ T5828] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.282911][ T5828] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.300040][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.319358][ T5828] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.336401][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.380269][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.390308][ T5828] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.437515][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.444835][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.480258][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.487444][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.506864][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.522695][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.565369][ T228] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.572505][ T228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.589953][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.603526][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.617576][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.630517][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.648941][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.656093][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.705514][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.759154][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.812929][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.820207][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.836796][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.843966][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.948224][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.031741][ T228] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.038915][ T228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.122273][ T228] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.129446][ T228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.167449][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.199788][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.295933][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.316071][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.389183][ T228] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.396414][ T228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.457422][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.491238][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.498717][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.516070][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.523248][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.553037][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.567093][ T25] cfg80211: failed to load regulatory.db [ 96.598423][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.605787][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.656319][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.711499][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.771729][ T5830] veth0_vlan: entered promiscuous mode [ 96.846415][ T5830] veth1_vlan: entered promiscuous mode [ 96.970400][ T5832] veth0_vlan: entered promiscuous mode [ 97.007418][ T5830] veth0_macvtap: entered promiscuous mode [ 97.037286][ T5832] veth1_vlan: entered promiscuous mode [ 97.043328][ T5136] Bluetooth: hci3: command tx timeout [ 97.055565][ T5136] Bluetooth: hci2: command tx timeout [ 97.055581][ T5843] Bluetooth: hci0: command tx timeout [ 97.097938][ T5830] veth1_macvtap: entered promiscuous mode [ 97.123064][ T5136] Bluetooth: hci1: command tx timeout [ 97.133846][ T5136] Bluetooth: hci4: command tx timeout [ 97.181885][ T5827] veth0_vlan: entered promiscuous mode [ 97.205610][ T5136] Bluetooth: hci5: command tx timeout [ 97.219865][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.259880][ T5839] veth0_vlan: entered promiscuous mode [ 97.280691][ T5827] veth1_vlan: entered promiscuous mode [ 97.292480][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.321433][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.330815][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.339688][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.348671][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.370446][ T5832] veth0_macvtap: entered promiscuous mode [ 97.391773][ T5839] veth1_vlan: entered promiscuous mode [ 97.407080][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.445053][ T5832] veth1_macvtap: entered promiscuous mode [ 97.527211][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.541402][ T5827] veth0_macvtap: entered promiscuous mode [ 97.560372][ T5839] veth0_macvtap: entered promiscuous mode [ 97.581896][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.602015][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.625678][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.661484][ T5827] veth1_macvtap: entered promiscuous mode [ 97.673911][ T5839] veth1_macvtap: entered promiscuous mode [ 97.730945][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.742302][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.754076][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.798224][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.807653][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.838731][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.859174][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.869541][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.880506][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.891889][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.915311][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.924416][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.933745][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.942655][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.965541][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.979833][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.990167][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.000643][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.011957][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.039249][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.045479][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.058078][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.067577][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.077697][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.088606][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.098563][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.109374][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.120565][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.134669][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.143617][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.152908][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.162041][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.205911][ T5847] veth0_vlan: entered promiscuous mode [ 98.229933][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.241252][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.255954][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.267122][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.277119][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.287776][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.300133][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.325740][ T5847] veth1_vlan: entered promiscuous mode [ 98.339531][ T5828] veth0_vlan: entered promiscuous mode [ 98.341209][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.379041][ T5828] veth1_vlan: entered promiscuous mode [ 98.396877][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.406771][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.415674][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.424457][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.569803][ T5847] veth0_macvtap: entered promiscuous mode [ 98.578976][ T5847] veth1_macvtap: entered promiscuous mode [ 98.594434][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.605216][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.615482][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.626196][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.636319][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.647505][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.657950][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.668642][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.679797][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.730285][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.743125][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.746794][ T5938] loop0: detected capacity change from 0 to 1024 [ 98.753812][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.770845][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.780768][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.791483][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.813074][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.833056][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.852700][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.866472][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.882627][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.912899][ T228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.916453][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.929897][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.936970][ T228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.946686][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.954792][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.965850][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.972296][ T5938] EXT4-fs (loop0): Test dummy encryption mode enabled [ 98.975070][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.990333][ T5938] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 98.995612][ T5828] veth0_macvtap: entered promiscuous mode [ 99.060149][ T228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.062802][ T5828] veth1_macvtap: entered promiscuous mode [ 99.068167][ T228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.091269][ T5938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.127585][ T5136] Bluetooth: hci2: command tx timeout [ 99.127834][ T5843] Bluetooth: hci3: command tx timeout [ 99.133311][ T5851] Bluetooth: hci0: command tx timeout [ 99.208307][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.213540][ T5136] Bluetooth: hci1: command tx timeout [ 99.222720][ T5851] Bluetooth: hci4: command tx timeout [ 99.230756][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.283740][ T5851] Bluetooth: hci5: command tx timeout [ 99.285154][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.314434][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.332593][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.343751][ T5938] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 99.360914][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.410818][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.423069][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.433514][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.444589][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.454738][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.465528][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.477771][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.500239][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.517696][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.525994][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.540799][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.552724][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.567553][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.576580][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.613098][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.663085][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.672961][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.717636][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.743096][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.763012][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.783059][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.803825][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.824977][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.868333][ T5954] loop0: detected capacity change from 0 to 8192 [ 99.904504][ T5828] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.913371][ T5828] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.922100][ T5828] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.930958][ T5828] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.995825][ T228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.003937][ T228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.060606][ T5958] loop2: detected capacity change from 0 to 24 [ 100.301697][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.364068][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.482789][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.510692][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.737787][ T5966] loop2: detected capacity change from 0 to 4096 [ 100.789577][ T5966] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 101.063635][ T5966] ntfs3(loop2): ino=0, attr_set_size [ 101.090333][ T5966] ntfs3(loop2): ino=0, attr_set_size [ 101.102223][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.148517][ T5975] bond0: (slave rose0): Enslaving as an active interface with an up link [ 104.985161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 105.524529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.533869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.545613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.555851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.903702][ T5136] Bluetooth: hci5: command 0x0405 tx timeout [ 107.717051][ T29] audit: type=1326 audit(1736676501.159:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e8785d29 code=0x7ffc0000 [ 107.755522][ T29] audit: type=1326 audit(1736676501.159:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e8785d29 code=0x7ffc0000 [ 107.793081][ T29] audit: type=1326 audit(1736676501.169:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53e8785d29 code=0x7ffc0000 [ 107.816218][ T29] audit: type=1326 audit(1736676501.169:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e8785d29 code=0x7ffc0000 [ 107.838527][ T29] audit: type=1326 audit(1736676501.169:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.1.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e8785d29 code=0x7ffc0000 [ 107.923826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 108.183304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 110.248008][ T6049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.27'. [ 110.644457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.743064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 110.853392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 115.443416][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.816072][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 116.045054][ T6086] warning: `syz.3.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 116.060232][ T25] usb 1-1: config 0 has no interfaces? [ 116.143097][ T25] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 116.185958][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 116.301837][ T25] usb 1-1: Product: syz [ 116.550499][ T25] usb 1-1: Manufacturer: syz [ 116.555885][ T25] usb 1-1: SerialNumber: syz [ 116.613970][ T25] usb 1-1: config 0 descriptor?? [ 117.371077][ T6115] ntfs3(nullb0): Primary boot signature is not NTFS. [ 117.378518][ T6115] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 118.063486][ T5892] usb 1-1: USB disconnect, device number 2 [ 118.574188][ T29] audit: type=1326 audit(1736676513.209:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b2385d29 code=0x7ffc0000 [ 118.646033][ T6133] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.655542][ T29] audit: type=1326 audit(1736676513.209:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b2385d29 code=0x7ffc0000 [ 118.700545][ T29] audit: type=1326 audit(1736676513.249:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8b2385d29 code=0x7ffc0000 [ 118.730702][ T6135] loop5: detected capacity change from 0 to 512 [ 118.774165][ T6135] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 118.788955][ T29] audit: type=1326 audit(1736676513.249:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b2385d29 code=0x7ffc0000 [ 118.823831][ T6135] EXT4-fs (loop5): invalid journal inode [ 118.849307][ T6135] EXT4-fs (loop5): can't get journal size [ 118.891888][ T6135] EXT4-fs (loop5): 1 truncate cleaned up [ 118.925790][ T29] audit: type=1326 audit(1736676513.249:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b2385d29 code=0x7ffc0000 [ 118.926231][ T6141] loop3: detected capacity change from 0 to 4096 [ 118.964182][ T6135] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.071448][ T29] audit: type=1326 audit(1736676513.259:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8b2385d29 code=0x7ffc0000 [ 119.124843][ T6135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.192255][ T29] audit: type=1326 audit(1736676513.259:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b2385d29 code=0x7ffc0000 [ 119.237692][ T6151] loop4: detected capacity change from 0 to 2048 [ 119.240330][ T29] audit: type=1326 audit(1736676513.259:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b2385d29 code=0x7ffc0000 [ 119.268721][ T29] audit: type=1326 audit(1736676513.259:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8b2385d29 code=0x7ffc0000 [ 119.312326][ T6151] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 119.320309][ T6151] UDF-fs: Scanning with blocksize 512 failed [ 119.369843][ T29] audit: type=1326 audit(1736676513.259:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b2385d29 code=0x7ffc0000 [ 119.461246][ T6151] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.698349][ T5834] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.888858][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 120.935951][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.151162][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.328172][ T5834] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 121.482253][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.974019][ T5834] usb 5-1: config 0 descriptor?? [ 121.989096][ T5834] hub 5-1:0.0: USB hub found [ 122.213239][ T5834] hub 5-1:0.0: 1 port detected [ 122.281400][ T6192] netlink: 64 bytes leftover after parsing attributes in process `syz.5.61'. [ 122.298452][ T6195] loop1: detected capacity change from 0 to 2048 [ 122.388526][ T6195] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.62: bad orphan inode 8192 [ 122.447194][ T6195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.680347][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.684504][ T6209] loop0: detected capacity change from 0 to 512 [ 122.721426][ T6209] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 122.742774][ T6209] EXT4-fs (loop0): invalid journal inode [ 122.748611][ T6209] EXT4-fs (loop0): can't get journal size [ 122.801999][ T6209] EXT4-fs (loop0): 1 truncate cleaned up [ 122.872041][ T6209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.900296][ T5894] hub 5-1:0.0: activate --> -90 [ 123.102310][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.316580][ T5891] usb 5-1: USB disconnect, device number 2 [ 123.329276][ T6212] loop3: detected capacity change from 0 to 32768 [ 123.422098][ T6212] read_mapping_page failed! [ 123.429756][ T6212] ERROR: (device loop3): txAbort: [ 123.429756][ T6212] [ 123.447247][ T6212] ERROR: (device loop3): remounting filesystem as read-only [ 123.531858][ T6226] loop2: detected capacity change from 0 to 128 [ 123.551234][ T6228] loop1: detected capacity change from 0 to 1024 [ 123.620565][ T6228] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.046229][ T5894] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 126.133148][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 126.314184][ T5894] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice= 0.55 [ 126.323451][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.339515][ T5894] usb 6-1: config 0 descriptor?? [ 126.359064][ T5894] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 126.367192][ T5894] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 126.451059][ T6259] loop3: detected capacity change from 0 to 512 [ 126.494475][ T6259] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 126.519650][ T6259] EXT4-fs (loop3): invalid journal inode [ 126.525624][ T6259] EXT4-fs (loop3): can't get journal size [ 126.542892][ T6259] EXT4-fs (loop3): 1 truncate cleaned up [ 126.549760][ T6259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.605416][ T5894] usb 6-1: USB disconnect, device number 2 [ 126.613966][ T6255] loop0: detected capacity change from 0 to 4096 [ 126.647517][ T6267] loop2: detected capacity change from 0 to 1024 [ 126.647798][ T6255] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 126.654941][ T6267] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.670103][ T6267] EXT4-fs: Ignoring removed bh option [ 126.700614][ T6267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.714889][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.752160][ T6267] ======================================================= [ 126.752160][ T6267] WARNING: The mand mount option has been deprecated and [ 126.752160][ T6267] and is ignored by this kernel. Remove the mand [ 126.752160][ T6267] option from the mount to silence this warning. [ 126.752160][ T6267] ======================================================= [ 126.908007][ T6266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.043927][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'. [ 127.157815][ T6278] loop0: detected capacity change from 0 to 2048 [ 127.363487][ T6280] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.386311][ T6278] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 127.499528][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 127.499555][ T29] audit: type=1800 audit(1736676522.029:59): pid=6278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.90" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 127.556546][ T6278] Remounting filesystem read-only [ 127.612899][ T6292] overlayfs: failed to clone upperpath [ 130.149440][ T6301] loop3: detected capacity change from 0 to 64 [ 130.186848][ T5830] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 130.257442][ T6305] loop0: detected capacity change from 0 to 512 [ 130.289520][ T6305] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 130.327491][ T6301] hfs: request for non-existent node 237 in B*Tree [ 130.361940][ T6301] hfs: request for non-existent node 237 in B*Tree [ 130.398334][ T6301] hfs: request for non-existent node 237 in B*Tree [ 130.413149][ T6305] EXT4-fs (loop0): invalid journal inode [ 130.418911][ T6305] EXT4-fs (loop0): can't get journal size [ 130.436248][ T6301] hfs: request for non-existent node 237 in B*Tree [ 130.457722][ T6310] hfs: request for non-existent node 237 in B*Tree [ 130.485785][ T6310] hfs: request for non-existent node 237 in B*Tree [ 130.529041][ T6301] hfs: request for non-existent node 237 in B*Tree [ 130.577066][ T6301] hfs: request for non-existent node 237 in B*Tree [ 130.665520][ T6305] EXT4-fs (loop0): 1 truncate cleaned up [ 130.694186][ T6305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.832476][ T6320] Process accounting resumed [ 131.506235][ T6313] loop1: detected capacity change from 0 to 4096 [ 131.662310][ T6321] loop4: detected capacity change from 0 to 1024 [ 131.739213][ T6321] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 131.761341][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.798730][ T6321] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:482: comm syz.4.106: Invalid block bitmap block 0 in block_group 0 [ 131.865606][ T6321] Quota error (device loop4): write_blk: dquota write failed [ 131.873447][ T6321] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 131.884542][ T6321] EXT4-fs error (device loop4): ext4_acquire_dquot:6936: comm syz.4.106: Failed to acquire dquot type 0 [ 131.915146][ T6321] EXT4-fs error (device loop4): ext4_free_blocks:6588: comm syz.4.106: Freeing blocks not in datazone - block = 0, count = 4096 [ 132.025596][ T6321] EXT4-fs error (device loop4): ext4_read_inode_bitmap:138: comm syz.4.106: Invalid inode bitmap blk 0 in block_group 0 [ 132.063409][ T12] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 132.072794][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6959: comm kworker/u8:1: Failed to release dquot type 0 [ 132.113062][ T6321] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 132.146092][ T6321] EXT4-fs (loop4): 1 orphan inode deleted [ 132.167887][ T6321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.555259][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.740959][ T6347] ntfs3(nullb0): Primary boot signature is not NTFS. [ 132.748535][ T6347] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 133.671199][ T6365] syz.3.119 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 133.693344][ T6357] loop5: detected capacity change from 0 to 512 [ 133.709810][ T6357] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 133.747912][ T6365] netlink: 60 bytes leftover after parsing attributes in process `syz.3.119'. [ 133.797790][ T6373] loop1: detected capacity change from 0 to 512 [ 133.814876][ T6373] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 133.823359][ T6357] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 133.877139][ T6373] EXT4-fs (loop1): invalid journal inode [ 133.897119][ T6373] EXT4-fs (loop1): can't get journal size [ 133.950286][ T6357] EXT4-fs (loop5): 1 orphan inode deleted [ 133.964179][ T6357] EXT4-fs (loop5): 1 truncate cleaned up [ 133.982113][ T6373] EXT4-fs (loop1): 1 truncate cleaned up [ 133.990420][ T6373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.032061][ T6357] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.200397][ T6357] syz.5.121 (pid 6357) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 134.272197][ T6357] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 134.346308][ T6357] EXT4-fs (loop5): Remounting filesystem read-only [ 134.364199][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.394248][ T6357] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 17, error -5) [ 134.428951][ T29] audit: type=1326 audit(1736676529.069:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6393 comm="syz.2.127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8b2385d29 code=0x0 [ 134.653951][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.125380][ T6429] netlink: 132 bytes leftover after parsing attributes in process `syz.4.139'. [ 137.154350][ T6429] netlink: 'syz.4.139': attribute type 10 has an invalid length. [ 137.180440][ T6429] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 137.737160][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.743857][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.002705][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 139.447248][ T5851] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 139.456428][ T5851] Bluetooth: hci3: Injecting HCI hardware error event [ 139.470691][ T5136] Bluetooth: hci3: hardware error 0x00 [ 140.239974][ T6462] process 'syz.4.146' launched '/dev/fd/3' with NULL argv: empty string added [ 140.455223][ T6466] mmap: syz.2.149 (6466) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.927319][ T6473] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 142.539992][ T5842] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 142.974870][ T5136] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 143.103253][ T6488] loop0: detected capacity change from 0 to 512 [ 143.180370][ T6488] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 143.213067][ T5842] usb 2-1: Using ep0 maxpacket: 32 [ 143.220613][ T5842] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 143.243064][ T6488] EXT4-fs (loop0): invalid journal inode [ 143.256426][ T6488] EXT4-fs (loop0): can't get journal size [ 143.283395][ T5842] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 143.292943][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.301217][ T5842] usb 2-1: Product: syz [ 143.305648][ T5842] usb 2-1: Manufacturer: syz [ 143.310857][ T5842] usb 2-1: SerialNumber: syz [ 143.317823][ T5842] usb 2-1: config 0 descriptor?? [ 143.325570][ T6480] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 143.334333][ T5842] hub 2-1:0.0: bad descriptor, ignoring hub [ 143.340372][ T5842] hub 2-1:0.0: probe with driver hub failed with error -5 [ 143.352399][ T5842] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 143.366681][ T6488] EXT4-fs (loop0): 1 truncate cleaned up [ 143.377916][ T6488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.532483][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.667168][ T5894] usb 2-1: USB disconnect, device number 2 [ 143.667261][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 144.247733][ T6524] loop5: detected capacity change from 0 to 64 [ 144.321283][ T5894] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 144.593260][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 144.636348][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 144.668766][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 145.352511][ T5894] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 145.362105][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.370746][ T5894] usb 1-1: Product: syz [ 145.408515][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'. [ 145.419635][ T5894] usb 1-1: Manufacturer: syz [ 146.460294][ T5894] usb 1-1: SerialNumber: syz [ 146.760747][ T5894] usb 1-1: config 0 descriptor?? [ 146.768121][ T6551] overlayfs: failed to clone upperpath [ 146.878889][ T5894] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 146.999962][ T5894] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 147.108864][ T6552] loop1: detected capacity change from 0 to 512 [ 147.168760][ T6552] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 147.210775][ T6554] Bluetooth: MGMT ver 1.23 [ 147.364777][ T6552] EXT4-fs (loop1): invalid journal inode [ 147.370540][ T6552] EXT4-fs (loop1): can't get journal size [ 147.394377][ T5894] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 147.403074][ T5894] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 147.412722][ T5894] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 147.422231][ T5894] em28xx 1-1:0.0: No AC97 audio processor [ 147.427445][ T6552] EXT4-fs (loop1): 1 truncate cleaned up [ 147.435513][ T6552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.543492][ T5894] usb 1-1: USB disconnect, device number 3 [ 147.550268][ T5894] em28xx 1-1:0.0: Disconnecting em28xx [ 147.574024][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.608141][ T5894] em28xx 1-1:0.0: Freeing device [ 147.793270][ T5842] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 147.826846][ T6575] loop3: detected capacity change from 0 to 1024 [ 147.960937][ T5842] usb 6-1: unable to get BOS descriptor or descriptor too short [ 147.981741][ T5842] usb 6-1: not running at top speed; connect to a high speed hub [ 148.016769][ T5842] usb 6-1: config 2 has an invalid interface number: 232 but max is 1 [ 148.037847][ T5842] usb 6-1: config 2 has an invalid interface number: 8 but max is 1 [ 148.068564][ T5842] usb 6-1: config 2 has no interface number 0 [ 148.080661][ T5842] usb 6-1: config 2 has no interface number 1 [ 148.096262][ T5842] usb 6-1: config 2 interface 8 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 148.130290][ T5842] usb 6-1: config 2 interface 8 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 148.164807][ T5842] usb 6-1: config 2 interface 8 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 148.205823][ T5842] usb 6-1: config 2 interface 232 has no altsetting 0 [ 148.232492][ T5842] usb 6-1: New USB device found, idVendor=056c, idProduct=8007, bcdDevice=5f.aa [ 148.256392][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.278613][ T5842] usb 6-1: Product: 㠊 [ 148.291881][ T5842] usb 6-1: SerialNumber: 㰁 [ 148.589813][ T5842] belkin_sa 6-1:2.232: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 148.642936][ T5842] usb 6-1: bcdDevice: 5faa, bfc: 0 [ 148.673588][ T5842] usb 6-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 148.731270][ T5842] belkin_sa 6-1:2.8: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 148.806149][ T5842] usb 6-1: bcdDevice: 5faa, bfc: 0 [ 148.851936][ T5842] usb 6-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB1 [ 148.953506][ T5842] usb 6-1: USB disconnect, device number 3 [ 149.088739][ T6597] netlink: 20 bytes leftover after parsing attributes in process `syz.0.192'. [ 149.155611][ T6597] netlink: 20 bytes leftover after parsing attributes in process `syz.0.192'. [ 149.875806][ T5842] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 149.887771][ T5842] belkin_sa 6-1:2.232: device disconnected [ 149.942286][ T5842] belkin ttyUSB1: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB1 [ 149.954494][ T5842] belkin_sa 6-1:2.8: device disconnected [ 149.964479][ T6603] loop4: detected capacity change from 0 to 16 [ 149.980265][ T6603] erofs (device loop4): mounted with root inode @ nid 36. [ 149.996843][ T6604] loop1: detected capacity change from 0 to 16 [ 150.094810][ T6604] erofs (device loop1): mounted with root inode @ nid 36. [ 151.538197][ T6620] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.703218][ T6620] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.055346][ T6620] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.231319][ T6620] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.325902][ T6645] loop1: detected capacity change from 0 to 1024 [ 152.391969][ T6620] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.447024][ T6620] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.475392][ T6620] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.504826][ T6620] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.593077][ T5894] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 152.610363][ T6633] dccp_close: ABORT with 84 bytes unread [ 152.755053][ T6653] loop0: detected capacity change from 0 to 1024 [ 152.784129][ T5894] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 152.793410][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.811871][ T5894] usb 6-1: config 0 descriptor?? [ 152.831581][ T5894] cp210x 6-1:0.0: cp210x converter detected [ 153.246454][ T6668] overlayfs: failed to clone upperpath [ 153.676750][ T5894] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 153.742241][ T5894] usb 6-1: cp210x converter now attached to ttyUSB0 [ 153.817106][ T6682] netlink: 'syz.2.232': attribute type 10 has an invalid length. [ 153.834216][ T6682] team0: Port device netdevsim0 added [ 153.891053][ T5894] usb 6-1: USB disconnect, device number 4 [ 153.899891][ T5894] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 153.976893][ T5894] cp210x 6-1:0.0: device disconnected [ 154.010358][ T47] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 154.183860][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 154.207674][ T47] usb 1-1: New USB device found, idVendor=05d1, idProduct=9003, bcdDevice= 2.00 [ 154.230859][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.263077][ T47] usb 1-1: Product: syz [ 154.279763][ T47] usb 1-1: Manufacturer: syz [ 154.302177][ T47] usb 1-1: SerialNumber: syz [ 154.329419][ T47] usb 1-1: config 0 descriptor?? [ 154.350151][ T47] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 154.367979][ T47] usb 1-1: Detected FT232A [ 154.385364][ T47] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 154.556612][ T47] usb 1-1: USB disconnect, device number 4 [ 154.581094][ T47] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 154.628773][ T47] ftdi_sio 1-1:0.0: device disconnected [ 154.681602][ T6683] dccp_close: ABORT with 84 bytes unread [ 155.093335][ T5892] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 155.252657][ T6704] overlayfs: failed to clone upperpath [ 155.642781][ T6715] netlink: 'syz.4.245': attribute type 10 has an invalid length. [ 155.655936][ T6710] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.744434][ T6715] syz_tun: entered promiscuous mode [ 155.776030][ T6715] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 155.924999][ T6710] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.142869][ T6710] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.243862][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 156.251118][ T5892] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.262987][ T5892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.269644][ T5892] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 156.278883][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.289873][ T5892] usb 2-1: config 0 descriptor?? [ 156.305948][ T6710] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.344078][ T6722] netlink: 'syz.3.249': attribute type 10 has an invalid length. [ 156.507899][ T6710] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.526478][ T6710] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.555336][ T6710] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.674488][ T6710] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.523752][ T5892] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 157.531235][ T5892] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 157.538695][ T5892] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 157.546414][ T5892] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 157.554050][ T5892] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 157.915503][ T5892] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 158.309135][ T5892] usb 2-1: USB disconnect, device number 3 [ 158.511638][ T6746] evm: overlay not supported [ 158.514869][ T6743] tipc: Started in network mode [ 158.521430][ T6743] tipc: Node identity 7, cluster identity 4711 [ 158.544841][ T6743] tipc: Node number set to 7 [ 158.550252][ T6743] tipc: Cannot configure node identity twice [ 158.613096][ T5136] Bluetooth: hci4: link tx timeout [ 158.618702][ T5136] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 158.726272][ T6753] loop5: detected capacity change from 0 to 256 [ 158.760141][ T6754] netlink: 'syz.3.263': attribute type 10 has an invalid length. [ 158.818719][ T6753] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 159.299898][ T6777] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.441728][ T6777] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.530634][ T6777] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.633916][ T6777] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.830849][ T6795] loop5: detected capacity change from 0 to 64 [ 160.300913][ T6810] Zero length message leads to an empty skb [ 160.580090][ T6820] loop5: detected capacity change from 0 to 2048 [ 160.607350][ T6820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.670063][ T6820] EXT4-fs (loop5): shut down requested (0) [ 160.684695][ T29] audit: type=1800 audit(1736676555.299:61): pid=6820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.295" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 160.730480][ T5136] Bluetooth: hci4: command 0x0406 tx timeout [ 160.865321][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.111011][ T6777] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.136594][ T6777] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.156535][ T6777] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.203136][ T6777] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.409306][ T6885] loop3: detected capacity change from 0 to 64 [ 162.538989][ T6889] netlink: 'syz.5.324': attribute type 33 has an invalid length. [ 162.567157][ T6889] netlink: 120 bytes leftover after parsing attributes in process `syz.5.324'. [ 162.791499][ T6897] loop0: detected capacity change from 0 to 2048 [ 162.865468][ T6897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.921170][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'. [ 162.923004][ T29] audit: type=1800 audit(1736676557.539:62): pid=6897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.327" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 163.030916][ T6897] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 163.047549][ T6897] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 163.063211][ T6897] EXT4-fs (loop0): This should not happen!! Data will be lost [ 163.063211][ T6897] [ 163.091485][ T6897] EXT4-fs (loop0): Total free blocks count 0 [ 163.161309][ T6897] EXT4-fs (loop0): Free/Dirty block details [ 163.170497][ T6907] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 163.195008][ T6897] EXT4-fs (loop0): free_blocks=2415919504 [ 163.200811][ T6897] EXT4-fs (loop0): dirty_blocks=16 [ 163.221645][ T6907] bond1: (slave vti0): Error -95 calling set_mac_address [ 163.252354][ T6897] EXT4-fs (loop0): Block reservation details [ 163.274202][ T6897] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 163.400445][ T6165] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 163.404591][ T6916] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.590686][ T6916] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.812899][ T6916] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.996343][ T6916] team0: Port device netdevsim0 removed [ 164.019223][ T6916] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.047729][ T6944] loop4: detected capacity change from 0 to 2048 [ 164.060075][ T6944] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.175241][ T6916] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.219065][ T6916] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.239236][ T6916] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.257468][ T6916] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.635428][ T6934] dccp_close: ABORT with 52 bytes unread [ 164.661124][ T6961] loop3: detected capacity change from 0 to 2048 [ 164.708341][ T6961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.856554][ T29] audit: type=1800 audit(1736676559.449:63): pid=6961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.352" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 164.911902][ T6961] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 164.961691][ T6961] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 164.974295][ T6961] EXT4-fs (loop3): This should not happen!! Data will be lost [ 164.974295][ T6961] [ 164.984151][ T6961] EXT4-fs (loop3): Total free blocks count 0 [ 164.990494][ T6961] EXT4-fs (loop3): Free/Dirty block details [ 164.996721][ T6961] EXT4-fs (loop3): free_blocks=2415919504 [ 165.002573][ T6961] EXT4-fs (loop3): dirty_blocks=16 [ 165.009702][ T6961] EXT4-fs (loop3): Block reservation details [ 165.027022][ T6961] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 165.167064][ T35] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 165.201603][ T6982] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.223564][ T1199] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 165.281300][ T6982] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.349899][ T6982] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.351711][ T6988] netlink: 'syz.3.364': attribute type 10 has an invalid length. [ 165.383076][ T5894] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 165.398486][ T1199] usb 2-1: Using ep0 maxpacket: 16 [ 165.411617][ T1199] usb 2-1: unable to get BOS descriptor or descriptor too short [ 165.436312][ T1199] usb 2-1: config 245 has an invalid interface number: 116 but max is 0 [ 165.451726][ T6982] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.469566][ T1199] usb 2-1: config 245 has no interface number 0 [ 165.492861][ T1199] usb 2-1: config 245 interface 116 altsetting 1 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 165.512696][ T1199] usb 2-1: config 245 interface 116 has no altsetting 0 [ 165.534761][ T1199] usb 2-1: New USB device found, idVendor=eb1a, idProduct=50a6, bcdDevice= 6.62 [ 165.552324][ T1199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.553187][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 165.562048][ T1199] usb 2-1: Product: syz [ 165.578159][ T1199] usb 2-1: Manufacturer: syz [ 165.586769][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.588514][ T1199] usb 2-1: SerialNumber: syz [ 165.598074][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.653203][ T5894] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 165.662328][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.705584][ T5894] usb 5-1: config 0 descriptor?? [ 165.856112][ T1199] usb 2-1: USB disconnect, device number 4 [ 166.131949][ T5894] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 166.150533][ T5894] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 166.157772][ T5894] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 166.165291][ T5894] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 166.172431][ T5894] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 166.181678][ T5894] koneplus 0003:1E7D:2D51.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 166.344001][ T5894] koneplus 0003:1E7D:2D51.0002: couldn't init struct koneplus_device [ 166.373391][ T5894] koneplus 0003:1E7D:2D51.0002: couldn't install mouse [ 166.402601][ T5894] koneplus 0003:1E7D:2D51.0002: probe with driver koneplus failed with error -71 [ 166.451205][ T5894] usb 5-1: USB disconnect, device number 3 [ 166.590797][ T6995] dccp_close: ABORT with 52 bytes unread [ 167.035930][ T7011] loop1: detected capacity change from 0 to 256 [ 167.078879][ T7011] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.157032][ T7015] loop5: detected capacity change from 0 to 8 [ 167.733081][ T5894] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 168.025453][ T5894] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 168.034818][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.042865][ T5894] usb 1-1: Product: syz [ 168.054711][ T5894] usb 1-1: Manufacturer: syz [ 168.060967][ T5894] usb 1-1: SerialNumber: syz [ 168.078963][ T5894] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 168.114764][ T25] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 168.471059][ T5891] usb 1-1: USB disconnect, device number 5 [ 168.486509][ T6982] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.514553][ T6982] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.559674][ T6982] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.640563][ T6982] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.271837][ T25] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 169.279756][ T25] ath9k_htc: Failed to initialize the device [ 169.289262][ T5891] usb 1-1: ath9k_htc: USB layer deinitialized [ 169.295680][ T7096] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 169.682345][ T7108] loop3: detected capacity change from 0 to 64 [ 170.295157][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.302786][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.344314][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.351767][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.386636][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.403194][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.410639][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.428462][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.443000][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.443702][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 170.459197][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.493373][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.501201][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.523075][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.530707][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.547103][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.563070][ T5842] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 170.570919][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.591000][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.630041][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'. [ 170.639565][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.673166][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.681638][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.703261][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.710782][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.729173][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.743704][ T5842] usb 2-1: config 0 has no interfaces? [ 170.749591][ T5842] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 170.768992][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.773935][ T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 170.785973][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.793065][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.794045][ T25] usb 4-1: Product: syz [ 170.806892][ T25] usb 4-1: Manufacturer: syz [ 170.811593][ T25] usb 4-1: SerialNumber: syz [ 170.841301][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.842336][ T25] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 170.860221][ T5842] usb 2-1: config 0 descriptor?? [ 170.876246][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.897263][ T5894] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 170.909239][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.963021][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 170.970486][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 171.003578][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 171.011166][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 171.049141][ T5891] hid-generic 0000:0000:0003.0003: unknown main item tag 0x0 [ 171.080298][ T5891] hid-generic 0000:0000:0003.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 171.163552][ T5891] usb 4-1: USB disconnect, device number 2 [ 171.185316][ T1199] usb 2-1: USB disconnect, device number 5 [ 171.333452][ T5842] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 171.493335][ T5842] usb 5-1: Using ep0 maxpacket: 16 [ 171.507292][ T5842] usb 5-1: unable to get BOS descriptor or descriptor too short [ 171.519197][ T5842] usb 5-1: config 245 has an invalid interface number: 116 but max is 0 [ 171.527871][ T5842] usb 5-1: config 245 has no interface number 0 [ 171.537349][ T5842] usb 5-1: config 245 interface 116 altsetting 1 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 171.548570][ T5842] usb 5-1: config 245 interface 116 has no altsetting 0 [ 171.558069][ T5842] usb 5-1: New USB device found, idVendor=eb1a, idProduct=50a6, bcdDevice= 6.62 [ 171.567398][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.575652][ T5842] usb 5-1: Product: syz [ 171.580018][ T5842] usb 5-1: Manufacturer: syz [ 171.584851][ T5842] usb 5-1: SerialNumber: syz [ 171.829246][ T5842] usb 5-1: USB disconnect, device number 4 [ 171.924525][ T5894] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 171.954959][ T5894] ath9k_htc: Failed to initialize the device [ 171.977497][ T5891] usb 4-1: ath9k_htc: USB layer deinitialized [ 172.310342][ T7171] loop1: detected capacity change from 0 to 256 [ 172.324768][ T7171] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.479414][ T7179] loop0: detected capacity change from 0 to 64 [ 172.709554][ T7186] netlink: 'syz.0.455': attribute type 10 has an invalid length. [ 173.107355][ T7197] loop1: detected capacity change from 0 to 2048 [ 173.148481][ T7197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.177716][ T29] audit: type=1800 audit(1736676567.819:64): pid=7197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.461" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 173.185437][ T7202] loop3: detected capacity change from 0 to 1024 [ 173.213079][ T7197] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 173.230879][ T7197] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 173.243453][ T7197] EXT4-fs (loop1): This should not happen!! Data will be lost [ 173.243453][ T7197] [ 173.253435][ T7197] EXT4-fs (loop1): Total free blocks count 0 [ 173.259532][ T7197] EXT4-fs (loop1): Free/Dirty block details [ 173.265860][ T7197] EXT4-fs (loop1): free_blocks=2415919504 [ 173.271696][ T7197] EXT4-fs (loop1): dirty_blocks=16 [ 173.276966][ T7197] EXT4-fs (loop1): Block reservation details [ 173.283074][ T7197] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 173.343755][ T5950] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 173.629558][ T7212] loop0: detected capacity change from 0 to 256 [ 173.643794][ T7212] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 173.822052][ T7193] dccp_close: ABORT with 84 bytes unread [ 173.833375][ T5842] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 174.033298][ T5842] usb 5-1: Using ep0 maxpacket: 16 [ 174.059429][ T5842] usb 5-1: unable to get BOS descriptor or descriptor too short [ 174.071564][ T5842] usb 5-1: config 245 has an invalid interface number: 116 but max is 0 [ 174.081635][ T5842] usb 5-1: config 245 has no interface number 0 [ 174.088245][ T5842] usb 5-1: config 245 interface 116 has no altsetting 0 [ 174.097784][ T5842] usb 5-1: New USB device found, idVendor=eb1a, idProduct=50a6, bcdDevice= 6.62 [ 174.107027][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.115847][ T5842] usb 5-1: Product: syz [ 174.120247][ T5842] usb 5-1: Manufacturer: syz [ 174.125179][ T5842] usb 5-1: SerialNumber: syz [ 174.363300][ T5842] usb 5-1: USB disconnect, device number 5 [ 174.690192][ T7244] netlink: 'syz.3.479': attribute type 10 has an invalid length. [ 174.721458][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.481'. [ 174.831355][ T7248] loop5: detected capacity change from 0 to 256 [ 174.876213][ T7248] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.443197][ T47] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 175.446416][ T7269] overlayfs: failed to resolve './file0': -2 [ 175.613309][ T47] usb 6-1: Using ep0 maxpacket: 32 [ 175.621082][ T47] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 175.630230][ T47] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 175.644005][ T47] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 175.659919][ T47] usb 6-1: config 1 has no interface number 0 [ 175.675457][ T47] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.692056][ T47] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 175.709926][ T47] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 175.714209][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'. [ 175.719515][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.736395][ T7277] raw_sendmsg: syz.3.495 forgot to set AF_INET. Fix it! [ 175.760052][ T47] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 175.900669][ T7283] loop3: detected capacity change from 0 to 256 [ 175.918430][ T7283] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.966238][ T47] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 176.424440][ T5894] usb 6-1: USB disconnect, device number 5 [ 176.447270][ T5894] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 176.686403][ T7300] netlink: 'syz.4.506': attribute type 10 has an invalid length. [ 176.723513][ T7299] overlayfs: failed to resolve './file0': -2 [ 176.740068][ T7300] team0: Port device netdevsim0 added [ 176.868588][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 176.966897][ T7312] IPv6: Can't replace route, no match found [ 177.083265][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 177.264483][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 177.272055][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.293769][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.304051][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 177.323808][ T8] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 177.337188][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.348882][ T8] usb 1-1: config 0 descriptor?? [ 177.403232][ T5842] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 177.573332][ T5842] usb 5-1: Using ep0 maxpacket: 16 [ 177.585326][ T5842] usb 5-1: unable to get BOS descriptor or descriptor too short [ 177.594664][ T5842] usb 5-1: config 245 has an invalid interface number: 116 but max is 0 [ 177.604425][ T5842] usb 5-1: config 245 has no interface number 0 [ 177.610998][ T5842] usb 5-1: config 245 interface 116 has no altsetting 0 [ 177.628345][ T5842] usb 5-1: New USB device found, idVendor=eb1a, idProduct=50a6, bcdDevice= 6.62 [ 177.641621][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.660933][ T5842] usb 5-1: Product: syz [ 177.670951][ T5842] usb 5-1: Manufacturer: syz [ 177.680781][ T5842] usb 5-1: SerialNumber: syz [ 177.801631][ T8] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0004/input/input6 [ 177.871006][ T7314] dccp_close: ABORT with 52 bytes unread [ 177.887352][ T8] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0004/input/input7 [ 178.000717][ T8] kye 0003:0458:5011.0004: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 178.016629][ T5842] usb 5-1: USB disconnect, device number 6 [ 178.131917][ T7338] netlink: 'syz.3.524': attribute type 10 has an invalid length. [ 178.375124][ T7343] overlayfs: failed to resolve './file0': -2 [ 178.907925][ C0] kye 0003:0458:5011.0004: usb_submit_urb(ctrl) failed: -1 [ 179.240389][ T7375] netlink: 'syz.5.541': attribute type 10 has an invalid length. [ 179.291218][ T7375] team0: Port device netdevsim0 added [ 179.509900][ T7380] overlayfs: failed to resolve './file1': -2 [ 179.751998][ T5842] usb 1-1: USB disconnect, device number 6 [ 179.933072][ T5894] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 180.087316][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 180.099010][ T5894] usb 4-1: unable to get BOS descriptor or descriptor too short [ 180.131118][ T5894] usb 4-1: config 245 has an invalid interface number: 116 but max is 1 [ 180.140276][ T29] audit: type=1326 audit(1736676574.769:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b2385d29 code=0x7ffc0000 [ 180.172804][ T5894] usb 4-1: config 245 has an invalid interface number: 116 but max is 1 [ 180.190529][ T5894] usb 4-1: config 245 has 1 interface, different from the descriptor's value: 2 [ 180.201185][ T29] audit: type=1326 audit(1736676574.769:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b2385d29 code=0x7ffc0000 [ 180.231371][ T5894] usb 4-1: config 245 has no interface number 0 [ 180.242652][ T5894] usb 4-1: config 245 interface 116 has no altsetting 0 [ 180.260817][ T5894] usb 4-1: New USB device found, idVendor=eb1a, idProduct=50a6, bcdDevice= 6.62 [ 180.289677][ T29] audit: type=1326 audit(1736676574.769:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fe8b2385d29 code=0x7ffc0000 [ 180.292181][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.357271][ T29] audit: type=1326 audit(1736676574.769:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b2385d29 code=0x7ffc0000 [ 180.411583][ T5894] usb 4-1: Product: syz [ 180.423130][ T5894] usb 4-1: Manufacturer: syz [ 180.438634][ T7408] netlink: 'syz.2.555': attribute type 10 has an invalid length. [ 180.441046][ T5894] usb 4-1: SerialNumber: syz [ 180.447044][ T29] audit: type=1326 audit(1736676574.769:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8b2385d29 code=0x7ffc0000 [ 180.529613][ T29] audit: type=1326 audit(1736676574.769:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b2385d29 code=0x7ffc0000 [ 180.615847][ T29] audit: type=1326 audit(1736676574.769:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8b2385d29 code=0x7ffc0000 [ 180.733527][ T29] audit: type=1326 audit(1736676574.769:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b2385d29 code=0x7ffc0000 [ 180.867947][ T29] audit: type=1326 audit(1736676574.769:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8b2385d29 code=0x7ffc0000 [ 180.922304][ T7424] overlayfs: failed to resolve './file1': -2 [ 180.939734][ T29] audit: type=1326 audit(1736676574.769:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.2.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b2385d29 code=0x7ffc0000 [ 181.038059][ T5894] usb 4-1: USB disconnect, device number 3 [ 181.547934][ T7442] netlink: 'syz.3.571': attribute type 10 has an invalid length. [ 181.747151][ T7449] loop1: detected capacity change from 0 to 256 [ 181.790215][ T7449] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.023398][ T7457] loop3: detected capacity change from 0 to 8 [ 182.062168][ T7459] overlayfs: failed to resolve './file1': -2 [ 182.387102][ T7470] loop4: detected capacity change from 0 to 1024 [ 182.414340][ T5892] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 182.469131][ T7477] netlink: 'syz.0.587': attribute type 10 has an invalid length. [ 182.563615][ T5842] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 182.663180][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 182.670814][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.694070][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.706979][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 182.732268][ T5892] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 182.753128][ T5842] usb 4-1: Using ep0 maxpacket: 16 [ 182.770790][ T5842] usb 4-1: unable to get BOS descriptor or descriptor too short [ 182.783052][ T5842] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 182.790683][ T5842] usb 4-1: can't read configurations, error -71 [ 182.797695][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.815243][ T5892] usb 2-1: config 0 descriptor?? [ 182.917612][ T7491] loop4: detected capacity change from 0 to 256 [ 182.936700][ T7491] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.254988][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 183.262051][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0005/input/input8 [ 183.264411][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 183.366023][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0005/input/input9 [ 183.413524][ T5892] kye 0003:0458:5011.0005: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 183.462236][ T7507] overlayfs: failed to resolve './file1': -2 [ 183.576637][ T7511] netlink: 'syz.0.601': attribute type 10 has an invalid length. [ 184.222276][ T7533] loop0: detected capacity change from 0 to 2048 [ 184.235282][ T7537] overlayfs: failed to resolve './file1': -2 [ 184.237418][ T7533] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 184.272681][ T7538] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.307388][ T7533] ------------[ cut here ]------------ [ 184.312908][ T7533] WARNING: CPU: 0 PID: 7533 at security/landlock/fs.c:955 get_mode_access+0xae/0xc0 [ 184.322794][ T7533] Modules linked in: [ 184.327164][ T7533] CPU: 0 UID: 0 PID: 7533 Comm: syz.0.612 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 184.338135][ T7533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 184.348312][ T7533] RIP: 0010:get_mode_access+0xae/0xc0 [ 184.353855][ T7533] Code: c2 66 81 fb 00 10 75 1c bd 00 04 00 00 eb b4 66 81 fb 00 80 75 0e bd 00 01 00 00 eb a6 bd 00 08 00 00 eb 9f e8 e3 b1 39 fd 90 <0f> 0b 90 31 ed eb 92 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 [ 184.374137][ T7533] RSP: 0018:ffffc900047afb58 EFLAGS: 00010283 [ 184.380262][ T7533] RAX: 0000000000001343 RBX: 000000000000f000 RCX: ffffc9000d04c000 [ 184.388547][ T7533] RDX: 0000000000080000 RSI: ffffffff846061ed RDI: 0000000000000003 [ 184.396990][ T7533] RBP: 0000000000001000 R08: 0000000000000003 R09: 000000000000c000 [ 184.405130][ T7533] R10: 000000000000f000 R11: 0000000000000003 R12: 0000000000000001 [ 184.413197][ T7533] R13: ffff8880777cc778 R14: 0000000000400000 R15: ffff888078eac5e0 [ 184.421220][ T7533] FS: 00007f90268046c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 184.430291][ T7533] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.437179][ T7533] CR2: 0000001b2fd1fffc CR3: 000000007becc000 CR4: 0000000000350ef0 [ 184.445329][ T7533] Call Trace: [ 184.448647][ T7533] [ 184.451618][ T7533] ? __warn+0xea/0x3c0 [ 184.455758][ T7533] ? get_mode_access+0xae/0xc0 [ 184.460611][ T7533] ? report_bug+0x3c0/0x580 [ 184.465337][ T7533] ? handle_bug+0x54/0xa0 [ 184.469721][ T7533] ? exc_invalid_op+0x17/0x50 [ 184.474747][ T7533] ? asm_exc_invalid_op+0x1a/0x20 [ 184.479939][ T7533] ? get_mode_access+0xad/0xc0 [ 184.484885][ T7533] ? get_mode_access+0xae/0xc0 [ 184.489727][ T7533] ? get_mode_access+0xad/0xc0 [ 184.494660][ T7533] current_check_refer_path+0x253/0x710 [ 184.500274][ T7533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.506059][ T7533] ? __pfx_current_check_refer_path+0x10/0x10 [ 184.512205][ T7533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.517955][ T7533] ? nilfs_lookup+0xbd/0x250 [ 184.522625][ T7533] ? lock_acquire+0x2f/0xb0 [ 184.527256][ T7533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.533116][ T7533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.538812][ T7533] ? _raw_spin_unlock+0x28/0x50 [ 184.543780][ T7533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.549475][ T7533] security_path_rename+0x160/0x3c0 [ 184.554788][ T7533] do_renameat2+0x7a0/0xdd0 [ 184.559361][ T7533] ? __pfx_do_renameat2+0x10/0x10 [ 184.564787][ T7533] ? lock_acquire+0x2f/0xb0 [ 184.569383][ T7533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.575531][ T7533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.581237][ T7533] ? __phys_addr_symbol+0x30/0x80 [ 184.586461][ T7533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.592166][ T7533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.597916][ T7533] ? getname_flags.part.0+0x1c5/0x550 [ 184.603401][ T7533] __x64_sys_renameat2+0xe7/0x130 [ 184.608494][ T7533] do_syscall_64+0xcd/0x250 [ 184.613152][ T7533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.619123][ T7533] RIP: 0033:0x7f9025985d29 [ 184.623643][ T7533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.643556][ T7533] RSP: 002b:00007f9026804038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 184.652126][ T7533] RAX: ffffffffffffffda RBX: 00007f9025b75fa0 RCX: 00007f9025985d29 [ 184.660311][ T7533] RDX: ffffffffffffff9c RSI: 0000000020000780 RDI: ffffffffffffff9c [ 184.668562][ T7533] RBP: 00007f9025a01b08 R08: 0000000000000002 R09: 0000000000000000 [ 184.676896][ T7533] R10: 00000000200007c0 R11: 0000000000000246 R12: 0000000000000000 [ 184.685045][ T7533] R13: 0000000000000000 R14: 00007f9025b75fa0 R15: 00007ffd182a73b8 [ 184.693241][ T7533] [ 184.696327][ T7533] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 184.703662][ T7533] CPU: 0 UID: 0 PID: 7533 Comm: syz.0.612 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 184.714410][ T7533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 184.724497][ T7533] Call Trace: [ 184.727800][ T7533] [ 184.730848][ T7533] dump_stack_lvl+0x3d/0x1f0 [ 184.735593][ T7533] panic+0x71d/0x800 [ 184.739557][ T7533] ? __pfx_panic+0x10/0x10 [ 184.744051][ T7533] ? show_trace_log_lvl+0x29d/0x3d0 [ 184.749317][ T7533] ? get_mode_access+0xae/0xc0 [ 184.754241][ T7533] check_panic_on_warn+0xab/0xb0 [ 184.759309][ T7533] __warn+0xf6/0x3c0 [ 184.763245][ T7533] ? get_mode_access+0xae/0xc0 [ 184.768076][ T7533] report_bug+0x3c0/0x580 [ 184.772466][ T7533] handle_bug+0x54/0xa0 [ 184.776661][ T7533] exc_invalid_op+0x17/0x50 [ 184.781386][ T7533] asm_exc_invalid_op+0x1a/0x20 [ 184.786301][ T7533] RIP: 0010:get_mode_access+0xae/0xc0 [ 184.791751][ T7533] Code: c2 66 81 fb 00 10 75 1c bd 00 04 00 00 eb b4 66 81 fb 00 80 75 0e bd 00 01 00 00 eb a6 bd 00 08 00 00 eb 9f e8 e3 b1 39 fd 90 <0f> 0b 90 31 ed eb 92 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 [ 184.811489][ T7533] RSP: 0018:ffffc900047afb58 EFLAGS: 00010283 [ 184.817600][ T7533] RAX: 0000000000001343 RBX: 000000000000f000 RCX: ffffc9000d04c000 [ 184.825606][ T7533] RDX: 0000000000080000 RSI: ffffffff846061ed RDI: 0000000000000003 [ 184.833611][ T7533] RBP: 0000000000001000 R08: 0000000000000003 R09: 000000000000c000 [ 184.841605][ T7533] R10: 000000000000f000 R11: 0000000000000003 R12: 0000000000000001 [ 184.849796][ T7533] R13: ffff8880777cc778 R14: 0000000000400000 R15: ffff888078eac5e0 [ 184.857804][ T7533] ? get_mode_access+0xad/0xc0 [ 184.862624][ T7533] ? get_mode_access+0xad/0xc0 [ 184.867436][ T7533] current_check_refer_path+0x253/0x710 [ 184.873022][ T7533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.878686][ T7533] ? __pfx_current_check_refer_path+0x10/0x10 [ 184.884798][ T7533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.890462][ T7533] ? nilfs_lookup+0xbd/0x250 [ 184.895097][ T7533] ? lock_acquire+0x2f/0xb0 [ 184.899640][ T7533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.905305][ T7533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.910966][ T7533] ? _raw_spin_unlock+0x28/0x50 [ 184.915855][ T7533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.921522][ T7533] security_path_rename+0x160/0x3c0 [ 184.926759][ T7533] do_renameat2+0x7a0/0xdd0 [ 184.931305][ T7533] ? __pfx_do_renameat2+0x10/0x10 [ 184.936362][ T7533] ? lock_acquire+0x2f/0xb0 [ 184.940907][ T7533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.946568][ T7533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.952232][ T7533] ? __phys_addr_symbol+0x30/0x80 [ 184.957301][ T7533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.962985][ T7533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.968679][ T7533] ? getname_flags.part.0+0x1c5/0x550 [ 184.974105][ T7533] __x64_sys_renameat2+0xe7/0x130 [ 184.979165][ T7533] do_syscall_64+0xcd/0x250 [ 184.983729][ T7533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.989671][ T7533] RIP: 0033:0x7f9025985d29 [ 184.994114][ T7533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.013751][ T7533] RSP: 002b:00007f9026804038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 185.022285][ T7533] RAX: ffffffffffffffda RBX: 00007f9025b75fa0 RCX: 00007f9025985d29 [ 185.030279][ T7533] RDX: ffffffffffffff9c RSI: 0000000020000780 RDI: ffffffffffffff9c [ 185.038272][ T7533] RBP: 00007f9025a01b08 R08: 0000000000000002 R09: 0000000000000000 [ 185.046266][ T7533] R10: 00000000200007c0 R11: 0000000000000246 R12: 0000000000000000 [ 185.054257][ T7533] R13: 0000000000000000 R14: 00007f9025b75fa0 R15: 00007ffd182a73b8 [ 185.062269][ T7533] [ 185.065568][ T7533] Kernel Offset: disabled [ 185.069940][ T7533] Rebooting in 86400 seconds..