last executing test programs: 1m22.415139292s ago: executing program 2 (id=81): read(0xffffffffffffffff, &(0x7f0000000000)=""/131, 0x83) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e0cff3c20d3"], 0xf) 1m22.287830658s ago: executing program 2 (id=82): setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x841, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x24008094) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0000078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7b8df8e61740b9af2d4d58654a4af0fa0ce1f830cc1eaf991fd00"}, 0xd8) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x202, 0x0, 0xf}) 1m14.402326497s ago: executing program 2 (id=97): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) flock(0xffffffffffffffff, 0xa) 1m14.215726965s ago: executing program 2 (id=99): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000002c0)={[{@sysvgroups}, {@jqfmt_vfsv0}]}, 0x1, 0x4b4, &(0x7f0000000c80)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x38, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x9}]}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000008}, 0x10) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x4) rmdir(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r4, 0x1000) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x13, &(0x7f0000000040)={[0x5]}, 0x8) r5 = socket$inet(0x2, 0x1, 0x2) writev(r5, &(0x7f0000000bc0), 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000007c0)={[{@hide}, {@dmode={'dmode', 0x3d, 0x9}}, {@session={'session', 0x3d, 0x23}}, {@utf8}, {@map_acorn}, {@check_strict}, {@mode={'mode', 0x3d, 0xc6}}, {@cruft}, {@map_off}, {@check_strict}, {@sbsector={'sbsector', 0x3d, 0xffffffff80000018}}, {@utf8}, {@cruft}, {@nocompress}, {@cruft}, {@session={'session', 0x3d, 0x61}}, {@gid}, {@overriderock}]}, 0x1, 0xa2f, &(0x7f00000018c0)="$eJzs3c1vXFdfB/DvHduJH/chydOGUqK2nqQkdVvj2A5NiLooiT1JXPyCbEdqxKIpjYOiGAotSG2F1FRCrFqBBGIBu4oVq0rdUBaoGwQ7umKBhPovVKzCyujOjO2xPeNxjGO76edjzcx9+d1zfnfuy/HM3JkTflxWjm8YW1mp33Y5fvMf9yFjDrGrk99/+dUX5e2zBzmSnrxe/FPSn6Sa9CZ5LumbmJyfm+lS0P3kdpJvkyLJ0TQed+R2ir/Mz9fHv03x92W9HR3Zacl0s8JP2kHvfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcBgVE5Ojo2PFkUzN3ny72pBUt5iYnJ8rsrKydc7qMg3f1Hv9Lr7pWm9SlLf096929f3cyfXZzyapnsnzjbHn6x2Spz+fPPXsiTee6a2sLt8pm/+Xozsv9sOPP7n/7vLy0gdt5xbFHmZ1yDT2keu12amFuamZK9dr1amFuerlixdHz9+4tlC9NjVdW7i1sFibqU7M164szs1XhyZeqY5dvnyhWhu5NXdz9vrkyHRtdeKlXx8fHb1YfWvkd2pX5hfmZs+/NbIwcWNqenpq9no9ppxdxlwqd8TfnlqsLtauzFSrd+8tL13YlFlPNu2/ZdBYt/Upg8a7BY2Pjo+PjY2Pj33W7D17bcLF1y+/fml0tHd0k2yJeEw7LYfLzzpv5r0/icMuVRrtfzKdqczmZt5Ote3fRCYzn7nMdJjftNr+nz1f27batLT/zVa+t2X+qfLuTF5sjvZ3aP875LJ/fx/m43yS+3k3y1nOUj448Iz29+96apnNVBYyl6nM5Ep9SrU5pZrLuZiLGc07uZHBLKQ31zKV6dSykFtZyGJq9T1qIvOp5UoWM5f5VDOUibySasZyOZdzIdXUMpJbmcvNzOZ6JnOlXsrd3Ks/7xe2yXEtaGwnQePbBG1pzB+5/a9t/ueEJ1Bl2638GM7isDsrzfb/SPfQoYn9SAgAAADYc7/67zl28ul/+++kyAv1z+WvTU3XRg86LQAAAGAP1S/Xe7586CuHXkjh9T8AAAA8aYr6d+yKJAMZbAytfhPKmwAAAADwhKh//v9iisH1CV7/AwAAwBOm+2/sd40ohld//rd6p/F4pxnRGCsGrk1N10Ym5qbfGMu5+q8M1L9psKW0nqToq3/94NWcbkSdHmg8DqyXWNbZX0aNjbwxlldzprkiQy+VDy8NtYkcb0S+3Ih8uTWyJxsiL5SRAPCkO7NNe7zT9v/VDDcihk/Vm/zeUxva4J56yzqqZQWAw2Ktj53/bXZp1qb9b0a82Kn9/41tXv+XEU/n7mDjkoKRvJf3s5w7GU7zioPBdqWu9kbQuAxhuMu7AQPNSxa+u1TJ8Jb3A/rX1rU1dinjGW77jkBLucVqDhcacT2PZxsAwH47s207vNb+927X/g9v//q/pc11SSEAHAZrPdg/6sDgzoMPeh0BgI200gAAAAAAAAAAAAAAAAAAAAAAAAAAALD3dvQD/v9xLlleXkp221lAm4Hv/vWff6ljzOdPJf2PkuH2A5XsTc6Hf6AnyUHV/mYeealyGx+Wp87AxoEDPjEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwL4qkp930SnI0yWiS8/uf1ePz4KAT2CvV3S1WPMzDfJRje50OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBPXfP3/ytpPD7VmJTeSnI2ye0kv3vQOT6K/i7zH+5THofPH9TvW37/v5L0ZaVIb2Ozp+ibmJyfmyl3heJoOf/7L7/6orx1LPLT1YGtvSqUBZQ1bOhcollDy5S+jUv9or7UwOTSh/f/5P0/qk5ere+YVxevTU/OXJ//rfXAZ4uvG10gtHaDsJrvn539l79qmXykWfnX5Zq2t7nea/V6J7fW+yvtlu5Q7w7cW14aL2tarL29+Kd/WGmd9XROJy8NJUMba/r98tahptObn8+Nih+KvyiO5W9zu779y2ejWCnKTXS8vv4/u3tveWnkvfeX76zl9Om9j1oKOJHBJHc2HmVdchqsn0/aqu91lb6y1tF6UHl3skt522opcWz9ed2wDr+o7zIDj7QO1c7rUNfleW9mdGFzRivlQfLXf/xMzm27pY+2KfFclxrbKn4o/qu4kf/Mn7f0/1Ept//ZtD062xRRj2zZU1rnbTi8KmfX13y8dcY7m8vseFTyGHye38tvrm3/Ssv5v7mtOhw3a+ejN1smdjhuVg+tbY6Llhq3HBdN3Y6LrUfqPxzf0qKsqx9GJze1SM2zT6dlmnmebER1yPOX81rSe+qRziivdTmjdFt+t8f/3xVD+Z880P8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw+BVJT7vpleRskhNJjpfj1WRlc8yDXdRXGSh2k+ae2U3OPz5FxxUtHuZhPsqx/c4IAAAAAAAAgMfj6uT3X371RXmrfx7fk1+rNOdUk94kJ4q/6ZuYnJ+b6VJQX3J79SP9/vYhHSbndnn38/Xxb8ux57rUd7CXDwDAj9r/BQAA//+CGm1g") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='debugfs\x00', 0x1000016, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) socket$inet6(0xa, 0x6, 0x5512) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000001140)) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000080)={[{@uid={'uid', 0x3d, r8}}], [{@euid_gt={'euid>', r8}}, {@measure}]}) 1m13.223643738s ago: executing program 2 (id=104): socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='./file1\x00', 0x4002, &(0x7f0000000f80)=ANY=[], 0x1, 0x21d, &(0x7f0000000540)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80, 0x3) fadvise64(r3, 0xfcff, 0x0, 0x3) 1m11.79028891s ago: executing program 2 (id=109): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d, 0x0, @void}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_audit(0x10, 0x3, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r4}, 0x38) getdents64(r0, &(0x7f0000001f00)=""/4111, 0x100f) 1m11.683941054s ago: executing program 32 (id=109): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x1d, 0x0, @void}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_audit(0x10, 0x3, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r4}, 0x38) getdents64(r0, &(0x7f0000001f00)=""/4111, 0x100f) 21.690938726s ago: executing program 5 (id=264): rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000841}, 0x4000) r0 = epoll_create(0x5) r1 = timerfd_create(0x0, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x300, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") lremovexattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000280)=@known='system.posix_acl_access\x00') 19.247920391s ago: executing program 5 (id=271): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280), 0x1, 0x553, &(0x7f0000000a40)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x1) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1c10, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000240)=""/183, 0xb7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8000c62) fsync(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) 18.236087455s ago: executing program 5 (id=279): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x78e22799f4a46f40) read$watch_queue(r1, &(0x7f00000001c0)=""/178, 0xb2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) gettid() setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x35, 0x0, 0x0) 15.992854461s ago: executing program 3 (id=285): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @remote}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r5, 0x0, 0x1ba8847c99}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7020000010000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) lgetxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 14.825962701s ago: executing program 3 (id=289): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x2908d7, &(0x7f0000000440)={[{@usrquota}, {@noblock_validity}, {@nodiscard}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@usrquota}]}, 0x6, 0x60b, &(0x7f00000004c0)="$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") r0 = open(0x0, 0x10000, 0x0) getdents(r0, 0x0, 0x0) symlink(&(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(0x0, 0x0) capset(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 13.261691679s ago: executing program 3 (id=290): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280), 0x1, 0x553, &(0x7f0000000a40)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x1) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1c10, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000240)=""/183, 0xb7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8000c62) fsync(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) 13.211063801s ago: executing program 4 (id=292): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) socket(0x11, 0x800000003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000001, 0x20031, 0xffffffffffffffff, 0x6b0d3000) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) 11.635864639s ago: executing program 0 (id=294): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) inotify_init1(0x800) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) ioprio_set$pid(0x1, r0, 0x6000) 11.516506714s ago: executing program 4 (id=295): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000100000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x8, 0x0, 0x0}}, 0x10) 11.223050166s ago: executing program 0 (id=296): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x40000002}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5e1, &(0x7f0000000bc0)="$eJzs3c1vFVUbAPBnbj9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sRr5nam9LZz+0V7pzK/X3LpzJw7nGd6+/Sce3rO3AAqazD9pxaxPyKmk4j+ZH6xrDOywsGF5z3486Oz6SOJev2135NIsmP585Psa192ck9E/PhDEvs6VtY7M3ft4vjU1OTVbH949tL08MzctcMXLo2fnzw/eXn0hdETx48dPzFyZFPXdb3g2Omb777f/8nYm9989Vcy8u0vY0mcjJezJy69jq0yGION70mysqjvxFZXVpKO7Odk6UucdJYYEBuSv35dEfFE9EdHPHzx+uPjV0oNDthW9SSiDlRUIv+hovJ+QP7efvn74FopvRKgHe6fWhgAWJn/nQtjg9HTGBvY/SCJpcM6SURsbmSu2Z6IuHtn7Oa5O2M3Y5vG4YBi8zci4smi/E8a+T8QPTHQyP9aU/6n/YIz2df0+KubrH/5ULH8h/ZZyP+eVfM/WuT/W0vy/+1N1j/4cPOd3qb8793sJQEAAAAAAEBl3T4VEc8X/f2/tjj/Jwrm//RFxMktqH9w2f7Kv//X7m1BNUCB+6ciXiqc/1vLZ/8OdGRb/2nMB+hKzl2YmjwSEf+NiEPRtSvdH1mljsOf7vuyVdlgNv8vf6T1383mAmZx3Ovc1XzOxPjs+KNeNxBx/0bEU4Xzf5PF9j8paP/T3wfT66xj37O3zrQqWzv/ge1S/zriYGH7//CuFcnq9+cYbvQHhvNewUpPf/jZd63q32z+u8UEPLq0/d+9ev4PJEvv1zOz8TqOznXWW5Vttv/fnbzeuOVMd3bsg/HZ2asjEd3J6Y70aNPx0Y3HDI+jPB/yfEnz/9Azq4//FfX/eyNiftn/nfzRvKY49/+/+35tFY/+P5Qnzf+JDbX/G98YvTXwfav619f+H2u09YeyI8b/YMEXeZp2Nx8vSMfOoqJ2xwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj4NaROyJpDa0uF2rDQ1F9EXE/2J3berKzOxz5668d3kiLWt8/n8t/6Tf/oX9JP/8/4El+6PL9o9GxN6I+Lyjt7E/dPbK1ETZFw8AAAAAAAAAAAAAAAAAAAA7RF+L9f+p3zrKjg7Ydp1lBwCUpiD/fyojDqD9tP9QXfIfqkv+Q3XJf6iudeb/ye2OA2g/7T9Ul/yH6pL/AAAAAADwWNl74PbPSUTMv9jbeKS6s7KuUiMDtlut7ACA0rjFD1SXqT9QXd7jA8ka5T0tT1rrzNVMn32EkwEAAAAAAAAAAACgcg7ut/4fqsr6f6gu6/+huvL1/wdKjgNoP+/xgVhjJX/h+v81zwIAAAAAAAAAAAAAttLM3LWL41NTk1dtvLEzwmjnRr1ev57+FOyUeP7lG/lU+J0Sz7KNfK3f+s4q73cSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ7J8AAAD//yTpJQU=") socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) lchown(0x0, 0x0, 0xee01) fchown(0xffffffffffffffff, 0xee00, 0x0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0xff, @mcast2}, 0x1c, &(0x7f0000000180)}, 0x24000000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x29a10f4c, 0xb, 0x2, 0x8, 0x3, 0x0, 0x0, 0x4}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.866110715s ago: executing program 0 (id=297): mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x80100, 0x0) fsetxattr$security_evm(r3, &(0x7f0000000000), 0x0, 0x0, 0x3) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 8.251796625s ago: executing program 0 (id=298): ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000780)={0x0, 0x5, 0x2, 0xb71f, 0x9, 0x9}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0xe, &(0x7f00000005c0), 0x3, 0x445, &(0x7f0000000b00)="$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") rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[], 0x1043) 8.235733595s ago: executing program 4 (id=299): keyctl$dh_compute(0x10, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) close(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 6.844925495s ago: executing program 4 (id=300): shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil) keyctl$set_timeout(0xf, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000240)={[{@dioread_nolock}, {@resgid}, {@orlov}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@errors_remount}, {@noinit_itable}, {@orlov}]}, 0xfc, 0x575, &(0x7f0000000640)="$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") inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x28, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r2) 5.668025476s ago: executing program 1 (id=302): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x4008094) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = epoll_create1(0x0) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000040)=0x10, 0x4) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) recvmmsg(r7, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='./file0\x00', 0x1008008, &(0x7f0000000140)=ANY=[@ANYBLOB="6c6f6e6761644b7569643d3bfc6f2d421eb3dae3e700c4542bbab633ab2b8ad886bd5f0ac86617ce955638f3b29638b9581a3bb97f81026ba0b46402cce40201a3ba4b722d99ff2e6419da3bd0", @ANYRESDEC=0x0, @ANYBLOB=',uid=forget,dmode=00000000000001000000002,dmode=00000000000017777777777,gid=', @ANYRESDEC, @ANYBLOB=',session=00000000000000044301,nostrict,anchor=00000000000000000002,dmode=00000000000000000000007,volume=00000000000000000028,\x00'], 0x6, 0xc46, &(0x7f0000000f40)="$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") 5.509781293s ago: executing program 5 (id=303): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000f10d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2}, 0x29) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xf, 0x0, &(0x7f0000000580)="80d285074f28ea782337a03e859402", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.319884561s ago: executing program 5 (id=304): ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x7, 'gretap0\x00', {0xfffff4b7}, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @random="c24f7b36aec9"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r4 = memfd_create(&(0x7f00000003c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) pwrite64(r4, &(0x7f0000000000)='q', 0x1, 0x111ffe) r6 = accept$alg(r5, 0x0, 0x0) sendfile(r6, r4, 0x0, 0x4000000003) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8400}, 0x40050) bpf$MAP_CREATE(0x0, 0x0, 0x50) 3.852652504s ago: executing program 5 (id=305): r0 = io_uring_setup(0x9, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x3b, &(0x7f0000000000)=ANY=[]) syz_usb_connect$hid(0x1, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x0) 3.767593728s ago: executing program 1 (id=306): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) 3.453569471s ago: executing program 3 (id=307): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100), 0x8, 0x616, &(0x7f0000000b40)="$eJzs3ctvVNUfAPDvnU7f/H4txKi4kCbGQKK0tIIhRiPsCcHHzlWlhSCFElqjIIklwY2JcePCxJUL8b9QErcs3Lpw48qQEGNYiBIZc6d32ss8Sl8zU2Y+n+Qy557L3HMu9Ntz7plz7gTQtcbSPwoReyPiUhIxkjtWjOzg2PLfu/fntdPplkSp9M4fSVz7NFnKnyvJXoezN/87EsnPhYg9PbXlLly5en56bm72crY/sXjh0sTClasHz12YPjt7dvbi1KtTR48cPnJ08tCWrm8glz5x44OPRj4/+d533zxIJr//9WQSx+JhVrf0uqrf27+lktN/s7EoLbufzy/Grji6xXPvFH+NVH5OViXVGexYZ7I4/39EPBMj0ZP73xyJz95qa+WApiolUWmjgK6TbCr+B7a/IkCLVfoBlXv7evfBtQpN7pUArXD3+PIAwHLs90ZEJf6Ly2ODMRBp7tC95JFxniQitjYytywt4/ZPJ2+kWzQYhwOaY+l6ZZS7uv1PyrE5mo2gD90rPBL/hdyW5r+9yfLHqvbFP7TO0vWIeDZr//tiQ/E/lov/9zdZvvgHAAAAAACA7XPreES8nH3+NxgRK5+/FVbm//TVmf8zHBHHtqH8x3/+V7iTJZJtKA7IuXs84vW6839X5viO9mR7/yvPB+hNzpybmz2UrRk8EL396f5k1XnzM4QPfrHn60bl5+f/pVtafmUuYHamO8Wqhbgz04vTW71uIOLu9YjnyvN/92U5j87/Sdv/pE77n8b3pXWWsefFm6caHXt8/APNUvo2Yn/d9n+1u52s/XyOiXJ/YKLSK6j1/Cdf/lCTebt3NSn+oS3S9n9o7fjvT/LP61nY2Pn7ImIwiqVGxzfb/+9L3u2pnD/18fTi4uXJiL7kRG3+1MbqDJ2qEg+VeEnj/8AL9e//a/r/uTgcjIildZb59MPh3xod0/+H9knjf2aN9v+f7DkBq+3/xhNTN0d/bFT+qXrxP1Dd/h8ut+kHshzjf5BX+zyO9QZoW6oLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+4QkTsiqQwvpIuFMbHI4Yj4qkYKszNLyy+dGb+w4sz6bHy9/8XKt/0O7K8n1S+/380tz9Vtf9KROyOiK96Bsv746fn52baffEAAAAAAAAAAAAAAAAAAACwQwyX1/yX+qvX/6d+72l37YCmK2av4h26T3HT7yz1b2tFgJbbfPwDT7r1x39vU+sBtF45/uuG9v0HpbKWVwloEf1/6F6bjH8fF0AH0P5Dt1rnmN5As+sBtIP2HwAAAAAAOsrufbd+SSJi6bXB8pbqy46Z7A+drdDuCgBtYw4vdK/ifPnljXbXA2g99/hAspL6u+5i/8az/5PmVAgAAAAAAAAAAAAAqLF/r/X/0K3WXv9vbj90sjXW/9cLfo8LgA7S+Ks/tP3Q6dZxj+8RYdDhHtfaW/8PAAAAAAAAAAAAADvAwNXz03Nzs5cXrjx5iTd3RjU2llia3hHV2NbEw+acuTcidsYFtjpReQRHG6ux9q8NC4EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB1/gsAAP//BfwsWg==") syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04015b0c"], 0x7) 2.579852159s ago: executing program 1 (id=308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) io_uring_setup(0x1632, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.0954076s ago: executing program 1 (id=309): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000100000009"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.782492533s ago: executing program 1 (id=310): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0xc) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 1.679389818s ago: executing program 4 (id=311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.678228627s ago: executing program 3 (id=312): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x1004414, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES8], 0x6, 0x801, &(0x7f0000001100)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x5, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x1006, 0x8, 0x100000000000, 0x7, 0x81, 0x8, 0x6, 0x2008, 0x8000, 0xe44, 0x0, 0x0, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 492.908969ms ago: executing program 0 (id=313): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x220c000, &(0x7f0000000080)=ANY=[], 0xf8, 0x31f, &(0x7f00000004c0)="$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") 492.675719ms ago: executing program 3 (id=314): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20040a, &(0x7f00000001c0)={[{@grpjquota}, {@errors_continue}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffbb, 0x6, 0xfffffffd, 0xd}) 281.027728ms ago: executing program 1 (id=315): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0x800000000000) socket$igmp(0x2, 0x3, 0x2) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x3) accept4$bt_l2cap(r2, &(0x7f0000000200), 0x0, 0x800) 255.096409ms ago: executing program 4 (id=316): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) get_robust_list(r0, &(0x7f0000000e80)=&(0x7f0000000880)={&(0x7f0000000840)}, &(0x7f0000000ec0)=0x18) 0s ago: executing program 0 (id=317): open(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. [ 63.757697][ T4173] cgroup: Unknown subsys name 'net' [ 63.901650][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.431624][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.934417][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 67.030982][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 67.069028][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 67.096824][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 67.156085][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 67.229257][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.236514][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.244819][ T4193] device bridge_slave_0 entered promiscuous mode [ 67.253669][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.263853][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.272511][ T4192] device bridge_slave_0 entered promiscuous mode [ 67.305489][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.312593][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.320749][ T4193] device bridge_slave_1 entered promiscuous mode [ 67.329007][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.336219][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.344040][ T4192] device bridge_slave_1 entered promiscuous mode [ 67.370430][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.377762][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.386169][ T4186] device bridge_slave_0 entered promiscuous mode [ 67.414566][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.421849][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.430090][ T4184] device bridge_slave_0 entered promiscuous mode [ 67.437518][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.444695][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.453154][ T4186] device bridge_slave_1 entered promiscuous mode [ 67.480865][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.488094][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.496044][ T4184] device bridge_slave_1 entered promiscuous mode [ 67.513887][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.525128][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.562122][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.572945][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.599776][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.611398][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.635710][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.642803][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.651543][ T4185] device bridge_slave_0 entered promiscuous mode [ 67.660691][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.692863][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.700128][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.708588][ T4185] device bridge_slave_1 entered promiscuous mode [ 67.717632][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.737932][ T4193] team0: Port device team_slave_0 added [ 67.746394][ T4186] team0: Port device team_slave_0 added [ 67.754595][ T4192] team0: Port device team_slave_0 added [ 67.776754][ T4193] team0: Port device team_slave_1 added [ 67.792852][ T4186] team0: Port device team_slave_1 added [ 67.800693][ T4192] team0: Port device team_slave_1 added [ 67.823604][ T4184] team0: Port device team_slave_0 added [ 67.852734][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.871300][ T4184] team0: Port device team_slave_1 added [ 67.885909][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.892915][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.919049][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.932763][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.940197][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.966513][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.986462][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.004148][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.011509][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.037690][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.068276][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.075264][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.102012][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.121520][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.128534][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.155015][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.167205][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.174196][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.201387][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.214890][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.222425][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.248551][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.260430][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.267501][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.293784][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.307226][ T4185] team0: Port device team_slave_0 added [ 68.344604][ T4185] team0: Port device team_slave_1 added [ 68.392423][ T4186] device hsr_slave_0 entered promiscuous mode [ 68.399428][ T4186] device hsr_slave_1 entered promiscuous mode [ 68.417956][ T4184] device hsr_slave_0 entered promiscuous mode [ 68.424724][ T4184] device hsr_slave_1 entered promiscuous mode [ 68.431981][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.440107][ T4184] Cannot create hsr debugfs directory [ 68.464363][ T4193] device hsr_slave_0 entered promiscuous mode [ 68.471578][ T4193] device hsr_slave_1 entered promiscuous mode [ 68.478684][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.486512][ T4193] Cannot create hsr debugfs directory [ 68.494793][ T4192] device hsr_slave_0 entered promiscuous mode [ 68.502333][ T4192] device hsr_slave_1 entered promiscuous mode [ 68.509417][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.517453][ T4192] Cannot create hsr debugfs directory [ 68.523762][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.532321][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.559269][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.597190][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.604170][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.630303][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.636756][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 68.645428][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 68.648024][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 68.652932][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 68.659533][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 68.848543][ T4185] device hsr_slave_0 entered promiscuous mode [ 68.855796][ T4185] device hsr_slave_1 entered promiscuous mode [ 68.862282][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.869963][ T4185] Cannot create hsr debugfs directory [ 69.043313][ T4193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.054936][ T4193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.065720][ T4193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.079114][ T4193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.133686][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.142967][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.155873][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.164876][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.250304][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.284822][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.295294][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.308884][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.359311][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.398684][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.419663][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.427400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.438195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.449600][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.457016][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.466967][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.484873][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.508276][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.519716][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.528617][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.537902][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.547382][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.554588][ T425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.563970][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.578054][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.604461][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.618893][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.628357][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.635563][ T425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.670106][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.679317][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.690038][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.701635][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.708745][ T425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.717301][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.726787][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.735192][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.742297][ T425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.750510][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.760235][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.769254][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.804300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.815249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.824954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.839426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.847714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.861003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.874487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.883012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.892045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.901170][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.917433][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.934154][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.944798][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.959821][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.970312][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.979679][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.989032][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.998209][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.006890][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.016342][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.036553][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.045080][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.054252][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.063218][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.073728][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.098053][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.108939][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.117321][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.127345][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.179059][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.197171][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.216011][ T3043] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.223121][ T3043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.236826][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.246037][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.254560][ T3043] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.261953][ T3043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.271684][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.298147][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.316992][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.336397][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.364757][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.385726][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.401511][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.422259][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.434194][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.468332][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.477917][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.488457][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.497253][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.508713][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.519990][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.538972][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.548376][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.558392][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.566869][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.576283][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.603380][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.625410][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.632985][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.660696][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.681039][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.693543][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.704095][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.713732][ T3043] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.715977][ T4188] Bluetooth: hci2: command 0x041b tx timeout [ 70.720860][ T3043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.734270][ T4188] Bluetooth: hci0: command 0x041b tx timeout [ 70.737897][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.750620][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.759995][ T4188] Bluetooth: hci4: command 0x041b tx timeout [ 70.760402][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.772536][ T4188] Bluetooth: hci1: command 0x041b tx timeout [ 70.775305][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.790192][ T3043] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.792261][ T4188] Bluetooth: hci3: command 0x041b tx timeout [ 70.797405][ T3043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.802665][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.837845][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.866454][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.878527][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.887697][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.896339][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.904053][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.912903][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.921558][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.931914][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.940627][ T3043] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.947737][ T3043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.956361][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.965074][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.974127][ T3043] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.981249][ T3043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.989090][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.998430][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.007067][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.016017][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.024417][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.032939][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.042741][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.051152][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.059210][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.067065][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.081515][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.090921][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.124787][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.138041][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.146935][ T4192] device veth0_vlan entered promiscuous mode [ 71.155837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.163452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.171848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.186394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.194661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.210753][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.243333][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.266532][ T4192] device veth1_vlan entered promiscuous mode [ 71.278631][ T4193] device veth0_vlan entered promiscuous mode [ 71.292353][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.303173][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.318436][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.331018][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.340241][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.349065][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.359755][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.366823][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.369408][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.389480][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.398406][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.422604][ T4193] device veth1_vlan entered promiscuous mode [ 71.438914][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.447588][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.456837][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.481899][ T4192] device veth0_macvtap entered promiscuous mode [ 71.493987][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.509209][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.533213][ T4184] device veth0_vlan entered promiscuous mode [ 71.540785][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.549300][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.559303][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.569449][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.579147][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.589314][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.598387][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.607937][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.616741][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.625129][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.633592][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.641754][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.666191][ T4184] device veth1_vlan entered promiscuous mode [ 71.695042][ T4192] device veth1_macvtap entered promiscuous mode [ 71.710113][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.724210][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.734417][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.750203][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.762041][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.770332][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.787694][ T4193] device veth0_macvtap entered promiscuous mode [ 71.800893][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.813151][ T4193] device veth1_macvtap entered promiscuous mode [ 71.852323][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.885183][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.893428][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.901893][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.911878][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.921249][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.936069][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.944013][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.956198][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.967828][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.993719][ T4184] device veth0_macvtap entered promiscuous mode [ 72.002494][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.011281][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.021182][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.030099][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.039248][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.049251][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.058279][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.067441][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.077698][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.085246][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.093220][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.103917][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.115004][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.126765][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.138470][ T4185] device veth0_vlan entered promiscuous mode [ 72.149119][ T4184] device veth1_macvtap entered promiscuous mode [ 72.163017][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.171539][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.180710][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.190116][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.200329][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.208988][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.217642][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.228645][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.239818][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.248947][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.257934][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.270268][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.279542][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.288626][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.297438][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.317067][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.345242][ T4185] device veth1_vlan entered promiscuous mode [ 72.360691][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.373299][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.383634][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.400683][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.412568][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.434574][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.445794][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.460287][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.484937][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.501388][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.512175][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.527424][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.550646][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.580589][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.627760][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.645195][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.654543][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.663629][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.684050][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.693274][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.703344][ T4185] device veth0_macvtap entered promiscuous mode [ 72.754880][ T4185] device veth1_macvtap entered promiscuous mode [ 72.796005][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 72.801806][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.805865][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 72.820267][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 72.826857][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.827112][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 72.834849][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.854627][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.865985][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.876665][ T1326] Bluetooth: hci3: command 0x040f tx timeout [ 72.883890][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.893755][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.904223][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.916220][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.926455][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.937732][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.947876][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.960241][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.970613][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.981866][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.992918][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.009309][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.019731][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.028068][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.037646][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.047005][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.056128][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.065144][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.077538][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.086585][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.100651][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.110014][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.119130][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.128165][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.164498][ T3043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.173538][ T3043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.190654][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.210684][ T4186] device veth0_vlan entered promiscuous mode [ 73.220367][ T425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.229266][ T425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.240948][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.252616][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.262493][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.274187][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.283042][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.330441][ T4186] device veth1_vlan entered promiscuous mode [ 73.349962][ T1240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.371201][ T3043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.389117][ T1240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.401242][ T3043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.411692][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.412316][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.421574][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.440929][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.447146][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.461359][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.461901][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.470926][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.494132][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.521372][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.592389][ T1240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.601357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.611427][ T1240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.620840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.631051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.641559][ T4186] device veth0_macvtap entered promiscuous mode [ 73.653586][ T4186] device veth1_macvtap entered promiscuous mode [ 73.749009][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.790043][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.822094][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.833202][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.845962][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.856951][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.875600][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.050050][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.114073][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.125389][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 74.316137][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 74.325429][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 74.335386][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 74.345389][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 74.355378][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 74.365375][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 74.375376][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 74.385387][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 74.395373][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 74.448407][ T4308] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 74.461697][ T4308] Error parsing options; rc = [-22] [ 75.752753][ T1111] Bluetooth: hci2: command 0x0419 tx timeout [ 75.785681][ T4307] sched: RT throttling activated [ 75.798268][ T1111] Bluetooth: hci0: command 0x0419 tx timeout [ 75.819408][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 75.837085][ T1111] Bluetooth: hci1: command 0x0419 tx timeout [ 76.363130][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.381930][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.412104][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.431625][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.568100][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.592757][ T1111] Bluetooth: hci3: command 0x0419 tx timeout [ 76.623060][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.653168][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.835486][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.836206][ T4325] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.864192][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.937133][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.179184][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.214436][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.337166][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.353811][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.378735][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.399758][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.426007][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.434880][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.451854][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.164000][ T4331] loop1: detected capacity change from 0 to 512 [ 80.445813][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.465514][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.497071][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.516948][ T4337] usb usb1: usbfs: process 4337 (syz.3.11) did not claim interface 8 before use [ 80.520283][ T4335] loop0: detected capacity change from 0 to 2048 [ 80.539458][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.550669][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.566121][ T4331] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.581610][ T4335] UDF-fs: bad mount option "io" or missing value [ 80.600036][ T4342] loop3: detected capacity change from 0 to 8 [ 80.627494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.627995][ T4331] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.116942][ T4347] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.267546][ T4351] loop4: detected capacity change from 0 to 1024 [ 82.205038][ T4357] loop3: detected capacity change from 0 to 256 [ 84.139563][ T4361] hfsplus: xattr searching failed [ 84.159795][ T26] audit: type=1800 audit(1764498707.667:2): pid=4361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.15" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=2 res=0 errno=0 [ 85.544440][ T4376] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.780321][ T4376] kvm [4375]: vcpu0, guest rIP: 0x9048 disabled perfctr wrmsr: 0xc0010004 data 0x8000 [ 85.794311][ T4376] kvm [4375]: vcpu0, guest rIP: 0x9048 disabled perfctr wrmsr: 0xc0010004 data 0x8000 [ 85.804276][ T4376] kvm [4375]: vcpu0, guest rIP: 0x9048 disabled perfctr wrmsr: 0xc0010000 data 0x8000 [ 85.814074][ T4376] kvm [4375]: vcpu0, guest rIP: 0x8028 disabled perfctr wrmsr: 0xc0010002 data 0x8000 [ 85.826854][ T4376] kvm [4375]: vcpu0, guest rIP: 0x9048 disabled perfctr wrmsr: 0xc0010004 data 0x8000 [ 85.836756][ T4376] kvm [4375]: vcpu0, guest rIP: 0x9048 disabled perfctr wrmsr: 0xc0010000 data 0x8000 [ 85.846563][ T4376] kvm [4375]: vcpu0, guest rIP: 0x8028 disabled perfctr wrmsr: 0xc0010002 data 0x8000 [ 85.859036][ T4376] kvm [4375]: vcpu0, guest rIP: 0x9048 disabled perfctr wrmsr: 0xc0010004 data 0x8000 [ 85.869558][ T4376] kvm [4375]: vcpu0, guest rIP: 0x9048 disabled perfctr wrmsr: 0xc0010000 data 0x8000 [ 85.879342][ T4376] kvm [4375]: vcpu0, guest rIP: 0x8028 disabled perfctr wrmsr: 0xc0010002 data 0x8000 [ 87.428306][ T1108] cfg80211: failed to load regulatory.db [ 87.463021][ T4379] device wireguard0 entered promiscuous mode [ 87.829091][ T4387] loop1: detected capacity change from 0 to 1024 [ 87.869604][ T4387] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 87.910985][ T4387] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.373171][ T4387] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 88.405503][ T4387] System zones: 0-1, 3-36 [ 88.495035][ T4387] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 88.828098][ T4399] netlink: 72 bytes leftover after parsing attributes in process `syz.0.27'. [ 88.904345][ T4401] loop0: detected capacity change from 0 to 512 [ 88.956977][ T4401] ======================================================= [ 88.956977][ T4401] WARNING: The mand mount option has been deprecated and [ 88.956977][ T4401] and is ignored by this kernel. Remove the mand [ 88.956977][ T4401] option from the mount to silence this warning. [ 88.956977][ T4401] ======================================================= [ 89.123052][ T4401] EXT4-fs (loop0): Ignoring removed nobh option [ 89.178283][ T4401] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 89.334968][ T4408] loop3: detected capacity change from 0 to 512 [ 89.364193][ T4411] process 'syz.2.22' launched './file0' with NULL argv: empty string added [ 89.383902][ T4408] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 89.479565][ T4401] EXT4-fs (loop0): failed to open journal device unknown-block(11,0) -6 [ 89.586615][ T4416] loop4: detected capacity change from 0 to 1024 [ 89.646884][ T4416] EXT4-fs (loop4): inline encryption not supported [ 89.766707][ T4416] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,jqfmt=vfsv1,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 89.778285][ T4424] loop1: detected capacity change from 0 to 128 [ 90.613327][ T4431] attempt to access beyond end of device [ 90.613327][ T4431] loop1: rw=2049, want=681, limit=128 [ 90.670258][ T4430] loop0: detected capacity change from 0 to 1024 [ 92.592623][ T4430] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.601822][ T4433] device wireguard0 entered promiscuous mode [ 92.843636][ T4441] loop2: detected capacity change from 0 to 2048 [ 92.925904][ T26] audit: type=1800 audit(1764498716.457:3): pid=4430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.33" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 92.958006][ T4430] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.33: Allocating blocks 385-513 which overlap fs metadata [ 92.967966][ T4441] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 93.673675][ T4441] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.933346][ T4430] EXT4-fs (loop0): pa ffff888074ff57e0: logic 16, phys. 129, len 24 [ 93.942248][ T4430] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 93.951057][ T4450] loop1: detected capacity change from 0 to 1024 [ 95.399426][ T4450] EXT4-fs (loop1): Ignoring removed orlov option [ 95.424682][ T4456] loop2: detected capacity change from 0 to 16 [ 95.456213][ T4450] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c118, mo2=0102] [ 95.464520][ T4450] System zones: 0-1, 3-12 [ 95.483579][ T4450] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,orlov,abort,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: none. [ 95.510370][ T4456] erofs: (device loop2): mounted with root inode @ nid 36. [ 95.625534][ T1111] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.811726][ T4450] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2826: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 95.946089][ T1111] usb 5-1: Using ep0 maxpacket: 8 [ 95.947419][ T4469] loop3: detected capacity change from 0 to 512 [ 96.059979][ T4469] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 96.065678][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 96.074383][ T4469] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 96.115637][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.155858][ T1111] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.195473][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 96.196671][ T4469] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.245851][ T1111] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 96.266436][ T1111] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 96.419572][ T4469] EXT4-fs (loop3): 1 truncate cleaned up [ 96.447308][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.485449][ T4469] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,dioread_lock,nodiscard,nomblk_io_submit,noblock_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 96.523511][ T1111] usb 5-1: config 0 descriptor?? [ 97.257203][ T4194] Bluetooth: hci5: urb ffff8881449b9500 submission failed (90) [ 97.310845][ T4483] loop1: detected capacity change from 0 to 1024 [ 97.354843][ T7] usb 5-1: USB disconnect, device number 2 [ 97.376547][ T4483] EXT4-fs error (device loop1): ext4_fill_super:4841: comm syz.1.48: inode #2: comm syz.1.48: iget: illegal inode # [ 98.378712][ T4483] EXT4-fs (loop1): get root inode failed [ 98.385043][ T4483] EXT4-fs (loop1): mount failed [ 98.411915][ T4489] loop3: detected capacity change from 0 to 512 [ 98.571756][ T4489] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.645572][ T4489] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.915201][ T4489] EXT4-fs error (device loop3): ext4_ext_remove_space:2929: inode #15: comm syz.3.49: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 98.955657][ T4333] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.672025][ T4502] loop1: detected capacity change from 0 to 512 [ 100.342119][ T4489] EXT4-fs error (device loop3): ext4_evict_inode:293: comm syz.3.49: couldn't truncate inode 15 (err -117) [ 100.387009][ T4504] loop2: detected capacity change from 0 to 1024 [ 100.423093][ T4502] EXT4-fs (loop1): inline encryption not supported [ 100.429876][ T4502] EXT4-fs (loop1): Mount option "dax=never" incompatible with ext2 [ 100.509859][ T4333] usb 5-1: Using ep0 maxpacket: 32 [ 100.516123][ T4504] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 100.523572][ T4504] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.604215][ T4504] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 100.634748][ T4504] System zones: 0-1, 3-36 [ 100.655831][ T4333] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.722992][ T4333] usb 5-1: config 0 interface 0 has no altsetting 0 [ 102.141770][ T4333] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 102.156097][ T4333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.166323][ T4504] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 102.206442][ T4333] usb 5-1: config 0 descriptor?? [ 102.247100][ T4333] usb 5-1: can't set config #0, error -71 [ 102.276697][ T4333] usb 5-1: USB disconnect, device number 3 [ 103.391761][ T4524] capability: warning: `syz.2.60' uses deprecated v2 capabilities in a way that may be insecure [ 103.634556][ T4530] loop2: detected capacity change from 0 to 1024 [ 106.331754][ T4537] hfsplus: xattr searching failed [ 106.355617][ T26] audit: type=1800 audit(1764498729.867:4): pid=4537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.61" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=2 res=0 errno=0 [ 107.689054][ T4549] loop2: detected capacity change from 0 to 2048 [ 107.760298][ T4549] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.389811][ T4554] kvm_set_msr_common: 21 callbacks suppressed [ 109.389832][ T4554] kvm [4553]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x100000000 [ 109.481163][ T4559] loop0: detected capacity change from 0 to 164 [ 110.586258][ T4559] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=82 [ 110.959819][ T4570] loop0: detected capacity change from 0 to 2048 [ 110.966393][ T4572] 9pnet: p9_errstr2errno: server reported unknown error @cÿÿÿÿÿÿÿÿ [ 111.044060][ T4570] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.265426][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.515591][ T1108] usb 2-1: Using ep0 maxpacket: 32 [ 111.631933][ T4588] loop0: detected capacity change from 0 to 512 [ 111.638778][ T1108] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 111.665467][ T1108] usb 2-1: config 0 has no interface number 0 [ 111.685414][ T1108] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.726999][ T1108] usb 2-1: config 0 interface 85 has no altsetting 0 [ 111.827345][ T4588] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.883449][ T4588] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 111.885785][ T1108] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 111.911123][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.919677][ T1108] usb 2-1: Product: syz [ 111.924097][ T1108] usb 2-1: Manufacturer: syz [ 111.928853][ T1108] usb 2-1: SerialNumber: syz [ 111.938668][ T1108] usb 2-1: config 0 descriptor?? [ 111.949478][ T4588] EXT4-fs (loop0): 1 truncate cleaned up [ 111.955301][ T4588] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 112.057364][ T4588] EXT4-fs (loop0): shut down requested (1) [ 113.395170][ T1108] appletouch 2-1:0.85: Geyser mode initialized. [ 113.404740][ T1108] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input5 [ 113.434273][ T1108] usb 2-1: USB disconnect, device number 2 [ 113.482165][ T4612] loop3: detected capacity change from 0 to 128 [ 113.517914][ T1108] appletouch 2-1:0.85: input: appletouch disconnected [ 113.539020][ T4612] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 117.726726][ T4627] loop4: detected capacity change from 0 to 2048 [ 117.793430][ T4627] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 117.897474][ T4627] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.904359][ T4648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.100'. [ 119.926917][ T4649] loop2: detected capacity change from 0 to 512 [ 119.954265][ T4652] loop3: detected capacity change from 0 to 8 [ 120.000651][ T4654] loop4: detected capacity change from 0 to 16 [ 120.011805][ T4654] erofs: (device loop4): mounted with root inode @ nid 36. [ 120.029599][ T4649] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 120.055633][ T4241] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 120.109630][ T4654] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown compression format 15 for nid 36, please upgrade kernel [ 120.123379][ T4649] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.99: bg 0: block 393: padding at end of block bitmap is not set [ 120.172557][ T4654] erofs: (device loop4): z_erofs_readpage: failed to read, err [-95] [ 120.188526][ T4649] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 120.256573][ T4649] EXT4-fs (loop2): 2 truncates cleaned up [ 120.273189][ T4649] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 120.696251][ T4241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 120.723242][ T4241] usb 1-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 120.756673][ T4241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.216951][ T4241] usb 1-1: config 0 descriptor?? [ 121.251827][ T4645] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.815995][ T4241] wacom 0003:056A:00F0.0001: hidraw0: USB HID v1.01 Device [HID 056a:00f0] on usb-dummy_hcd.0-1/input0 [ 122.093396][ T4241] usb 1-1: USB disconnect, device number 2 [ 122.174418][ T4675] loop4: detected capacity change from 0 to 1024 [ 122.253327][ T4675] EXT4-fs (loop4): Ignoring removed bh option [ 122.270724][ T4192] syz-executor (4192) used greatest stack depth: 20896 bytes left [ 122.316795][ T4675] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000001,bh,init_itable,. Quota mode: none. [ 122.447825][ T4673] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.485244][ T4678] fido_id[4678]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 122.690704][ T4673] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.739409][ T4697] loop0: detected capacity change from 0 to 128 [ 122.804981][ T4699] loop3: detected capacity change from 0 to 1024 [ 122.826023][ T4701] netlink: 40 bytes leftover after parsing attributes in process `syz.4.117'. [ 122.837839][ T4701] netlink: 40 bytes leftover after parsing attributes in process `syz.4.117'. [ 122.841837][ T4673] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.893288][ T4699] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 124.252141][ T4699] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.309109][ T4697] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,discard,,errors=continue. Quota mode: none. [ 124.327955][ T4697] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.343645][ T4699] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 124.384394][ T4699] System zones: 0-1, 3-36 [ 124.414489][ T4699] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 124.430914][ T4673] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.557340][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 126.915988][ T4725] loop0: detected capacity change from 0 to 512 [ 127.316818][ T4710] chnl_net:caif_netlink_parms(): no params data found [ 128.066846][ T4725] EXT4-fs (loop0): Ignoring removed bh option [ 128.136018][ T4725] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 128.231812][ T4725] EXT4-fs (loop0): 1 truncate cleaned up [ 128.313902][ T4725] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 128.345405][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.352594][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.391765][ T4710] device bridge_slave_0 entered promiscuous mode [ 128.400750][ T4759] loop4: detected capacity change from 0 to 16 [ 128.443602][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.467754][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.484878][ T4710] device bridge_slave_1 entered promiscuous mode [ 128.504135][ T4763] loop1: detected capacity change from 0 to 256 [ 128.545169][ T4727] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.123: invalid indirect mapped block 4294967295 (level 1) [ 128.639152][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.648138][ T4763] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 128.651886][ T4766] loop3: detected capacity change from 0 to 128 [ 128.661120][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 128.694718][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.716913][ T4763] exFAT-fs (loop1): hint_cluster is invalid (17) [ 128.822821][ T4766] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.845725][ T4766] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.322959][ T4710] team0: Port device team_slave_0 added [ 130.500816][ T4710] team0: Port device team_slave_1 added [ 130.687619][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.706465][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.744084][ T4240] Bluetooth: hci3: command 0x040f tx timeout [ 130.819899][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.045274][ T4795] loop1: detected capacity change from 0 to 2048 [ 131.056602][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.083991][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.153855][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.176219][ T4795] UDF-fs: bad mount option "short`d" or missing value [ 131.403821][ T4710] device hsr_slave_0 entered promiscuous mode [ 131.537721][ T4710] device hsr_slave_1 entered promiscuous mode [ 131.566455][ T4710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.590625][ T4710] Cannot create hsr debugfs directory [ 131.921641][ T4819] loop1: detected capacity change from 0 to 512 [ 131.980182][ T4673] device hsr_slave_0 left promiscuous mode [ 132.000617][ T4673] device hsr_slave_1 left promiscuous mode [ 132.030444][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.050588][ T4673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.065533][ T4819] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.105526][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 132.105694][ T4819] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.142466][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.199438][ T4673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.256283][ T4673] device bridge_slave_1 left promiscuous mode [ 132.278312][ T4819] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #2: comm syz.1.142: corrupted inode contents [ 132.306822][ T4673] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.363508][ T4819] EXT4-fs error (device loop1): ext4_dirty_inode:6054: inode #2: comm syz.1.142: mark_inode_dirty error [ 132.371359][ T4673] device bridge_slave_0 left promiscuous mode [ 132.454494][ T4673] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.475690][ T7] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 132.549723][ T7] usb 5-1: config 0 has no interface number 0 [ 132.591759][ T4819] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #2: comm syz.1.142: corrupted inode contents [ 132.615186][ T4819] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.142: mark_inode_dirty error [ 132.651442][ T7] usb 5-1: config 0 interface 85 altsetting 151 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.796261][ T4240] Bluetooth: hci3: command 0x0419 tx timeout [ 132.800782][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.025976][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.038570][ T7] usb 5-1: config 0 interface 85 altsetting 151 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.075458][ T7] usb 5-1: config 0 interface 85 has no altsetting 0 [ 133.095458][ T7] usb 5-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 133.106440][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.132934][ T7] usb 5-1: config 0 descriptor?? [ 133.146377][ T4673] device veth1_macvtap left promiscuous mode [ 133.157478][ T4673] device veth0_macvtap left promiscuous mode [ 133.164064][ T4673] device veth1_vlan left promiscuous mode [ 133.171654][ T4673] device veth0_vlan left promiscuous mode [ 133.210977][ T4821] loop3: detected capacity change from 0 to 8 [ 133.225040][ T4821] squashfs: Unknown parameter '´' [ 133.619175][ T7] hid-led 0003:1D34:0004.0002: unknown main item tag 0x0 [ 133.633634][ T7] hid-led 0003:1D34:0004.0002: unknown main item tag 0x0 [ 133.641618][ T7] hid-led 0003:1D34:0004.0002: unknown main item tag 0x0 [ 133.654835][ T7] hid-led 0003:1D34:0004.0002: unknown main item tag 0x0 [ 133.662854][ T1326] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.670640][ T7] hid-led 0003:1D34:0004.0002: unknown main item tag 0x0 [ 133.679512][ T7] hid-led 0003:1D34:0004.0002: unknown main item tag 0x0 [ 133.688459][ T7] hid-led 0003:1D34:0004.0002: unknown main item tag 0x0 [ 133.740189][ T4673] team0 (unregistering): Port device team_slave_1 removed [ 133.755543][ T4673] team0 (unregistering): Port device team_slave_0 removed [ 133.771667][ T4673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.790529][ T4673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.838489][ T7] hid-led 0003:1D34:0004.0002: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.4-1/input85 [ 133.860858][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 133.874533][ T7] hid-led 0003:1D34:0004.0002: Dream Cheeky Webmail Notifier initialized [ 133.881496][ T4673] bond0 (unregistering): Released all slaves [ 133.963114][ T4833] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 134.035592][ T1326] usb 2-1: config 0 has no interfaces? [ 134.046002][ T1326] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 134.101781][ T1326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.125727][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 134.147069][ T4710] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 134.151845][ T1326] usb 2-1: config 0 descriptor?? [ 134.179660][ T4710] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 134.181323][ T7] usb 5-1: USB disconnect, device number 4 [ 134.258811][ T4710] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 134.265958][ T1108] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 134.274157][ T1108] usb 4-1: config 0 has no interface number 0 [ 134.298800][ T1108] usb 4-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 134.343614][ T4710] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 134.515909][ T1108] usb 4-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 134.525070][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.555479][ T1108] usb 4-1: Product: syz [ 134.559712][ T1108] usb 4-1: Manufacturer: syz [ 134.564325][ T1108] usb 4-1: SerialNumber: syz [ 134.624471][ T1108] usb 4-1: config 0 descriptor?? [ 135.341613][ T4848] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 135.731632][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.735054][ T4848] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 135.821228][ T7] usb 2-1: USB disconnect, device number 3 [ 136.013928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.021402][ T1108] net1080 4-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.3-1, NetChip TurboCONNECT, 3e:22:48:29:bb:f3 [ 136.052523][ T1326] usb 4-1: USB disconnect, device number 2 [ 136.058044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.064721][ T1326] net1080 4-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT [ 136.097802][ T4872] loop4: detected capacity change from 0 to 128 [ 136.101152][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.191087][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.216553][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.246398][ T3043] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.253616][ T3043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.363391][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.462066][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.481290][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.501370][ T3043] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.508623][ T3043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.535797][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.555993][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.570034][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.602601][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.631841][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.673372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.697960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.709798][ T4885] loop3: detected capacity change from 0 to 256 [ 136.715712][ T4490] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 136.743677][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.783842][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.808709][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.824925][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.854535][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.877719][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.898740][ T4885] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.940995][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.085725][ T4490] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.276540][ T4490] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.316736][ T4490] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.326854][ T4490] usb 5-1: Product: syz [ 137.331066][ T4490] usb 5-1: Manufacturer: syz [ 137.385440][ T4490] usb 5-1: SerialNumber: syz [ 137.578580][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.595250][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.617799][ T4899] loop3: detected capacity change from 0 to 512 [ 137.658507][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.800363][ T4899] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.155: bad orphan inode 15 [ 137.826117][ T4899] EXT4-fs (loop3): Remounting filesystem read-only [ 137.856044][ T4899] ext4_test_bit(bit=14, block=18) = 1 [ 137.945641][ T4899] is_bad_inode(inode)=0 [ 137.949996][ T4899] NEXT_ORPHAN(inode)=1023 [ 137.987332][ T4899] max_ino=32 [ 138.000841][ T4899] i_nlink=0 [ 138.025134][ T4899] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2942: inode #15: comm syz.3.155: corrupted xattr block 19 [ 138.091901][ T4899] EXT4-fs (loop3): Remounting filesystem read-only [ 138.116970][ T4899] EXT4-fs warning (device loop3): ext4_evict_inode:302: xattr delete (err -117) [ 138.142559][ T4917] loop1: detected capacity change from 0 to 256 [ 138.165914][ T4899] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,. Quota mode: none. [ 138.195911][ T4899] ext4 filesystem being mounted at /39/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 138.292959][ T4917] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 138.423915][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.443675][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.553316][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.562663][ T4490] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 138.583281][ T4490] cdc_ncm 5-1:1.0: dwNtbInMaxSize=5 is too small. Using 2048 [ 138.596233][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.611110][ T4490] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 138.618642][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.654837][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.677355][ T4710] device veth0_vlan entered promiscuous mode [ 138.742002][ T4710] device veth1_vlan entered promiscuous mode [ 138.784680][ T4490] cdc_ncm 5-1:1.0: setting tx_max = 104 [ 138.810966][ T4490] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 138.853947][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 138.873039][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.916866][ T4490] usb 5-1: USB disconnect, device number 5 [ 138.944638][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.954230][ T4490] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 138.964269][ T4945] loop0: detected capacity change from 0 to 1024 [ 138.976382][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.070278][ T4710] device veth0_macvtap entered promiscuous mode [ 140.460539][ T4945] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 140.485536][ T4945] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.512239][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.577098][ T4710] device veth1_macvtap entered promiscuous mode [ 140.599654][ T4945] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 140.615890][ T4945] System zones: 0-1, 3-36 [ 140.662696][ T4710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.674651][ T4710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.685211][ T4710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.695938][ T4710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.705925][ T4710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.716743][ T4710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.717276][ T4945] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 140.726761][ T4710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.726781][ T4710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.728600][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.880309][ T4710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.925511][ T4710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.996662][ T4710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.470521][ T4710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.505482][ T4710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.681607][ T4710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.692341][ T4710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.704813][ T4710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.733106][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.746066][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.767064][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.826779][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.847253][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.948556][ T4710] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.981082][ T4710] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.972083][ T4976] loop0: detected capacity change from 0 to 512 [ 142.999057][ T4710] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.045970][ T4710] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.392046][ T4426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.445449][ T4426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.498398][ T3043] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.541586][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.581125][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.608748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.757596][ T4993] loop0: detected capacity change from 0 to 1024 [ 143.867109][ T4993] EXT4-fs (loop0): Ignoring removed nobh option [ 144.818819][ T4993] EXT4-fs (loop0): Ignoring removed bh option [ 144.840743][ T4993] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.006427][ T4993] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 145.057847][ T5009] loop4: detected capacity change from 0 to 256 [ 145.125742][ T4993] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.179: Allocating blocks 385-513 which overlap fs metadata [ 145.171262][ T4990] EXT4-fs (loop0): pa ffff88805fafd2a0: logic 16, phys. 129, len 24 [ 145.179755][ T4990] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 145.287838][ T5013] loop1: detected capacity change from 0 to 1024 [ 145.455870][ T5013] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 145.499235][ T5013] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.614819][ T5013] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 145.647537][ T5013] System zones: 0-1, 3-36 [ 145.693911][ T5013] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 145.754763][ T5024] loop4: detected capacity change from 0 to 1024 [ 146.201101][ T4321] hfsplus: b-tree write err: -5, ino 3 [ 146.420493][ T4186] hfsplus: node 4:3 still has 1 user(s)! [ 146.433494][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 146.495792][ T5043] dvmrp1: tun_chr_ioctl cmd 2147767517 [ 147.956412][ T5058] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 148.042855][ T5061] loop1: detected capacity change from 0 to 128 [ 148.079692][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 148.122654][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 148.204977][ T5064] loop4: detected capacity change from 0 to 2048 [ 148.229409][ T5061] loop_set_status: loop1 () has still dirty pages (nrpages=1) [ 148.246692][ T21] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 148.288468][ T5064] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.297856][ T5061] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 148.307551][ T21] usb 4-1: config 179 has no interface number 0 [ 148.317308][ T21] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 148.329236][ T5061] FAT-fs (loop1): Filesystem has been set read-only [ 148.348351][ T5061] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000) [ 148.357464][ T21] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 148.389481][ T21] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 148.443036][ T21] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 148.481870][ T21] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 148.518015][ T21] usb 4-1: config 179 interface 65 has no altsetting 0 [ 148.524982][ T21] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 148.537724][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.582692][ T1108] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.650527][ T1108] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.675389][ T21] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input9 [ 148.687717][ T5072] loop1: detected capacity change from 0 to 1024 [ 148.729237][ T5072] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 148.829064][ T5072] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.893730][ T5072] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 148.922500][ T1108] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 148.936289][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 148.944436][ T1108] usb 1-1: SerialNumber: syz [ 148.944647][ T5072] System zones: 0-1, 3-36 [ 148.989537][ T5072] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 149.134115][ T5082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.198'. [ 149.157907][ T4300] usb 4-1: USB disconnect, device number 3 [ 149.240192][ T5082] netlink: 'syz.5.198': attribute type 1 has an invalid length. [ 149.292842][ T5082] netlink: 'syz.5.198': attribute type 2 has an invalid length. [ 149.483717][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 149.483797][ T4300] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 149.528745][ T1108] usb 1-1: 0:2 : does not exist [ 149.746959][ T5093] xt_hashlimit: overflow, rate too high: 0 [ 151.094417][ T1108] usb 1-1: USB disconnect, device number 3 [ 152.872109][ T4207] udevd[4207]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.964828][ T5136] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 153.975218][ T5136] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 154.119274][ T5139] loop0: detected capacity change from 0 to 1024 [ 154.233597][ T5139] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 154.248100][ T5139] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.504252][ T5139] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 156.523577][ T5139] System zones: 0-1, 3-36 [ 156.561570][ T5139] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 156.661603][ T5161] netlink: 40 bytes leftover after parsing attributes in process `syz.5.217'. [ 158.474961][ T5178] loop0: detected capacity change from 0 to 512 [ 158.596967][ T5178] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 158.633161][ T5178] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e11c, mo2=0002] [ 158.651120][ T5178] System zones: 1-12 [ 158.661218][ T5178] EXT4-fs (loop0): orphan cleanup on readonly fs [ 158.681678][ T5178] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.220: bg 0: block 361: padding at end of block bitmap is not set [ 158.707219][ T5178] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 158.770326][ T5178] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.220: invalid indirect mapped block 12 (level 1) [ 158.808326][ T5191] loop5: detected capacity change from 0 to 512 [ 158.824490][ T5178] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.220: invalid indirect mapped block 2 (level 2) [ 158.881329][ T5178] EXT4-fs (loop0): 1 truncate cleaned up [ 158.887045][ T5178] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000000080000,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv0,errors=continue. Quota mode: none. [ 160.384601][ T5191] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 160.504556][ T5191] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.225: bad orphan inode 131083 [ 160.592167][ T5191] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,init_itable,inode_readahead_blks=0x0000000000002000,,errors=continue. Quota mode: none. [ 160.720546][ T5207] loop0: detected capacity change from 0 to 512 [ 162.200764][ T5191] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.225: No space for directory leaf checksum. Please run e2fsck -D. [ 162.206234][ T4178] udevd[4178]: incorrect ext4 checksum on /dev/loop5 [ 162.218777][ T5207] EXT4-fs (loop0): Ignoring removed bh option [ 162.277055][ T5191] EXT4-fs error (device loop5): __ext4_find_entry:1696: inode #2: comm syz.5.225: checksumming directory block 0 [ 162.331361][ T5207] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.228: bad orphan inode 14 [ 162.405160][ T5207] ext4_test_bit(bit=13, block=18) = 1 [ 162.410712][ T5207] is_bad_inode(inode)=0 [ 162.442655][ T5207] NEXT_ORPHAN(inode)=0 [ 162.447006][ T5207] max_ino=32 [ 162.527550][ T5207] i_nlink=1 [ 162.530811][ T5207] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,init_itable=0x0000000000000100,nodiscard,nouid32,journal_ioprio=0x0000000000000004,resuid=0x0000000000000000,stripe=0x0000000000010001,bh,,errors=continue. Quota mode: writeback. [ 162.594843][ T5207] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.867542][ T5224] loop5: detected capacity change from 0 to 1024 [ 162.939216][ T5229] netlink: 'syz.1.223': attribute type 2 has an invalid length. [ 163.732980][ T5224] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 163.747515][ T5224] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.851959][ T5224] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 163.920928][ T5224] System zones: 0-1, 3-36 [ 164.041135][ T5224] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 164.174032][ T5250] loop1: detected capacity change from 0 to 512 [ 164.212470][ T5254] loop0: detected capacity change from 0 to 512 [ 164.312594][ T5250] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 164.386594][ T5250] EXT4-fs (loop1): 1 truncate cleaned up [ 164.392316][ T5250] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 164.574464][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 169.608274][ T5280] loop5: detected capacity change from 0 to 512 [ 169.952823][ T5280] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.243: inode #1: comm syz.5.243: iget: illegal inode # [ 169.977241][ T5280] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.243: error while reading EA inode 1 err=-117 [ 170.013661][ T5280] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.243: inode #1: comm syz.5.243: iget: illegal inode # [ 170.041220][ T5280] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.243: error while reading EA inode 1 err=-117 [ 170.232654][ T5280] EXT4-fs (loop5): 1 orphan inode deleted [ 170.307248][ T5280] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,noinit_itable,norecovery,noinit_itable,max_batch_time=0x0000000000000006,nodiscard,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 170.843792][ T5308] loop1: detected capacity change from 0 to 1024 [ 170.897111][ T5308] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 170.928474][ T5308] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.966251][ T5308] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 171.086221][ T5308] System zones: 0-1, 3-36 [ 171.106677][ T5308] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 171.203366][ T5316] loop3: detected capacity change from 0 to 1024 [ 171.307946][ T5316] hfsplus: xattr searching failed [ 171.377439][ T5316] hfsplus: xattr search failed [ 171.405554][ T5326] loop0: detected capacity change from 0 to 1024 [ 171.438445][ T4490] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 171.526146][ T5326] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.590115][ T4302] hfsplus: bad catalog file entry [ 171.594971][ T5326] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.254: Allocating blocks 385-513 which overlap fs metadata [ 171.597996][ T4302] hfsplus: b-tree write err: -5, ino 3 [ 171.705701][ T4490] usb 6-1: Using ep0 maxpacket: 32 [ 171.774275][ T1111] kernel write not supported for file [eventfd] (pid: 1111 comm: kworker/0:2) [ 171.795063][ T5324] EXT4-fs (loop0): pa ffff888074ff5a80: logic 16, phys. 129, len 24 [ 171.803239][ T5324] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 171.804175][ T5339] loop3: detected capacity change from 0 to 256 [ 171.855458][ T4490] usb 6-1: unable to get BOS descriptor or descriptor too short [ 171.907708][ T5342] loop4: detected capacity change from 0 to 512 [ 171.918566][ T5339] FAT-fs (loop3): Unrecognized mount option "§¡beš?fs=nostale_ro" or missing value [ 171.942175][ T4490] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 171.958636][ T4490] usb 6-1: can't read configurations, error -71 [ 171.976168][ T5342] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 172.017385][ T5339] netlink: 20 bytes leftover after parsing attributes in process `syz.3.257'. [ 172.044126][ T5342] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 172.084735][ T5342] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.261: Invalid block bitmap block 0 in block_group 0 [ 172.106389][ T5342] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 172.121107][ T5342] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.261: attempt to clear invalid blocks 983261 len 1 [ 172.138863][ T5342] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.261: Invalid inode table block 0 in block_group 0 [ 172.168665][ T5342] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 172.187240][ T5342] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 172.221990][ T5342] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.261: Invalid inode table block 0 in block_group 0 [ 172.291506][ T5342] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 172.401142][ T5359] loop5: detected capacity change from 0 to 512 [ 172.415089][ T5342] EXT4-fs error (device loop4): ext4_truncate:4279: inode #11: comm syz.4.261: mark_inode_dirty error [ 172.542209][ T5342] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 172.755466][ T5359] EXT4-fs (loop5): Ignoring removed oldalloc option [ 172.796300][ T5342] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.261: Invalid inode table block 0 in block_group 0 [ 172.921373][ T5359] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 173.138763][ T5342] EXT4-fs (loop4): 1 truncate cleaned up [ 173.172534][ T5359] EXT4-fs (loop5): 1 truncate cleaned up [ 173.193137][ T5342] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 173.220979][ T5359] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 174.940086][ T5379] loop1: detected capacity change from 0 to 2048 [ 175.034735][ T5379] EXT4-fs (loop1): inline encryption not supported [ 175.041800][ T5384] loop5: detected capacity change from 0 to 1024 [ 175.127995][ T5379] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,inlinecrypt,,errors=continue. Quota mode: none. [ 175.173505][ T26] audit: type=1326 audit(1764498796.674:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5393 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe392e7f749 code=0x7ffc0000 [ 175.200420][ T26] audit: type=1326 audit(1764498796.674:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5393 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe392e7e1ff code=0x7ffc0000 [ 175.223749][ T26] audit: type=1326 audit(1764498796.674:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5393 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe392e7f749 code=0x7ffc0000 [ 175.246276][ T5379] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.263078][ T5384] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.433933][ T26] audit: type=1800 audit(1764498796.917:8): pid=5384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.271" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 175.499623][ T5384] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3871: comm syz.5.271: Allocating blocks 385-513 which overlap fs metadata [ 175.508956][ T26] audit: type=1804 audit(1764498796.936:9): pid=5384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.271" name="/newroot/19/file1/bus" dev="loop5" ino=18 res=1 errno=0 [ 175.555780][ T5379] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 175.596010][ T5379] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 175.769606][ T5383] EXT4-fs (loop5): pa ffff888074ff5c40: logic 16, phys. 129, len 24 [ 175.777696][ T5383] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 176.093020][ T5421] loop0: detected capacity change from 0 to 1024 [ 176.439357][ T5421] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 176.681100][ T5421] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 176.987084][ T5421] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 177.064751][ T5421] System zones: 0-1, 3-36 [ 177.097125][ T5421] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 178.002707][ T4490] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 178.179881][ T5447] netlink: 'syz.1.283': attribute type 6 has an invalid length. [ 178.364354][ T5447] netlink: 'syz.1.283': attribute type 4 has an invalid length. [ 178.729754][ T4490] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 178.755553][ T5458] binder: 5457:5458 ioctl 4018620d 0 returned -22 [ 178.809095][ T4490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.983226][ T4490] usb 5-1: config 0 descriptor?? [ 179.009057][ T5463] loop1: detected capacity change from 0 to 1024 [ 179.143304][ T5463] hfsplus: failed to load root directory [ 179.314388][ T5468] loop3: detected capacity change from 0 to 1024 [ 179.360164][ T4188] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 180.931935][ T4490] usbhid 5-1:0.0: can't add hid device: -71 [ 180.941550][ T4490] usbhid: probe of 5-1:0.0 failed with error -71 [ 180.963742][ T4188] usb 1-1: Using ep0 maxpacket: 16 [ 181.877203][ T5478] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 182.358134][ T4490] usb 5-1: USB disconnect, device number 6 [ 182.428381][ T4188] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 182.446930][ T4188] usb 1-1: can't read configurations, error -71 [ 182.977037][ T5492] loop0: detected capacity change from 0 to 1024 [ 183.044441][ T5492] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 183.089282][ T5492] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 183.163329][ T5492] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 183.185337][ T5492] System zones: 0-1, 3-36 [ 183.251590][ T5492] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 187.706806][ T5526] loop4: detected capacity change from 0 to 1024 [ 187.754035][ T5527] loop3: detected capacity change from 0 to 1024 [ 187.798967][ T5526] EXT4-fs (loop4): Ignoring removed orlov option [ 187.805457][ T5526] EXT4-fs (loop4): Ignoring removed orlov option [ 187.812124][ T5526] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 187.893287][ T5526] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,resgid=0x0000000000000000,orlov,acl,debug_want_extra_isize=0x0000000000000080,inode_readahead_blks=0x0000000000100000,errors=remount-ro,noinit_itable,orlov,. Quota mode: none. [ 188.069030][ T26] audit: type=1326 audit(1764498808.741:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5534 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a899c749 code=0x7ffc0000 [ 188.223438][ T26] audit: type=1326 audit(1764498808.797:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5534 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a899c749 code=0x7ffc0000 [ 188.225582][ T5527] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.287000][ T26] audit: type=1326 audit(1764498808.797:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5534 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a899c749 code=0x7ffc0000 [ 188.309821][ T26] audit: type=1326 audit(1764498808.797:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5534 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a899c749 code=0x7ffc0000 [ 188.332520][ T26] audit: type=1326 audit(1764498808.797:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5534 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0a899c749 code=0x7ffc0000 [ 188.361808][ T26] audit: type=1326 audit(1764498808.797:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5534 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a899c749 code=0x7ffc0000 [ 188.404109][ T5527] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.290: Allocating blocks 385-513 which overlap fs metadata [ 188.578644][ T26] audit: type=1326 audit(1764498808.797:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5534 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a899c749 code=0x7ffc0000 [ 188.631891][ T5544] loop1: detected capacity change from 0 to 2048 [ 188.705996][ T5544] UDF-fs: bad mount option "longadKuid=;üo-B³Úãç" or missing value [ 188.773828][ T26] audit: type=1326 audit(1764498808.797:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5534 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a899c749 code=0x7ffc0000 [ 190.260636][ T26] audit: type=1326 audit(1764498808.797:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5534 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff0a899c749 code=0x7ffc0000 [ 190.328110][ T5525] EXT4-fs (loop3): pa ffff888074ff5d20: logic 16, phys. 129, len 24 [ 190.336281][ T5525] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 190.388449][ T26] audit: type=1326 audit(1764498808.797:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5534 comm="syz.1.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a899c749 code=0x7ffc0000 [ 191.618615][ T5567] loop3: detected capacity change from 0 to 1024 [ 191.697294][ T5567] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 191.767720][ T5567] EXT4-fs error (device loop3): ext4_get_journal_inode:5160: inode #8: comm syz.3.307: inode has both inline data and extents flags [ 191.841199][ T5567] EXT4-fs (loop3): no journal found [ 191.950429][ T5576] loop0: detected capacity change from 0 to 512 [ 192.032597][ T5576] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 192.099978][ T5576] EXT4-fs (loop0): 1 truncate cleaned up [ 192.167566][ T5576] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.323067][ T5576] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.298: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 192.422462][ T5576] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 192.452341][ T5589] loop3: detected capacity change from 0 to 764 [ 192.485606][ T5576] EXT4-fs warning (device loop0): ext4_rename_delete:3792: inode #2: comm syz.0.298: Deleting old file: nlink 4, error=-117 [ 192.559631][ T5576] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 192.656784][ T5576] EXT4-fs error (device loop0): ext4_rename_dir_finish:3684: inode #12: comm syz.0.298: mark_inode_dirty error [ 192.834550][ T5576] EXT4-fs error (device loop0) in ext4_rename_dir_finish:3687: Corrupt filesystem [ 193.662757][ T5610] loop0: detected capacity change from 0 to 128 [ 193.814915][ T5614] loop3: detected capacity change from 0 to 512 [ 194.050013][ T7] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 194.139614][ T5614] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 194.316359][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 194.338029][ T5614] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.439324][ T5614] EXT4-fs warning (device loop3): ext4_group_add:1676: Can't resize non-sparse filesystem further [ 194.451070][ T7] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 194.468420][ T7] usb 6-1: config 179 has no interface number 0 [ 194.487200][ T7] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 194.488540][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 194.512802][ T4203] Bluetooth: hci2: Unknown advertising packet type: 0x6e73 [ 194.513087][ T4203] ================================================================== [ 194.528740][ T4203] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12db/0x3b80 [ 194.529065][ T7] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 194.536704][ T4203] Read of size 1 at addr ffff8880782e1401 by task kworker/u5:9/4203 [ 194.536757][ T4203] [ 194.536783][ T4203] CPU: 1 PID: 4203 Comm: kworker/u5:9 Not tainted syzkaller #0 [ 194.536802][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.536814][ T4203] Workqueue: hci2 hci_rx_work [ 194.536844][ T4203] Call Trace: [ 194.536852][ T4203] [ 194.536861][ T4203] dump_stack_lvl+0x168/0x230 [ 194.536890][ T4203] ? show_regs_print_info+0x20/0x20 [ 194.536916][ T4203] ? load_image+0x3b0/0x3b0 [ 194.536937][ T4203] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 194.607028][ T4203] print_address_description+0x60/0x2d0 [ 194.612608][ T4203] ? hci_le_meta_evt+0x12db/0x3b80 [ 194.617747][ T4203] kasan_report+0xdf/0x130 [ 194.622204][ T4203] ? hci_le_meta_evt+0x12db/0x3b80 [ 194.627352][ T4203] hci_le_meta_evt+0x12db/0x3b80 [ 194.632346][ T4203] ? hci_event_packet+0x2a0/0x12f0 [ 194.637481][ T4203] ? hci_remote_host_features_evt+0x280/0x280 [ 194.643559][ T4203] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 194.649203][ T4203] ? mark_lock+0x94/0x320 [ 194.653540][ T4203] ? mutex_unlock+0x10/0x10 [ 194.658051][ T4203] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 194.664045][ T4203] ? lock_chain_count+0x20/0x20 [ 194.668906][ T4203] ? __rwlock_init+0x140/0x140 [ 194.673677][ T4203] hci_event_packet+0xe05/0x12f0 [ 194.678709][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 194.683918][ T4203] ? rcu_lock_release+0x20/0x20 [ 194.688776][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 194.693978][ T4203] hci_rx_work+0x255/0xa10 [ 194.698500][ T4203] process_one_work+0x863/0x1000 [ 194.703514][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 194.709147][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 194.714444][ T4203] ? _raw_spin_lock_irq+0xab/0xe0 [ 194.719496][ T4203] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 194.724891][ T4203] ? wq_worker_running+0x97/0x170 [ 194.730039][ T4203] worker_thread+0xaa8/0x12a0 [ 194.734827][ T4203] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 194.740746][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 194.745970][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 194.751197][ T4203] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 194.757121][ T4203] kthread+0x436/0x520 [ 194.761221][ T4203] ? rcu_lock_release+0x20/0x20 [ 194.766102][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 194.770716][ T4203] ret_from_fork+0x1f/0x30 [ 194.775164][ T4203] [ 194.778209][ T4203] [ 194.780545][ T4203] Allocated by task 5630: [ 194.784882][ T4203] __kasan_kmalloc+0xb5/0xf0 [ 194.789499][ T4203] __alloc_skb+0x22c/0x750 [ 194.793929][ T4203] vhci_write+0xbc/0x450 [ 194.798301][ T4203] vfs_write+0x712/0xd00 [ 194.802553][ T4203] ksys_write+0x14d/0x250 [ 194.806889][ T4203] do_syscall_64+0x4c/0xa0 [ 194.811321][ T4203] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.817250][ T4203] [ 194.819582][ T4203] The buggy address belongs to the object at ffff8880782e1000 [ 194.819582][ T4203] which belongs to the cache kmalloc-1k of size 1024 [ 194.833731][ T4203] The buggy address is located 1 bytes to the right of [ 194.833731][ T4203] 1024-byte region [ffff8880782e1000, ffff8880782e1400) [ 194.847446][ T4203] The buggy address belongs to the page: [ 194.853086][ T4203] page:ffffea0001e0b800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880782e5000 pfn:0x782e0 [ 194.864554][ T4203] head:ffffea0001e0b800 order:3 compound_mapcount:0 compound_pincount:0 [ 194.872889][ T4203] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 194.880889][ T4203] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016841dc0 [ 194.889569][ T4203] raw: ffff8880782e5000 000000008010000a 00000001ffffffff 0000000000000000 [ 194.898245][ T4203] page dumped because: kasan: bad access detected [ 194.904671][ T4203] page_owner tracks the page as allocated [ 194.910395][ T4203] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4184, ts 69369732545, free_ts 69324407628 [ 194.929592][ T4203] get_page_from_freelist+0x1b77/0x1c60 [ 194.935185][ T4203] __alloc_pages+0x1e1/0x470 [ 194.939873][ T4203] new_slab+0xc0/0x4b0 [ 194.943948][ T4203] ___slab_alloc+0x81e/0xdf0 [ 194.948545][ T4203] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 194.954624][ T4203] __alloc_skb+0x22c/0x750 [ 194.959058][ T4203] rtmsg_fib+0xe7/0x4b0 [ 194.963225][ T4203] fib_table_insert+0x987/0x1b20 [ 194.968175][ T4203] fib_magic+0x2c1/0x390 [ 194.972436][ T4203] fib_add_ifaddr+0x389/0x5e0 [ 194.977124][ T4203] fib_netdev_event+0x35c/0x480 [ 194.981990][ T4203] raw_notifier_call_chain+0xcb/0x160 [ 194.987382][ T4203] __dev_notify_flags+0x178/0x2d0 [ 194.992429][ T4203] dev_change_flags+0xe3/0x1a0 [ 194.997206][ T4203] do_setlink+0xc01/0x3980 [ 195.001676][ T4203] rtnl_newlink+0x1419/0x17d0 [ 195.006359][ T4203] page last free stack trace: [ 195.011038][ T4203] free_unref_page_prepare+0x637/0x6c0 [ 195.016620][ T4203] free_unref_page+0x94/0x280 [ 195.021323][ T4203] __unfreeze_partials+0x1a5/0x200 [ 195.026473][ T4203] put_cpu_partial+0x12d/0x190 [ 195.031247][ T4203] qlist_free_all+0x35/0x90 [ 195.035763][ T4203] kasan_quarantine_reduce+0x150/0x160 [ 195.041235][ T4203] __kasan_slab_alloc+0x2f/0xd0 [ 195.046183][ T4203] slab_post_alloc_hook+0x4c/0x380 [ 195.051308][ T4203] __kmalloc_track_caller+0x125/0x330 [ 195.056688][ T4203] kvasprintf+0xd4/0x180 [ 195.060938][ T4203] kobject_set_name_vargs+0x5d/0x110 [ 195.066233][ T4203] kobject_init_and_add+0xda/0x190 [ 195.071357][ T4203] netdev_queue_update_kobjects+0x19c/0x3e0 [ 195.077262][ T4203] netdev_register_kobject+0x265/0x310 [ 195.082734][ T4203] register_netdevice+0x1019/0x16b0 [ 195.087947][ T4203] nsim_create+0x32d/0x3e0 [ 195.092379][ T4203] [ 195.094707][ T4203] Memory state around the buggy address: [ 195.100346][ T4203] ffff8880782e1300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 195.108413][ T4203] ffff8880782e1380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 195.116485][ T4203] >ffff8880782e1400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 195.124546][ T4203] ^ [ 195.128626][ T4203] ffff8880782e1480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 195.136719][ T4203] ffff8880782e1500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 195.144788][ T4203] ================================================================== [ 195.152867][ T4203] Disabling lock debugging due to kernel taint [ 195.161493][ T4203] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 195.168738][ T4203] CPU: 1 PID: 4203 Comm: kworker/u5:9 Tainted: G B syzkaller #0 [ 195.177704][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.187778][ T4203] Workqueue: hci2 hci_rx_work [ 195.192493][ T4203] Call Trace: [ 195.195797][ T4203] [ 195.198753][ T4203] dump_stack_lvl+0x168/0x230 [ 195.203469][ T4203] ? show_regs_print_info+0x20/0x20 [ 195.208724][ T4203] ? load_image+0x3b0/0x3b0 [ 195.213270][ T4203] panic+0x2c9/0x7f0 [ 195.217203][ T4203] ? bpf_jit_dump+0xd0/0xd0 [ 195.221741][ T4203] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 195.227775][ T4203] ? _raw_spin_unlock+0x40/0x40 [ 195.232656][ T4203] ? hci_le_meta_evt+0x12db/0x3b80 [ 195.237799][ T4203] check_panic_on_warn+0x80/0xa0 [ 195.242772][ T4203] ? hci_le_meta_evt+0x12db/0x3b80 [ 195.247909][ T4203] end_report+0x6d/0xf0 [ 195.252092][ T4203] kasan_report+0x102/0x130 [ 195.254214][ T7] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 195.256625][ T4203] ? hci_le_meta_evt+0x12db/0x3b80 [ 195.256653][ T4203] hci_le_meta_evt+0x12db/0x3b80 [ 195.277985][ T4203] ? hci_event_packet+0x2a0/0x12f0 [ 195.283145][ T4203] ? hci_remote_host_features_evt+0x280/0x280 [ 195.289246][ T4203] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 195.294914][ T4203] ? mark_lock+0x94/0x320 [ 195.299282][ T4203] ? mutex_unlock+0x10/0x10 [ 195.303817][ T4203] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 195.309840][ T4203] ? lock_chain_count+0x20/0x20 [ 195.314730][ T4203] ? __rwlock_init+0x140/0x140 [ 195.319532][ T4203] hci_event_packet+0xe05/0x12f0 [ 195.321960][ T7] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 195.324522][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 195.324558][ T4203] ? rcu_lock_release+0x20/0x20 [ 195.345967][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 195.351205][ T4203] hci_rx_work+0x255/0xa10 [ 195.355654][ T4203] process_one_work+0x863/0x1000 [ 195.360629][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 195.366286][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 195.371594][ T4203] ? _raw_spin_lock_irq+0xab/0xe0 [ 195.376609][ T7] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 195.376643][ T4203] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 195.395291][ T4203] ? wq_worker_running+0x97/0x170 [ 195.400336][ T4203] worker_thread+0xaa8/0x12a0 [ 195.405035][ T4203] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 195.410946][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 195.416173][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 195.421406][ T4203] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 195.424146][ T7] usb 6-1: config 179 interface 65 has no altsetting 0 [ 195.427329][ T4203] kthread+0x436/0x520 [ 195.427353][ T4203] ? rcu_lock_release+0x20/0x20 [ 195.443334][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 195.447950][ T4203] ret_from_fork+0x1f/0x30 [ 195.452419][ T4203] [ 195.455767][ T4203] Kernel Offset: disabled [ 195.460117][ T4203] Rebooting in 86400 seconds..