last executing test programs: 3.780436756s ago: executing program 3 (id=44): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCFLSH(r0, 0x804c4700, 0x20000004) 3.57320219s ago: executing program 3 (id=45): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="b6cbf1775504", 0x0, 0x0, 0x0, 0x0, 0x0}) 3.340220588s ago: executing program 3 (id=47): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x9, 0x5}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, &(0x7f0000000540)={[{0xc, 0x4e00, "1560254722cb66187f3b68d0"}, {0xc, 0x4e00, "15545f8d8777043c1e3f9dc4"}]}) 2.843872121s ago: executing program 4 (id=52): syz_mount_image$cramfs(&(0x7f0000000240), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200401, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC=0x0, @ANYRESOCT], 0x1, 0x158, &(0x7f0000000000)="$eJzszrFrGlEcwPHv465qW60UWrCFWqFDj4rVXrGdSqulglB70OLSpQW9UkGxVGidgiFkyxDI6mASyCRO2U0ki4lCMP9EFmfHhOcZkiFL9t9nEb/v937vPr0bW8RgKczcx3rtz1+30XDLsa9OIffttN/P6O4DZr6r5978XgZ+618TpstQDu5CCH5Vqu7LUr2qx6YZsIDsXT7ontLtPtzR7YE3+wrvvvUMBg+9Zl/TXi/aYxOyYa/pfWeb8Fzv8wOVquv3Po9mO97rHn4ZDfOJFztPDFbz8ae3FmcXPequ2blH28GIQdE92CKr9L2T5DBxnOx1J+NR4bPzHrDtNwpaqfTEORrl0611zB/+f/BdgeLyHR+RqFkMsKJgY75ruq9CwKAzc2r33nYW7wf+GzFQzXbpp6H/3wbDQiGEEEIIIYQQQgghhBBCCCGEEELc1HkAAAD//8HbXww=") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x54) 2.59731216s ago: executing program 4 (id=54): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x4000, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0xee2, &(0x7f0000001e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x541b, 0x0) 2.36167816s ago: executing program 0 (id=56): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x2, {{0x14, 0x1, @in={0x21, 0x0, @dev}}, {0xfffffffffffffd9e, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 2.290782916s ago: executing program 4 (id=58): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="a3", 0x1}], 0x1, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x20040001) 2.258967735s ago: executing program 2 (id=59): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1000}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x19}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) 2.203602949s ago: executing program 1 (id=60): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000002440)=ANY=[@ANYBLOB="666f7263652c6e6c733d6575632d6a702c626172726965722c747970653d883b7f382c756d61736b3d30303030303030303030303030303030303030303030362c666f7263652c626172726965722c747970653d49d388242c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c005dc15e246d930a23b5f4093707c10226afb28f3e2838bb917886a27afece1cbcf9ae2d32c2c3f5bf4bb6fcd73d5c59e463cd173c188e1eefaba6fceaeb5840cbeb145a56ad674e7f2f8c49eaf5b1c65eb6d762300b8c5c2ff69671e6b209000000"], 0x0, 0x6e7, &(0x7f0000000100)="$eJzs3UtoHOcdAPD/rFarXZU4cuJHWgIRMaSlorZkobTqpW4pRYdQQnroebHlWHgtB0kpsim10se9h5x6Sg+6hR5Keje054ZA8VXHQCGXnHRTmdmZ1Ui72l1Zz7i/n5iZb+Z7zn92ZvaBmAD+by1MRfVpJLEw9c56ur61Odsa2Zwdy7NbEVGLiEpEtb2IZDmy3Fv5FN9ON+blkxjt3c/HS/PvPft668v2WjWfsnqVUv1h1Lo3beRTTEbESL7sdsDY4rP93e9p7/aB7Q0r6exhGrBrReDiL0dqFY5sp8tGJ+/T/2TzftUPc94C51TSvm92mYgYj4h6RPuun18dKqc7uuO3cdYDAAAAgMNqHL7Ky9uxHetx4SSGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+q/Pn/ST5VivRkJMXz/2v5tsjT59DgByF+MdZePj35wQAAAAAAAADAiXtjO7ZjPS4U6ztJ9pv/m6Xf+L8VH8ZqLMZKXI/1aMZarMVKzETERKmh2npzbW1lJqsZjUt9at6Mz3vUvHnwGG8d904DAAAAAAAAwPlWH5B/f7R72+9jYff3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA+SiJH2IpsuFemJqFQjoh4RtbTcRsTnRfobIum18enpjwMAAACOpL53NakPUeflJ7Ed63GhWN9Jss/8V7LPy/X4MJZjLZZiLVqxGHfyz9Dpp/7K1uZsa2tz9kE6dbf7068ONfSsxWh/99C759eyEo24G0vZlutxO5LYyVTyVl7b2pxNlw96j+ujdEzJT3J9RjNSSt9JZ1c/y9J/3vstQvVQu/icKgfmTGS5o52ITOdjS2tcLCLQOxIDj061b08zUel883Opf0+9Y/5R/97H95Xq+c3NmdgfiZtR6RyhK/0jEfHdf3z663ut5fv37q5OnZ9d6unJwBL7IzHbjsRLad7VFygSg01nkbjcWV+IX8SvYiq+Gns3VmIpfhPNWIvFySK/mb+e0/lE/0h9MV5ee3fQSNJzcrJz/do/pkJpTDEZP89SzXgzO6YXYimSeBgRi/F29nczZjpXg93X+uUhzvrKEFfakmvfyxadMEXj4LJ/G67J45LG9WIpruVr7kSWV96yG6VXekapuNcNfz8qqX4nT6Qt/KHv/eG07Y/ETCkSrx70emmH9K876Xy1tXx/5V7zgyH7eytfpufRn87VXSI9wq9EPd+5i9k8yc6p6Szv1c4ddm+8avkvLm2VrrzLnXrtM/WX8TDu7DlTfxhzMRfzWekrWenRrjtWmne109Lea3ial77TqnZ+2Cm/33oYrfb7IQDOt/Hvj9ca/238u/FJ44+Ne4136j8b+9HY67UY/dfoj6vTI29VXk/+Hp/E73Y//wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM9v9dHj+81Wa3Gld6LSOyvpX6vZ2ikeJNanzJ5Ekj8qZ4jCyeqjxzsDG+yfGMuH95zVjzNRPK1xcOHJExxGsrH/eNUHH4viKU9DdJF0BTyt/NxjLnre3TJ6Dg7l/sTkgDJJDN1g8YItZR3+1dvodbxGInoOY8CFY+Q4rj7AWbqx9uCDG6uPHv9g6UHz/cX3F5dH5+bmp+fn3p69cXeptTjdnpcqnMrDb4HTUH470VGLiDcG1+3zoFYAAAAAAAAAAADgBJ3G/0Kc9T4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA32wLU1F9GknMTF+fTte3Nmdb6VSkd0tWI6ISEclvI5J/RtyKJ89upRkTpeaSg/r5eGn+vWdfb32521a1KF+J2EgiXjrCXmzkU0xGxEi+PK72bg9ur7abHOuRnXQikwbsWr6EM/e/AAAA//9SHOxA") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='osx.', @ANYBLOB="22a2e8"], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) 2.1708045s ago: executing program 0 (id=61): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000500)={0x0, 0xffffffffffffffff}) 2.047221836s ago: executing program 4 (id=62): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x19}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) 1.88822167s ago: executing program 2 (id=63): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_reply}}}}}, 0x0) 1.719772103s ago: executing program 4 (id=64): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f00000008c0)='./file2\x00', 0x1800893, &(0x7f00000000c0)={[{@discard_sync}]}, 0xbb, 0x50f9, &(0x7f000000a240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc400941b, &(0x7f0000000000)={0x1, 0x9}) 1.614405347s ago: executing program 1 (id=65): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0) 1.494879148s ago: executing program 2 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x1c, r1, 0x680822d7e3b5f37d, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}}, 0x0) 1.276204937s ago: executing program 0 (id=67): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) munlock(&(0x7f00003a0000/0x1000)=nil, 0x1000) 1.27516612s ago: executing program 2 (id=68): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.073837921s ago: executing program 3 (id=69): r0 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x207}}], 0x30}], 0x1, 0x0) 863.18317ms ago: executing program 0 (id=70): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0, 0x0, 0x800000000000003}, 0x18) mlockall(0x7) 729.071813ms ago: executing program 3 (id=71): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='bond0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) 709.99254ms ago: executing program 2 (id=72): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00157ed0", @ANYRES16=0x0, @ANYRESOCT], 0x1, 0x178, &(0x7f0000000240)="$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") mount$bind(&(0x7f00000006c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xadc51, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 596.056562ms ago: executing program 1 (id=73): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') lseek(r0, 0x5, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/44, 0x2c}], 0x1, 0x36, 0x0) 513.996126ms ago: executing program 3 (id=74): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x529, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x105442, 0x1ff) fallocate(r0, 0x10, 0x2, 0x7fff) 392.483657ms ago: executing program 0 (id=75): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)={0x2c, r0, 0x4196ccce67868bab, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040090}, 0x8000) 364.604244ms ago: executing program 1 (id=76): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @private2}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) 222.67099ms ago: executing program 2 (id=77): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80c484, &(0x7f00000000c0)=ANY=[], 0x1, 0x682, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000540)=""/239, 0xef) 222.253783ms ago: executing program 1 (id=78): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a24000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000000)="6066f20f2dfa0f21b6b9800000c00f3235001000000f306f35080000000f22e0660f97f7b805000000b9c67000000f01d9c744240000000000c7442402a8580000c7442406000000000f011424c4e119d084cec200000066baf80cb8b2187c83ef66bafc0c", 0x65}], 0x1, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) 85.976688ms ago: executing program 0 (id=79): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x17b, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x125440, 0x0) read(r0, 0x0, 0x0) 85.765155ms ago: executing program 1 (id=80): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 0s ago: executing program 4 (id=81): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3401000016008502000000000000000020010000000000000000000000000002e00000020000000000843530af110d884c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0x134}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.122' (ED25519) to the list of known hosts. [ 55.985996][ T5816] cgroup: Unknown subsys name 'net' [ 56.097383][ T5816] cgroup: Unknown subsys name 'cpuset' [ 56.105175][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.377190][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.560456][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.571985][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.583845][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.585695][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.592202][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.599253][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.606654][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.613457][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.621976][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.633679][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.634072][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.649174][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.652090][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.658613][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.671055][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.679238][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.679649][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.694050][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.695309][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.701388][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.736503][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.752797][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.757767][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.760503][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.777049][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.783164][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.784386][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.799605][ T5835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 59.807187][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.807674][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.211117][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 60.227119][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 60.318923][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 60.365504][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 60.436951][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.444366][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.451689][ T5842] bridge_slave_0: entered allmulticast mode [ 60.459426][ T5842] bridge_slave_0: entered promiscuous mode [ 60.482850][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 60.497127][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.504244][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.511406][ T5842] bridge_slave_1: entered allmulticast mode [ 60.518715][ T5842] bridge_slave_1: entered promiscuous mode [ 60.528507][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.535772][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.542893][ T5826] bridge_slave_0: entered allmulticast mode [ 60.550197][ T5826] bridge_slave_0: entered promiscuous mode [ 60.597576][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.604910][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.612041][ T5826] bridge_slave_1: entered allmulticast mode [ 60.619087][ T5826] bridge_slave_1: entered promiscuous mode [ 60.657049][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.668633][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.690416][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.697985][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.705548][ T5828] bridge_slave_0: entered allmulticast mode [ 60.712090][ T5828] bridge_slave_0: entered promiscuous mode [ 60.756752][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.769221][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.779119][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.787253][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.794724][ T5828] bridge_slave_1: entered allmulticast mode [ 60.801221][ T5828] bridge_slave_1: entered promiscuous mode [ 60.829688][ T5842] team0: Port device team_slave_0 added [ 60.835803][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.842892][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.850246][ T5831] bridge_slave_0: entered allmulticast mode [ 60.856998][ T5831] bridge_slave_0: entered promiscuous mode [ 60.883189][ T5842] team0: Port device team_slave_1 added [ 60.889197][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.896557][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.903896][ T5831] bridge_slave_1: entered allmulticast mode [ 60.910561][ T5831] bridge_slave_1: entered promiscuous mode [ 60.925725][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.963497][ T5826] team0: Port device team_slave_0 added [ 60.971275][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.987529][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.995063][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.021594][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.042541][ T5826] team0: Port device team_slave_1 added [ 61.055080][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.062212][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.069652][ T5834] bridge_slave_0: entered allmulticast mode [ 61.076260][ T5834] bridge_slave_0: entered promiscuous mode [ 61.083790][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.091151][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.117385][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.137516][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.149021][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.183091][ T5828] team0: Port device team_slave_0 added [ 61.189544][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.197050][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.204446][ T5834] bridge_slave_1: entered allmulticast mode [ 61.211092][ T5834] bridge_slave_1: entered promiscuous mode [ 61.234572][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.241540][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.268636][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.281554][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.288897][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.315273][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.335537][ T5828] team0: Port device team_slave_1 added [ 61.361982][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.400443][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.419988][ T5831] team0: Port device team_slave_0 added [ 61.429637][ T5831] team0: Port device team_slave_1 added [ 61.437857][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.445172][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.471524][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.500641][ T5842] hsr_slave_0: entered promiscuous mode [ 61.507168][ T5842] hsr_slave_1: entered promiscuous mode [ 61.536907][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.544543][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.571338][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.586502][ T5834] team0: Port device team_slave_0 added [ 61.616236][ T5826] hsr_slave_0: entered promiscuous mode [ 61.622640][ T5826] hsr_slave_1: entered promiscuous mode [ 61.628996][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.636948][ T5826] Cannot create hsr debugfs directory [ 61.643993][ T5834] team0: Port device team_slave_1 added [ 61.663238][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.670455][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.696508][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.708973][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.716009][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.742015][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.768288][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.775350][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.801659][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.825134][ T54] Bluetooth: hci0: command tx timeout [ 61.825139][ T5838] Bluetooth: hci2: command tx timeout [ 61.845816][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.852775][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.878912][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.904551][ T54] Bluetooth: hci4: command tx timeout [ 61.904600][ T5836] Bluetooth: hci1: command tx timeout [ 61.917304][ T5838] Bluetooth: hci3: command tx timeout [ 61.927220][ T5831] hsr_slave_0: entered promiscuous mode [ 61.933388][ T5831] hsr_slave_1: entered promiscuous mode [ 61.939598][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.947237][ T5831] Cannot create hsr debugfs directory [ 61.988929][ T5828] hsr_slave_0: entered promiscuous mode [ 61.995452][ T5828] hsr_slave_1: entered promiscuous mode [ 62.001499][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.009121][ T5828] Cannot create hsr debugfs directory [ 62.049045][ T5834] hsr_slave_0: entered promiscuous mode [ 62.055826][ T5834] hsr_slave_1: entered promiscuous mode [ 62.061853][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.070606][ T5834] Cannot create hsr debugfs directory [ 62.310388][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.320699][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.350987][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.360493][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.433067][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.442731][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.472814][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.489444][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.519955][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.546360][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.556688][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.566416][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.637327][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.647086][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.688589][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.702476][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.757397][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.770413][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.781411][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.794821][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.809318][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.882847][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.892092][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.913483][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.920799][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.951079][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.958181][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.980151][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.017445][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.043954][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.051073][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.067342][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.093652][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.100775][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.117009][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.141614][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.148798][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.191670][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.198826][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.226698][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.260189][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.288753][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.295924][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.339523][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.346657][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.361430][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.410303][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.417464][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.470547][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.477707][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.500920][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.620334][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.698478][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.717343][ T5842] veth0_vlan: entered promiscuous mode [ 63.759162][ T5842] veth1_vlan: entered promiscuous mode [ 63.855477][ T5842] veth0_macvtap: entered promiscuous mode [ 63.883272][ T5842] veth1_macvtap: entered promiscuous mode [ 63.906749][ T5838] Bluetooth: hci2: command tx timeout [ 63.912221][ T5838] Bluetooth: hci0: command tx timeout [ 63.932445][ T5828] veth0_vlan: entered promiscuous mode [ 63.958892][ T5828] veth1_vlan: entered promiscuous mode [ 63.970582][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.985707][ T5836] Bluetooth: hci3: command tx timeout [ 63.989200][ T54] Bluetooth: hci1: command tx timeout [ 63.992976][ T5838] Bluetooth: hci4: command tx timeout [ 64.019485][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.039265][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.061026][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.072849][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.082667][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.091518][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.166651][ T5828] veth0_macvtap: entered promiscuous mode [ 64.189509][ T5828] veth1_macvtap: entered promiscuous mode [ 64.200306][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.244127][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.255264][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.266851][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.280940][ T5826] veth0_vlan: entered promiscuous mode [ 64.289829][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.301281][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.304135][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.322356][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.335842][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.349000][ T5826] veth1_vlan: entered promiscuous mode [ 64.363306][ T5831] veth0_vlan: entered promiscuous mode [ 64.393775][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.402743][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.412223][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.421421][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.441731][ T5831] veth1_vlan: entered promiscuous mode [ 64.448077][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.457313][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.517128][ T5834] veth0_vlan: entered promiscuous mode [ 64.558434][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.565391][ T5834] veth1_vlan: entered promiscuous mode [ 64.592527][ T5826] veth0_macvtap: entered promiscuous mode [ 64.600265][ T5831] veth0_macvtap: entered promiscuous mode [ 64.648960][ T5826] veth1_macvtap: entered promiscuous mode [ 64.673022][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.698639][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.700254][ T5831] veth1_macvtap: entered promiscuous mode [ 64.736091][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.753436][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.773820][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.804681][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.823305][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.864877][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.873383][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.888676][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.898816][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.908850][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.920132][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.931786][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.943458][ T5826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.953879][ T5826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.962887][ T5826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.974761][ T5826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.016373][ T5834] veth0_macvtap: entered promiscuous mode [ 65.027739][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.039325][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.054147][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.065625][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.076209][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.099832][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.127576][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.189201][ T5834] veth1_macvtap: entered promiscuous mode [ 65.209463][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.219995][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.230048][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.240570][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.250463][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.261162][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.271211][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.281707][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.293047][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.312385][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.323547][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.333463][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.344567][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.354995][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.366454][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.379338][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.409519][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.420773][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.431831][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.460414][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.485023][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.516842][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.531993][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.553168][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.587376][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.606489][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.620866][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.631654][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.647211][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.673792][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.688958][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.714291][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.734280][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.821326][ T5939] loop1: detected capacity change from 0 to 1024 [ 65.838864][ T5939] ======================================================= [ 65.838864][ T5939] WARNING: The mand mount option has been deprecated and [ 65.838864][ T5939] and is ignored by this kernel. Remove the mand [ 65.838864][ T5939] option from the mount to silence this warning. [ 65.838864][ T5939] ======================================================= [ 65.887565][ T5939] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 65.917266][ T5939] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.14: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 65.949377][ T5939] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.14: couldn't read orphan inode 11 (err -117) [ 65.963109][ T5939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.987019][ T5838] Bluetooth: hci0: command tx timeout [ 65.987030][ T54] Bluetooth: hci2: command tx timeout [ 66.004098][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.012516][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.023881][ T3433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.028867][ T5939] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 16: comm syz.1.14: path /2/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 66.031973][ T3433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.066087][ T54] Bluetooth: hci1: command tx timeout [ 66.074887][ T54] Bluetooth: hci4: command tx timeout [ 66.080322][ T54] Bluetooth: hci3: command tx timeout [ 66.124427][ T3433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.124969][ T972] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.132264][ T3433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.178890][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.192906][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.264458][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.294724][ T972] usb 4-1: Using ep0 maxpacket: 16 [ 66.303912][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.317707][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.344308][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.354161][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.366914][ T972] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 66.395501][ T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.437003][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.450322][ T972] usb 4-1: config 0 descriptor?? [ 66.453776][ T5948] loop1: detected capacity change from 0 to 1024 [ 66.481269][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.702101][ T3537] hfsplus: b-tree write err: -5, ino 4 [ 66.870956][ T5959] loop2: detected capacity change from 0 to 1024 [ 66.986336][ T972] savu 0003:1E7D:2D5A.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 67.032794][ T5959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.178033][ T5955] loop0: detected capacity change from 0 to 32768 [ 67.302788][ T2090] usb 4-1: USB disconnect, device number 2 [ 67.339563][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.344536][ T5955] ERROR: (device loop0): dbAllocAG: unable to allocate blocks [ 67.344536][ T5955] [ 67.455365][ T5955] ERROR: (device loop0): dbDiscardAG: -EIO [ 67.455365][ T5955] [ 67.799591][ T5960] loop1: detected capacity change from 0 to 32768 [ 67.807417][ T5966] loop0: detected capacity change from 0 to 4096 [ 67.817819][ T5960] XFS: noikeep mount option is deprecated. [ 67.854946][ T5966] NILFS (loop0): invalid segment: Checksum error in segment payload [ 67.881365][ T5960] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 67.884486][ T5956] loop4: detected capacity change from 0 to 32768 [ 67.915687][ T5966] NILFS (loop0): trying rollback from an earlier position [ 67.953758][ T5976] loop2: detected capacity change from 0 to 1764 [ 68.028154][ T5966] NILFS (loop0): recovery complete [ 68.067698][ T5838] Bluetooth: hci2: command tx timeout [ 68.073221][ T54] Bluetooth: hci0: command tx timeout [ 68.080905][ T5960] XFS (loop1): Ending clean mount [ 68.090411][ T5980] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.123108][ T5960] XFS (loop1): Quotacheck needed: Please wait. [ 68.145219][ T54] Bluetooth: hci4: command tx timeout [ 68.150685][ T54] Bluetooth: hci3: command tx timeout [ 68.157016][ T54] Bluetooth: hci1: command tx timeout [ 68.200592][ T5960] XFS (loop1): Quotacheck: Done. [ 68.266194][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'. [ 68.365746][ T5985] loop2: detected capacity change from 0 to 256 [ 68.411084][ T5828] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 68.428940][ T5985] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 69.175776][ T6011] loop3: detected capacity change from 0 to 512 [ 69.187476][ T6011] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.200912][ T6011] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.320889][ T6010] loop4: detected capacity change from 0 to 4096 [ 69.356639][ T5991] loop2: detected capacity change from 0 to 32768 [ 69.359739][ T6011] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 69.383361][ T6010] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 69.398020][ T6011] EXT4-fs (loop3): 1 truncate cleaned up [ 69.405468][ T6011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.424493][ T5883] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.474639][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.493474][ T5991] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 69.515347][ T5881] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.639187][ T5883] usb 2-1: config 0 has no interfaces? [ 69.646197][ T5883] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 69.665429][ T5883] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 69.673469][ T5883] usb 2-1: Manufacturer: syz [ 69.683331][ T5831] ocfs2: Unmounting device (7,2) on (node local) [ 69.694426][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 69.701486][ T5881] usb 1-1: config 0 interface 0 altsetting 94 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.713727][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 69.721965][ T5881] usb 1-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 69.757857][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.805266][ T5881] usb 1-1: config 0 descriptor?? [ 69.849858][ T5883] usb 2-1: config 0 descriptor?? [ 69.974835][ T6026] capability: warning: `syz.3.45' uses 32-bit capabilities (legacy support in use) [ 70.073188][ T6005] RDS: rds_bind could not find a transport for ::1:902:0:0, load rds_tcp or rds_rdma? [ 70.114036][ T2090] usb 2-1: USB disconnect, device number 2 [ 70.237552][ T5881] elecom 0003:056E:00FC.0002: unknown main item tag 0x0 [ 70.246697][ T5881] elecom 0003:056E:00FC.0002: unknown main item tag 0x6 [ 70.253706][ T5881] elecom 0003:056E:00FC.0002: unknown main item tag 0x5 [ 70.261362][ T5881] elecom 0003:056E:00FC.0002: unknown main item tag 0x4 [ 70.270422][ T5881] elecom 0003:056E:00FC.0002: unknown main item tag 0x0 [ 70.277861][ T5881] elecom 0003:056E:00FC.0002: unknown main item tag 0x0 [ 70.285650][ T5881] elecom 0003:056E:00FC.0002: unknown main item tag 0x0 [ 70.292798][ T5881] elecom 0003:056E:00FC.0002: unknown main item tag 0x0 [ 70.300236][ T5881] elecom 0003:056E:00FC.0002: unknown main item tag 0x0 [ 70.307472][ T6035] vlan2: entered allmulticast mode [ 70.307508][ T6035] bond0: entered allmulticast mode [ 70.307522][ T6035] bond_slave_0: entered allmulticast mode [ 70.307538][ T6035] bond_slave_1: entered allmulticast mode [ 70.337081][ T5881] elecom 0003:056E:00FC.0002: unknown main item tag 0x0 [ 70.344082][ T5881] elecom 0003:056E:00FC.0002: unknown global tag 0xd [ 70.358327][ T5881] elecom 0003:056E:00FC.0002: item 0 4 1 13 parsing failed [ 70.376550][ T5881] elecom 0003:056E:00FC.0002: probe with driver elecom failed with error -22 [ 70.436618][ T5911] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 70.445154][ T972] usb 1-1: USB disconnect, device number 2 [ 70.511701][ T6039] loop4: detected capacity change from 0 to 8 [ 70.518757][ T6039] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 70.617233][ T5911] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 70.628299][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.641359][ T5911] usb 4-1: Product: syz [ 70.645782][ T5911] usb 4-1: Manufacturer: syz [ 70.646155][ T6041] loop4: detected capacity change from 0 to 16 [ 70.652307][ T5911] usb 4-1: SerialNumber: syz [ 70.664980][ T6041] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 70.681042][ T5911] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 70.712098][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 70.952485][ T6047] loop4: detected capacity change from 0 to 4096 [ 71.021489][ T6048] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.187919][ T6050] netlink: 'syz.0.56': attribute type 1 has an invalid length. [ 71.198970][ T6050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.56'. [ 71.338488][ T6058] loop0: detected capacity change from 0 to 512 [ 71.401188][ T6060] loop1: detected capacity change from 0 to 1024 [ 71.585873][ T6058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.627164][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.633658][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.719592][ T6058] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.840339][ T52] hfsplus: b-tree write err: -5, ino 4 [ 71.868057][ T6058] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #2: block 3: comm syz.0.61: lblock 8 mapped to illegal pblock 3 (length 26) [ 72.025623][ T5911] usb 4-1: USB disconnect, device number 3 [ 72.064374][ T9] usb 4-1: Service connection timeout for: 256 [ 72.090946][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 72.128146][ T9] ath9k_htc: Failed to initialize the device [ 72.140782][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.143418][ T5911] usb 4-1: ath9k_htc: USB layer deinitialized [ 72.163540][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.201890][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.340150][ T6075] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.340824][ T6077] loop2: detected capacity change from 0 to 2048 [ 72.347345][ T6075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.402978][ T6075] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.410162][ T6075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.469522][ T6077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.493633][ T6077] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.666386][ T6070] loop4: detected capacity change from 0 to 32768 [ 72.720913][ T6070] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.64 (6070) [ 72.721660][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.872390][ T6070] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 72.904396][ T6070] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 72.943735][ T6070] BTRFS info (device loop4): using free-space-tree [ 72.975835][ T6093] loop2: detected capacity change from 0 to 16 [ 73.022914][ T6093] erofs (device loop2): mounted with root inode @ nid 36. [ 73.039118][ T6095] loop3: detected capacity change from 0 to 512 [ 73.117314][ T6095] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.156020][ T6095] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 73.221552][ T6116] netlink: 'syz.1.78': attribute type 3 has an invalid length. [ 73.229445][ T6116] netlink: 666 bytes leftover after parsing attributes in process `syz.1.78'. [ 73.285459][ T6095] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 73.381607][ T6119] loop2: detected capacity change from 0 to 1024 [ 73.398790][ T6095] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 73.407997][ T6095] System zones: 0-2, 18-18, 34-34 [ 73.423941][ T5826] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 73.446932][ T6121] ------------[ cut here ]------------ [ 73.452942][ T6121] WARNING: CPU: 0 PID: 6121 at arch/x86/mm/tlb.c:817 flush_tlb_func+0x631/0x700 [ 73.461995][ T6121] Modules linked in: [ 73.465912][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: syz.1.80 Not tainted 6.12.0-next-20241128-syzkaller #0 [ 73.475540][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 73.485606][ T6121] RIP: 0010:flush_tlb_func+0x631/0x700 [ 73.491088][ T6121] Code: e9 16 fb ff ff 90 0f 0b 90 e9 76 fb ff ff 45 31 f6 49 bc 00 00 00 00 00 fc ff df e9 53 ff ff ff 90 0f 0b 90 e9 8f fc ff ff 90 <0f> 0b 90 e9 a8 fc ff ff 90 0f 0b 90 e9 d5 fb ff ff 90 0f 0b 90 e9 [ 73.510696][ T6121] RSP: 0018:ffffc9000542ea20 EFLAGS: 00010002 [ 73.516797][ T6121] RAX: dffffc0000000000 RBX: ffff8880b863d7c0 RCX: dffffc0000000000 [ 73.524770][ T6121] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888021adc288 [ 73.532738][ T6121] RBP: ffffc9000542eb10 R08: ffff888021adc28f R09: 1ffff1100435b851 [ 73.540705][ T6121] R10: dffffc0000000000 R11: ffffed100435b852 R12: 1ffff110170c7afb [ 73.548685][ T6121] R13: 0000000000000013 R14: 0000000000000012 R15: ffff8880b863d7d8 [ 73.556660][ T6121] FS: 00007fd7d90d96c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 73.565591][ T6121] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.572174][ T6121] CR2: 0000001b3001fffc CR3: 0000000021f2e000 CR4: 00000000003526f0 [ 73.580145][ T6121] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.588119][ T6121] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.596112][ T6121] Call Trace: [ 73.599387][ T6121] [ 73.602319][ T6121] ? __warn+0x165/0x4d0 [ 73.606478][ T6121] ? flush_tlb_func+0x631/0x700 [ 73.611336][ T6121] ? report_bug+0x2b3/0x500 [ 73.615841][ T6121] ? flush_tlb_func+0x631/0x700 [ 73.620714][ T6121] ? handle_bug+0x60/0x90 [ 73.625062][ T6121] ? exc_invalid_op+0x1a/0x50 [ 73.629753][ T6121] ? asm_exc_invalid_op+0x1a/0x20 [ 73.634791][ T6121] ? flush_tlb_func+0x631/0x700 [ 73.639657][ T6121] ? __pfx_flush_tlb_func+0x10/0x10 [ 73.644864][ T6121] ? __pfx_flush_tlb_func+0x10/0x10 [ 73.650117][ T6121] smp_call_function_many_cond+0x1760/0x2c60 [ 73.656198][ T6121] ? mark_lock+0x9a/0x360 [ 73.660740][ T6121] ? __pfx_tlb_is_not_lazy+0x10/0x10 [ 73.666053][ T6121] ? __pfx_flush_tlb_func+0x10/0x10 [ 73.671286][ T6121] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 73.678063][ T6121] ? rcu_is_watching+0x15/0xb0 [ 73.682826][ T6121] ? __pfx_flush_tlb_func+0x10/0x10 [ 73.688020][ T6121] ? __pfx_tlb_is_not_lazy+0x10/0x10 [ 73.693307][ T6121] on_each_cpu_cond_mask+0x3f/0x80 [ 73.698429][ T6121] flush_tlb_mm_range+0x329/0x5c0 [ 73.703463][ T6121] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 73.709009][ T6121] ? page_ext_get+0x1d6/0x2a0 [ 73.713695][ T6121] ptep_clear_flush+0x11a/0x170 [ 73.718553][ T6121] page_vma_mkclean_one+0x58a/0x9a0 [ 73.723760][ T6121] ? __pfx_page_vma_mkclean_one+0x10/0x10 [ 73.729500][ T6121] page_mkclean_one+0x280/0x420 [ 73.734352][ T6121] ? __pfx_page_mkclean_one+0x10/0x10 [ 73.739726][ T6121] ? __pfx_down_read_trylock+0x10/0x10 [ 73.745194][ T6121] ? vma_interval_tree_iter_first+0x234/0x260 [ 73.751352][ T6121] ? __pfx_page_mkclean_one+0x10/0x10 [ 73.756777][ T6121] rmap_walk_file+0x52f/0x9f0 [ 73.761476][ T6121] folio_mkclean+0x262/0x440 [ 73.766074][ T6121] ? __pfx_lock_release+0x10/0x10 [ 73.771104][ T6121] ? __pfx_folio_mkclean+0x10/0x10 [ 73.776237][ T6121] ? __pfx_page_mkclean_one+0x10/0x10 [ 73.781624][ T6121] ? __pfx_invalid_mkclean_vma+0x10/0x10 [ 73.787266][ T6121] ? folio_mapping+0x1b2/0x430 [ 73.792036][ T6121] folio_clear_dirty_for_io+0x22b/0xd00 [ 73.797589][ T6121] ? filemap_get_folios_tag+0x5eb/0x890 [ 73.803157][ T6121] ? __pfx_folio_clear_dirty_for_io+0x10/0x10 [ 73.809228][ T6121] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 73.815118][ T6121] ? rcu_is_watching+0x15/0xb0 [ 73.819976][ T6121] mpage_submit_folio+0x88/0x230 [ 73.824939][ T6121] ext4_do_writepages+0x1d15/0x3d10 [ 73.830201][ T6121] ? __pfx_ext4_do_writepages+0x10/0x10 [ 73.835778][ T6121] ? rcu_read_lock_any_held+0xb7/0x160 [ 73.841251][ T6121] ext4_writepages+0x213/0x3c0 [ 73.846018][ T6121] ? __pfx_ext4_writepages+0x10/0x10 [ 73.851322][ T6121] ? __pfx_ext4_writepages+0x10/0x10 [ 73.856616][ T6121] do_writepages+0x35f/0x880 [ 73.861219][ T6121] ? __pfx_do_writepages+0x10/0x10 [ 73.866342][ T6121] ? file_write_and_wait_range+0x298/0x3c0 [ 73.872235][ T6121] ? do_raw_spin_lock+0x14f/0x370 [ 73.877256][ T6121] ? __pfx_lock_release+0x10/0x10 [ 73.882284][ T6121] ? do_raw_spin_unlock+0x13c/0x8b0 [ 73.887485][ T6121] ? wbc_attach_and_unlock_inode+0x561/0x580 [ 73.893480][ T6121] file_write_and_wait_range+0x2a3/0x3c0 [ 73.899119][ T6121] ? __pfx_lock_release+0x10/0x10 [ 73.904143][ T6121] ? __pfx_file_write_and_wait_range+0x10/0x10 [ 73.910334][ T6121] ? __up_read+0x2c2/0x6b0 [ 73.914763][ T6121] ext4_sync_file+0x25d/0xb90 [ 73.919447][ T6121] __se_sys_msync+0x3d7/0x5a0 [ 73.924132][ T6121] do_syscall_64+0xf3/0x230 [ 73.928635][ T6121] ? clear_bhb_loop+0x35/0x90 [ 73.933322][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.939645][ T6121] RIP: 0033:0x7fd7d8380809 [ 73.944080][ T6121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.963692][ T6121] RSP: 002b:00007fd7d90d9058 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 73.972120][ T6121] RAX: ffffffffffffffda RBX: 00007fd7d8545fa0 RCX: 00007fd7d8380809 [ 73.980091][ T6121] RDX: 0000000000000006 RSI: 087abbe8d1cc6ad9 RDI: 0000000020952000 [ 73.988062][ T6121] RBP: 00007fd7d83f393e R08: 0000000000000000 R09: 0000000000000000 [ 73.996052][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.004038][ T6121] R13: 0000000000000000 R14: 00007fd7d8545fa0 R15: 00007ffd1044d428 [ 74.012021][ T6121] [ 74.015054][ T6121] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.022334][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: syz.1.80 Not tainted 6.12.0-next-20241128-syzkaller #0 [ 74.031968][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.042021][ T6121] Call Trace: [ 74.045327][ T6121] [ 74.048255][ T6121] dump_stack_lvl+0x241/0x360 [ 74.052944][ T6121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.058191][ T6121] ? __pfx__printk+0x10/0x10 [ 74.062793][ T6121] ? _printk+0xd5/0x120 [ 74.066951][ T6121] ? __init_begin+0x41000/0x41000 [ 74.071973][ T6121] ? vscnprintf+0x5d/0x90 [ 74.076312][ T6121] panic+0x349/0x880 [ 74.080210][ T6121] ? __warn+0x174/0x4d0 [ 74.084367][ T6121] ? __pfx_panic+0x10/0x10 [ 74.088798][ T6121] __warn+0x344/0x4d0 [ 74.092772][ T6121] ? flush_tlb_func+0x631/0x700 [ 74.097635][ T6121] report_bug+0x2b3/0x500 [ 74.101964][ T6121] ? flush_tlb_func+0x631/0x700 [ 74.106816][ T6121] handle_bug+0x60/0x90 [ 74.110970][ T6121] exc_invalid_op+0x1a/0x50 [ 74.115475][ T6121] asm_exc_invalid_op+0x1a/0x20 [ 74.120323][ T6121] RIP: 0010:flush_tlb_func+0x631/0x700 [ 74.125779][ T6121] Code: e9 16 fb ff ff 90 0f 0b 90 e9 76 fb ff ff 45 31 f6 49 bc 00 00 00 00 00 fc ff df e9 53 ff ff ff 90 0f 0b 90 e9 8f fc ff ff 90 <0f> 0b 90 e9 a8 fc ff ff 90 0f 0b 90 e9 d5 fb ff ff 90 0f 0b 90 e9 [ 74.145388][ T6121] RSP: 0018:ffffc9000542ea20 EFLAGS: 00010002 [ 74.151481][ T6121] RAX: dffffc0000000000 RBX: ffff8880b863d7c0 RCX: dffffc0000000000 [ 74.159446][ T6121] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888021adc288 [ 74.167505][ T6121] RBP: ffffc9000542eb10 R08: ffff888021adc28f R09: 1ffff1100435b851 [ 74.175474][ T6121] R10: dffffc0000000000 R11: ffffed100435b852 R12: 1ffff110170c7afb [ 74.183440][ T6121] R13: 0000000000000013 R14: 0000000000000012 R15: ffff8880b863d7d8 [ 74.191431][ T6121] ? __pfx_flush_tlb_func+0x10/0x10 [ 74.196635][ T6121] ? __pfx_flush_tlb_func+0x10/0x10 [ 74.201832][ T6121] smp_call_function_many_cond+0x1760/0x2c60 [ 74.207809][ T6121] ? mark_lock+0x9a/0x360 [ 74.212136][ T6121] ? __pfx_tlb_is_not_lazy+0x10/0x10 [ 74.217512][ T6121] ? __pfx_flush_tlb_func+0x10/0x10 [ 74.222721][ T6121] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 74.229225][ T6121] ? rcu_is_watching+0x15/0xb0 [ 74.233989][ T6121] ? __pfx_flush_tlb_func+0x10/0x10 [ 74.239182][ T6121] ? __pfx_tlb_is_not_lazy+0x10/0x10 [ 74.244467][ T6121] on_each_cpu_cond_mask+0x3f/0x80 [ 74.249579][ T6121] flush_tlb_mm_range+0x329/0x5c0 [ 74.254605][ T6121] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 74.260146][ T6121] ? page_ext_get+0x1d6/0x2a0 [ 74.264834][ T6121] ptep_clear_flush+0x11a/0x170 [ 74.269691][ T6121] page_vma_mkclean_one+0x58a/0x9a0 [ 74.274896][ T6121] ? __pfx_page_vma_mkclean_one+0x10/0x10 [ 74.280636][ T6121] page_mkclean_one+0x280/0x420 [ 74.285487][ T6121] ? __pfx_page_mkclean_one+0x10/0x10 [ 74.290859][ T6121] ? __pfx_down_read_trylock+0x10/0x10 [ 74.296327][ T6121] ? vma_interval_tree_iter_first+0x234/0x260 [ 74.302399][ T6121] ? __pfx_page_mkclean_one+0x10/0x10 [ 74.307765][ T6121] rmap_walk_file+0x52f/0x9f0 [ 74.312450][ T6121] folio_mkclean+0x262/0x440 [ 74.317035][ T6121] ? __pfx_lock_release+0x10/0x10 [ 74.322054][ T6121] ? __pfx_folio_mkclean+0x10/0x10 [ 74.327181][ T6121] ? __pfx_page_mkclean_one+0x10/0x10 [ 74.332545][ T6121] ? __pfx_invalid_mkclean_vma+0x10/0x10 [ 74.338174][ T6121] ? folio_mapping+0x1b2/0x430 [ 74.342933][ T6121] folio_clear_dirty_for_io+0x22b/0xd00 [ 74.348566][ T6121] ? filemap_get_folios_tag+0x5eb/0x890 [ 74.354108][ T6121] ? __pfx_folio_clear_dirty_for_io+0x10/0x10 [ 74.360179][ T6121] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 74.366069][ T6121] ? rcu_is_watching+0x15/0xb0 [ 74.370847][ T6121] mpage_submit_folio+0x88/0x230 [ 74.375786][ T6121] ext4_do_writepages+0x1d15/0x3d10 [ 74.381024][ T6121] ? __pfx_ext4_do_writepages+0x10/0x10 [ 74.386596][ T6121] ? rcu_read_lock_any_held+0xb7/0x160 [ 74.392075][ T6121] ext4_writepages+0x213/0x3c0 [ 74.396839][ T6121] ? __pfx_ext4_writepages+0x10/0x10 [ 74.402136][ T6121] ? __pfx_ext4_writepages+0x10/0x10 [ 74.407508][ T6121] do_writepages+0x35f/0x880 [ 74.412103][ T6121] ? __pfx_do_writepages+0x10/0x10 [ 74.417213][ T6121] ? file_write_and_wait_range+0x298/0x3c0 [ 74.423038][ T6121] ? do_raw_spin_lock+0x14f/0x370 [ 74.428057][ T6121] ? __pfx_lock_release+0x10/0x10 [ 74.433083][ T6121] ? do_raw_spin_unlock+0x13c/0x8b0 [ 74.438280][ T6121] ? wbc_attach_and_unlock_inode+0x561/0x580 [ 74.444264][ T6121] file_write_and_wait_range+0x2a3/0x3c0 [ 74.449917][ T6121] ? __pfx_lock_release+0x10/0x10 [ 74.454962][ T6121] ? __pfx_file_write_and_wait_range+0x10/0x10 [ 74.461167][ T6121] ? __up_read+0x2c2/0x6b0 [ 74.465597][ T6121] ext4_sync_file+0x25d/0xb90 [ 74.470286][ T6121] __se_sys_msync+0x3d7/0x5a0 [ 74.474995][ T6121] do_syscall_64+0xf3/0x230 [ 74.479496][ T6121] ? clear_bhb_loop+0x35/0x90 [ 74.484167][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.490059][ T6121] RIP: 0033:0x7fd7d8380809 [ 74.494470][ T6121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.514070][ T6121] RSP: 002b:00007fd7d90d9058 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 74.522481][ T6121] RAX: ffffffffffffffda RBX: 00007fd7d8545fa0 RCX: 00007fd7d8380809 [ 74.530447][ T6121] RDX: 0000000000000006 RSI: 087abbe8d1cc6ad9 RDI: 0000000020952000 [ 74.538413][ T6121] RBP: 00007fd7d83f393e R08: 0000000000000000 R09: 0000000000000000 [ 74.546382][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.554361][ T6121] R13: 0000000000000000 R14: 00007fd7d8545fa0 R15: 00007ffd1044d428 [ 74.562352][ T6121] [ 74.565633][ T6121] Kernel Offset: disabled [ 74.570282][ T6121] Rebooting in 86400 seconds..