last executing test programs: 15.096240315s ago: executing program 1 (id=161): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0704230c"], 0xa) 13.544679114s ago: executing program 1 (id=164): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x50000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000003c0)={0xb000, 0xd000, 0x1}) 12.651137612s ago: executing program 2 (id=166): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 11.183668368s ago: executing program 0 (id=168): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000b00)=0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000b40)={0x0, 0xffff, 0x0, 0x0, r0}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x62) 11.059335932s ago: executing program 4 (id=169): unshare(0x26020480) getpeername$l2tp(0xffffffffffffffff, 0x0, 0x0) 10.245682948s ago: executing program 2 (id=170): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) 10.115991721s ago: executing program 1 (id=172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xec}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) 7.727732187s ago: executing program 4 (id=173): fsopen(&(0x7f0000000180)='binfmt_misc\x00', 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 7.499047584s ago: executing program 0 (id=174): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800000008"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 6.960089051s ago: executing program 2 (id=175): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1b, 0x9, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000080000000000000ec01000095000000000000008520000001000000184b00000300"/51], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r1, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) 6.941313862s ago: executing program 3 (id=176): socket$inet6(0xa, 0x80001, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) statx(0xffffffffffffffff, 0x0, 0x7100, 0x1, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x1c) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), 0xffffffffffffffff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6.733322838s ago: executing program 4 (id=177): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c510"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 6.67191726s ago: executing program 1 (id=178): ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d07, &(0x7f0000000000)={0xfffffffe, 0xc}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x2200090, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64], 0x5, 0x2b2, &(0x7f0000000880)="$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") syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 6.646913041s ago: executing program 0 (id=179): r0 = socket(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x4, 0x3, 0x1, 0x100, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0x5}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x80008, '\x00', r1, 0xffffffffffffffff, 0x1, 0xfffffffd, 0x5}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000033c0), r5) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004380)={0x34, r6, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x82}]}, 0x34}}, 0x4000) ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') lseek(r8, 0x8000005, 0xa) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000003640)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x40884) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000000c0)=@v1={0x0, @aes256, 0x3, @desc4}) symlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.994609901s ago: executing program 2 (id=180): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 5.869640295s ago: executing program 3 (id=181): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04131d07c900"], 0x20) 4.040016393s ago: executing program 3 (id=182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000000101680000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30002000003c00038038"], 0x118}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) 3.82313944s ago: executing program 3 (id=183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgget(0x1, 0x213) r3 = inotify_init() r4 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x9ea8bb2a1f48d7b}, 0xc) close_range(r3, 0xffffffffffffffff, 0x0) 3.794518101s ago: executing program 0 (id=184): r0 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)="fc1d2b5c109925f2d6c57b27fab76a158f960299e1c8b5fddd3bf2ccdbbed9b0c748fd04c922", 0x26}, {&(0x7f0000000200)="697d976084f58fb47c971e2f217322329a9ba54d3d620ba93d0af6cff85ce68364ec178997f424c5001ca72435b331a8590cb1d48d8da3a49fcdd670f6909e17fa9061211159cd8230e8439a80", 0x4d}], 0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000010000000300021801400030000000000000000000000ffffe080000106000200000600010002000000060204000000000020f02b50a5141c6577e059aaee3f2362fe913ddd5321f010bba851b15663af8330783fdabd199baf34c8e3138ff57dbd5c8fa3e8d02d75255486e6d2709ec24d5080d87b3d964c735296b3a5e4037ca3d1e81d1d0ee5d2510000002e239f76adf51ee63a63894a800e64c6868b29923d936b7c2830a57bbf0d2b5f5f"], 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0x9e0000, 0x1fd, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9909d3, 0x5, '\x00', @p_u8=&(0x7f0000000340)=0x6}}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB]) 3.650398335s ago: executing program 1 (id=185): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 2.692259145s ago: executing program 3 (id=186): syz_mount_image$udf(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x300c014, &(0x7f00000002c0)={[{@volume={'volume', 0x3d, 0x401}}, {@volume={'volume', 0x3d, 0x3}}, {@gid_ignore}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortad}, {@gid}, {@uid_forget}, {@partition}, {@dmode={'dmode', 0x3d, 0x5}}]}, 0x1, 0xc57, &(0x7f0000001640)="$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") 2.661904686s ago: executing program 0 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, 0x0, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff004) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r7) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) 2.661424846s ago: executing program 2 (id=188): ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000040)={r6}) 2.54397818s ago: executing program 4 (id=189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xec}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) 381.054468ms ago: executing program 2 (id=190): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008004) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ff07056b", @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="0800080001", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 189.778984ms ago: executing program 4 (id=191): unshare(0x400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f0000000180)) 170.848995ms ago: executing program 0 (id=192): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xc3) connect$inet(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='nfs4\x00', 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0xe2) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) 118.477806ms ago: executing program 1 (id=193): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xc9d3, 0x0, 0x0, 0x2}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x880) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000740)={0x0, 0x1460, 0x400, 0x1, 0xb2, 0x0, r0}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181c, 0x4000, 0x80, 0x2a9, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd576, 0x20, 0x1009, 0x27f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x100, 0xffffffff, 0xed}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8a5a, 0x1001, 0x2000003, 0x2a3, 0x0, r0}}], 0x4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r4, '\x00', {0x1, 0x487, 0x0, 0x0}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) 44.025229ms ago: executing program 3 (id=194): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800000008"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 0s ago: executing program 4 (id=195): r0 = socket(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x4, 0x3, 0x1, 0x100, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0x5}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x80008, '\x00', r1, 0xffffffffffffffff, 0x1, 0xfffffffd, 0x5}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000033c0), r5) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004380)={0x34, r6, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x82}]}, 0x34}}, 0x4000) ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') lseek(r8, 0x8000005, 0xa) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000003640)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x40884) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000000c0)=@v1={0x0, @aes256, 0x3, @desc4}) symlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.36' (ED25519) to the list of known hosts. [ 63.127995][ T4260] cgroup: Unknown subsys name 'net' [ 63.244284][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.822141][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.302127][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.312498][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.325689][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.333409][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.341502][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.350015][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.357471][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.364998][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.371018][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.373287][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.386652][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.386729][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.402154][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.409913][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.417688][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.419346][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.426215][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.433947][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.439551][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.447465][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.460825][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.461228][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.468158][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.475310][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.488877][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.496114][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.505312][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.513088][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.520776][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.589721][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.934240][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 67.064803][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 67.129765][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 67.141574][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 67.162435][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.170526][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.178511][ T4276] device bridge_slave_0 entered promiscuous mode [ 67.191345][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.198473][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.206633][ T4276] device bridge_slave_1 entered promiscuous mode [ 67.242357][ T4287] chnl_net:caif_netlink_parms(): no params data found [ 67.300374][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.326372][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.397130][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.405344][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.416206][ T4273] device bridge_slave_0 entered promiscuous mode [ 67.443346][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.450615][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.458368][ T4274] device bridge_slave_0 entered promiscuous mode [ 67.468042][ T4276] team0: Port device team_slave_0 added [ 67.475601][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.482878][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.491190][ T4278] device bridge_slave_0 entered promiscuous mode [ 67.499150][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.506420][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.514632][ T4273] device bridge_slave_1 entered promiscuous mode [ 67.527948][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.538317][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.546516][ T4274] device bridge_slave_1 entered promiscuous mode [ 67.559954][ T4276] team0: Port device team_slave_1 added [ 67.565872][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.573227][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.581142][ T4278] device bridge_slave_1 entered promiscuous mode [ 67.593026][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.600359][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.609264][ T4287] device bridge_slave_0 entered promiscuous mode [ 67.624121][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.631570][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.639573][ T4287] device bridge_slave_1 entered promiscuous mode [ 67.697987][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.710044][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.724516][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.741712][ T4287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.751743][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.762404][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.792332][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.805616][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.816285][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.835693][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.846511][ T4287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.856323][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.865420][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.891867][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.932384][ T4278] team0: Port device team_slave_0 added [ 67.946916][ T4278] team0: Port device team_slave_1 added [ 67.967781][ T4273] team0: Port device team_slave_0 added [ 68.005856][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.014038][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.043575][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.057974][ T4274] team0: Port device team_slave_0 added [ 68.065934][ T4273] team0: Port device team_slave_1 added [ 68.073456][ T4287] team0: Port device team_slave_0 added [ 68.082314][ T4287] team0: Port device team_slave_1 added [ 68.089124][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.096118][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.122550][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.139205][ T4274] team0: Port device team_slave_1 added [ 68.181095][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.188090][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.215695][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.247483][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.254631][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.283872][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.302931][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.310247][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.336734][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.357470][ T4276] device hsr_slave_0 entered promiscuous mode [ 68.364559][ T4276] device hsr_slave_1 entered promiscuous mode [ 68.372033][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.381044][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.409310][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.423985][ T4278] device hsr_slave_0 entered promiscuous mode [ 68.431374][ T4278] device hsr_slave_1 entered promiscuous mode [ 68.438592][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.446497][ T4278] Cannot create hsr debugfs directory [ 68.457730][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.465995][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.492038][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.534824][ T4287] device hsr_slave_0 entered promiscuous mode [ 68.541876][ T4287] device hsr_slave_1 entered promiscuous mode [ 68.548507][ T4287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.556367][ T4287] Cannot create hsr debugfs directory [ 68.563088][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.570101][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.596146][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.629491][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 68.629503][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 68.629691][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 68.635775][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 68.642352][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 68.680524][ T4273] device hsr_slave_0 entered promiscuous mode [ 68.687360][ T4273] device hsr_slave_1 entered promiscuous mode [ 68.694111][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.701949][ T4273] Cannot create hsr debugfs directory [ 68.791307][ T4274] device hsr_slave_0 entered promiscuous mode [ 68.798059][ T4274] device hsr_slave_1 entered promiscuous mode [ 68.805278][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.812947][ T4274] Cannot create hsr debugfs directory [ 69.113085][ T4276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.131978][ T4276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.142277][ T4276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.157896][ T4276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.214523][ T4273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.231744][ T4273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.256196][ T4273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.283192][ T4273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.306925][ T4287] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.317890][ T4287] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.333666][ T4287] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.344464][ T4287] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.421432][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.432319][ T4274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.455200][ T4274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.477148][ T4274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.507496][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.515962][ T4274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.526594][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.536856][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.571409][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.581821][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.591782][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.599198][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.608380][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.618138][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.627034][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.634339][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.648231][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.661742][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.679644][ T4278] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.705987][ T4278] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.720896][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.737661][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.753124][ T4278] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.783302][ T4278] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.792820][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.802278][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.811528][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.821213][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.831322][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.865626][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.877078][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.886314][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.897513][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.905850][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.924859][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.942002][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.951777][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.960746][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.969903][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.978281][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.985399][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.004718][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.029766][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.038344][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.048133][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.059182][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.066313][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.074424][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.086674][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.104975][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.113278][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.143737][ T4287] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.172483][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.185916][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.222567][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.242837][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.251919][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.262244][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.271756][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.280889][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.289774][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.298295][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.306953][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.316351][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.325414][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.332553][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.357232][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.367853][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.382539][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.394565][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.408086][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.415305][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.435687][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.450511][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.465749][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.483472][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.496684][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.507161][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.550284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.562168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.578463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.595326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.604222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.614226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.623646][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.630837][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.639822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.649451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.658066][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.665298][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.674004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.685022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.698959][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.715171][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 70.715323][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 70.721351][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 70.727269][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 70.739824][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 70.756619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.764950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.775712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.784960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.795714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.811986][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.819213][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.834353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.843592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.860520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.875998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.901988][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.922158][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.929753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.941863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.951328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.960818][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.967911][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.975837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.985755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.993934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.001916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.056313][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.067812][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.078571][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.088189][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.096216][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.104422][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.124070][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.133993][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.143336][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.158326][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.168395][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.186057][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.196449][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.217824][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.254521][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.265982][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.279641][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.289151][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.297895][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.307486][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.322799][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.336826][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.352373][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.359341][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.393592][ T4276] device veth0_vlan entered promiscuous mode [ 71.404598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.413366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.423139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.432368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.441093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.449952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.458344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.466451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.484312][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.504116][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.519488][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.534955][ T4276] device veth1_vlan entered promiscuous mode [ 71.546180][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.554798][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.564830][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.602405][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.647061][ T4273] device veth0_vlan entered promiscuous mode [ 71.677178][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.703750][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.716825][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.727303][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.739747][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.783818][ T4276] device veth0_macvtap entered promiscuous mode [ 71.794946][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.806266][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.816039][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.846073][ T4276] device veth1_macvtap entered promiscuous mode [ 71.861807][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.881476][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.891733][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.906081][ T4273] device veth1_vlan entered promiscuous mode [ 71.955845][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.968548][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.982729][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.007543][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.017293][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.032512][ T4287] device veth0_vlan entered promiscuous mode [ 72.053013][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.077763][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.095740][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.107335][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.117016][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.126545][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.137386][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.154275][ T4273] device veth0_macvtap entered promiscuous mode [ 72.168120][ T4276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.178548][ T4276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.188267][ T4276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.197638][ T4276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.219477][ T4287] device veth1_vlan entered promiscuous mode [ 72.238244][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.247533][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.256908][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.266681][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.281681][ T4273] device veth1_macvtap entered promiscuous mode [ 72.328123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.346205][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.364525][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.375433][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.388240][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.423120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.434614][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.443212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.452454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.473535][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.490142][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.500860][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.516361][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.527167][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.537059][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.546939][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.555995][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.608365][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.620605][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.631972][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.642995][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.654472][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.669245][ T4287] device veth0_macvtap entered promiscuous mode [ 72.705647][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.733628][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.754913][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.781961][ T4287] device veth1_macvtap entered promiscuous mode [ 72.789762][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 72.795833][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 72.802767][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 72.809233][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 72.809357][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 72.878571][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.893120][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.901872][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.911881][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.920649][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.933647][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.944969][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.957346][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.968459][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.982371][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.001194][ T4278] device veth0_vlan entered promiscuous mode [ 73.011286][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.020457][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.054310][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.066059][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.077590][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.088496][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.107496][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.149858][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.157898][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.171350][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.182120][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.204188][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.220854][ T4287] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.237741][ T4287] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.248183][ T4287] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.263952][ T4287] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.298444][ T4278] device veth1_vlan entered promiscuous mode [ 73.315316][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.336894][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.348320][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.374444][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.384847][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.427089][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.461540][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.469017][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.475435][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.477724][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.489889][ T4278] device veth0_macvtap entered promiscuous mode [ 73.506927][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.512439][ T4274] device veth0_vlan entered promiscuous mode [ 73.521242][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.533388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.541948][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.550649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.558354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.568315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.578112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.586347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.599456][ T4278] device veth1_macvtap entered promiscuous mode [ 73.633280][ T4274] device veth1_vlan entered promiscuous mode [ 73.699995][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.707872][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.727212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.744693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.755204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.764503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.807832][ T4274] device veth0_macvtap entered promiscuous mode [ 73.860772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.876773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.900649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.930503][ T4274] device veth1_macvtap entered promiscuous mode [ 74.000778][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.029141][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.090354][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.101151][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.111351][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.137442][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.153726][ T4363] Cannot find del_set index 4 as target [ 74.155135][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.214120][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.248949][ T4348] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.260262][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.281553][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.288325][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.291923][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.311654][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.328242][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.360399][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.449802][ T4348] usb 3-1: Using ep0 maxpacket: 8 [ 74.466551][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.468147][ T4348] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 74.481066][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.481955][ T4348] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 74.495488][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.500780][ T4348] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 74.500871][ T4348] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 74.500951][ T4348] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 74.501047][ T4348] usb 3-1: config 168 interface 0 has no altsetting 0 [ 74.503509][ T4348] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 74.526780][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.530968][ T4348] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 74.581809][ T4348] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 74.594684][ T4348] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 74.612727][ T4348] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 74.627773][ T4348] usb 3-1: config 168 interface 0 has no altsetting 0 [ 74.651457][ T4348] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 74.659109][ T4348] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 74.673065][ T4348] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 74.686867][ T4348] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 74.699542][ T4348] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 74.715415][ T4348] usb 3-1: config 168 interface 0 has no altsetting 0 [ 74.738926][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.742951][ T4348] usb 3-1: string descriptor 0 read error: -22 [ 74.755769][ T4348] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 74.768887][ T4348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.776117][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.852560][ T4348] adutux 3-1:168.0: interrupt endpoints not found [ 74.858730][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.868887][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 74.869812][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 74.875262][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 74.881316][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 74.881354][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 74.973964][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.057500][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.067883][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.083048][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.093249][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.104572][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.114993][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.136511][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.177057][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.185508][ T4278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.238823][ T4278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.241789][ T4319] usb 3-1: USB disconnect, device number 2 [ 75.247572][ T4278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.271722][ T4278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.294963][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.307064][ T4369] loop0: detected capacity change from 0 to 1024 [ 75.315332][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.327586][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.344392][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.359839][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.371312][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.398364][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.410237][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.422927][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.453915][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.473915][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.534780][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.547019][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.561798][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.592208][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.604956][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.614894][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.805340][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.824120][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.844923][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.968379][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.091552][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.203452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.294152][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.412631][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.756704][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.962274][ T4376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.078742][ T4376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.086990][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.207357][ T4380] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET) [ 77.282946][ T4383] IPVS: stopping backup sync thread 4384 ... [ 77.291033][ T4384] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 78.833012][ T4400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 78.849522][ T4399] loop4: detected capacity change from 0 to 2048 [ 78.960925][ T4401] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.105799][ T4402] team0 (unregistering): Port device team_slave_0 removed [ 79.207373][ T4402] team0 (unregistering): Port device team_slave_1 removed [ 79.375499][ T4406] loop2: detected capacity change from 0 to 4096 [ 79.796005][ T4412] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.932262][ T4413] Bluetooth: MGMT ver 1.22 [ 79.962803][ T4413] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 79.970582][ T4401] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 80.038898][ T4401] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 80.117082][ T4401] Remounting filesystem read-only [ 80.140109][ T4274] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 80.168291][ T4416] loop1: detected capacity change from 0 to 2048 [ 80.382737][ T4416] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 80.699050][ T4287] EXT4-fs (loop1): unmounting filesystem. [ 80.728191][ T4427] loop0: detected capacity change from 0 to 512 [ 80.829774][ T4362] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 81.230400][ T4429] loop3: detected capacity change from 0 to 32768 [ 81.274049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 81.284356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 81.294622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 81.304892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 81.445018][ T4429] XFS (loop3): Mounting V5 Filesystem [ 81.661352][ T4449] vivid-004: ================= START STATUS ================= [ 81.670078][ T4449] vivid-004: RDS Tx I/O Mode: Controls [ 81.677743][ T4449] vivid-004: RDS Program ID: 32904 [ 81.683622][ T4449] vivid-004: RDS Program Type: 3 [ 81.689060][ T4449] vivid-004: RDS PS Name: VIVID-TX [ 81.694276][ T4449] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 81.704905][ T4449] vivid-004: RDS Stereo: true [ 81.710507][ T4449] vivid-004: RDS Artificial Head: false [ 81.722739][ T128] cfg80211: failed to load regulatory.db [ 81.742069][ T4449] vivid-004: RDS Compressed: false [ 81.747657][ T4449] vivid-004: RDS Dynamic PTY: false [ 81.753116][ T4449] vivid-004: RDS Traffic Announcement: false [ 81.760047][ T4449] vivid-004: RDS Traffic Program: true [ 81.766322][ T4449] vivid-004: RDS Music: true [ 81.771422][ T4449] vivid-004: ================== END STATUS ================== [ 82.486221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 82.496503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 82.506746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 82.517009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 82.527275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 82.537540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 82.603310][ T4448] loop0: detected capacity change from 0 to 32768 [ 82.633029][ T4448] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.25 (4448) [ 82.653300][ T4448] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 82.663663][ T4448] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 82.672350][ T4448] BTRFS info (device loop0): using free space tree [ 82.711062][ T4429] XFS (loop3): Ending clean mount [ 82.724100][ T4429] XFS (loop3): Quotacheck needed: Please wait. [ 82.855304][ T4429] XFS (loop3): Quotacheck: Done. [ 83.063443][ T4440] input: syz1 as /devices/virtual/input/input5 [ 84.288746][ T4448] BTRFS info (device loop0): enabling ssd optimizations [ 85.739534][ T4273] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 86.767936][ T4362] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (4362) [ 88.442136][ T4508] Cannot find del_set index 4 as target [ 88.478873][ T4511] loop0: detected capacity change from 0 to 1024 [ 88.664753][ T4278] XFS (loop3): Unmounting Filesystem [ 88.869468][ T4515] loop2: detected capacity change from 0 to 512 [ 90.650798][ T4528] loop4: detected capacity change from 0 to 32768 [ 90.663571][ T4528] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 90.693697][ T4529] loop1: detected capacity change from 0 to 16 [ 90.704988][ T4529] erofs: (device loop1): mounted with root inode @ nid 36. [ 90.978531][ T4349] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 91.330684][ T4531] fuse: Bad value for 'fd' [ 93.474776][ T4547] loop4: detected capacity change from 0 to 4096 [ 94.461894][ T4551] loop2: detected capacity change from 0 to 32768 [ 94.475809][ T4551] XFS (loop2): Mounting V5 Filesystem [ 94.489837][ T4549] Cannot find del_set index 4 as target [ 94.550932][ T4551] XFS (loop2): Ending clean mount [ 94.564805][ T4551] XFS (loop2): Quotacheck needed: Please wait. [ 94.663422][ T4551] XFS (loop2): Quotacheck: Done. [ 95.058249][ T4561] loop0: detected capacity change from 0 to 32768 [ 95.445262][ T4561] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 95.453823][ T4561] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 95.484298][ T4561] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 95.494382][ T4318] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 95.505113][ T4318] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 95.549406][ T4318] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 43ms [ 95.562864][ T4318] gfs2: fsid=syz:syz.0: jid=0: Done [ 95.566833][ T4567] netlink: 27 bytes leftover after parsing attributes in process `syz.3.50'. [ 95.570502][ T4561] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 95.753302][ T4561] gfs2: fsid=syz:syz.0: found 1 quota changes [ 95.901197][ T4276] XFS (loop2): Unmounting Filesystem [ 96.164265][ T4273] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 96.164265][ T4273] inode = 11 2339 [ 96.164265][ T4273] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 96.279419][ T4273] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 96.348630][ T4273] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4273 [syz-executor] gfs2_quota_sync+0x32c/0x700 [ 96.403841][ T4273] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 96.442853][ T4273] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 96.480191][ T4575] loop1: detected capacity change from 0 to 2048 [ 96.527525][ T4273] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 96.592671][ T4273] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 96.645016][ T4576] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.677150][ T4273] gfs2: fsid=syz:syz.0: File system withdrawn [ 96.683299][ T4273] CPU: 0 PID: 4273 Comm: syz-executor Not tainted syzkaller #0 [ 96.690878][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 96.700970][ T4273] Call Trace: [ 96.704277][ T4273] [ 96.707238][ T4273] dump_stack_lvl+0x188/0x24e [ 96.711951][ T4273] ? kobject_uevent_env+0x35f/0x8a0 [ 96.717185][ T4273] ? show_regs_print_info+0x12/0x12 [ 96.722425][ T4273] ? load_image+0x400/0x400 [ 96.726979][ T4273] ? kobject_uevent_env+0x35f/0x8a0 [ 96.732238][ T4273] gfs2_withdraw+0xde6/0x15d0 [ 96.736962][ T4273] ? gfs2_lm+0x240/0x240 [ 96.741229][ T4273] ? gfs2_consist_inode_i+0xf1/0x110 [ 96.746556][ T4273] gfs2_inode_refresh+0xc2a/0x1140 [ 96.751688][ T4273] ? gfs2_inode_metasync+0xf0/0xf0 [ 96.756826][ T4273] ? gfs2_glock_nq+0xcf0/0x14e0 [ 96.761681][ T4273] gfs2_instantiate+0x15e/0x210 [ 96.766632][ T4273] gfs2_glock_wait+0x1d0/0x2a0 [ 96.771395][ T4273] do_sync+0x4bf/0xc40 [ 96.775461][ T4273] ? gfs2_quota_sync+0x32c/0x700 [ 96.780435][ T4273] ? slot_put+0x1e0/0x1e0 [ 96.784774][ T4273] ? gfs2_quota_sync+0x32c/0x700 [ 96.789737][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 96.794963][ T4273] gfs2_quota_sync+0x32c/0x700 [ 96.799746][ T4273] gfs2_sync_fs+0x48/0xb0 [ 96.804110][ T4273] sync_filesystem+0xe6/0x220 [ 96.808792][ T4273] generic_shutdown_super+0x6b/0x340 [ 96.814168][ T4273] kill_block_super+0x7c/0xe0 [ 96.818905][ T4273] deactivate_locked_super+0x93/0xf0 [ 96.824229][ T4273] cleanup_mnt+0x42c/0x4b0 [ 96.828664][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 96.833886][ T4273] task_work_run+0x1d0/0x260 [ 96.838481][ T4273] ? task_work_cancel+0x220/0x220 [ 96.843524][ T4273] ? exit_to_user_mode_loop+0x3b/0x110 [ 96.849023][ T4273] exit_to_user_mode_loop+0xe6/0x110 [ 96.854402][ T4273] exit_to_user_mode_prepare+0xee/0x180 [ 96.859975][ T4273] syscall_exit_to_user_mode+0x16/0x40 [ 96.865449][ T4273] do_syscall_64+0x58/0xa0 [ 96.869860][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 96.874538][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 96.879297][ T4273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.885239][ T4273] RIP: 0033:0x7f565899e097 [ 96.889659][ T4273] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 96.909378][ T4273] RSP: 002b:00007ffcf26d0688 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 96.917838][ T4273] RAX: 0000000000000000 RBX: 00007f5658a321ca RCX: 00007f565899e097 [ 96.925825][ T4273] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf26d0740 [ 96.933809][ T4273] RBP: 00007ffcf26d0740 R08: 00007ffcf26d1740 R09: 00000000ffffffff [ 96.941780][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf26d17d0 [ 96.949766][ T4273] R13: 00007f5658a321ca R14: 00000000000175ca R15: 00007ffcf26d1810 [ 96.957757][ T4273] [ 97.152800][ T4579] loop4: detected capacity change from 0 to 32768 [ 97.160882][ T7] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 97.174799][ T4579] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 97.280881][ T4576] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 97.291783][ T4576] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 97.343311][ T4576] Remounting filesystem read-only [ 97.402864][ T7] usb 4-1: device descriptor read/64, error -71 [ 97.431005][ T4287] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 97.695682][ T7] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 97.887658][ T7] usb 4-1: device descriptor read/64, error -71 [ 97.919006][ T4273] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 97.933526][ T4273] CPU: 1 PID: 4273 Comm: syz-executor Not tainted syzkaller #0 [ 97.941116][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 97.951207][ T4273] Call Trace: [ 97.954510][ T4273] [ 97.957467][ T4273] dump_stack_lvl+0x188/0x24e [ 97.962185][ T4273] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 97.967339][ T4273] ? show_regs_print_info+0x12/0x12 [ 97.972572][ T4273] ? load_image+0x400/0x400 [ 97.977127][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 97.982371][ T4273] gfs2_assert_warn_i+0x18f/0x2c0 [ 97.987442][ T4273] gfs2_quota_cleanup+0x4b4/0x6a0 [ 97.992549][ T4273] gfs2_put_super+0x22f/0x8c0 [ 97.997335][ T4273] ? gfs2_evict_inode+0x11d0/0x11d0 [ 98.002611][ T4273] generic_shutdown_super+0x130/0x340 [ 98.008016][ T4273] kill_block_super+0x7c/0xe0 [ 98.012708][ T4273] deactivate_locked_super+0x93/0xf0 [ 98.018005][ T4273] cleanup_mnt+0x42c/0x4b0 [ 98.022439][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 98.027652][ T4273] task_work_run+0x1d0/0x260 [ 98.032258][ T4273] ? task_work_cancel+0x220/0x220 [ 98.037299][ T4273] ? exit_to_user_mode_loop+0x3b/0x110 [ 98.042776][ T4273] exit_to_user_mode_loop+0xe6/0x110 [ 98.048075][ T4273] exit_to_user_mode_prepare+0xee/0x180 [ 98.053639][ T4273] syscall_exit_to_user_mode+0x16/0x40 [ 98.059112][ T4273] do_syscall_64+0x58/0xa0 [ 98.063561][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 98.068273][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 98.073014][ T4273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.078932][ T4273] RIP: 0033:0x7f565899e097 [ 98.083385][ T4273] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 98.103017][ T4273] RSP: 002b:00007ffcf26d0688 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 98.111443][ T4273] RAX: 0000000000000000 RBX: 00007f5658a321ca RCX: 00007f565899e097 [ 98.119508][ T4273] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf26d0740 [ 98.127506][ T4273] RBP: 00007ffcf26d0740 R08: 00007ffcf26d1740 R09: 00000000ffffffff [ 98.135505][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf26d17d0 [ 98.143494][ T4273] R13: 00007f5658a321ca R14: 00000000000175ca R15: 00007ffcf26d1810 [ 98.151489][ T4273] [ 98.175603][ T7] usb usb4-port1: attempt power cycle [ 98.311089][ T4361] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 98.614255][ T7] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 98.670982][ T7] usb 4-1: device descriptor read/8, error -71 [ 98.947326][ T7] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 99.018626][ T7] usb 4-1: device descriptor read/8, error -71 [ 100.087266][ T7] usb usb4-port1: unable to enumerate USB device [ 100.258870][ T126] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.355328][ T4604] loop3: detected capacity change from 0 to 512 [ 100.376036][ T4604] ext4: Unknown parameter 'defcontext' [ 100.472229][ T126] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.503990][ T126] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 100.543423][ T126] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.736640][ T4606] loop0: detected capacity change from 0 to 32768 [ 100.772471][ T4606] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 100.781387][ T4606] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 100.792507][ T4606] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 100.801967][ T4318] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 100.819437][ T4318] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 100.843953][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.921497][ T4597] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 100.927090][ T4318] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 106ms [ 100.952697][ T4318] gfs2: fsid=syz:syz.0: jid=0: Done [ 100.980992][ T4606] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 101.277538][ T126] usb 5-1: USB disconnect, device number 2 [ 101.353865][ T4606] gfs2: fsid=syz:syz.0: found 1 quota changes [ 101.847607][ T4273] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 101.847607][ T4273] inode = 11 2339 [ 101.847607][ T4273] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 101.911446][ T4273] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 101.930486][ T4273] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4273 [syz-executor] gfs2_quota_sync+0x32c/0x700 [ 101.989360][ T4273] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 102.030561][ T4273] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 102.117739][ T4273] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 102.167510][ T4273] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 102.225824][ T4273] gfs2: fsid=syz:syz.0: File system withdrawn [ 102.259872][ T4273] CPU: 0 PID: 4273 Comm: syz-executor Not tainted syzkaller #0 [ 102.267503][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 102.277596][ T4273] Call Trace: [ 102.280897][ T4273] [ 102.283830][ T4273] dump_stack_lvl+0x188/0x24e [ 102.288527][ T4273] ? kobject_uevent_env+0x35f/0x8a0 [ 102.293746][ T4273] ? show_regs_print_info+0x12/0x12 [ 102.298953][ T4273] ? load_image+0x400/0x400 [ 102.303494][ T4273] ? kobject_uevent_env+0x35f/0x8a0 [ 102.308712][ T4273] gfs2_withdraw+0xde6/0x15d0 [ 102.313412][ T4273] ? gfs2_lm+0x240/0x240 [ 102.317692][ T4273] ? gfs2_consist_inode_i+0xf1/0x110 [ 102.322995][ T4273] gfs2_inode_refresh+0xc2a/0x1140 [ 102.328131][ T4273] ? gfs2_inode_metasync+0xf0/0xf0 [ 102.333264][ T4273] ? gfs2_glock_nq+0xcf0/0x14e0 [ 102.338156][ T4273] gfs2_instantiate+0x15e/0x210 [ 102.343020][ T4273] gfs2_glock_wait+0x1d0/0x2a0 [ 102.347795][ T4273] do_sync+0x4bf/0xc40 [ 102.351874][ T4273] ? gfs2_quota_sync+0x32c/0x700 [ 102.356827][ T4273] ? slot_put+0x1e0/0x1e0 [ 102.361186][ T4273] ? gfs2_quota_sync+0x32c/0x700 [ 102.366155][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 102.371370][ T4273] gfs2_quota_sync+0x32c/0x700 [ 102.376181][ T4273] gfs2_sync_fs+0x48/0xb0 [ 102.380527][ T4273] sync_filesystem+0xe6/0x220 [ 102.385233][ T4273] generic_shutdown_super+0x6b/0x340 [ 102.390532][ T4273] kill_block_super+0x7c/0xe0 [ 102.395219][ T4273] deactivate_locked_super+0x93/0xf0 [ 102.400511][ T4273] cleanup_mnt+0x42c/0x4b0 [ 102.404972][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 102.410185][ T4273] task_work_run+0x1d0/0x260 [ 102.414789][ T4273] ? task_work_cancel+0x220/0x220 [ 102.419921][ T4273] ? exit_to_user_mode_loop+0x3b/0x110 [ 102.425488][ T4273] exit_to_user_mode_loop+0xe6/0x110 [ 102.430805][ T4273] exit_to_user_mode_prepare+0xee/0x180 [ 102.436365][ T4273] syscall_exit_to_user_mode+0x16/0x40 [ 102.441835][ T4273] do_syscall_64+0x58/0xa0 [ 102.446262][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 102.450970][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 102.455664][ T4273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.461575][ T4273] RIP: 0033:0x7f565899e097 [ 102.466093][ T4273] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 102.485708][ T4273] RSP: 002b:00007ffcf26d0688 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 102.494218][ T4273] RAX: 0000000000000000 RBX: 00007f5658a321ca RCX: 00007f565899e097 [ 102.502292][ T4273] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf26d0740 [ 102.510356][ T4273] RBP: 00007ffcf26d0740 R08: 00007ffcf26d1740 R09: 00000000ffffffff [ 102.518421][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf26d17d0 [ 102.526398][ T4273] R13: 00007f5658a321ca R14: 0000000000018bc6 R15: 00007ffcf26d1810 [ 102.534394][ T4273] [ 102.537476][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.789485][ T4273] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 105.716563][ T4273] CPU: 0 PID: 4273 Comm: syz-executor Not tainted syzkaller #0 [ 105.724289][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.734397][ T4273] Call Trace: [ 105.737713][ T4273] [ 105.740663][ T4273] dump_stack_lvl+0x188/0x24e [ 105.745369][ T4273] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 105.750499][ T4273] ? show_regs_print_info+0x12/0x12 [ 105.755730][ T4273] ? load_image+0x400/0x400 [ 105.760234][ T4273] ? preempt_schedule+0xbc/0xd0 [ 105.765084][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 105.770283][ T4273] gfs2_assert_warn_i+0x18f/0x2c0 [ 105.775312][ T4273] gfs2_quota_cleanup+0x4b4/0x6a0 [ 105.780523][ T4273] gfs2_put_super+0x22f/0x8c0 [ 105.785209][ T4273] ? gfs2_evict_inode+0x11d0/0x11d0 [ 105.790590][ T4273] generic_shutdown_super+0x130/0x340 [ 105.795964][ T4273] kill_block_super+0x7c/0xe0 [ 105.800659][ T4273] deactivate_locked_super+0x93/0xf0 [ 105.806054][ T4273] cleanup_mnt+0x42c/0x4b0 [ 105.810485][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 105.815782][ T4273] task_work_run+0x1d0/0x260 [ 105.820380][ T4273] ? task_work_cancel+0x220/0x220 [ 105.825413][ T4273] ? exit_to_user_mode_loop+0x3b/0x110 [ 105.830889][ T4273] exit_to_user_mode_loop+0xe6/0x110 [ 105.836190][ T4273] exit_to_user_mode_prepare+0xee/0x180 [ 105.841754][ T4273] syscall_exit_to_user_mode+0x16/0x40 [ 105.847246][ T4273] do_syscall_64+0x58/0xa0 [ 105.851675][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 105.856393][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 105.861085][ T4273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.866991][ T4273] RIP: 0033:0x7f565899e097 [ 105.871415][ T4273] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 105.891119][ T4273] RSP: 002b:00007ffcf26d0688 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 105.899545][ T4273] RAX: 0000000000000000 RBX: 00007f5658a321ca RCX: 00007f565899e097 [ 105.907532][ T4273] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf26d0740 [ 105.915598][ T4273] RBP: 00007ffcf26d0740 R08: 00007ffcf26d1740 R09: 00000000ffffffff [ 105.923578][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf26d17d0 [ 105.931646][ T4273] R13: 00007f5658a321ca R14: 0000000000018bc6 R15: 00007ffcf26d1810 [ 105.939650][ T4273] [ 106.490928][ T4488] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.498244][ T4647] loop0: detected capacity change from 0 to 2048 [ 106.591066][ T4650] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.671870][ T4318] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 106.689286][ T4650] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 106.704340][ T4488] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.712059][ T4650] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 106.730596][ T4488] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.751334][ T4650] Remounting filesystem read-only [ 106.760213][ T4273] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 106.765410][ T4488] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 106.786308][ T4488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.800380][ T4488] usb 2-1: config 0 descriptor?? [ 106.853053][ T4318] usb 4-1: device descriptor read/64, error -71 [ 107.144462][ T4318] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 107.305345][ T4318] usb 4-1: device descriptor read/64, error -71 [ 107.541679][ T4658] loop0: detected capacity change from 0 to 32768 [ 107.608485][ T4318] usb usb4-port1: attempt power cycle [ 107.618060][ T4658] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 107.626288][ T4658] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 107.642959][ T4658] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 107.653891][ T4488] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 107.669117][ T4656] loop2: detected capacity change from 0 to 256 [ 107.683579][ T4488] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 107.703823][ T4488] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 107.711622][ T4656] exfat: Deprecated parameter 'namecase' [ 107.730469][ T4488] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 107.741224][ T4656] exfat: Deprecated parameter 'utf8' [ 107.747095][ T4656] exfat: Deprecated parameter 'namecase' [ 107.759361][ T4656] exfat: Deprecated parameter 'utf8' [ 107.764795][ T4656] exfat: Deprecated parameter 'utf8' [ 107.775965][ T4488] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 107.793758][ T4488] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 107.819243][ T4488] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 107.846487][ T4488] hid-thrustmaster 0003:044F:B65D.0001: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 107.873907][ T4656] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36332e94, utbl_chksum : 0xe619d30d) [ 107.889345][ T4488] hid-thrustmaster 0003:044F:B65D.0001: Wrong number of endpoints? [ 107.909804][ C0] hid-thrustmaster 0003:044F:B65D.0001: URB to get model id failed with error -71 [ 107.986207][ T4488] usb 2-1: USB disconnect, device number 2 [ 108.062031][ T4318] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 108.079820][ T126] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 108.086757][ T126] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 108.110253][ T4318] usb 4-1: device descriptor read/8, error -71 [ 108.182287][ T126] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 95ms [ 108.220143][ T126] gfs2: fsid=syz:syz.0: jid=0: Done [ 108.227797][ T4658] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 108.355675][ T4665] fido_id[4665]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 108.410897][ T4318] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 108.468866][ T4658] gfs2: fsid=syz:syz.0: found 1 quota changes [ 108.625230][ T4671] loop1: detected capacity change from 0 to 32768 [ 108.666379][ T4318] usb 4-1: device descriptor read/8, error -71 [ 108.668040][ T4671] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.79 (4671) [ 108.703697][ T4671] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.714674][ T4671] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 108.723535][ T4671] BTRFS info (device loop1): metadata ratio 0 [ 108.729739][ T4671] BTRFS info (device loop1): turning on sync discard [ 108.736559][ T4671] BTRFS info (device loop1): using free space tree [ 108.792950][ T4318] usb usb4-port1: unable to enumerate USB device [ 109.339701][ T4273] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 109.339701][ T4273] inode = 11 2339 [ 109.339701][ T4273] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 109.707010][ T4273] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 109.716313][ T4273] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4273 [syz-executor] gfs2_quota_sync+0x32c/0x700 [ 109.823381][ T4273] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 109.849843][ T4671] BTRFS info (device loop1): enabling ssd optimizations [ 110.018366][ T4273] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 110.470463][ T4273] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 110.479323][ T4273] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 111.531124][ T26] audit: type=1800 audit(1780638815.021:2): pid=4707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.79" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 111.780382][ T4273] gfs2: fsid=syz:syz.0: File system withdrawn [ 111.797645][ T4273] CPU: 0 PID: 4273 Comm: syz-executor Not tainted syzkaller #0 [ 111.805251][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 111.815400][ T4273] Call Trace: [ 111.818678][ T4273] [ 111.821610][ T4273] dump_stack_lvl+0x188/0x24e [ 111.826294][ T4273] ? kobject_uevent_env+0x35f/0x8a0 [ 111.831513][ T4273] ? show_regs_print_info+0x12/0x12 [ 111.837006][ T4273] ? load_image+0x400/0x400 [ 111.841561][ T4273] ? kobject_uevent_env+0x35f/0x8a0 [ 111.846770][ T4273] gfs2_withdraw+0xde6/0x15d0 [ 111.851467][ T4273] ? gfs2_lm+0x240/0x240 [ 111.855806][ T4273] ? gfs2_consist_inode_i+0xf1/0x110 [ 111.861107][ T4273] gfs2_inode_refresh+0xc2a/0x1140 [ 111.866264][ T4273] ? gfs2_inode_metasync+0xf0/0xf0 [ 111.871385][ T4273] ? gfs2_glock_nq+0xcf0/0x14e0 [ 111.876497][ T4273] gfs2_instantiate+0x15e/0x210 [ 111.881350][ T4273] gfs2_glock_wait+0x1d0/0x2a0 [ 111.886140][ T4273] do_sync+0x4bf/0xc40 [ 111.890218][ T4273] ? gfs2_quota_sync+0x32c/0x700 [ 111.895155][ T4273] ? slot_put+0x1e0/0x1e0 [ 111.899496][ T4273] ? preempt_schedule_common+0xa5/0xd0 [ 111.904991][ T4273] ? preempt_schedule+0xbc/0xd0 [ 111.909866][ T4273] ? schedule_preempt_disabled+0x20/0x20 [ 111.915511][ T4273] ? gfs2_quota_sync+0x32c/0x700 [ 111.920477][ T4273] gfs2_quota_sync+0x32c/0x700 [ 111.925259][ T4273] gfs2_sync_fs+0x48/0xb0 [ 111.929615][ T4273] sync_filesystem+0xe6/0x220 [ 111.934311][ T4273] generic_shutdown_super+0x6b/0x340 [ 111.939617][ T4273] kill_block_super+0x7c/0xe0 [ 111.944409][ T4273] deactivate_locked_super+0x93/0xf0 [ 111.949879][ T4273] cleanup_mnt+0x42c/0x4b0 [ 111.954338][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 111.959558][ T4273] task_work_run+0x1d0/0x260 [ 111.964164][ T4273] ? task_work_cancel+0x220/0x220 [ 111.969228][ T4273] ? exit_to_user_mode_loop+0x3b/0x110 [ 111.975138][ T4273] exit_to_user_mode_loop+0xe6/0x110 [ 111.980444][ T4273] exit_to_user_mode_prepare+0xee/0x180 [ 111.986179][ T4273] syscall_exit_to_user_mode+0x16/0x40 [ 111.991651][ T4273] do_syscall_64+0x58/0xa0 [ 111.996093][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 112.000782][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 112.005477][ T4273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.011470][ T4273] RIP: 0033:0x7f565899e097 [ 112.015915][ T4273] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 112.035555][ T4273] RSP: 002b:00007ffcf26d0688 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 112.044004][ T4273] RAX: 0000000000000000 RBX: 00007f5658a321ca RCX: 00007f565899e097 [ 112.051988][ T4273] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf26d0740 [ 112.059963][ T4273] RBP: 00007ffcf26d0740 R08: 00007ffcf26d1740 R09: 00000000ffffffff [ 112.067955][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf26d17d0 [ 112.075930][ T4273] R13: 00007f5658a321ca R14: 000000000001a710 R15: 00007ffcf26d1810 [ 112.083962][ T4273] [ 112.087120][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.109252][ T4287] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.148754][ T4709] loop4: detected capacity change from 0 to 512 [ 112.194156][ T4273] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 112.209831][ T4273] CPU: 0 PID: 4273 Comm: syz-executor Not tainted syzkaller #0 [ 112.217446][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 112.227554][ T4273] Call Trace: [ 112.230960][ T4273] [ 112.233924][ T4273] dump_stack_lvl+0x188/0x24e [ 112.238645][ T4273] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 112.243793][ T4273] ? show_regs_print_info+0x12/0x12 [ 112.249024][ T4273] ? load_image+0x400/0x400 [ 112.253578][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 112.258830][ T4273] gfs2_assert_warn_i+0x18f/0x2c0 [ 112.263905][ T4273] gfs2_quota_cleanup+0x4b4/0x6a0 [ 112.268986][ T4273] gfs2_put_super+0x22f/0x8c0 [ 112.273718][ T4273] ? gfs2_evict_inode+0x11d0/0x11d0 [ 112.278973][ T4273] generic_shutdown_super+0x130/0x340 [ 112.284396][ T4273] kill_block_super+0x7c/0xe0 [ 112.289121][ T4273] deactivate_locked_super+0x93/0xf0 [ 112.294448][ T4273] cleanup_mnt+0x42c/0x4b0 [ 112.298913][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 112.304166][ T4273] task_work_run+0x1d0/0x260 [ 112.308801][ T4273] ? task_work_cancel+0x220/0x220 [ 112.313871][ T4273] ? exit_to_user_mode_loop+0x3b/0x110 [ 112.315229][ T4709] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.85: iget: bad i_size value: 38620345925642 [ 112.319358][ T4273] exit_to_user_mode_loop+0xe6/0x110 [ 112.337160][ T4273] exit_to_user_mode_prepare+0xee/0x180 [ 112.342761][ T4273] syscall_exit_to_user_mode+0x16/0x40 [ 112.348280][ T4273] do_syscall_64+0x58/0xa0 [ 112.352740][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 112.357472][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 112.362202][ T4273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.368137][ T4273] RIP: 0033:0x7f565899e097 [ 112.372588][ T4273] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 112.392324][ T4273] RSP: 002b:00007ffcf26d0688 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 112.400793][ T4273] RAX: 0000000000000000 RBX: 00007f5658a321ca RCX: 00007f565899e097 [ 112.408827][ T4273] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf26d0740 [ 112.416844][ T4273] RBP: 00007ffcf26d0740 R08: 00007ffcf26d1740 R09: 00000000ffffffff [ 112.424859][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf26d17d0 [ 112.432870][ T4273] R13: 00007f5658a321ca R14: 000000000001a710 R15: 00007ffcf26d1810 [ 112.440993][ T4273] [ 112.444064][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.490428][ T4709] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.85: couldn't read orphan inode 15 (err -117) [ 112.520268][ T4709] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 112.679926][ T4728] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.85: bg 0: block 5: invalid block bitmap [ 112.763475][ T4728] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 112.799823][ T4728] EXT4-fs (loop4): This should not happen!! Data will be lost [ 112.799823][ T4728] [ 112.825545][ T4728] EXT4-fs (loop4): Total free blocks count 0 [ 112.867458][ T4728] EXT4-fs (loop4): Free/Dirty block details [ 112.888245][ T4728] EXT4-fs (loop4): free_blocks=0 [ 112.907215][ T4728] EXT4-fs (loop4): dirty_blocks=16 [ 112.924800][ T4728] EXT4-fs (loop4): Block reservation details [ 112.945986][ T4728] EXT4-fs (loop4): i_reserved_data_blocks=16 [ 113.099360][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 113.197345][ T4734] loop0: detected capacity change from 0 to 4096 [ 113.225124][ T4734] ntfs3: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 113.440654][ T4734] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 113.634059][ T4744] loop3: detected capacity change from 0 to 32768 [ 113.652068][ T4740] loop1: detected capacity change from 0 to 4096 [ 113.673656][ T4744] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 113.681890][ T4744] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 113.695557][ T4744] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 113.704489][ T4719] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 113.711321][ T4719] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 113.751359][ T4719] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 39ms [ 113.760573][ T4719] gfs2: fsid=syz:syz.0: jid=0: Done [ 113.766097][ T4744] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 113.794429][ T4740] ntfs3: Unknown parameter 'windows_names' [ 114.055590][ T4744] gfs2: fsid=syz:syz.0: found 1 quota changes [ 114.595643][ T4761] loop0: detected capacity change from 0 to 32768 [ 115.529419][ T4278] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 115.529419][ T4278] inode = 11 2339 [ 115.529419][ T4278] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 115.538890][ T4761] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 115.558345][ T4761] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 115.567237][ T4761] BTRFS info (device loop0): using free space tree [ 115.669287][ T4278] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 115.699330][ T4278] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4278 [syz-executor] gfs2_quota_sync+0x32c/0x700 [ 115.717270][ T4278] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 115.729629][ T4278] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 115.816634][ T4278] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 115.925674][ T4278] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 115.964602][ T4786] loop1: detected capacity change from 0 to 512 [ 115.989158][ T4278] gfs2: fsid=syz:syz.0: File system withdrawn [ 115.998294][ T4761] BTRFS info (device loop0): enabling ssd optimizations [ 116.009134][ T4786] ext4: Unknown parameter 'defcontext' [ 116.016203][ T4278] CPU: 1 PID: 4278 Comm: syz-executor Not tainted syzkaller #0 [ 116.023812][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.033907][ T4278] Call Trace: [ 116.037229][ T4278] [ 116.040210][ T4278] dump_stack_lvl+0x188/0x24e [ 116.044933][ T4278] ? kobject_uevent_env+0x35f/0x8a0 [ 116.050175][ T4278] ? show_regs_print_info+0x12/0x12 [ 116.055403][ T4278] ? load_image+0x400/0x400 [ 116.059942][ T4278] ? kobject_uevent_env+0x35f/0x8a0 [ 116.065184][ T4278] gfs2_withdraw+0xde6/0x15d0 [ 116.069908][ T4278] ? gfs2_lm+0x240/0x240 [ 116.074193][ T4278] ? gfs2_consist_inode_i+0xf1/0x110 [ 116.079522][ T4278] gfs2_inode_refresh+0xc2a/0x1140 [ 116.084677][ T4278] ? gfs2_inode_metasync+0xf0/0xf0 [ 116.089825][ T4278] ? gfs2_glock_nq+0xcf0/0x14e0 [ 116.094717][ T4278] gfs2_instantiate+0x15e/0x210 [ 116.099591][ T4278] gfs2_glock_wait+0x1d0/0x2a0 [ 116.104357][ T4278] do_sync+0x4bf/0xc40 [ 116.108862][ T4278] ? gfs2_quota_sync+0x32c/0x700 [ 116.113832][ T4278] ? slot_put+0x1e0/0x1e0 [ 116.118166][ T4278] ? gfs2_quota_sync+0x32c/0x700 [ 116.123108][ T4278] ? do_raw_spin_unlock+0x11d/0x230 [ 116.128305][ T4278] gfs2_quota_sync+0x32c/0x700 [ 116.133072][ T4278] gfs2_sync_fs+0x48/0xb0 [ 116.137405][ T4278] sync_filesystem+0xe6/0x220 [ 116.142101][ T4278] generic_shutdown_super+0x6b/0x340 [ 116.147387][ T4278] kill_block_super+0x7c/0xe0 [ 116.152069][ T4278] deactivate_locked_super+0x93/0xf0 [ 116.157373][ T4278] cleanup_mnt+0x42c/0x4b0 [ 116.161790][ T4278] ? lockdep_hardirqs_on+0x94/0x140 [ 116.166985][ T4278] task_work_run+0x1d0/0x260 [ 116.171575][ T4278] ? task_work_cancel+0x220/0x220 [ 116.176602][ T4278] ? exit_to_user_mode_loop+0x3b/0x110 [ 116.182062][ T4278] exit_to_user_mode_loop+0xe6/0x110 [ 116.187348][ T4278] exit_to_user_mode_prepare+0xee/0x180 [ 116.192896][ T4278] syscall_exit_to_user_mode+0x16/0x40 [ 116.198357][ T4278] do_syscall_64+0x58/0xa0 [ 116.202768][ T4278] ? clear_bhb_loop+0x60/0xb0 [ 116.207462][ T4278] ? clear_bhb_loop+0x60/0xb0 [ 116.212146][ T4278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.218048][ T4278] RIP: 0033:0x7ff8d8f9e097 [ 116.222473][ T4278] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 116.242086][ T4278] RSP: 002b:00007fff686dd2f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 116.250504][ T4278] RAX: 0000000000000000 RBX: 00007ff8d90321ca RCX: 00007ff8d8f9e097 [ 116.258474][ T4278] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff686dd3b0 [ 116.266454][ T4278] RBP: 00007fff686dd3b0 R08: 00007fff686de3b0 R09: 00000000ffffffff [ 116.274420][ T4278] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff686de440 [ 116.282389][ T4278] R13: 00007ff8d90321ca R14: 000000000001bcbb R15: 00007fff686de480 [ 116.290383][ T4278] [ 116.298733][ T4278] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 116.639247][ T4278] CPU: 0 PID: 4278 Comm: syz-executor Not tainted syzkaller #0 [ 116.646862][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.656932][ T4278] Call Trace: [ 116.660381][ T4278] [ 116.663397][ T4278] dump_stack_lvl+0x188/0x24e [ 116.668078][ T4278] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 116.673190][ T4278] ? show_regs_print_info+0x12/0x12 [ 116.678404][ T4278] ? load_image+0x400/0x400 [ 116.682932][ T4278] ? do_raw_spin_unlock+0x11d/0x230 [ 116.688181][ T4278] gfs2_assert_warn_i+0x18f/0x2c0 [ 116.693234][ T4278] gfs2_quota_cleanup+0x4b4/0x6a0 [ 116.698261][ T4278] gfs2_put_super+0x22f/0x8c0 [ 116.702964][ T4278] ? gfs2_evict_inode+0x11d0/0x11d0 [ 116.708172][ T4278] generic_shutdown_super+0x130/0x340 [ 116.713542][ T4278] kill_block_super+0x7c/0xe0 [ 116.718219][ T4278] deactivate_locked_super+0x93/0xf0 [ 116.723508][ T4278] cleanup_mnt+0x42c/0x4b0 [ 116.727948][ T4278] ? lockdep_hardirqs_on+0x94/0x140 [ 116.733163][ T4278] task_work_run+0x1d0/0x260 [ 116.737877][ T4278] ? task_work_cancel+0x220/0x220 [ 116.742940][ T4278] ? exit_to_user_mode_loop+0x3b/0x110 [ 116.748436][ T4278] exit_to_user_mode_loop+0xe6/0x110 [ 116.753743][ T4278] exit_to_user_mode_prepare+0xee/0x180 [ 116.759319][ T4278] syscall_exit_to_user_mode+0x16/0x40 [ 116.764789][ T4278] do_syscall_64+0x58/0xa0 [ 116.769208][ T4278] ? clear_bhb_loop+0x60/0xb0 [ 116.773910][ T4278] ? clear_bhb_loop+0x60/0xb0 [ 116.778601][ T4278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.784504][ T4278] RIP: 0033:0x7ff8d8f9e097 [ 116.788925][ T4278] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 116.808543][ T4278] RSP: 002b:00007fff686dd2f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 116.816969][ T4278] RAX: 0000000000000000 RBX: 00007ff8d90321ca RCX: 00007ff8d8f9e097 [ 116.824948][ T4278] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff686dd3b0 [ 116.833024][ T4278] RBP: 00007fff686dd3b0 R08: 00007fff686de3b0 R09: 00000000ffffffff [ 116.841107][ T4278] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff686de440 [ 116.849080][ T4278] R13: 00007ff8d90321ca R14: 000000000001bcbb R15: 00007fff686de480 [ 116.857061][ T4278] [ 116.860203][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.255448][ T4770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 117.319355][ T4273] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 118.081372][ T4801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'. [ 118.697783][ T4493] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.756143][ T4809] loop0: detected capacity change from 0 to 4096 [ 118.788881][ T4809] ntfs3: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 118.813427][ T4286] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 118.878873][ T4362] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.928400][ T4493] usb 5-1: Using ep0 maxpacket: 16 [ 118.936544][ T4493] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 118.977758][ T4493] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 118.996642][ T4809] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 119.017695][ T4493] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.017726][ T4493] usb 5-1: Product: syz [ 119.017741][ T4493] usb 5-1: Manufacturer: syz [ 119.017754][ T4493] usb 5-1: SerialNumber: syz [ 119.040906][ T4493] usb 5-1: config 0 descriptor?? [ 119.675645][ T4831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'. [ 120.081642][ C0] sched: RT throttling activated [ 121.699488][ T4723] usb 5-1: USB disconnect, device number 3 [ 121.960657][ T4839] loop0: detected capacity change from 0 to 512 [ 122.878151][ T4839] ext4: Unknown parameter 'defcontext' [ 123.856301][ T4861] loop1: detected capacity change from 0 to 32768 [ 123.892165][ T4861] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 123.900469][ T4861] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 123.913155][ T4861] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 123.923716][ T4723] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 123.938822][ T4723] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 124.092594][ T4362] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 124.244954][ T4723] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 305ms [ 124.539314][ T4723] gfs2: fsid=syz:syz.0: jid=0: Done [ 126.067200][ T4869] netlink: 60 bytes leftover after parsing attributes in process `syz.3.127'. [ 126.793539][ T4861] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 126.822606][ T4861] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 127.302938][ T4877] loop1: detected capacity change from 0 to 4096 [ 127.375938][ T4877] ntfs3: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 127.607300][ T4877] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 129.100798][ T4898] netlink: 'syz.2.116': attribute type 3 has an invalid length. [ 129.674090][ T4894] loop3: detected capacity change from 0 to 512 [ 129.808802][ T4894] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 129.817914][ T4894] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.908974][ T126] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 131.158101][ T126] usb 4-1: unable to get BOS descriptor or descriptor too short [ 131.211239][ T126] usb 4-1: config 1 has an invalid interface number: 18 but max is 0 [ 131.347743][ T126] usb 4-1: config 1 has no interface number 0 [ 131.436903][ T126] usb 4-1: config 1 interface 18 has no altsetting 0 [ 131.523858][ T126] usb 4-1: New USB device found, idVendor=0bda, idProduct=817d, bcdDevice=11.a2 [ 131.621612][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.785613][ T126] usb 4-1: Product: syz [ 131.789845][ T126] usb 4-1: Manufacturer: syz [ 131.816938][ T126] usb 4-1: SerialNumber: syz [ 131.896085][ T126] usb 4-1: can't set config #1, error -71 [ 131.923817][ T126] usb 4-1: USB disconnect, device number 10 [ 132.137735][ T4920] loop0: detected capacity change from 0 to 32768 [ 132.159108][ T4920] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 132.167486][ T4920] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 132.180098][ T4920] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 132.208294][ T4715] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 132.215260][ T4715] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 132.300830][ T4715] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 85ms [ 132.310852][ T4715] gfs2: fsid=syz:syz.0: jid=0: Done [ 132.311823][ T4894] EXT4-fs (loop3): unmounting filesystem. [ 132.316138][ T4920] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 132.837666][ T4920] gfs2: fsid=syz:syz.0: found 1 quota changes [ 133.286533][ T4941] loop2: detected capacity change from 0 to 2048 [ 134.093811][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.126200][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.471931][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.497708][ T4941] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.825279][ T22] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 134.851870][ T22] usb 2-1: config 1 has no interface number 0 [ 134.877089][ T22] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 134.951205][ T4944] loop4: detected capacity change from 0 to 512 [ 134.964289][ T22] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.976358][ T4944] ext4: Unknown parameter 'defcontext' [ 134.997562][ T22] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 135.018590][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.035704][ T22] usb 2-1: Product: syz [ 135.043938][ T4433] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.053131][ T22] usb 2-1: Manufacturer: syz [ 135.062328][ T22] usb 2-1: SerialNumber: syz [ 135.133571][ T4929] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 135.165007][ T22] usb 2-1: Expected 3 endpoints, found: 2 [ 135.411631][ T4273] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 135.411631][ T4273] inode = 11 2339 [ 135.411631][ T4273] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 135.430348][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.443527][ T4273] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 135.503605][ T126] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 135.558019][ T22] usb 2-1: USB disconnect, device number 3 [ 135.663928][ T126] usb 4-1: device descriptor read/64, error -71 [ 135.692365][ T4273] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4273 [syz-executor] gfs2_quota_sync+0x32c/0x700 [ 135.732344][ T4273] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 135.764145][ T4273] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 136.455342][ T4273] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 136.491807][ T4952] netlink: 'syz.2.146': attribute type 3 has an invalid length. [ 136.500260][ T4273] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 136.526012][ T4273] gfs2: fsid=syz:syz.0: File system withdrawn [ 136.548674][ T4273] CPU: 1 PID: 4273 Comm: syz-executor Not tainted syzkaller #0 [ 136.556289][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.566364][ T4273] Call Trace: [ 136.569667][ T4273] [ 136.572620][ T4273] dump_stack_lvl+0x188/0x24e [ 136.577324][ T4273] ? kobject_uevent_env+0x35f/0x8a0 [ 136.582526][ T4273] ? show_regs_print_info+0x12/0x12 [ 136.584507][ T126] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 136.587719][ T4273] ? load_image+0x400/0x400 [ 136.599898][ T4273] ? kobject_uevent_env+0x35f/0x8a0 [ 136.605124][ T4273] gfs2_withdraw+0xde6/0x15d0 [ 136.609823][ T4273] ? gfs2_lm+0x240/0x240 [ 136.614246][ T4273] ? gfs2_consist_inode_i+0xf1/0x110 [ 136.619625][ T4273] gfs2_inode_refresh+0xc2a/0x1140 [ 136.624797][ T4273] ? gfs2_inode_metasync+0xf0/0xf0 [ 136.629964][ T4273] ? gfs2_glock_nq+0xcf0/0x14e0 [ 136.634851][ T4273] gfs2_instantiate+0x15e/0x210 [ 136.639760][ T4273] gfs2_glock_wait+0x1d0/0x2a0 [ 136.644626][ T4273] do_sync+0x4bf/0xc40 [ 136.648714][ T4273] ? gfs2_quota_sync+0x32c/0x700 [ 136.653687][ T4273] ? slot_put+0x1e0/0x1e0 [ 136.658130][ T4273] ? gfs2_quota_sync+0x32c/0x700 [ 136.663095][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 136.668328][ T4273] gfs2_quota_sync+0x32c/0x700 [ 136.673108][ T4273] gfs2_sync_fs+0x48/0xb0 [ 136.677450][ T4273] sync_filesystem+0xe6/0x220 [ 136.682142][ T4273] generic_shutdown_super+0x6b/0x340 [ 136.687431][ T4273] kill_block_super+0x7c/0xe0 [ 136.692106][ T4273] deactivate_locked_super+0x93/0xf0 [ 136.697396][ T4273] cleanup_mnt+0x42c/0x4b0 [ 136.701814][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 136.707079][ T4273] task_work_run+0x1d0/0x260 [ 136.711717][ T4273] ? task_work_cancel+0x220/0x220 [ 136.716764][ T4273] ? exit_to_user_mode_loop+0x3b/0x110 [ 136.722243][ T4273] exit_to_user_mode_loop+0xe6/0x110 [ 136.727553][ T4273] exit_to_user_mode_prepare+0xee/0x180 [ 136.733104][ T4273] syscall_exit_to_user_mode+0x16/0x40 [ 136.738588][ T4273] do_syscall_64+0x58/0xa0 [ 136.743003][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 136.747698][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 136.752378][ T4273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.758292][ T4273] RIP: 0033:0x7f565899e097 [ 136.762809][ T4273] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 136.782430][ T4273] RSP: 002b:00007ffcf26d0688 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 136.790966][ T4273] RAX: 0000000000000000 RBX: 00007f5658a321ca RCX: 00007f565899e097 [ 136.798948][ T4273] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf26d0740 [ 136.806958][ T4273] RBP: 00007ffcf26d0740 R08: 00007ffcf26d1740 R09: 00000000ffffffff [ 136.815082][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf26d17d0 [ 136.823069][ T4273] R13: 00007f5658a321ca R14: 000000000002062c R15: 00007ffcf26d1810 [ 136.831139][ T4273] [ 137.013230][ T4956] loop1: detected capacity change from 0 to 16 [ 137.032437][ T4956] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 137.046091][ T126] usb 4-1: device descriptor read/64, error -71 [ 137.083105][ T4273] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 137.088014][ T4956] erofs: (device loop1): erofs_init_device: empty device tag @ pos 0 [ 137.123816][ T4273] CPU: 1 PID: 4273 Comm: syz-executor Not tainted syzkaller #0 [ 137.131436][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 137.141531][ T4273] Call Trace: [ 137.144832][ T4273] [ 137.147869][ T4273] dump_stack_lvl+0x188/0x24e [ 137.152552][ T4273] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 137.157661][ T4273] ? show_regs_print_info+0x12/0x12 [ 137.162910][ T4273] ? load_image+0x400/0x400 [ 137.167438][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 137.172671][ T4273] gfs2_assert_warn_i+0x18f/0x2c0 [ 137.175136][ T126] usb usb4-port1: attempt power cycle [ 137.177712][ T4273] gfs2_quota_cleanup+0x4b4/0x6a0 [ 137.188499][ T4273] gfs2_put_super+0x22f/0x8c0 [ 137.193185][ T4273] ? gfs2_evict_inode+0x11d0/0x11d0 [ 137.198384][ T4273] generic_shutdown_super+0x130/0x340 [ 137.203759][ T4273] kill_block_super+0x7c/0xe0 [ 137.208445][ T4273] deactivate_locked_super+0x93/0xf0 [ 137.213914][ T4273] cleanup_mnt+0x42c/0x4b0 [ 137.218349][ T4273] ? lockdep_hardirqs_on+0x94/0x140 [ 137.223561][ T4273] task_work_run+0x1d0/0x260 [ 137.228152][ T4273] ? task_work_cancel+0x220/0x220 [ 137.233185][ T4273] ? exit_to_user_mode_loop+0x3b/0x110 [ 137.238664][ T4273] exit_to_user_mode_loop+0xe6/0x110 [ 137.243968][ T4273] exit_to_user_mode_prepare+0xee/0x180 [ 137.249546][ T4273] syscall_exit_to_user_mode+0x16/0x40 [ 137.255037][ T4273] do_syscall_64+0x58/0xa0 [ 137.259449][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 137.264157][ T4273] ? clear_bhb_loop+0x60/0xb0 [ 137.268854][ T4273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.274767][ T4273] RIP: 0033:0x7f565899e097 [ 137.279209][ T4273] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 137.298813][ T4273] RSP: 002b:00007ffcf26d0688 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 137.307225][ T4273] RAX: 0000000000000000 RBX: 00007f5658a321ca RCX: 00007f565899e097 [ 137.315204][ T4273] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf26d0740 [ 137.323170][ T4273] RBP: 00007ffcf26d0740 R08: 00007ffcf26d1740 R09: 00000000ffffffff [ 137.331147][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf26d17d0 [ 137.339117][ T4273] R13: 00007f5658a321ca R14: 000000000002062c R15: 00007ffcf26d1810 [ 137.347095][ T4273] [ 137.775442][ T126] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 138.032227][ T126] usb 4-1: device descriptor read/8, error -71 [ 138.348034][ T4963] loop3: detected capacity change from 0 to 512 [ 138.562114][ T4963] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 138.576092][ T4963] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.083732][ T4976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.150'. [ 139.803444][ T126] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 139.856778][ T4322] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 139.889148][ T126] usb 4-1: unable to get BOS descriptor or descriptor too short [ 139.981761][ T126] usb 4-1: config 1 has an invalid interface number: 18 but max is 0 [ 140.133187][ T4980] loop0: detected capacity change from 0 to 32768 [ 140.154772][ T4980] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.156 (4980) [ 140.167149][ T4322] usb 5-1: Using ep0 maxpacket: 32 [ 140.174540][ T4322] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 140.187051][ T126] usb 4-1: config 1 has no interface number 0 [ 140.199618][ T4322] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 140.208975][ T4322] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 140.223779][ T4322] usb 5-1: Product: syz [ 140.228038][ T126] usb 4-1: config 1 interface 18 has no altsetting 0 [ 140.245723][ T126] usb 4-1: New USB device found, idVendor=0bda, idProduct=817d, bcdDevice=11.a2 [ 140.257093][ T4322] usb 5-1: Manufacturer: syz [ 140.261794][ T4322] usb 5-1: SerialNumber: syz [ 140.288972][ T4322] usb 5-1: config 0 descriptor?? [ 140.304596][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.308425][ T4972] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 140.337532][ T4980] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.347801][ T126] usb 4-1: Product: syz [ 140.347931][ T4980] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 140.352047][ T126] usb 4-1: Manufacturer: syz [ 140.360821][ T4980] BTRFS info (device loop0): metadata ratio 0 [ 140.371577][ T4980] BTRFS info (device loop0): turning on sync discard [ 140.378355][ T4980] BTRFS info (device loop0): using free space tree [ 140.447563][ T126] usb 4-1: SerialNumber: syz [ 140.727502][ T126] usb 4-1: USB disconnect, device number 14 [ 140.875424][ T4980] BTRFS info (device loop0): enabling ssd optimizations [ 141.356170][ T4963] EXT4-fs (loop3): unmounting filesystem. [ 141.918565][ T4322] usb 5-1: USB disconnect, device number 4 [ 142.075148][ T26] audit: type=1800 audit(1780638845.837:3): pid=4979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.156" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 142.822444][ T4273] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 143.402381][ T5015] netlink: 'syz.4.160': attribute type 3 has an invalid length. [ 144.872856][ T22] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 145.039678][ T22] usb 4-1: device descriptor read/64, error -71 [ 145.204001][ T5029] loop0: detected capacity change from 0 to 512 [ 145.217635][ T5029] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 145.230946][ T5029] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 145.309847][ T22] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 145.913293][ T5029] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.165: bad orphan inode 131083 [ 145.927016][ T5029] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 145.980767][ T5029] Zero length message leads to an empty skb [ 145.987953][ T5029] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #2: block 13: comm syz.0.165: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 146.341044][ T5029] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.165: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 147.173029][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 150.755518][ T5054] netlink: 27 bytes leftover after parsing attributes in process `syz.0.174'. [ 151.798160][ T4286] Bluetooth: hci3: hcon ffff8880234e2000 sent 1 < count 25717 [ 151.907646][ T5068] loop0: detected capacity change from 0 to 512 [ 151.968376][ T5068] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 152.253265][ T22] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 153.516898][ T5068] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.179: bad orphan inode 131083 [ 153.602726][ T5073] loop1: detected capacity change from 0 to 128 [ 153.612245][ T5068] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 153.645229][ T5076] netlink: 52 bytes leftover after parsing attributes in process `syz.3.182'. [ 153.659391][ T5073] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.672829][ T22] usb 5-1: no configurations [ 153.677559][ T22] usb 5-1: can't read configurations, error -22 [ 153.704616][ T5064] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #2: block 13: comm syz.0.179: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 153.732555][ T5064] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.179: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 153.778072][ T5073] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.867101][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 153.922791][ T22] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 154.127297][ T22] usb 5-1: no configurations [ 154.131975][ T22] usb 5-1: can't read configurations, error -22 [ 154.151680][ T5080] tmpfs: Unknown parameter '/dev/swradio#' [ 154.169466][ T22] usb usb5-port1: attempt power cycle [ 154.764427][ T22] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 155.036246][ T22] usb 5-1: device descriptor read/8, error -71 [ 155.119712][ T5088] loop3: detected capacity change from 0 to 2048 [ 157.653066][ T5106] loop0: detected capacity change from 0 to 512 [ 157.683244][ T5101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.190'. [ 157.733327][ T5101] ------------[ cut here ]------------ [ 157.739191][ T5101] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:853 (size 16) [ 157.786137][ T5106] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 157.815274][ T5101] WARNING: CPU: 0 PID: 5101 at net/sched/cls_u32.c:853 u32_change+0x1dfc/0x27e0 [ 157.824531][ T5101] Modules linked in: [ 157.828446][ T5101] CPU: 0 PID: 5101 Comm: syz.2.190 Not tainted syzkaller #0 [ 157.836165][ T5101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.846674][ T5101] RIP: 0010:u32_change+0x1dfc/0x27e0 [ 157.852012][ T5101] Code: f9 eb 59 e8 66 79 1d f9 c6 05 46 bf a6 05 01 b9 10 00 00 00 48 c7 c7 80 d9 8e 8b 4c 89 fe 48 c7 c2 00 da 8e 8b e8 74 e3 e8 f8 <0f> 0b e9 ff ee ff ff e8 38 79 1d f9 eb 24 e8 31 79 1d f9 c6 05 bb [ 157.871731][ T5101] RSP: 0018:ffffc9001d476e40 EFLAGS: 00010246 [ 157.877882][ T5101] RAX: e40046bda5fdff00 RBX: ffff88802ea86ee0 RCX: 0000000000080000 [ 157.885928][ T5101] RDX: ffffc9000f3ac000 RSI: 00000000000062f0 RDI: 00000000000062f1 [ 157.893972][ T5101] RBP: ffffc9001d476ff8 R08: ffffc9001d476ac7 R09: 1ffff92003a8ed58 [ 157.901977][ T5101] R10: dffffc0000000000 R11: fffff52003a8ed59 R12: 0000000000000000 [ 157.910028][ T5101] R13: dffffc0000000000 R14: ffff88802e733400 R15: 0000000000000020 [ 157.918073][ T5101] FS: 00007f04196d56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 157.927089][ T5101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.933756][ T5101] CR2: 00007f04187ea540 CR3: 0000000057b31000 CR4: 00000000003506f0 [ 157.941768][ T5101] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 157.949821][ T5101] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 157.957870][ T5101] Call Trace: [ 157.961197][ T5101] [ 157.964252][ T5101] ? u32_get+0x370/0x370 [ 157.968579][ T5101] ? u32_get+0x370/0x370 [ 157.972868][ T5101] tc_new_tfilter+0x1160/0x1900 [ 157.977844][ T5101] ? kmem_cache_free+0xf7/0x290 [ 157.982745][ T5101] ? nlmon_xmit+0xac/0xf0 [ 157.987190][ T5101] ? tcf_proto_signal_destroying+0x240/0x240 [ 157.993237][ T5101] ? rcu_read_unlock+0x8c/0xa0 [ 157.998101][ T5101] ? tcf_proto_signal_destroying+0x240/0x240 [ 158.004168][ T5101] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 158.009312][ T5101] ? tcf_proto_signal_destroying+0x240/0x240 [ 158.015474][ T5101] rtnetlink_rcv_msg+0x8cc/0xfc0 [ 158.020472][ T5101] ? rtnetlink_bind+0x80/0x80 [ 158.025248][ T5101] ? __local_bh_enable_ip+0x136/0x1c0 [ 158.030827][ T5101] ? lockdep_hardirqs_on+0x94/0x140 [ 158.036182][ T5101] ? __local_bh_enable_ip+0x136/0x1c0 [ 158.041779][ T5101] ? _local_bh_enable+0xa0/0xa0 [ 158.046729][ T5101] ? __dev_queue_xmit+0x26b/0x37c0 [ 158.051883][ T5101] ? __dev_queue_xmit+0x26b/0x37c0 [ 158.057092][ T5101] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 158.062350][ T5101] ? __dev_queue_xmit+0x26b/0x37c0 [ 158.067551][ T5101] ? ref_tracker_free+0x68c/0x840 [ 158.072624][ T5101] ? __copy_skb_header+0x3ba/0x4f0 [ 158.077809][ T5101] ? refcount_inc+0x70/0x70 [ 158.082451][ T5101] ? memcpy+0x3c/0x60 [ 158.086506][ T5101] ? __copy_skb_header+0x3ba/0x4f0 [ 158.091655][ T5101] ? __skb_clone+0x480/0x790 [ 158.096421][ T5101] netlink_rcv_skb+0x1fb/0x450 [ 158.101227][ T5101] ? rtnetlink_bind+0x80/0x80 [ 158.105988][ T5101] ? netlink_ack+0x1170/0x1170 [ 158.110896][ T5101] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.116183][ T5101] netlink_unicast+0x74d/0x8d0 [ 158.120996][ T5101] netlink_sendmsg+0x8ad/0xbd0 [ 158.126033][ T5101] ? netlink_getsockopt+0x550/0x550 [ 158.131287][ T5101] ? aa_sock_msg_perm+0x94/0x150 [ 158.136304][ T5101] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 158.141635][ T5101] ? security_socket_sendmsg+0x7c/0xa0 [ 158.147172][ T5101] ? netlink_getsockopt+0x550/0x550 [ 158.152409][ T5101] ____sys_sendmsg+0x5be/0x970 [ 158.157351][ T5101] ? __sys_sendmsg_sock+0x30/0x30 [ 158.162412][ T5101] ? __import_iovec+0x315/0x500 [ 158.167342][ T5101] ? import_iovec+0x6f/0xa0 [ 158.171895][ T5101] ___sys_sendmsg+0x2a2/0x360 [ 158.176640][ T5101] ? __sched_text_start+0x8/0x8 [ 158.181526][ T5101] ? __sys_sendmsg+0x290/0x290 [ 158.186417][ T5101] __sys_sendmmsg+0x2c3/0x510 [ 158.191227][ T5101] ? __ia32_sys_sendmsg+0x80/0x80 [ 158.196597][ T5101] ? __ia32_sys_get_robust_list+0x100/0x100 [ 158.202539][ T5101] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 158.208623][ T5101] ? lock_chain_count+0x20/0x20 [ 158.213525][ T5101] __x64_sys_sendmmsg+0x9c/0xb0 [ 158.218452][ T5101] do_syscall_64+0x4c/0xa0 [ 158.222902][ T5101] ? clear_bhb_loop+0x60/0xb0 [ 158.227665][ T5101] ? clear_bhb_loop+0x60/0xb0 [ 158.232477][ T5101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.238453][ T5101] RIP: 0033:0x7f041879ce59 [ 158.242914][ T5101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.262611][ T5101] RSP: 002b:00007f04196d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 158.271194][ T5101] RAX: ffffffffffffffda RBX: 00007f0418a16090 RCX: 00007f041879ce59 [ 158.279325][ T5101] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 158.287376][ T5101] RBP: 00007f0418832d6f R08: 0000000000000000 R09: 0000000000000000 [ 158.295412][ T5101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.303411][ T5101] R13: 00007f0418a16128 R14: 00007f0418a16090 R15: 00007ffd709a5d68 [ 158.311466][ T5101] [ 158.314556][ T5101] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 158.321862][ T5101] CPU: 0 PID: 5101 Comm: syz.2.190 Not tainted syzkaller #0 [ 158.329175][ T5101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 158.339251][ T5101] Call Trace: [ 158.342553][ T5101] [ 158.345514][ T5101] dump_stack_lvl+0x188/0x24e [ 158.350224][ T5101] ? memcpy+0x3c/0x60 [ 158.354325][ T5101] ? show_regs_print_info+0x12/0x12 [ 158.359548][ T5101] ? load_image+0x400/0x400 [ 158.364099][ T5101] panic+0x2e5/0x730 [ 158.368033][ T5101] ? bpf_jit_dump+0xd0/0xd0 [ 158.372582][ T5101] __warn+0x2f8/0x4f0 [ 158.376600][ T5101] ? u32_change+0x1dfc/0x27e0 [ 158.381319][ T5101] ? u32_change+0x1dfc/0x27e0 [ 158.386031][ T5101] report_bug+0x2ba/0x4f0 [ 158.390404][ T5101] ? u32_change+0x1dfc/0x27e0 [ 158.395120][ T5101] handle_bug+0x3a/0x70 [ 158.399303][ T5101] exc_invalid_op+0x16/0x40 [ 158.403832][ T5101] asm_exc_invalid_op+0x16/0x20 [ 158.408816][ T5101] RIP: 0010:u32_change+0x1dfc/0x27e0 [ 158.414147][ T5101] Code: f9 eb 59 e8 66 79 1d f9 c6 05 46 bf a6 05 01 b9 10 00 00 00 48 c7 c7 80 d9 8e 8b 4c 89 fe 48 c7 c2 00 da 8e 8b e8 74 e3 e8 f8 <0f> 0b e9 ff ee ff ff e8 38 79 1d f9 eb 24 e8 31 79 1d f9 c6 05 bb [ 158.433778][ T5101] RSP: 0018:ffffc9001d476e40 EFLAGS: 00010246 [ 158.439883][ T5101] RAX: e40046bda5fdff00 RBX: ffff88802ea86ee0 RCX: 0000000000080000 [ 158.447891][ T5101] RDX: ffffc9000f3ac000 RSI: 00000000000062f0 RDI: 00000000000062f1 [ 158.455935][ T5101] RBP: ffffc9001d476ff8 R08: ffffc9001d476ac7 R09: 1ffff92003a8ed58 [ 158.464023][ T5101] R10: dffffc0000000000 R11: fffff52003a8ed59 R12: 0000000000000000 [ 158.472012][ T5101] R13: dffffc0000000000 R14: ffff88802e733400 R15: 0000000000000020 [ 158.480053][ T5101] ? u32_get+0x370/0x370 [ 158.484357][ T5101] ? u32_get+0x370/0x370 [ 158.488633][ T5101] tc_new_tfilter+0x1160/0x1900 [ 158.493520][ T5101] ? kmem_cache_free+0xf7/0x290 [ 158.498484][ T5101] ? nlmon_xmit+0xac/0xf0 [ 158.502871][ T5101] ? tcf_proto_signal_destroying+0x240/0x240 [ 158.508991][ T5101] ? rcu_read_unlock+0x8c/0xa0 [ 158.513798][ T5101] ? tcf_proto_signal_destroying+0x240/0x240 [ 158.519845][ T5101] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 158.524983][ T5101] ? tcf_proto_signal_destroying+0x240/0x240 [ 158.531259][ T5101] rtnetlink_rcv_msg+0x8cc/0xfc0 [ 158.536233][ T5101] ? rtnetlink_bind+0x80/0x80 [ 158.540968][ T5101] ? __local_bh_enable_ip+0x136/0x1c0 [ 158.546396][ T5101] ? lockdep_hardirqs_on+0x94/0x140 [ 158.551636][ T5101] ? __local_bh_enable_ip+0x136/0x1c0 [ 158.557039][ T5101] ? _local_bh_enable+0xa0/0xa0 [ 158.561923][ T5101] ? __dev_queue_xmit+0x26b/0x37c0 [ 158.567070][ T5101] ? __dev_queue_xmit+0x26b/0x37c0 [ 158.572214][ T5101] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 158.577453][ T5101] ? __dev_queue_xmit+0x26b/0x37c0 [ 158.582946][ T5101] ? ref_tracker_free+0x68c/0x840 [ 158.588005][ T5101] ? __copy_skb_header+0x3ba/0x4f0 [ 158.593156][ T5101] ? refcount_inc+0x70/0x70 [ 158.597701][ T5101] ? memcpy+0x3c/0x60 [ 158.601717][ T5101] ? __copy_skb_header+0x3ba/0x4f0 [ 158.606855][ T5101] ? __skb_clone+0x480/0x790 [ 158.611477][ T5101] netlink_rcv_skb+0x1fb/0x450 [ 158.616279][ T5101] ? rtnetlink_bind+0x80/0x80 [ 158.621081][ T5101] ? netlink_ack+0x1170/0x1170 [ 158.625891][ T5101] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.631124][ T5101] netlink_unicast+0x74d/0x8d0 [ 158.636184][ T5101] netlink_sendmsg+0x8ad/0xbd0 [ 158.640985][ T5101] ? netlink_getsockopt+0x550/0x550 [ 158.646216][ T5101] ? aa_sock_msg_perm+0x94/0x150 [ 158.651193][ T5101] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 158.656506][ T5101] ? security_socket_sendmsg+0x7c/0xa0 [ 158.661991][ T5101] ? netlink_getsockopt+0x550/0x550 [ 158.667301][ T5101] ____sys_sendmsg+0x5be/0x970 [ 158.672105][ T5101] ? __sys_sendmsg_sock+0x30/0x30 [ 158.677156][ T5101] ? __import_iovec+0x315/0x500 [ 158.682041][ T5101] ? import_iovec+0x6f/0xa0 [ 158.686582][ T5101] ___sys_sendmsg+0x2a2/0x360 [ 158.691373][ T5101] ? __sched_text_start+0x8/0x8 [ 158.696255][ T5101] ? __sys_sendmsg+0x290/0x290 [ 158.701180][ T5101] __sys_sendmmsg+0x2c3/0x510 [ 158.705889][ T5101] ? __ia32_sys_sendmsg+0x80/0x80 [ 158.710948][ T5101] ? __ia32_sys_get_robust_list+0x100/0x100 [ 158.716976][ T5101] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 158.722997][ T5101] ? lock_chain_count+0x20/0x20 [ 158.727895][ T5101] __x64_sys_sendmmsg+0x9c/0xb0 [ 158.732776][ T5101] do_syscall_64+0x4c/0xa0 [ 158.737216][ T5101] ? clear_bhb_loop+0x60/0xb0 [ 158.741927][ T5101] ? clear_bhb_loop+0x60/0xb0 [ 158.746640][ T5101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.752567][ T5101] RIP: 0033:0x7f041879ce59 [ 158.757020][ T5101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.788605][ T5101] RSP: 002b:00007f04196d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 158.797058][ T5101] RAX: ffffffffffffffda RBX: 00007f0418a16090 RCX: 00007f041879ce59 [ 158.805070][ T5101] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 158.813066][ T5101] RBP: 00007f0418832d6f R08: 0000000000000000 R09: 0000000000000000 [ 158.821149][ T5101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.829176][ T5101] R13: 00007f0418a16128 R14: 00007f0418a16090 R15: 00007ffd709a5d68 [ 158.837194][ T5101] [ 158.840498][ T5101] Kernel Offset: disabled [ 158.844834][ T5101] Rebooting in 86400 seconds..