last executing test programs: 457.759941ms ago: executing program 0 (id=1): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000001080)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}, {@shortname_mixed}, {@utf8}, {@fat=@tz_utc}, {@uni_xlateno}, {@fat=@flush}, {@shortname_winnt}, {@utf8}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@numtail}, {@rodir}, {@utf8}, {@fat=@discard}, {@utf8no}, {@rodir}]}, 0x1, 0x28e, &(0x7f0000001500)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x1000000, 0x0) 289.408027ms ago: executing program 0 (id=6): syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) unshare(0x2040400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000a}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 162.53911ms ago: executing program 1 (id=2): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc283, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x9, 0x80, 0x10000, 0xffffffff, 0x91b1}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x1ff}, @TCA_NETEM_RATE64={0xc, 0x8, 0xed33dd92214b97d}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(0x0, r7) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r9, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x3b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4f}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4040810) tee(r6, r8, 0xfffffffffffffc01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a10075089501093081"], 0x0}, 0x0) 0s ago: executing program 0 (id=7): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='extent_cache,acl\x00nolazytime,grpjquota=rootcontext,checkpoint=merge,heap,flush_merge,noinline_dentry,quota,grpquota=(:,age_extent_cache,heap,resgid=', @ANYRESHEX=0x0, @ANYBLOB="2c636865636b706f696e743d6d657267652c7375db6a5f757365723d3a7bc17b285c71002c7065726d69745f646972656374696f2c686173682c7375626a5f757365723d657874656e68652c646566636f6e746578743d7261636b66736465663d657874656e745f63616368652c7375626a5f7479f43133666f1fe17a7974696d652c00000000000000"], 0xf7, 0x555e, &(0x7f0000005a80)="$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") sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) bpf$MAP_CREATE(0x0, 0x0, 0x50) listen(0xffffffffffffffff, 0x80) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) syz_clone3(&(0x7f0000000140)={0xb600, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae03, 0x18) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x13244d8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESHEX, @ANYRES64=r3, @ANYRES32], 0xfe, 0x347, &(0x7f0000001840)="$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") capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f00000008c0)={0x103}) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.185' (ED25519) to the list of known hosts. [ 66.659363][ T5597] cgroup: Unknown subsys name 'net' [ 66.789016][ T5597] cgroup: Unknown subsys name 'cpuset' [ 66.798123][ T5597] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.215021][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.615261][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.618267][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.618663][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.619865][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.624406][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.631727][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.653092][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.653575][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.656548][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.659461][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.661087][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.661335][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.671089][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.672596][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.673120][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.673457][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.677528][ T4925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.678185][ T4925] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.679185][ T4925] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.683415][ T4925] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.691370][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.705773][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.709297][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.732750][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.734985][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.329073][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.329147][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.486935][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.487303][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.487427][ T5607] bridge_slave_0: entered allmulticast mode [ 72.489149][ T5607] bridge_slave_0: entered promiscuous mode [ 72.516239][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.516338][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.516750][ T5615] bridge_slave_0: entered allmulticast mode [ 72.518733][ T5615] bridge_slave_0: entered promiscuous mode [ 72.521843][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.521938][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.522049][ T5615] bridge_slave_1: entered allmulticast mode [ 72.523736][ T5615] bridge_slave_1: entered promiscuous mode [ 72.586020][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.586115][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.586194][ T5607] bridge_slave_1: entered allmulticast mode [ 72.587215][ T5607] bridge_slave_1: entered promiscuous mode [ 72.617303][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.617401][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.617511][ T5610] bridge_slave_0: entered allmulticast mode [ 72.619135][ T5610] bridge_slave_0: entered promiscuous mode [ 72.621346][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.621491][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.621830][ T5610] bridge_slave_1: entered allmulticast mode [ 72.623265][ T5610] bridge_slave_1: entered promiscuous mode [ 72.674306][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.677699][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.688077][ T5618] Bluetooth: hci1: command tx timeout [ 72.764427][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.764649][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.764812][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.764930][ T5609] bridge_slave_0: entered allmulticast mode [ 72.765588][ T5618] Bluetooth: hci3: command tx timeout [ 72.766858][ T5609] bridge_slave_0: entered promiscuous mode [ 72.769792][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.769886][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.770310][ T5609] bridge_slave_1: entered allmulticast mode [ 72.772054][ T5609] bridge_slave_1: entered promiscuous mode [ 72.775471][ T5618] Bluetooth: hci2: command tx timeout [ 72.775671][ T5618] Bluetooth: hci0: command tx timeout [ 72.775681][ T54] Bluetooth: hci4: command tx timeout [ 72.776456][ T5615] team0: Port device team_slave_0 added [ 72.780012][ T5615] team0: Port device team_slave_1 added [ 72.783864][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.788023][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.788202][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.788295][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.788403][ T5608] bridge_slave_0: entered allmulticast mode [ 72.790244][ T5608] bridge_slave_0: entered promiscuous mode [ 72.793198][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.793298][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.793461][ T5608] bridge_slave_1: entered allmulticast mode [ 72.795178][ T5608] bridge_slave_1: entered promiscuous mode [ 72.821289][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.946211][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.958665][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.960580][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.960593][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.960621][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.965994][ T5610] team0: Port device team_slave_0 added [ 72.969222][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.986165][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.999755][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.999770][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.999793][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.002933][ T5610] team0: Port device team_slave_1 added [ 73.059459][ T5607] team0: Port device team_slave_0 added [ 73.062845][ T5607] team0: Port device team_slave_1 added [ 73.112802][ T5608] team0: Port device team_slave_0 added [ 73.115274][ T5608] team0: Port device team_slave_1 added [ 73.119061][ T5609] team0: Port device team_slave_0 added [ 73.133724][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.133738][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.133760][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.152407][ T5609] team0: Port device team_slave_1 added [ 73.153343][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.153355][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.153378][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.156024][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.156036][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.156059][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.238530][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.238545][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.238567][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.242451][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.242464][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.242487][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.288027][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.288043][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.288066][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.301931][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.301946][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.301970][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.320418][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.320433][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.320457][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.339585][ T5615] hsr_slave_0: entered promiscuous mode [ 73.341113][ T5615] hsr_slave_1: entered promiscuous mode [ 73.378794][ T5607] hsr_slave_0: entered promiscuous mode [ 73.381306][ T5607] hsr_slave_1: entered promiscuous mode [ 73.383540][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 73.383636][ T5607] Cannot create hsr debugfs directory [ 73.461312][ T5610] hsr_slave_0: entered promiscuous mode [ 73.462335][ T5610] hsr_slave_1: entered promiscuous mode [ 73.463037][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 73.463054][ T5610] Cannot create hsr debugfs directory [ 73.544677][ T5608] hsr_slave_0: entered promiscuous mode [ 73.546224][ T5608] hsr_slave_1: entered promiscuous mode [ 73.547180][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 73.547199][ T5608] Cannot create hsr debugfs directory [ 73.599804][ T5609] hsr_slave_0: entered promiscuous mode [ 73.600436][ T5609] hsr_slave_1: entered promiscuous mode [ 73.601051][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 73.601068][ T5609] Cannot create hsr debugfs directory [ 74.064725][ T5615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.078848][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.081006][ T5615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.099746][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.102431][ T5615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.109032][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.110188][ T5615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.117628][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.193961][ T5607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.199468][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.200259][ T5607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.211732][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.214170][ T5607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.227566][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.229912][ T5607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.235842][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.332661][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.339813][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.354778][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.364652][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.380716][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.384750][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.408142][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.410703][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.479931][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.483513][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.496365][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.505056][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.518262][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.520446][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.524921][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.557093][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.559419][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.622139][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.652145][ T4094] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.652268][ T4094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.661390][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.686713][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.689538][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.690268][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.692830][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.694667][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.694723][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.706527][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.713334][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.731155][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.739955][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.769685][ T4925] Bluetooth: hci1: command tx timeout [ 74.782352][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.820420][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.823521][ T1491] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.823580][ T1491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.847820][ T54] Bluetooth: hci3: command tx timeout [ 74.847916][ T4925] Bluetooth: hci2: command tx timeout [ 74.859529][ T54] Bluetooth: hci0: command tx timeout [ 74.859604][ T4925] Bluetooth: hci4: command tx timeout [ 74.873425][ T1491] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.873484][ T1491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.936627][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.976653][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.976780][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.014797][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.014907][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.091955][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.206506][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.252619][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.252724][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.297643][ T207] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.297768][ T207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.329599][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.414248][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.469076][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.469300][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.483894][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.483975][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.842458][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.162573][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.380627][ T5607] veth0_vlan: entered promiscuous mode [ 76.454122][ T5607] veth1_vlan: entered promiscuous mode [ 76.510751][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.575095][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.641577][ T5607] veth0_macvtap: entered promiscuous mode [ 76.673359][ T5607] veth1_macvtap: entered promiscuous mode [ 76.729758][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.742659][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.768569][ T5608] veth0_vlan: entered promiscuous mode [ 76.806629][ T207] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.806886][ T207] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.806925][ T207] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.806958][ T207] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.824991][ T5609] veth0_vlan: entered promiscuous mode [ 76.848126][ T5615] veth0_vlan: entered promiscuous mode [ 76.857018][ T4925] Bluetooth: hci1: command tx timeout [ 76.869447][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.892352][ T5609] veth1_vlan: entered promiscuous mode [ 76.925643][ T54] Bluetooth: hci0: command tx timeout [ 76.925726][ T4925] Bluetooth: hci4: command tx timeout [ 76.926121][ T5608] veth1_vlan: entered promiscuous mode [ 76.930496][ T5615] veth1_vlan: entered promiscuous mode [ 76.937220][ T54] Bluetooth: hci3: command tx timeout [ 76.937294][ T4925] Bluetooth: hci2: command tx timeout [ 77.014133][ T1491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.014158][ T1491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.034891][ T5608] veth0_macvtap: entered promiscuous mode [ 77.059997][ T5609] veth0_macvtap: entered promiscuous mode [ 77.072958][ T5608] veth1_macvtap: entered promiscuous mode [ 77.100101][ T5609] veth1_macvtap: entered promiscuous mode [ 77.130985][ T5615] veth0_macvtap: entered promiscuous mode [ 77.133651][ T271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.133670][ T271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.137959][ T5610] veth0_vlan: entered promiscuous mode [ 77.148831][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.153165][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.171813][ T5615] veth1_macvtap: entered promiscuous mode [ 77.188621][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.205002][ T5610] veth1_vlan: entered promiscuous mode [ 77.217783][ T4094] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.223273][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.255666][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.260585][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.330363][ T207] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.330407][ T207] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.330440][ T207] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.402057][ T5607] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.417191][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.417208][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.425058][ T271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.425111][ T271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.425142][ T271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.425173][ T271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.425203][ T271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.425234][ T271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.425264][ T271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.426707][ T271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.450980][ T1491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.450998][ T1491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.499941][ T5610] veth0_macvtap: entered promiscuous mode [ 77.582353][ T5610] veth1_macvtap: entered promiscuous mode [ 77.639961][ T5808] loop0: detected capacity change from 0 to 256 [ 77.761618][ T4094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.761639][ T4094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.787197][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.827138][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.926119][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.926152][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.994839][ T271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.994859][ T271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.058050][ T45] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.059467][ T45] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.142440][ T271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.145217][ T271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.184260][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.184279][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.300596][ T4094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.300617][ T4094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.328061][ T5815] loop0: detected capacity change from 0 to 40427 [ 78.342641][ T5815] ------------[ cut here ]------------ [ 78.342654][ T5815] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:3950:27 [ 78.342672][ T5815] shift exponent 4294967287 is too large for 64-bit type 'sector_t' (aka 'unsigned long long') [ 78.342702][ T5815] CPU: 1 UID: 0 PID: 5815 Comm: syz.0.7 Not tainted syzkaller #0 PREEMPT(full) [ 78.342729][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 78.342749][ T5815] Call Trace: [ 78.342757][ T5815] [ 78.342770][ T5815] dump_stack_lvl+0xe8/0x150 [ 78.342809][ T5815] ubsan_epilogue+0xa/0x30 [ 78.342829][ T5815] __ubsan_handle_shift_out_of_bounds+0x36d/0x400 [ 78.342861][ T5815] ? folio_unlock+0x101/0x160 [ 78.342885][ T5815] __f2fs_commit_super+0x43e/0x4d0 [ 78.342916][ T5815] sanity_check_area_boundary+0x7c5/0xe20 [ 78.342959][ T5815] f2fs_fill_super+0x1920/0x7fa0 [ 78.343008][ T5815] ? set_blocksize+0x1c9/0x440 [ 78.343048][ T5815] get_tree_bdev_flags+0x430/0x4f0 [ 78.343076][ T5815] ? __pfx_f2fs_fill_super+0x10/0x10 [ 78.343100][ T5815] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 78.343134][ T5815] vfs_get_tree+0x92/0x2a0 [ 78.343158][ T5815] do_new_mount+0x319/0xdc0 [ 78.343191][ T5815] ? __pfx_do_new_mount+0x10/0x10 [ 78.343220][ T5815] ? ns_capable+0x84/0xe0 [ 78.343247][ T5815] ? path_mount+0x647/0x1050 [ 78.343274][ T5815] ? user_path_at+0xd4/0x160 [ 78.343295][ T5815] __se_sys_mount+0x31d/0x420 [ 78.343319][ T5815] ? __pfx___se_sys_mount+0x10/0x10 [ 78.343342][ T5815] ? __x64_sys_mount+0x20/0xc0 [ 78.343360][ T5815] do_syscall_64+0x166/0x520 [ 78.343386][ T5815] ? trace_irq_disable+0x3b/0x140 [ 78.343410][ T5815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.343429][ T5815] ? clear_bhb_loop+0x70/0xc0 [ 78.343453][ T5815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.343473][ T5815] RIP: 0033:0x7feaadf9f3ca [ 78.343499][ T5815] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.343526][ T5815] RSP: 002b:00007feaaedd9e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 78.343547][ T5815] RAX: ffffffffffffffda RBX: 00007feaaedd9ee0 RCX: 00007feaadf9f3ca [ 78.343563][ T5815] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 00007feaaedd9ea0 [ 78.343578][ T5815] RBP: 0000200000000040 R08: 00007feaaedd9ee0 R09: 0000000000000000 [ 78.343593][ T5815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000240 [ 78.343606][ T5815] R13: 00007feaaedd9ea0 R14: 000000000000555e R15: 0000200000000780 [ 78.343635][ T5815] [ 78.343871][ T5815] ---[ end trace ]--- [ 78.343890][ T5815] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 78.602247][ T5815] CPU: 1 UID: 0 PID: 5815 Comm: syz.0.7 Not tainted syzkaller #0 PREEMPT(full) [ 78.611261][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 78.621309][ T5815] Call Trace: [ 78.624580][ T5815] [ 78.627505][ T5815] vpanic+0x26f/0x710 [ 78.631516][ T5815] panic+0xc5/0xd0 [ 78.635232][ T5815] ? __pfx_panic+0x10/0x10 [ 78.639643][ T5815] ? __pfx__printk+0x10/0x10 [ 78.644235][ T5815] check_panic_on_warn+0x89/0xb0 [ 78.649166][ T5815] __ubsan_handle_shift_out_of_bounds+0x36d/0x400 [ 78.655581][ T5815] ? folio_unlock+0x101/0x160 [ 78.660253][ T5815] __f2fs_commit_super+0x43e/0x4d0 [ 78.665393][ T5815] sanity_check_area_boundary+0x7c5/0xe20 [ 78.671127][ T5815] f2fs_fill_super+0x1920/0x7fa0 [ 78.676082][ T5815] ? set_blocksize+0x1c9/0x440 [ 78.680861][ T5815] get_tree_bdev_flags+0x430/0x4f0 [ 78.685969][ T5815] ? __pfx_f2fs_fill_super+0x10/0x10 [ 78.691261][ T5815] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 78.696912][ T5815] vfs_get_tree+0x92/0x2a0 [ 78.701329][ T5815] do_new_mount+0x319/0xdc0 [ 78.705838][ T5815] ? __pfx_do_new_mount+0x10/0x10 [ 78.710871][ T5815] ? ns_capable+0x84/0xe0 [ 78.715204][ T5815] ? path_mount+0x647/0x1050 [ 78.719803][ T5815] ? user_path_at+0xd4/0x160 [ 78.724392][ T5815] __se_sys_mount+0x31d/0x420 [ 78.729063][ T5815] ? __pfx___se_sys_mount+0x10/0x10 [ 78.734262][ T5815] ? __x64_sys_mount+0x20/0xc0 [ 78.739028][ T5815] do_syscall_64+0x166/0x520 [ 78.743618][ T5815] ? trace_irq_disable+0x3b/0x140 [ 78.748636][ T5815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.754698][ T5815] ? clear_bhb_loop+0x70/0xc0 [ 78.759379][ T5815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.765265][ T5815] RIP: 0033:0x7feaadf9f3ca [ 78.769673][ T5815] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.789279][ T5815] RSP: 002b:00007feaaedd9e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 78.797692][ T5815] RAX: ffffffffffffffda RBX: 00007feaaedd9ee0 RCX: 00007feaadf9f3ca [ 78.805661][ T5815] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 00007feaaedd9ea0 [ 78.813622][ T5815] RBP: 0000200000000040 R08: 00007feaaedd9ee0 R09: 0000000000000000 [ 78.821587][ T5815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000240 [ 78.829559][ T5815] R13: 00007feaaedd9ea0 R14: 000000000000555e R15: 0000200000000780 [ 78.837552][ T5815] [ 78.840860][ T5815] Kernel Offset: disabled [ 78.845181][ T5815] Rebooting in 86400 seconds..