last executing test programs: 33.959400753s ago: executing program 0 (id=418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) 30.613772338s ago: executing program 0 (id=424): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000480)=""/179, 0xb3}], 0x1, 0x4f, 0x0) 20.065325878s ago: executing program 4 (id=447): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) eventfd2(0x8, 0x4cd3af6c9b548e7f) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x121080, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') openat(r2, &(0x7f0000000080)='can/rcvlist_eff\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close_range(r0, 0xffffffffffffffff, 0x0) 18.999598165s ago: executing program 0 (id=450): socket$inet_tcp(0x2, 0x1, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ptrace$setregs(0xf, 0x0, 0x7, &(0x7f0000000180)="2461054baa685c3cffa82f91d32e660d08d698713eb414e7aed127af836e0251f35a2280f7b534115014df8acf0d02") sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}}, 0x4044890) dup2(r1, r0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf5) r2 = gettid() rt_sigqueueinfo(r2, 0x14, 0x0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 16.810309771s ago: executing program 3 (id=451): timer_create(0x8, 0x0, &(0x7f0000bbdffc)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) timer_delete(r0) 16.725776323s ago: executing program 4 (id=452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(0x0, 0x6) get_mempolicy(0x0, &(0x7f00000001c0), 0x401, &(0x7f0000b35000/0x2000)=nil, 0x2) 15.077854805s ago: executing program 4 (id=453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) 13.32741847s ago: executing program 3 (id=455): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b703000008000000850000006900"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000c80)=ANY=[], 0x1, 0x5f2, &(0x7f0000000680)="$eJzs3c9vHGcZB/DvrH9kHaTUcZM2oEpYRaoQFsnalkjKBSgFWahClThwtoiTWNmkle0itwcIiEPFqX9CEfI/gDgWKQfaAwc49WzUIxJ33xbN7Ox6nWzcxDbedfr5SLPzvPvOvPPMs7OTmbWiCfCVtbKQyYcpsrLw1nbZ3t1Zbu/uLN/rxUnOJWkkzSRFZpK/JvkieZDulK9XHV3Fk7bz+SfN25999OmH3VY5VrOY7C5fHLbe0+nnMtvNtZqf1HhLxx/vwB7OJZk/9nhwAjo9/x7afczvJQAwzopkYtj7s8n5+oK9vA/oXhV3r7HPtAejTgAAAABOwQt72ct2Low6DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhL6uf/F/XU6MXzKXrP/5+u30sdn2kPR50AAAAAAAAAAJyAb+5lL9u50Gt3iupv/q9WjUvV69fyXjazlo1czXZWs5WtbGQxyezAQNPbq1tbG4tPsebS0DWXTmd/AQAAAAAAAOA59fus7P/9HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxkGRTHRn1XSpF8+mMZmkmWS6XO5B8q9efJY9HHUCAAAAcApe2MtetnOh1+4U1T3/S9V9fzPv5X62sp6ttLOWm9VvAd27/sbuznJ7d2f5Xjk9Pu6P/vtMaVQjpvvbw/AtX6mWmMmtrFfvXM2v8k7auZlGtWbpSi+f4Xn9rsyp+EHtKTO7Wc/LPf9ZPR8Ps1VFpvoVadW5ldW4eHglnvHTeXRLi2n0f/m59H+o+fl6Xu7Pm2Nd86WBo++lwyuRzP3yj9fvtO/fvXNrc2F8dumIHq3E8kAlXv5KVaJVVeJyv72Sn+YXWch83s5G1vPrrGYra5nPm1W0Wh/P5evs4ZX64YHW21+WyXT9uXTPos+W06vVuheynp/nndysPtFWrud6lvK9vJ7WgU/48tC8f9upu/c6nU4az/at/9a362AqyU/q+Xgo63pxoK5TuTXR65ut+gbPwvtVmjv5c+PkN+qgPHreGLtz48VH/pXoVeLFwypR5E/VgbPZvn93487qu0+5vdf6qyc/7ldisn63MzG6A6g8Xub6uRw8Osq+F4f2LVZ9l/p9jcf6Lvf7vuybOl1fwz0+0lLV9/LQvu56Vwb6hl1vATD2zn/n/PTMf2b+OfPxzB9m7sy81Xzj3I1zr0xn6u9T359sTbzWeKX4Sz7Ob/bv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKPbfP+Du6vt9trGkYPek4iOO85zEfSejjcu+QgERwxGeVYCTsO1rXvvXtt8/4Pvrt9bvb12e+3+660bNxYXF6+3rt1ab6/Vr6POEgA4SfsX/aPOBAAAAAAAAAAAAAAAeJLT+O/Eo95HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+baykMmHKbLYutoq27s7y+1y6sX7SzaTFGXwtyRfJA/SnTI7MFzxpO18/knz9mcfffrh/ljNavl/LJ3EXhzIpfFITscdb2lgvD8fabiiX5n5JHP1HEbufwEAAP//86ICBQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) 13.207919663s ago: executing program 0 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=ad,norecovery,fsync_zode=posix,user_xattr,disable_roll_forward,\x00\x00\x00', @ANYRESOCT, @ANYRES8, @ANYRESOCT=0x0, @ANYRESDEC], 0x4, 0x105ea, &(0x7f000001d600)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) fstat(r0, &(0x7f0000000700)) 12.889723891s ago: executing program 1 (id=457): syz_usb_connect(0x5, 0x4e, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) syz_usb_connect$uac3(0x2, 0x80, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) 11.717942631s ago: executing program 4 (id=458): socket$netlink(0x10, 0x3, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x20800) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'pcl711\x00', [0x6, 0x7fff, 0x1, 0x1, 0x1, 0x949, 0x9, 0x10000, 0x7d8, 0x7fff, 0x630000, 0x6, 0x2, 0x1, 0x1000, 0x0, 0xfffffff9, 0x10001, 0x8, 0x3ff, 0x3, 0x2, 0x0, 0x53, 0x0, 0xd4, 0x7, 0x8, 0xfffffe00, 0x8000, 0x9, 0x2]}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) socket$nl_xfrm(0x10, 0x3, 0x6) 9.660397484s ago: executing program 3 (id=460): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000480)=""/179, 0xb3}], 0x1, 0x4f, 0x0) 8.724116577s ago: executing program 2 (id=461): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2284, 0x0) 8.588787401s ago: executing program 1 (id=462): openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x200a}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 8.163310151s ago: executing program 2 (id=463): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(0x0, 0x6) get_mempolicy(0x0, &(0x7f00000001c0), 0x401, &(0x7f0000b35000/0x2000)=nil, 0x2) 7.669769454s ago: executing program 0 (id=464): syz_open_procfs(0x0, 0x0) r0 = socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x2, 0xa475, 0x7fff, 0xbb}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xef}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r8}, &(0x7f00000007c0), &(0x7f0000000640)=r7}, 0x20) 7.513074508s ago: executing program 1 (id=465): r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x40000) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000002040)={0xf0f080, 0x5}) 6.28794512s ago: executing program 2 (id=466): syz_usb_connect(0x5, 0x1b, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0x76, 0x80, 0xd6, 0x8, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x6, 0xa1, 0xa0, 0xf3}}]}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0xfffffffc, 0x0, 'queue1\x00', 0x7e}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 5.277108925s ago: executing program 4 (id=467): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, 0x0, 0x20000000) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r2, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 5.202130467s ago: executing program 0 (id=468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) 4.752107529s ago: executing program 1 (id=469): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_lower}, {@utf8}, {@fat=@dos1xfloppy}, {@shortname_mixed}, {@shortname_mixed}, {@rodir}, {@shortname_win95}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlate}, {@rodir}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@rodir}]}, 0x1, 0x287, &(0x7f0000001240)="$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") ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket(0x23, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(0x0, 0x1ff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 0x9}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x18000000000002a0, 0xff5c, 0x0, &(0x7f00000002c0)="0300000000000000ff9e14f086dd", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xb, r3, &(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1008800, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES8, @ANYRES64, @ANYRES32=r3], 0x26, 0x7fb, &(0x7f0000001700)="$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") r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x4, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x2, 0x1, 0x0, 0x3, 0xf, 0x0, 0x0, 0x40000000, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_lifetime={0x4, 0x2, 0x5, 0xd52d, 0x8, 0x8}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0xd8}]}, 0x78}, 0x1, 0x7}, 0x0) 3.557076179s ago: executing program 3 (id=470): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b703000008000000850000006900"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000c80)=ANY=[], 0x1, 0x5f2, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) 3.265824877s ago: executing program 2 (id=471): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b703000008000000850000006900"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000c80)=ANY=[], 0x1, 0x5f2, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) 2.340494771s ago: executing program 3 (id=472): syz_usb_connect(0x5, 0x4e, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) syz_usb_connect$uac3(0x2, 0x80, 0x0, 0x0) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) 2.335664701s ago: executing program 4 (id=473): socket(0x10, 0x3, 0x0) syz_mount_image$udf(&(0x7f0000000300), &(0x7f0000000740)='./file1\x00', 0xa00204, &(0x7f0000000000)={[{@rootdir={'rootdir', 0x3d, 0x2}}, {@gid_ignore}, {@umask={'umask', 0x3d, 0xb69}}, {@gid_forget}, {@nostrict}, {@utf8}, {@longad}, {}, {@nostrict}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@undelete}, {@gid}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@bs={'bs', 0x3d, 0x3}}]}, 0x5, 0xc87, &(0x7f0000000780)="$eJzs3U1sHNd9APD/G5LiSm5jJk4VJ42DTVukMmO5+oopW4W7qmm2AWRZCMXcAnAlUurCFEmQVCMbbsv00kMPAYqih5yItkKBFA2Mpgh6ZFoXSC4+FDn1RLSwERQ9sEWAAC3SDWb2rbiiSOuDEkXJv59N/Xdn3pt5H6sZiuB/XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/96ukjR9MWO/oeQmMAgF1xdvwrR45tdf8HAB5b57f79z8AAAAAAAAAAAAAALBXpCjiqUgxf3Y9TVbvO2pnWgNXr02Mjm1dbX+qavZV5cuv2tFjx0986YWRk914pjX7IfXvt8/E6+PnT9dfmbsyvzC9uDg9VZ+YbV2cm5q+4yPstP5mw9UA1K+8cXXq0qXF+rHnj9+0+9rQB4NPHBw6NfLs4We6ZSdGx8bGN4rUesv333NDOrbL8NgXRRyOFM9958epGRFF7Hwsars795vtrzoxXHViYnSs6shMqzm7VO481x2IIqLeU6nRHaOt5yL6B3a1D9trRCyXzS8bPFx2b3y+udC8MDNdP9dcWGotteZmz6VOa8v+1KOIkyliJSLWBm893EAU0R8pvvXkerqQn/pRjcMXq8Tg7dtRPMA+3oGynfWBiJXiEZizPWwwingtUvzk3UNxMV9nqmvNFyJeK+P3Iq6X8eWIVH4wTkS8v8XniEdTfxTxp+X8n1pPU9X1oHtdOfPV+pdnL831lO1eV+7y/nDLlWIX7g9/ucW2/Zvi7tjj16ZaFNGsrvjr6d6/2QEAAAAAAAAAAAAAAADgftsfRXw6Urz6r79f5RVHlZf+5KmR3xn6xd6c8advc5yy7PMRsVzcWU7uvpwYeC6dS+kh5xJ/lNWiiD/I+X/feNiNAQAAAAAAAAAAAAAAAAAA+Egr4keR4qX3DqWV6F1TvDV7uX6+eWGmsypsd+3f7prp7Xa7XU+d2MhxMsflHFdyXM1xLccocv0cGzlO5ric40onfqx7vrW8Pfpy/RwbOU7muJzjSo6rOa7lGP25fo6NHCdzXM5xJcfVHNdyjD2ydi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOOkiCJ+Fim++fX1FCkiGhGT0Ymrgw+7dQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAaTAV8d1IUf/dxo1t/RGRqv87DpV/nIjGvjJ+IhojZXw5GqdzbFaxv/GNh9B+dmYgFfHDSDFYe+fGhOf5H+i8u/ExiOtvb7z7TH8n9nV3Dn0w+MTBJ0+NjH3u6e1ep60aMJxi9uq1+sTo2Nh4z+b+fPZP9Gwbyuct7k/XiYjFN996ozkzM71w7y/Kj8A9Vu/O5A7OvpsvUv9Dbur/74FBuLsXsdyZ4b3Snrt7Ef0P7+wP++/FzdeJ2m5fmNgV5f3//UjxG+/9W/eG37n/1+IXOu9u3OHjp3+4cf9/afOB7vD+37+53vCZVnn/L+8EW93/n+rZ9lL+bmSgP6K2dGV+4GBEbfHNtw63rjQvT1+enj1x5MiLIyMvHj8ysC+idqk1M93z6r4MFwAAAAAAAAAAAAAAAMDuSUX8VqRo/nA91SPiWpWvNXRq5NnDz/RFX5VvdVPe9uvj50/XX5m7Mr8wvbg4PVWfmG1dnJuavtPT1ap0r4nRsQfSmdva/4Dbv7/2ytz8mwuty7+3tOX+A7XTFxaXFpoXt94d+6OIaPRuGa4aPDE6VjV6ptWcraqe2zKZ/u4NpCL+PVJcPFFPn8/bcv7/5gz/uP72izc+C8ubD3TP+f+d/L/e/P/PHdjI//t4T9HynCkV8dNI8et/9nR8vmrngbhlzHK5v44Uwyc/m8vFvrJctw2d5wp0MgPLsv8dKf7+ZzeX7eZDPrVR9uhdDe4joJz/JyPFd//k2/EredvNz3/onf+N8Tuw+UD3cf6jJ//zkz3bDtz0vIIdd508/4cjxctPvRO/Wm353w99/kf3iQ2HOoU3ns/xgOb/l3q2DeXz/tr96jwAAAAAAAAAAMAjbCAV8TeR4vtj/emFvO1Ofv9vavOBHtDvf32qZ9vU/Vmv6LYvdjyoAAAAALBHDKQifhQpLi+9cyOH+ub87578z9/cyP8cTZv2Vj/n+1j13ID7+fO/XkP5vJM77zYAAAAAAAAAAAAAAAAAAADsKSkV8UJeT32yyuef2nY99dVI8ep/PpfLpYNlue468EPVn7Wzc7OHT8/MzNViqXlhZro+Pt+8OF3W/WSkWP+rz+a6RbW+ene9+c4a7xtrsS9EirG/7ZbtrMXeXZu8sx54rd2OOFqW/Xik+I+/u7lsXpo6rx1dHfdYWfYvIsXX/nHrsgc3yh4vy347Uvzga/Vu2QNl2e7zUT+1Ufb5i3PFA5gVAAAAAAAAAAAAAAAAAAAAPmoGUhF/HCn+68rKjVz+vP7/QM/byvW3e9b73+Ratc7/ULX+/3av72X9/+q5AsvbnRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5PKYp4K1LMn11Pq4Pl+47amdbs1WsTo2NbV9ufqpp9Vfnyq3b02PETX3ph5GQ3fnj9++3T8fr4+dP1V+auzC9MLy5OT9UnZlsX56am7/gIO62/2XA1APUrb1ydunRpsX7s+eM37b429MHgEweHTo08e/iZbtmJ0bGx8Z4y/QP3fPZbpG2274si/jxSPPedH6fvD0YUsfOxuM1n50HbX3ViuOrExOhY1ZGZVnN2qdx5rjsQRUS9p1KjO0a3nYv/a7fbu9WVLTQilsvmlw0eLrs3Pt9caF6Yma6fay4stZZac7PnUqe1ZX/qUcTJFLESEWuDtx5uIIp4I1J868n19E+DEX3dcfji2fGvHDm2fTuKB9jHO1C2sz4QsVLcyZyxncEo4h8ixU/ePRT/PBjRH52v+ELEa2X8XsT16Mx3Kj8YJyLe3+JzxKOpP4r4n3L+T62ndwfL60H3unLmq/Uvz16a6ynbva7s8P7Qbrf/qIwP7/6wm/b4takWRfyguuKvp3/x9xoAAAAAAAAAAAAAAABgDynilyPFS+8dSlV+8I2c4tbs5fr55oWZTlpfN/evmzPdbrfb9dSJjRwnc1zOcSXH1RzXcowi18+xUcZauz2Z3y/nuJLjao5rOUZfrt9XpSu2G/n9ZI7LOa7kuJrjWo7Rn+vn2MhxMsflHFdyXM1xLcfYI7l7AAAAAAAAAAAAAAAAAADA46Wo/kvxza+vp/ZgZ33pyejEVeuBPvZ+HgAA//9+4PKL") 2.307301201s ago: executing program 1 (id=474): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_lower}, {@utf8}, {@fat=@dos1xfloppy}, {@shortname_mixed}, {@shortname_mixed}, {@rodir}, {@shortname_win95}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlate}, {@rodir}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@rodir}]}, 0x1, 0x287, &(0x7f0000001240)="$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") socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket(0x23, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(0x0, 0x1ff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x18000000000002a0, 0xff5c, 0x0, &(0x7f00000002c0)="0300000000000000ff9e14f086dd", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xb, r2, &(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1008800, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES8, @ANYRES64, @ANYRES32=r2], 0x26, 0x7fb, &(0x7f0000001700)="$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") r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x4, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2) 1.200392109s ago: executing program 2 (id=475): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000b40)="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", 0x403, r0) 393.97211ms ago: executing program 3 (id=476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(0x0, 0x6) get_mempolicy(0x0, &(0x7f00000001c0), 0x401, &(0x7f0000b35000/0x2000)=nil, 0x2) 259.837734ms ago: executing program 2 (id=477): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003680)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}], 0x1, 0xc044) sendmsg(r0, &(0x7f0000001e80)={&(0x7f0000000280)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000300)}, {&(0x7f00000003c0)="9eefebf5222035210789155ea4433a03c6947be6785fbd7ace094a0ec13262a1a8c751eebe", 0x25}, {&(0x7f0000000400)="e4463e87e5d5c2ccd1a103082761fbbd774dc8aba9a1fb4864be3d27d5e1d191bec58ee6a872839b7f7430aecf5cb8238265715890601b20a8badc371fa4a2fdf01e513bec253dfe5c1d8563af337b044229e13dde311c0146732ec767e3f8f83605349612cdc6b6c43ae28ae9cd0d2fcbbd1e2cb04aa48574f7c2bda82526f7d0215d5ab9701e1c", 0x88}, {&(0x7f0000000640)="3151407fed578ca046e47cda5b664ca2f8ac8fd4f55791beea9d76fe671386c894421230d59e4026eae95b7606500c7385d6cf3875886a8c92018af2a493d48960744801586c3a807ff66318913910fc4f0d29c6", 0x54}, {&(0x7f0000000700)}, {&(0x7f0000000b00)="a0f918807c9ecba01d1b8cd3b14426682c08f2a67dcee3b4854de8499565e31538fd003ce361372421aff108bbea950d604b6a3b1d51c619d84d055825dfe979af27c9f2a4015bd47122992c1cf8c805fec60f08147885ab8a80d4f7e950df135f3fcfe301b5cea8bbe81c01896a17e83e4194d9bcf4e7dc3a13c7b9084eaa0429467ffc583ad624b41b087cd54d26bcb99068b5e1b0d3b4139097c0817122756e0c4f56fb4b3a11f5e8b1a5a8234d8a648e7a9f8ec4f4b479f40dfee64ed3fa52540d28bc0e5e4022e721bfefe94f6dd038b4b6dd49b51a53b025b67ba8ef2fa6c68ba6a671d72f40055f076a198c055a72697d2fb2130d20042259bafd99e19b00a6498d4983fb89d8a2918bdfa05d3a7f13313f68af0695084f96b5ce9f278e31e30198f4d20903b024147966e104d6d3564fb6ff71fb6db2c9ab9ecebe32bf53b8dfbe1a24104c7ef537a9665fd7d13cc80fd720dcb63bbdc492d9acccbd5c8f85faa58a76edbe10486939fb80b5b1a065b9cd5d2cd4f9c85ba2d859a28d70a8ce27da47e68b6f0e9d282e5050027163c7fff2bb52675ec417588afe14cc271fa6f01c3bfe6664cd7b8a820f6cb211d708c2fbc3c944fcda70d44a629b273b445238813668f5af6c46976d08ee30ac417d7c40c296c9fefa36f9ede8e437b05f23946835038c40f515f784ee3d02112e6bea140c4673062fd83c98a50a8d8f2264c338b61d4a72b3ae0f7522290cc1696601622409736fb899d11350b8e80a522eeade1b2a2ed64e910f7a5442fa368844c000c70ac61b47fe1c74cb3ee639f512f2d933e1153b9cbb4323afaf9b1a800857b6e3c0bfab6fe3e87597f4ffd0e9bd45aea3c1f9d1c79076d6ff14f9c64f3503c8893ffb3ba759dece1d11b9b3b2dc481b05814d84ead0178d6e6602d8dbe4ec78a160bed87566c20717c9002a3a566b014d8fc48af7f13450520412933727bb68a1e788e639c564da6122ccf2e1bb0a77c96b852d18dcf93e614ad969cf1d0e2d6912a30976264ee6180c17762c3dd6b717e74ae507770c4713a59ec7191404443be9161dd8b59768a764ac0e618566364f1e3c5bb7d58060e52f6e1b0ac2f2872d6b963f7fb2945d481c7b60cf912210c0642c5b907788ba63bd8921bf090c3394367ddffb050cb76984e8c0c22fea32d8f64bcb7b4f683600d19959a37342a4ec4002195df57540bd914a9cc1ca96a039df49984d006ec815f42f7ee41bfdae5daa5702205d46447627a22aaa51cef79b9343ab5fbbd344b021e88c090192478c01ee004d966fe54ba1265690baa3079db2ad3dcdac102967ee9b3cf34a2e8cdd03ca814f8acbe01d1060a21931cc46df8fa5992fa2ff605a17d46c579b8867a39d644e88bbb552e1eebb8238f7f85613f481b1a69f549e371b7e7b3e2b2f910a7f450ffc5f010a5be0ccbd6e0a314042a24ee4986238a6d55a76841723802900931a17cb8c1fe2fb0d6ab36d434428f0221a038517209c4c78c9bcde4bd2e5a68a6326918a65719f9a6ee84453714136217772f5f38afbf56b96172bad43f7784bfc7ba4b7e70d408e61bbbd66acf8c136b2b6c76c6a986ac952b402c32cbaaaad4e02321f14be80feff82adcefa19d88b81a6932fd89a87705e2b6e6a52950262ae8ba97c309e82975bde9ffcdac529a23c8bbb91b91e94e7bba75ee87086c75d5d1c20b522a71e66bf84fa38f9d24dd6d59112c560caf417d6b0d81cfa5685daca4df30d711c7213ca8648a0b68de9f1214f1ea04823b8e4c79666246f9ab6d2cdf61869a66b683745b9d2a92c7d21ce093d0031b0540e6d7403e42a72d327cb8987aafc3c99c9a14c583f219a4a9585c133f3c4ca812dd4763ad17c71ad3b932b9129d3fd38a964eff5f9b403e9ccf16f6a9d9ed178163d6287fd4997ad2a4d3e4f288c5b315fa279f79c92e39215b5a6b4512418cd3cafaa6b7eafedd964587531685ccab3b5e52a214625d4ed1fd608df7abad9777c0920be8bb9028f4f566b7daba0e7411e6f31205a599c2a8c4e2d2ada12b2306f1cf0fe51e1a0c7052bbc9a8031d277afdf837d71f489aa6611f5ab1d8f7d379c4de5a3a0f7e7567ca5d9f6ef580ad7f296428001a61495e9c8862a09c652213e5aa0d488dbe8438fd8f16fe68e8693c4de3a58510a2b0d4c630f9aa328920e5a0374380300360a80ec4f59c7cc11ce656f0f8d35b1705262cd65b929a95d97b19d0da4f3c8893ee7fad34aeea816ac70e857ae31cad284a2bd45d2307d72345327df2d2129460d6912006cca9fa82c59e3fad1922f89da507832d7b26033318cd626911a1dbce32630cc7240710713daa76318afc2d8ddfb7e5bfb4988f9172b7ea2086d190a7a7882fd9a69df2c7811eaf26412fdfa39b0c7c96070369bdcadb4875ccd9e51157689cad1e2c21ff3bed0d7ad64fdda62feb8e28407ebca3c40029486409eaf3457b41327ca314efe369bd092729a10bfe2fe4b6c26c7f2914850c2b0eb533c17f798542fa63965d4b899393fd063a111e6cb63ad01a0ac1a7a80859940c291f36aaa803050c5d0b07419886e71fcd284e1567e611f289705e53c1fe7aa2f07f52c2c1b58c79ac5cfab7c245644aa567330094af2ea36cccf90387fbed3a16589566fb45d3bd7e9db6c99e0b1d74ea667db7250019d7af3b799cde7dffb0502b1a6d900dcd4effafcd2d82e65b2b5675269e763c0360bf334e851e13594206f1371271085ce47c1a27b1a749bbd7002d76ce7ed9b383a5843b57472f0adaaab2587ef17f1eccc68fb7e27ac23efb13066ca1d3d1cf6fa905ca2683c555d51d63fbb74ea4ae0d29e80226a24daac148bcf0b5f938ee2a4a9ca08565a5c4c742a60164d7bf70d0d09110179711c0a887ec86525c22e42586ad4f0a8978b21712aa63da266e3dfd3175cfafefdf78eca6cf7045f559dbfcefd6dfe5abd296658534f29ba4d6db92900899c27bd218ebec4f1beb256241e19bb042a4c50ac312deee54b2279308070ca90adcb90d0c8ffaeb1ec660a5786cee544dee1d1e4b20d5827532acb17cdae495927a95a1c906b57647e0b9329863186ab9ae07c212d3cf44f4c3d3151694db7641d3f00130067a511d0b6fa4003407b15ca5a4895c5047e6cea6c54b73ae166b126b045041f3784fc9eb9c6c9521ffdf4d1a4b8c640ac945797978f7d8dfe0e6a040680ec18362fd2bd166f33d3d9e9cafec47391f3b78f035208fafd6d0e1cbbb4fabb6c5a46aedb27dfadec2da8e9b6c688d63eba5b9df45130f6a5f1614b29a5c856fb88fcd4295f20266ecfaa0f585e8e843d953efec3ac188720ce0dcc3409ceed2fc47618354d74277335acbb48da5ed8a874cad5bc8912e2fd5d83ed749d638c210fd23fd4b1aecf7ad12d8b44103364d09359f2185c6c965b1d567e5a5e674f43e18492397ed18cea4064b42e954691044b9861839199635ac44b013227be37c1cc83af245897301c88351c489c9cfdd4b465f0fc8184143517ed1ce8aeab0c1fe46c6b59de3a6ef1322e98007f0d8f400921e82bd59e969ab84d1cd0cdff096b7ca7fefe3ffa57c6898032f6bce63b150d874aa1face9b3e7a957c64e473603102f68efbeb3fa33237c652d22f27eb6917056c35ca3ed099b895a468de73acc5efebc268118f4ceda081beee91e21eb44d5f3b8f9e496b07416e2a32c282683151210d092340a669c477d8d58b632b39a4eed62e83c96b34813fbebcc24b7be230f2933be14c412455c758de1d35eead923a797d761792af4ee98a85430d2bf29aff50f678b10956291bc37cb41b90b59c35d4bbf3cb3f461440ee505552671fc310891f36e8bd827380502b7e786b69eeba68fa46d2c8b18c52c5ca132c6dc6d36217dd628bdc9a04fd31fbc98090be2d3c93bf84aa523ba07b87bfaad92a20ab6086673768c81ccc3ef9b6b04a2137a770f64b3b714bc11340e55035bdf93b7db2991a57f40e9f7ff6aa46bf2d092535806278683ff7de139e787982742b0aa09c020bef910723b9b689750c9639ec7284435900a10dd9ebaeecc2f412ce36ea7d32f9a50d7d3fe02a3829f636145ce8e1255f121e3d1478e1338dcf46d0858052c9fe0d30b698dd6af684459889353ecee6e56bd8f13386a1f0fda7743177aa6664d99d9c8661595e41e814c84bc03199c3fd0effd2d863f64fcc4ba14b552cb46b22301a3e75f2d089c8af2efadcea98cc133218e51b0560f4ed8f0a9a7b3b2d8e19a9164d99de1896d6fe77fd001fc57b734af9e6f9f08257906219c37243bf751291109592a054aa1d063bde75b90ce417009ac28c68cd712075e80bedba57954fe26b8dd3f6308981ec3391ada06daf1b9f6b2a268c9bdf58f1cb4ced91a1da41b2d6312a0cac9ef78712b5352b89c7d7a9862cc070d58756751602b694708282545867965a1ea4a9a82f28dbbe341e2dc7414cf7d45c8f1d9c5667165277dc109fb55074dacab462b4baafe78bec87943cdeca6f2e81d3d4f7f25e79210137f874b8c591b4448f82dfc5287fd7e5f6022208a3c7cf8390036b7df99de13ea3e73db46897503ccbda3076daef4302e3eeeb9b4fbfb4b08d4b132a112bce7ed4ad5f743d3ae35d3f12237eb82db6b5aa04313bc59b82689ed9e3296a980070bcf325534f1015b4ff0cacf3cf5fa7177b69ddd156aad38ea5006f6e5ba285432c1affbe1c360cb8f8ef99e151faa72352db21aa1c1a25bcfb9cad59f96510b74b11a67c062e24bd96a8d8818a7a2a25615eeb0512d1a6946c48d1b1336195b1f1fe4071a2f8ff698c37a0964eaa278bbbbef39f197bd73f6eda66a26ba58e584f7622d6e0cbee7ea34f4aa67b9d97b4ef455096936412524437d7e0c550848df8772544028325b7f7df6b31ded0fe645b37998192b13fa0068395aefc12fc0adf9b109f4784f207ac863a7fd9e17e069db5057ac8e17883c99b2101fc5b420d00f11fa1342c2aaa35d2e39d604ffab563408651a7c3dbd35be68654f662941a8e48a1b79d1ff9c351b2a22fea9b31c46dcaf3f72cb30764814badf748fb14123aab841c47497a5c57552e6a4b463b51565f33e4da229701a688fa335c8d28353dfcf16e44fb33bc92fa14ab59192a8b2b950b8d76f6b17c4df9c19cf4ce3a9f38f36f8197b22650b17384b027ec6e79c9f29903fe0bc5708a0220ac840901bcdb9e2a81730fac60c15b0df84f0c133d73efe14cfd6c66cdd7951a96930d3f71f5a21b81c0a011b149cb498c15f1da4b65a1fd51047259ac0e6df66de8734081e6af8f0017edd0e44aafb3bd89ba471b37a6dd5c971be1812449dca1962b585b173d6b56efa3ac2ce67d56d0e98748c9a13dcfe91062aefd7f2dc44217815131add7f84ce35b086b563bacaed3cd488a1db150457e6da289c7bc309bccccdad5abab7f5b8e7defd33fb1c288e78cfef8012547d3dcfbfa07a76b7f3f961ac40fffb6d3701fbd80d613ca06b2601342d33a6e37b70ac764d19676247f435a8ae67f50e95a9e8babb188f9ed91fc9be6b50915c4c62b6b41cc5021e2df52ac2f9b94c8b1b63a0ac4be6024e471a62b2c5497fd49469c99cba8fc6fb4075d60c45e4f1a6be87b212afd75af17a510bd33a0d0e1a72d5366357dfa1b7d7ceeaba3cb4aa6139f4a03dce6e4af0344170ffffc3fda4fa87cee2c3fbeb0511e6318139691597dbd27859a84d06fef583f2ee048a067d3febb01f6f063bd5d1b216d144041c682d26d361aa6ddea5fa31315e5ac6947588afd23fc0fee", 0xffc}], 0x6, &(0x7f0000001b80)=[{0x10, 0x11, 0xfffff400}, {0x10, 0x118, 0x8}, {0x10, 0x104, 0x400}], 0x30}, 0x20008000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) write$binfmt_misc(r0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x1) 0s ago: executing program 1 (id=478): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x0, 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): ): Enslaving as an active interface with an up link [ 81.046255][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.083715][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.094928][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.115696][ T4287] team0: Port device team_slave_0 added [ 81.125599][ T4281] team0: Port device team_slave_0 added [ 81.134130][ T4281] team0: Port device team_slave_1 added [ 81.164014][ T4287] team0: Port device team_slave_1 added [ 81.200327][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.207345][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.233669][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.247511][ T4277] team0: Port device team_slave_0 added [ 81.264394][ T4273] team0: Port device team_slave_0 added [ 81.274093][ T4273] team0: Port device team_slave_1 added [ 81.286755][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.294407][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.320908][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.334144][ T4277] team0: Port device team_slave_1 added [ 81.366595][ T4283] device hsr_slave_0 entered promiscuous mode [ 81.374349][ T4283] device hsr_slave_1 entered promiscuous mode [ 81.387547][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.395192][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.421840][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.447084][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.455687][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.482165][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.508725][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.515739][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.542263][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.554428][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.561868][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.588151][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.600736][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.607846][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.633917][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.647309][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.654446][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.662113][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 81.686882][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 81.693350][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.738709][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 81.745089][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 81.795769][ T4281] device hsr_slave_0 entered promiscuous mode [ 81.802715][ T4281] device hsr_slave_1 entered promiscuous mode [ 81.809664][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.817591][ T4281] Cannot create hsr debugfs directory [ 81.828907][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 81.840482][ T4277] device hsr_slave_0 entered promiscuous mode [ 81.847329][ T4277] device hsr_slave_1 entered promiscuous mode [ 81.854145][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.861847][ T4277] Cannot create hsr debugfs directory [ 81.899886][ T4273] device hsr_slave_0 entered promiscuous mode [ 81.907749][ T4273] device hsr_slave_1 entered promiscuous mode [ 81.915413][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.924084][ T4273] Cannot create hsr debugfs directory [ 81.953640][ T4287] device hsr_slave_0 entered promiscuous mode [ 81.961322][ T4287] device hsr_slave_1 entered promiscuous mode [ 81.968100][ T4287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.976445][ T4287] Cannot create hsr debugfs directory [ 82.342260][ T4283] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.365279][ T4283] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.380264][ T4283] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.393456][ T4283] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.419067][ T4273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.434866][ T4273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.455794][ T4273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.470085][ T4273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.566994][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.585678][ T4277] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.609060][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.620545][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.631081][ T4277] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.654490][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.663132][ T4277] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.673697][ T4277] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.698830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.707897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.717968][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.725430][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.769993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.779096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.789751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.798290][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.805490][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.822094][ T4281] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.831714][ T4281] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.843321][ T4281] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.853143][ T4281] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.863661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.890152][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.921397][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.933267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.945144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.974353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.014800][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.027323][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.040811][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.049785][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.057669][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.066078][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.076084][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.087338][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.096907][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.132871][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.142292][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.151372][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.158546][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.171048][ T4287] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.188257][ T4287] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.206863][ T4287] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.216819][ T4287] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.232285][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.244323][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.253018][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.262405][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.272631][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.279795][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.288751][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.324457][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.337598][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.367173][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.376878][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.392991][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.404470][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.443276][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.475614][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.504579][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.521862][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.535045][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.546390][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.564960][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.577088][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.608876][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.617476][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.630567][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.640150][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.653182][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.660405][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.675971][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.685574][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.699300][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.706453][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.714404][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.723584][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.732822][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.740920][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 83.748845][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 83.755545][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.803880][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.818894][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 83.824975][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 83.825034][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.850396][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.859117][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.868259][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.886021][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.895027][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.903595][ T4284] Bluetooth: hci4: command 0x041b tx timeout [ 83.911935][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.920792][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.958575][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.967405][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.989619][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.029399][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.072802][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.082842][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.091884][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.099080][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.113350][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.122757][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.135078][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.142284][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.162669][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.191156][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.200921][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.210154][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.220950][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.231486][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.245122][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.274587][ T4287] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.296845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.313644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.327494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.342942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.355926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.363982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.380588][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.395126][ T4281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.408161][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.435785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.445653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.456110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.467059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.476353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.486596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.496119][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.503323][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.512379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.522016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.531364][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.538565][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.618928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.626888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.639315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.659149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.672635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.700453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.759558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.774436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.800242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.820029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.839903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.849064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.857720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.867086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.876707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.900435][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.910341][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.929371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.936949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.946936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.956276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.968403][ T4283] device veth0_vlan entered promiscuous mode [ 84.985981][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.014101][ T4283] device veth1_vlan entered promiscuous mode [ 85.026025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.034940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.043311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.052095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.061019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.069151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.078083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.147804][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.167710][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.195835][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.258916][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.267575][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.290645][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.306948][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.321160][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.339507][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.376924][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.387825][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.403226][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.413253][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.431497][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.441017][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.449178][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.456964][ T4277] device veth0_vlan entered promiscuous mode [ 85.470504][ T4283] device veth0_macvtap entered promiscuous mode [ 85.490998][ T4273] device veth0_vlan entered promiscuous mode [ 85.515756][ T4277] device veth1_vlan entered promiscuous mode [ 85.533191][ T4283] device veth1_macvtap entered promiscuous mode [ 85.547345][ T4273] device veth1_vlan entered promiscuous mode [ 85.561419][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.576272][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.603804][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.617338][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.634617][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.723713][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.738204][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.754911][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.763079][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.770821][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.780297][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.792410][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.801217][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.814532][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.822078][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 85.828137][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 85.841196][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.871103][ T4273] device veth0_macvtap entered promiscuous mode [ 85.889243][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.897586][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.909561][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 85.915656][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 85.926013][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.937495][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.950894][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.964623][ T4281] device veth0_vlan entered promiscuous mode [ 85.981176][ T4273] device veth1_macvtap entered promiscuous mode [ 85.986969][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 86.002534][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.014046][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.027829][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.077520][ T4283] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.095835][ T4283] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.104808][ T4283] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.114427][ T4283] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.133058][ T4281] device veth1_vlan entered promiscuous mode [ 86.155650][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.168889][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.184698][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.194426][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.260522][ T4277] device veth0_macvtap entered promiscuous mode [ 86.283023][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.303903][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.323357][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.334248][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.343787][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.353034][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.366112][ T4277] device veth1_macvtap entered promiscuous mode [ 86.389172][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.408612][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.439201][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.469342][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.482510][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.493761][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.503367][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.516823][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.532273][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.546789][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.555837][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.573996][ T4281] device veth0_macvtap entered promiscuous mode [ 86.605798][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.616837][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.635145][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.646850][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.665924][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.703441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.712586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.721964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.734862][ T4281] device veth1_macvtap entered promiscuous mode [ 86.761361][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.773168][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.785089][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.795910][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.811674][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.860311][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.870832][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.904330][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.909335][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.924868][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.944932][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.966723][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.978261][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.988252][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.000789][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.010840][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.022944][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.034976][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.047537][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.057328][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.072670][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.082895][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.114712][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.124794][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.137595][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.155220][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.165286][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.176484][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.187385][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.197927][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.214621][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.259956][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.270676][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.280136][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.289829][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.302202][ T4281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.311475][ T4281] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.320704][ T4281] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.329743][ T4281] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.409207][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.417107][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.425073][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.431667][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.442637][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.465232][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.537509][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.560047][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.568181][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.579103][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.598380][ T4287] device veth0_vlan entered promiscuous mode [ 87.643131][ T4287] device veth1_vlan entered promiscuous mode [ 87.698693][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.706579][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.716887][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.731861][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.798733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.813965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.849440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.868914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.876938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.898811][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 87.904990][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 87.914854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.954535][ T4287] device veth0_macvtap entered promiscuous mode [ 87.963768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.978624][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 87.984710][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 88.011173][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.032935][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.056785][ T4287] device veth1_macvtap entered promiscuous mode [ 88.068783][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 88.141489][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.169023][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.177952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.356931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.365556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.400475][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.474290][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.350871][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.492008][ T4367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.648368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 89.730302][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.791922][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.795786][ T4371] loop0: detected capacity change from 0 to 512 [ 89.837541][ T4371] EXT4-fs: Ignoring removed bh option [ 89.887346][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.023929][ T4371] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.7: corrupted in-inode xattr [ 90.028827][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.047372][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.118800][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.129943][ T4371] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.7: couldn't read orphan inode 15 (err -117) [ 90.142709][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.153976][ T4371] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 90.199695][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.257539][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.280407][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.291325][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.305034][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.317375][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.327742][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.347371][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.367771][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.491091][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.631401][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.953891][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 90.961648][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.998044][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.047365][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.107138][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.135430][ T4287] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.154678][ T4287] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.156481][ T4383] loop2: detected capacity change from 0 to 2048 [ 91.163681][ T4287] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.197607][ T4287] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.277018][ T4388] loop0: detected capacity change from 0 to 2048 [ 91.352967][ T4383] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 91.509812][ T4388] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.639843][ T4365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.669288][ T4365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.868397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.888381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.898379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.908380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.918378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 91.928381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 91.938381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 91.948376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 91.958373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 92.073889][ T4387] loop1: detected capacity change from 0 to 131072 [ 92.081435][ T4387] ======================================================= [ 92.081435][ T4387] WARNING: The mand mount option has been deprecated and [ 92.081435][ T4387] and is ignored by this kernel. Remove the mand [ 92.081435][ T4387] option from the mount to silence this warning. [ 92.081435][ T4387] ======================================================= [ 92.134837][ T127] cfg80211: failed to load regulatory.db [ 92.202366][ T4387] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 92.209312][ T4387] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 92.223531][ T4387] F2FS-fs (loop1): invalid crc value [ 92.239631][ T4390] program syz.0.10 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.593662][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.756589][ T4387] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.819799][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.827950][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.839610][ T4387] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 92.846960][ T4387] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 92.917051][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.143926][ T4400] loop2: detected capacity change from 0 to 512 [ 93.198288][ T4400] EXT4-fs: Ignoring removed bh option [ 93.246458][ T4400] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.11: corrupted in-inode xattr [ 93.272571][ T4400] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.11: couldn't read orphan inode 15 (err -117) [ 93.384946][ T4400] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 93.476690][ T4402] loop0: detected capacity change from 0 to 4096 [ 93.622157][ T4402] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 94.261774][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 94.634596][ T4411] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.328656][ T4417] loop2: detected capacity change from 0 to 256 [ 95.476361][ T4419] loop4: detected capacity change from 0 to 256 [ 96.296520][ T4423] loop0: detected capacity change from 0 to 64 [ 97.123710][ T4431] kernel profiling enabled (shift: 5) [ 98.548590][ T4284] Bluetooth: hci4: command 0x0405 tx timeout [ 99.492625][ T4436] loop2: detected capacity change from 0 to 256 [ 99.567405][ T4436] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 99.689848][ T4442] loop1: detected capacity change from 0 to 64 [ 99.784954][ T4442] syz.1.13: attempt to access beyond end of device [ 99.784954][ T4442] loop1: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 99.809518][ T4442] Buffer I/O error on dev loop1, logical block 159, lost async page write [ 99.818779][ T4442] syz.1.13: attempt to access beyond end of device [ 99.818779][ T4442] loop1: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 99.832104][ T4442] Buffer I/O error on dev loop1, logical block 160, lost async page write [ 99.841305][ T4442] syz.1.13: attempt to access beyond end of device [ 99.841305][ T4442] loop1: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 99.854615][ T4442] Buffer I/O error on dev loop1, logical block 161, lost async page write [ 99.907468][ T4442] syz.1.13: attempt to access beyond end of device [ 99.907468][ T4442] loop1: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 99.921399][ T4442] Buffer I/O error on dev loop1, logical block 162, lost async page write [ 99.930463][ T4442] syz.1.13: attempt to access beyond end of device [ 99.930463][ T4442] loop1: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 99.944264][ T4442] Buffer I/O error on dev loop1, logical block 163, lost async page write [ 99.953411][ T4442] syz.1.13: attempt to access beyond end of device [ 99.953411][ T4442] loop1: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 99.966919][ T4442] Buffer I/O error on dev loop1, logical block 167, lost async page write [ 99.975917][ T4442] syz.1.13: attempt to access beyond end of device [ 99.975917][ T4442] loop1: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 99.989403][ T4442] Buffer I/O error on dev loop1, logical block 169, lost async page write [ 99.998305][ T4442] syz.1.13: attempt to access beyond end of device [ 99.998305][ T4442] loop1: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 100.011874][ T4442] Buffer I/O error on dev loop1, logical block 171, lost async page write [ 100.439363][ T4448] loop3: detected capacity change from 0 to 512 [ 100.446742][ T4448] EXT4-fs: Ignoring removed bh option [ 100.526641][ T4448] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.25: corrupted in-inode xattr [ 100.551290][ T4448] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.25: couldn't read orphan inode 15 (err -117) [ 100.584865][ T4448] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 100.860890][ T4454] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.604612][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 102.989256][ T4467] loop3: detected capacity change from 0 to 32768 [ 103.060415][ T4467] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.29 (4467) [ 103.086660][ T4467] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.097332][ T4467] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 103.106187][ T4467] BTRFS info (device loop3): use zlib compression, level 3 [ 103.113541][ T4467] BTRFS info (device loop3): turning on sync discard [ 103.121487][ T4467] BTRFS info (device loop3): using free space tree [ 103.218876][ T4467] BTRFS info (device loop3): enabling ssd optimizations [ 103.710365][ T4277] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.813845][ T4492] loop1: detected capacity change from 0 to 64 [ 104.607953][ T4495] loop4: detected capacity change from 0 to 512 [ 104.615085][ T4495] EXT4-fs: Ignoring removed i_version option [ 104.623607][ T4495] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.678400][ T4495] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 104.694670][ T4495] Quota error (device loop4): write_blk: dquota write failed [ 104.702751][ T4495] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 104.711988][ T4495] Quota error (device loop4): write_blk: dquota write failed [ 104.719643][ T4495] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 104.729610][ T4495] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.32: Failed to acquire dquot type 1 [ 104.743124][ T4495] EXT4-fs (loop4): 1 truncate cleaned up [ 104.748874][ T4495] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 105.033456][ T4398] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4398) [ 105.151798][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 105.390970][ T4514] loop1: detected capacity change from 0 to 256 [ 107.380257][ T4528] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.996367][ T4532] jffs2: notice: (4532) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 108.103971][ T26] audit: type=1326 audit(1786204829.554:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.4.41" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddeb9e0d9 code=0x7ffc0000 [ 108.204607][ T26] audit: type=1326 audit(1786204829.554:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.4.41" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddeb9e0d9 code=0x7ffc0000 [ 108.323139][ T26] audit: type=1326 audit(1786204829.614:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.4.41" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7feddeb9e0d9 code=0x7ffc0000 [ 108.574600][ T4541] loop1: detected capacity change from 0 to 32768 [ 108.594115][ T26] audit: type=1326 audit(1786204829.614:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.4.41" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7feddeb9e0d9 code=0x7ffc0000 [ 108.629163][ T4541] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 109.235133][ T4549] loop4: detected capacity change from 0 to 64 [ 111.577403][ T4553] loop3: detected capacity change from 0 to 131072 [ 111.609354][ T4553] F2FS-fs (loop3): invalid crc value [ 111.680700][ T4553] F2FS-fs (loop3): Found nat_bits in checkpoint [ 111.727373][ T4553] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 111.809250][ T4553] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 112.502917][ T4562] loop2: detected capacity change from 0 to 131072 [ 112.534070][ T4562] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 112.541265][ T4562] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 112.590724][ T4562] F2FS-fs (loop2): invalid crc value [ 112.645470][ T4562] F2FS-fs (loop2): Found nat_bits in checkpoint [ 112.687357][ T4353] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 112.698957][ T4562] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 112.706103][ T4562] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 112.805032][ T4568] loop4: detected capacity change from 0 to 128 [ 112.922587][ T4568] EXT4-fs (loop4): Test dummy encryption mode enabled [ 113.014625][ T4568] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 113.055882][ T4572] loop0: detected capacity change from 0 to 512 [ 113.063764][ T4572] EXT4-fs: Ignoring removed bh option [ 113.087651][ T4568] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.377610][ T4572] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.51: corrupted in-inode xattr [ 113.537474][ T4572] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.51: couldn't read orphan inode 15 (err -117) [ 113.916388][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 113.989066][ T4572] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 114.103984][ T4583] loop2: detected capacity change from 0 to 764 [ 115.493756][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 115.943992][ T4597] loop2: detected capacity change from 0 to 1024 [ 116.202936][ T4600] loop4: detected capacity change from 0 to 32768 [ 116.223375][ T4600] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 116.614087][ T4353] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.657197][ T4607] loop1: detected capacity change from 0 to 64 [ 118.680709][ T4620] loop4: detected capacity change from 0 to 32768 [ 119.234763][ T4618] loop2: detected capacity change from 0 to 131072 [ 119.899961][ T4618] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 119.906728][ T4618] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 119.918578][ T4618] F2FS-fs (loop2): invalid crc value [ 119.945617][ T4620] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 119.969743][ T4618] F2FS-fs (loop2): Found nat_bits in checkpoint [ 120.010836][ T4618] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 120.018119][ T4618] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 120.293331][ T4636] loop0: detected capacity change from 0 to 128 [ 120.325909][ T4636] EXT4-fs (loop0): Test dummy encryption mode enabled [ 120.601514][ T4636] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 120.650750][ T4636] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.735722][ T4641] loop3: detected capacity change from 0 to 64 [ 120.808721][ T4641] syz.3.50: attempt to access beyond end of device [ 120.808721][ T4641] loop3: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 120.822035][ T4641] Buffer I/O error on dev loop3, logical block 159, lost async page write [ 120.831110][ T4641] syz.3.50: attempt to access beyond end of device [ 120.831110][ T4641] loop3: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 120.852166][ T4641] Buffer I/O error on dev loop3, logical block 160, lost async page write [ 120.861090][ T4641] syz.3.50: attempt to access beyond end of device [ 120.861090][ T4641] loop3: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 120.874468][ T4641] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 120.883411][ T4641] syz.3.50: attempt to access beyond end of device [ 120.883411][ T4641] loop3: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 120.896765][ T4641] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 120.936279][ T4641] syz.3.50: attempt to access beyond end of device [ 120.936279][ T4641] loop3: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 120.949922][ T4641] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 120.958640][ T4641] syz.3.50: attempt to access beyond end of device [ 120.958640][ T4641] loop3: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 120.972107][ T4641] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 120.981331][ T4641] syz.3.50: attempt to access beyond end of device [ 120.981331][ T4641] loop3: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 120.994827][ T4641] Buffer I/O error on dev loop3, logical block 169, lost async page write [ 121.003797][ T4641] syz.3.50: attempt to access beyond end of device [ 121.003797][ T4641] loop3: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 121.017246][ T4641] Buffer I/O error on dev loop3, logical block 171, lost async page write [ 121.821613][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 122.088246][ T4287] ocfs2: Unmounting device (7,4) on (node local) [ 125.137271][ T4656] loop3: detected capacity change from 0 to 764 [ 125.365951][ T4398] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 125.784756][ T4670] loop4: detected capacity change from 0 to 32768 [ 125.794135][ T4670] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 125.994001][ T4353] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.075898][ T4672] loop3: detected capacity change from 0 to 1024 [ 127.408598][ T4314] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 127.728072][ T4679] loop2: detected capacity change from 0 to 32768 [ 127.774757][ T4679] (syz.2.65,4679,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 127.789770][ T4679] (syz.2.65,4679,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 127.853801][ T4679] JBD2: Ignoring recovery information on journal [ 127.888822][ T4314] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 127.911237][ T4679] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 127.938525][ T4314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.949095][ T4314] usb 1-1: config 0 has no interface number 0 [ 127.955690][ T4314] usb 1-1: config 0 interface 52 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 127.966594][ T4314] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.979756][ T4314] usb 1-1: config 0 interface 52 has no altsetting 0 [ 128.953783][ T4314] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 128.973471][ T4314] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 129.020677][ T4314] usb 1-1: Manufacturer: syz [ 129.090129][ T4314] usb 1-1: config 0 descriptor?? [ 129.127327][ T4314] hub 1-1:0.52: bad descriptor, ignoring hub [ 129.142924][ T4314] hub: probe of 1-1:0.52 failed with error -5 [ 130.152140][ T4696] loop3: detected capacity change from 0 to 128 [ 130.198935][ T4314] usb 1-1: Can not set alternate setting to 1, error: -71 [ 130.206171][ T4314] synaptics_usb: probe of 1-1:0.52 failed with error -71 [ 130.233835][ T4696] EXT4-fs (loop3): Test dummy encryption mode enabled [ 130.246888][ T4283] ocfs2: Unmounting device (7,2) on (node local) [ 130.355613][ T4701] loop4: detected capacity change from 0 to 64 [ 130.418099][ T4701] syz.4.78: attempt to access beyond end of device [ 130.418099][ T4701] loop4: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 130.431582][ T4701] Buffer I/O error on dev loop4, logical block 159, lost async page write [ 130.440567][ T4701] syz.4.78: attempt to access beyond end of device [ 130.440567][ T4701] loop4: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 130.462810][ T4701] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 130.471770][ T4701] syz.4.78: attempt to access beyond end of device [ 130.471770][ T4701] loop4: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 130.485074][ T4701] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 130.493933][ T4701] syz.4.78: attempt to access beyond end of device [ 130.493933][ T4701] loop4: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 130.507153][ T4701] Buffer I/O error on dev loop4, logical block 162, lost async page write [ 130.549720][ T4701] syz.4.78: attempt to access beyond end of device [ 130.549720][ T4701] loop4: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 130.564331][ T4701] Buffer I/O error on dev loop4, logical block 163, lost async page write [ 130.573342][ T4701] syz.4.78: attempt to access beyond end of device [ 130.573342][ T4701] loop4: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 130.586839][ T4701] Buffer I/O error on dev loop4, logical block 167, lost async page write [ 130.595829][ T4701] syz.4.78: attempt to access beyond end of device [ 130.595829][ T4701] loop4: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 130.609350][ T4701] Buffer I/O error on dev loop4, logical block 169, lost async page write [ 130.618665][ T4701] syz.4.78: attempt to access beyond end of device [ 130.618665][ T4701] loop4: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 130.632383][ T4701] Buffer I/O error on dev loop4, logical block 171, lost async page write [ 131.127371][ T4314] usb 1-1: USB disconnect, device number 2 [ 131.169504][ T4696] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 131.198883][ T4696] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.806026][ T4709] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 131.818006][ T4709] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 131.855312][ T4709] loop4: detected capacity change from 0 to 1024 [ 132.804075][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 132.863057][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.869838][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.983440][ T4719] loop0: detected capacity change from 0 to 64 [ 133.430322][ T4719] syz.0.80: attempt to access beyond end of device [ 133.430322][ T4719] loop0: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 133.443710][ T4719] Buffer I/O error on dev loop0, logical block 159, lost async page write [ 133.452570][ T4719] syz.0.80: attempt to access beyond end of device [ 133.452570][ T4719] loop0: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 133.474154][ T4719] Buffer I/O error on dev loop0, logical block 160, lost async page write [ 134.250363][ T4730] loop4: detected capacity change from 0 to 256 [ 135.940981][ T4734] loop0: detected capacity change from 0 to 1024 [ 137.372621][ T4750] loop3: detected capacity change from 0 to 128 [ 137.381220][ T4750] EXT4-fs (loop3): Test dummy encryption mode enabled [ 137.533352][ T4749] loop1: detected capacity change from 0 to 128 [ 137.559717][ T4749] EXT4-fs (loop1): Test dummy encryption mode enabled [ 137.577532][ T4750] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 137.599030][ T4750] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.614588][ T4749] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 137.656940][ T4749] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.045415][ T4759] loop4: detected capacity change from 0 to 64 [ 139.292705][ T4765] loop4: detected capacity change from 0 to 512 [ 139.369372][ T4765] EXT4-fs: Ignoring removed bh option [ 139.443874][ T4765] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.94: corrupted in-inode xattr [ 139.781067][ T4765] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.94: couldn't read orphan inode 15 (err -117) [ 139.906691][ T4765] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 139.960443][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 140.478611][ T4317] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 141.393089][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 141.438233][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 141.447682][ T4317] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 141.478388][ T4317] usb 3-1: config 0 has no interface number 0 [ 141.484585][ T4317] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 141.515894][ T4317] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 141.680520][ T4317] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 141.698411][ T4317] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 141.725472][ T4317] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 141.742207][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.796732][ T4317] usb 3-1: config 0 descriptor?? [ 141.813042][ T4776] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 141.830865][ T4776] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 141.840490][ T4317] ldusb 3-1:0.55: Interrupt in endpoint not found [ 141.989790][ T4790] loop4: detected capacity change from 0 to 256 [ 142.009833][ T4788] loop1: detected capacity change from 0 to 1024 [ 144.434432][ T4802] loop4: detected capacity change from 0 to 32768 [ 144.457493][ T4802] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 144.640898][ T4314] usb 3-1: USB disconnect, device number 2 [ 145.273236][ T4804] loop1: detected capacity change from 0 to 1024 [ 145.364466][ T4807] loop0: detected capacity change from 0 to 64 [ 145.518713][ T4812] capability: warning: `syz.4.105' uses 32-bit capabilities (legacy support in use) [ 145.624848][ T4814] loop2: detected capacity change from 0 to 128 [ 145.721683][ T4814] EXT4-fs (loop2): Test dummy encryption mode enabled [ 145.839374][ T4814] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 145.879172][ T4814] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 145.897366][ T4389] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 145.950164][ T4820] loop0: detected capacity change from 0 to 128 [ 146.044457][ T4820] EXT4-fs (loop0): Test dummy encryption mode enabled [ 146.199500][ T4820] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 146.402658][ T4820] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 147.215106][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 147.294042][ T4836] loop4: detected capacity change from 0 to 1024 [ 148.596407][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 149.412787][ T4851] loop1: detected capacity change from 0 to 32768 [ 149.421902][ T4851] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 149.765570][ T4863] loop2: detected capacity change from 0 to 764 [ 150.415955][ T4860] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.479582][ T4861] loop0: detected capacity change from 0 to 1024 [ 153.090004][ T4879] loop4: detected capacity change from 0 to 128 [ 153.114439][ T4879] EXT4-fs (loop4): Test dummy encryption mode enabled [ 153.168278][ T4879] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 153.201122][ T4879] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.386591][ T4887] loop0: detected capacity change from 0 to 128 [ 153.473456][ T4889] loop1: detected capacity change from 0 to 1024 [ 153.483114][ T4887] EXT4-fs (loop0): Test dummy encryption mode enabled [ 153.583860][ T4887] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 153.692101][ T4887] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.943495][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 155.359034][ T4882] loop3: detected capacity change from 0 to 40427 [ 155.508105][ T4882] F2FS-fs (loop3): invalid crc value [ 155.533006][ T4908] loop4: detected capacity change from 0 to 764 [ 155.721730][ T4882] F2FS-fs (loop3): Found nat_bits in checkpoint [ 156.067784][ T4915] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.075607][ T4915] IPv6: NLM_F_CREATE should be set when creating new route [ 156.279176][ T4882] F2FS-fs (loop3): Start checkpoint disabled! [ 156.384665][ T4914] loop1: detected capacity change from 0 to 32768 [ 156.407236][ T4914] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 156.770468][ T4389] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 156.813118][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 157.369714][ T4927] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.376512][ T4939] Bluetooth: MGMT ver 1.22 [ 159.097609][ T4941] loop1: detected capacity change from 0 to 128 [ 159.163105][ T4941] EXT4-fs (loop1): Test dummy encryption mode enabled [ 159.684457][ T4941] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 160.052806][ T4941] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.180515][ T4915] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.189866][ T4915] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.502244][ T4950] loop0: detected capacity change from 0 to 764 [ 161.592554][ T4954] loop0: detected capacity change from 0 to 128 [ 161.704408][ T4954] EXT4-fs (loop0): Test dummy encryption mode enabled [ 161.745334][ T4954] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 161.803123][ T4954] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 162.003322][ T4957] loop3: detected capacity change from 0 to 32768 [ 162.046260][ T4957] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.056792][ T4957] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 162.065605][ T4957] BTRFS info (device loop3): use zlib compression, level 3 [ 162.072932][ T4957] BTRFS info (device loop3): turning on sync discard [ 162.079880][ T4957] BTRFS info (device loop3): using free space tree [ 162.148695][ T4957] BTRFS info (device loop3): enabling ssd optimizations [ 162.562528][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 162.805839][ T4277] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.866622][ T4980] loop1: detected capacity change from 0 to 1024 [ 164.442587][ T4995] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 164.477675][ T4994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.899446][ T4915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.136374][ T4977] loop2: detected capacity change from 0 to 40427 [ 165.202694][ T4977] F2FS-fs (loop2): invalid crc value [ 165.260572][ T4915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.272630][ T4977] F2FS-fs (loop2): Found nat_bits in checkpoint [ 165.431004][ T4977] F2FS-fs (loop2): Start checkpoint disabled! [ 165.468903][ T4977] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 165.767215][ T5008] loop3: detected capacity change from 0 to 764 [ 167.940236][ T5013] loop1: detected capacity change from 0 to 128 [ 168.014478][ T5013] EXT4-fs (loop1): Test dummy encryption mode enabled [ 168.097957][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 168.117043][ T5013] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 168.141196][ T5013] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.261261][ T4915] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.288603][ T4915] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.297615][ T4915] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.388427][ T4915] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.591585][ T5021] loop0: detected capacity change from 0 to 32768 [ 168.617409][ T5021] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.159 (5021) [ 168.755710][ T5021] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.766307][ T5021] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 168.775577][ T5021] BTRFS info (device loop0): use zlib compression, level 3 [ 168.782895][ T5021] BTRFS info (device loop0): turning on sync discard [ 168.789687][ T5021] BTRFS info (device loop0): using free space tree [ 169.042116][ T5021] BTRFS info (device loop0): enabling ssd optimizations [ 169.475124][ T5055] loop4: detected capacity change from 0 to 1024 [ 169.904423][ T4273] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.014500][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 170.284735][ T5064] loop2: detected capacity change from 0 to 512 [ 170.365963][ T5064] EXT4-fs: Ignoring removed bh option [ 170.584019][ T5064] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.164: corrupted in-inode xattr [ 170.844569][ T5064] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.164: couldn't read orphan inode 15 (err -117) [ 171.120723][ T5064] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 171.499788][ T5061] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 171.550546][ T5061] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 171.705523][ T5061] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 171.749629][ T5061] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 171.787625][ T5061] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 171.832875][ T5061] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 171.850698][ T5061] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.864098][ T5061] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 171.876700][ T5061] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 171.897971][ T5061] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.915329][ T5061] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 171.929766][ T5061] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 171.967395][ T5061] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 171.984193][ T5061] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 172.002316][ T5061] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 172.621448][ T5081] loop3: detected capacity change from 0 to 40427 [ 172.672185][ T5081] F2FS-fs (loop3): invalid crc value [ 172.720267][ T5081] F2FS-fs (loop3): Found nat_bits in checkpoint [ 172.728644][ T4284] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.038634][ T5081] F2FS-fs (loop3): Start checkpoint disabled! [ 173.143081][ T5096] loop4: detected capacity change from 0 to 32768 [ 173.165660][ T5096] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.172 (5096) [ 173.181916][ T5096] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 173.192259][ T5096] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 173.201038][ T5096] BTRFS info (device loop4): use zlib compression, level 3 [ 173.208355][ T5096] BTRFS info (device loop4): turning on sync discard [ 173.215089][ T5096] BTRFS info (device loop4): using free space tree [ 173.215092][ T5098] loop1: detected capacity change from 0 to 128 [ 173.234445][ T5081] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 173.275942][ T5098] EXT4-fs (loop1): Test dummy encryption mode enabled [ 173.339782][ T5098] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 173.351863][ T5098] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 173.690408][ T5096] BTRFS info (device loop4): enabling ssd optimizations [ 173.700555][ T5121] bio_check_eod: 6 callbacks suppressed [ 173.700573][ T5121] syz.3.166: attempt to access beyond end of device [ 173.700573][ T5121] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 173.818413][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout [ 173.899755][ T4284] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.907529][ T4286] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.000772][ T4280] Bluetooth: hci4: command 0x0c1a tx timeout [ 174.048761][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 174.353755][ T4287] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 174.391814][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 174.646005][ T5138] loop1: detected capacity change from 0 to 128 [ 174.757517][ T5138] EXT4-fs (loop1): Test dummy encryption mode enabled [ 174.778485][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 174.798422][ T4524] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 174.875885][ T5138] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 174.901901][ T5137] using random self ethernet address [ 174.921781][ T5138] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 174.948805][ T5137] using random host ethernet address [ 175.141419][ T4524] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.159289][ T4524] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 175.171301][ T4524] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 175.183796][ T4524] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 175.197885][ T4524] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 175.212191][ T4524] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.235313][ T5133] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.253633][ T5133] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.279516][ T4524] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 175.325489][ T4524] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 175.335162][ T4524] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 175.368012][ T4524] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 175.392327][ T4524] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 175.407005][ T4524] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 175.463450][ T4524] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 175.732894][ T5155] loop2: detected capacity change from 0 to 1024 [ 175.898461][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 175.978409][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 175.984550][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 176.023548][ T4524] usb 1-1: USB disconnect, device number 3 [ 176.058413][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 176.160813][ T4524] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 176.272101][ T4524] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 176.313015][ T4524] keyspan 1-1:1.0: device disconnected [ 178.080967][ T5179] loop0: detected capacity change from 0 to 512 [ 178.095286][ T5181] loop2: detected capacity change from 0 to 128 [ 178.125131][ T5179] EXT4-fs: Ignoring removed bh option [ 178.157195][ T5181] EXT4-fs (loop2): Test dummy encryption mode enabled [ 178.204636][ T5181] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 178.221490][ T5179] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.186: corrupted in-inode xattr [ 178.236095][ T5181] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 178.434287][ T5179] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.186: couldn't read orphan inode 15 (err -117) [ 178.482231][ T4523] kworker/u4:17: attempt to access beyond end of device [ 178.482231][ T4523] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 178.496487][ T5179] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 178.632844][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 178.906919][ T5189] loop4: detected capacity change from 0 to 32768 [ 178.926213][ T5189] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.188 (5189) [ 179.005116][ T5189] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 179.015653][ T5189] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 179.024526][ T5189] BTRFS info (device loop4): use zlib compression, level 3 [ 179.031923][ T5189] BTRFS info (device loop4): turning on sync discard [ 179.038739][ T5189] BTRFS info (device loop4): using free space tree [ 179.069537][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 179.350672][ T5204] loop2: detected capacity change from 0 to 1024 [ 179.566131][ T5189] BTRFS info (device loop4): enabling ssd optimizations [ 180.139853][ T4287] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 183.744478][ T5259] loop4: detected capacity change from 0 to 128 [ 183.830619][ T5259] EXT4-fs (loop4): Test dummy encryption mode enabled [ 183.897052][ T5259] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 183.916416][ T5259] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.240154][ T5265] loop3: detected capacity change from 0 to 256 [ 184.285012][ T5267] loop1: detected capacity change from 0 to 32768 [ 184.296499][ T5267] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.202 (5267) [ 184.314195][ T5267] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 184.326454][ T5267] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 184.335225][ T5267] BTRFS info (device loop1): use zlib compression, level 3 [ 184.342537][ T5267] BTRFS info (device loop1): turning on sync discard [ 184.349329][ T5267] BTRFS info (device loop1): using free space tree [ 184.457147][ T5267] BTRFS info (device loop1): enabling ssd optimizations [ 185.963982][ T5300] loop2: detected capacity change from 0 to 64 [ 187.051233][ T5300] syz.2.205: attempt to access beyond end of device [ 187.051233][ T5300] loop2: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 187.064637][ T5300] buffer_io_error: 6 callbacks suppressed [ 187.064684][ T5300] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 187.079273][ T5300] syz.2.205: attempt to access beyond end of device [ 187.079273][ T5300] loop2: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 187.096361][ T5300] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 187.105223][ T5300] syz.2.205: attempt to access beyond end of device [ 187.105223][ T5300] loop2: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 187.118682][ T5300] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 187.127540][ T5300] syz.2.205: attempt to access beyond end of device [ 187.127540][ T5300] loop2: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 187.140996][ T5300] Buffer I/O error on dev loop2, logical block 162, lost async page write [ 187.173266][ T4281] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.201627][ T5300] syz.2.205: attempt to access beyond end of device [ 187.201627][ T5300] loop2: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 187.215281][ T5300] Buffer I/O error on dev loop2, logical block 163, lost async page write [ 187.227983][ T5300] syz.2.205: attempt to access beyond end of device [ 187.227983][ T5300] loop2: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 187.241545][ T5300] Buffer I/O error on dev loop2, logical block 167, lost async page write [ 187.250488][ T5300] syz.2.205: attempt to access beyond end of device [ 187.250488][ T5300] loop2: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 187.263978][ T5300] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 187.274792][ T5300] syz.2.205: attempt to access beyond end of device [ 187.274792][ T5300] loop2: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 187.288328][ T5300] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 187.781431][ T4389] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (4389) [ 188.046660][ T5311] loop3: detected capacity change from 0 to 64 [ 188.588420][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 188.631610][ T5311] syz.3.206: attempt to access beyond end of device [ 188.631610][ T5311] loop3: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 188.645106][ T5311] Buffer I/O error on dev loop3, logical block 159, lost async page write [ 188.654006][ T5311] syz.3.206: attempt to access beyond end of device [ 188.654006][ T5311] loop3: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 188.675923][ T5311] Buffer I/O error on dev loop3, logical block 160, lost async page write [ 190.624538][ T5328] loop1: detected capacity change from 0 to 1024 [ 192.884854][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 194.329518][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.335960][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.904275][ T5350] loop1: detected capacity change from 0 to 512 [ 195.941762][ T5350] EXT4-fs: Ignoring removed bh option [ 196.018603][ T5350] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.218: corrupted in-inode xattr [ 196.059035][ T5350] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.218: couldn't read orphan inode 15 (err -117) [ 196.152627][ T5350] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 196.292847][ T5352] loop4: detected capacity change from 0 to 40427 [ 196.310334][ T5352] F2FS-fs (loop4): invalid crc value [ 196.338134][ T5352] F2FS-fs (loop4): Found nat_bits in checkpoint [ 196.416074][ T5352] F2FS-fs (loop4): Start checkpoint disabled! [ 196.441933][ T5352] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 196.687637][ T5357] bio_check_eod: 6 callbacks suppressed [ 196.687708][ T5357] syz.4.219: attempt to access beyond end of device [ 196.687708][ T5357] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 198.861354][ T4321] kworker/u4:6: attempt to access beyond end of device [ 198.861354][ T4321] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 199.310267][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 199.463919][ T5370] loop2: detected capacity change from 0 to 512 [ 199.476549][ T5370] EXT4-fs: Ignoring removed bh option [ 199.524812][ T5370] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.221: corrupted in-inode xattr [ 199.606118][ T5370] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.221: couldn't read orphan inode 15 (err -117) [ 199.655277][ T5370] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 200.491316][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 201.863991][ T5392] loop0: detected capacity change from 0 to 40427 [ 203.363444][ T5392] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 203.371433][ T5392] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 203.381129][ T5392] F2FS-fs (loop0): invalid crc value [ 203.454729][ T5392] F2FS-fs (loop0): Found nat_bits in checkpoint [ 203.506647][ T5392] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 203.513899][ T5392] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 204.550607][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 204.559764][ T5406] netlink: 'syz.0.229': attribute type 10 has an invalid length. [ 204.567543][ T5406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.229'. [ 204.580879][ T5406] device geneve2 entered promiscuous mode [ 205.354646][ T5411] loop4: detected capacity change from 0 to 512 [ 205.409859][ T5411] EXT4-fs: Ignoring removed bh option [ 206.385503][ T5411] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.235: corrupted in-inode xattr [ 206.464062][ T5411] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.235: couldn't read orphan inode 15 (err -117) [ 206.497104][ T5411] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 206.618508][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 206.619590][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 206.624651][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 206.960508][ T5419] loop0: detected capacity change from 0 to 64 [ 207.067814][ T5419] syz.0.237: attempt to access beyond end of device [ 207.067814][ T5419] loop0: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 207.081307][ T5419] buffer_io_error: 6 callbacks suppressed [ 207.081350][ T5419] Buffer I/O error on dev loop0, logical block 159, lost async page write [ 207.095852][ T5419] syz.0.237: attempt to access beyond end of device [ 207.095852][ T5419] loop0: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 207.118837][ T5419] Buffer I/O error on dev loop0, logical block 160, lost async page write [ 207.127610][ T5419] syz.0.237: attempt to access beyond end of device [ 207.127610][ T5419] loop0: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 207.141164][ T5419] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 207.150339][ T5419] syz.0.237: attempt to access beyond end of device [ 207.150339][ T5419] loop0: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 207.164410][ T5419] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 207.209772][ T5419] syz.0.237: attempt to access beyond end of device [ 207.209772][ T5419] loop0: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 207.223495][ T5419] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 207.232492][ T5419] syz.0.237: attempt to access beyond end of device [ 207.232492][ T5419] loop0: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 207.246085][ T5419] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 207.255892][ T5419] syz.0.237: attempt to access beyond end of device [ 207.255892][ T5419] loop0: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 207.269471][ T5419] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 207.278445][ T5419] syz.0.237: attempt to access beyond end of device [ 207.278445][ T5419] loop0: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 207.292073][ T5419] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 208.183769][ T5426] loop0: detected capacity change from 0 to 64 [ 208.254325][ T5426] syz.0.238: attempt to access beyond end of device [ 208.254325][ T5426] loop0: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 208.267776][ T5426] Buffer I/O error on dev loop0, logical block 159, lost async page write [ 208.276653][ T5426] syz.0.238: attempt to access beyond end of device [ 208.276653][ T5426] loop0: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 208.297877][ T5426] Buffer I/O error on dev loop0, logical block 160, lost async page write [ 209.120106][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 213.416183][ T5467] loop0: detected capacity change from 0 to 512 [ 213.435091][ T5467] EXT4-fs: Ignoring removed bh option [ 213.500255][ T5467] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.252: corrupted in-inode xattr [ 213.537463][ T5467] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.252: couldn't read orphan inode 15 (err -117) [ 213.583937][ T5467] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 213.663349][ T5474] loop3: detected capacity change from 0 to 64 [ 213.729865][ T5474] bio_check_eod: 6 callbacks suppressed [ 213.729920][ T5474] syz.3.253: attempt to access beyond end of device [ 213.729920][ T5474] loop3: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 213.749098][ T5474] buffer_io_error: 6 callbacks suppressed [ 213.749142][ T5474] Buffer I/O error on dev loop3, logical block 159, lost async page write [ 213.772532][ T5474] syz.3.253: attempt to access beyond end of device [ 213.772532][ T5474] loop3: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 213.786085][ T5474] Buffer I/O error on dev loop3, logical block 160, lost async page write [ 213.794868][ T5474] syz.3.253: attempt to access beyond end of device [ 213.794868][ T5474] loop3: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 213.808606][ T5474] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 213.817685][ T5474] syz.3.253: attempt to access beyond end of device [ 213.817685][ T5474] loop3: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 213.862679][ T5474] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 213.871660][ T5474] syz.3.253: attempt to access beyond end of device [ 213.871660][ T5474] loop3: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 213.885621][ T5474] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 213.894776][ T5474] syz.3.253: attempt to access beyond end of device [ 213.894776][ T5474] loop3: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 213.908366][ T5474] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 213.917529][ T5474] syz.3.253: attempt to access beyond end of device [ 213.917529][ T5474] loop3: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 213.931093][ T5474] Buffer I/O error on dev loop3, logical block 169, lost async page write [ 213.940229][ T5474] syz.3.253: attempt to access beyond end of device [ 213.940229][ T5474] loop3: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 213.953678][ T5474] Buffer I/O error on dev loop3, logical block 171, lost async page write [ 214.685547][ T5481] loop1: detected capacity change from 0 to 64 [ 214.810708][ T5481] syz.1.255: attempt to access beyond end of device [ 214.810708][ T5481] loop1: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 214.824684][ T5481] Buffer I/O error on dev loop1, logical block 159, lost async page write [ 214.834628][ T5481] syz.1.255: attempt to access beyond end of device [ 214.834628][ T5481] loop1: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 214.858154][ T5481] Buffer I/O error on dev loop1, logical block 160, lost async page write [ 216.752141][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 216.961212][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888055a26400: rx timeout, send abort [ 217.462077][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888055a27000: rx timeout, send abort [ 217.471137][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888055a26400: abort rx timeout. Force session deactivation [ 217.700766][ C0] vxcan1: j1939_simple_recv: Received already invalidated message [ 217.970532][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888055a27000: abort rx timeout. Force session deactivation [ 218.851697][ T5520] loop0: detected capacity change from 0 to 1024 [ 218.908391][ T5227] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 220.338536][ T5227] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.372581][ T5227] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 220.453675][ T5530] loop0: detected capacity change from 0 to 64 [ 220.522130][ T5530] bio_check_eod: 6 callbacks suppressed [ 220.522179][ T5530] syz.0.271: attempt to access beyond end of device [ 220.522179][ T5530] loop0: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 220.541626][ T5530] buffer_io_error: 6 callbacks suppressed [ 220.541684][ T5530] Buffer I/O error on dev loop0, logical block 159, lost async page write [ 220.563307][ T5530] syz.0.271: attempt to access beyond end of device [ 220.563307][ T5530] loop0: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 220.577443][ T5530] Buffer I/O error on dev loop0, logical block 160, lost async page write [ 220.586523][ T5530] syz.0.271: attempt to access beyond end of device [ 220.586523][ T5530] loop0: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 220.600019][ T5530] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 220.608863][ T5530] syz.0.271: attempt to access beyond end of device [ 220.608863][ T5530] loop0: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 220.654257][ T5530] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 220.663404][ T5530] syz.0.271: attempt to access beyond end of device [ 220.663404][ T5530] loop0: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 220.677995][ T5530] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 220.687038][ T5530] syz.0.271: attempt to access beyond end of device [ 220.687038][ T5530] loop0: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 220.700539][ T5530] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 220.709717][ T5530] syz.0.271: attempt to access beyond end of device [ 220.709717][ T5530] loop0: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 220.723281][ T5530] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 220.732294][ T5530] syz.0.271: attempt to access beyond end of device [ 220.732294][ T5530] loop0: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 220.745966][ T5530] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 220.898873][ T5227] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 220.908761][ T5227] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 220.921729][ T5227] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 220.931165][ T5227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.948703][ T5514] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 220.956231][ T5514] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 220.968805][ T5227] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 220.977924][ T5227] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 220.985931][ T5227] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 220.994729][ T5227] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 221.003911][ T5227] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 221.011713][ T5227] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 221.021381][ T5227] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 221.144253][ T5535] loop3: detected capacity change from 0 to 512 [ 221.164708][ T5227] usb 3-1: USB disconnect, device number 3 [ 221.191749][ T5227] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 221.249445][ T5535] EXT4-fs: Ignoring removed bh option [ 221.278190][ T5227] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 221.301216][ T5227] keyspan 3-1:1.0: device disconnected [ 221.359635][ T5535] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.272: corrupted in-inode xattr [ 221.442824][ T5535] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.272: couldn't read orphan inode 15 (err -117) [ 221.530186][ T5535] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 222.703464][ T5562] loop0: detected capacity change from 0 to 4130 [ 222.775254][ T5562] ntfs3: loop0: failed to replay log file. Can't mount rw! [ 224.821420][ T5574] loop4: detected capacity change from 0 to 1024 [ 224.896194][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 225.410602][ T5579] loop2: detected capacity change from 0 to 64 [ 226.053245][ T5579] syz.2.285: attempt to access beyond end of device [ 226.053245][ T5579] loop2: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 226.067273][ T5579] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 226.076178][ T5579] syz.2.285: attempt to access beyond end of device [ 226.076178][ T5579] loop2: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 226.091041][ T5579] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 226.100539][ T5579] syz.2.285: attempt to access beyond end of device [ 226.100539][ T5579] loop2: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 226.114102][ T5579] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 226.123056][ T5579] syz.2.285: attempt to access beyond end of device [ 226.123056][ T5579] loop2: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 226.136432][ T5579] Buffer I/O error on dev loop2, logical block 162, lost async page write [ 226.188376][ T5579] syz.2.285: attempt to access beyond end of device [ 226.188376][ T5579] loop2: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 226.202643][ T5579] Buffer I/O error on dev loop2, logical block 163, lost async page write [ 226.211766][ T5579] syz.2.285: attempt to access beyond end of device [ 226.211766][ T5579] loop2: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 226.225260][ T5579] Buffer I/O error on dev loop2, logical block 167, lost async page write [ 226.234206][ T5579] syz.2.285: attempt to access beyond end of device [ 226.234206][ T5579] loop2: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 226.247697][ T5579] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 226.256700][ T5579] syz.2.285: attempt to access beyond end of device [ 226.256700][ T5579] loop2: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 226.270219][ T5579] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 226.417642][ T5585] loop0: detected capacity change from 0 to 512 [ 226.425197][ T5585] EXT4-fs: Ignoring removed bh option [ 226.435417][ T5585] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.288: corrupted in-inode xattr [ 226.448070][ T5585] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.288: couldn't read orphan inode 15 (err -117) [ 226.460825][ T5585] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 227.423629][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 228.931715][ T5615] loop3: detected capacity change from 0 to 512 [ 228.939417][ T5615] EXT4-fs: Ignoring removed bh option [ 229.337112][ T5613] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 229.379622][ T5615] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.296: corrupted in-inode xattr [ 229.392405][ T5615] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.296: couldn't read orphan inode 15 (err -117) [ 229.409123][ T5615] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 229.815722][ T5622] loop0: detected capacity change from 0 to 1024 [ 230.878196][ T5637] loop1: detected capacity change from 0 to 64 [ 232.188570][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 233.054012][ T5661] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 233.178538][ T4507] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 233.733374][ T5657] loop1: detected capacity change from 0 to 64 [ 233.756714][ T4507] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.787487][ T4507] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 233.801789][ T4507] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 233.812845][ T4507] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 233.826383][ T4507] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 233.835812][ T4507] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.014239][ T5663] loop4: detected capacity change from 0 to 32768 [ 234.032856][ T5658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 234.058545][ T5658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 234.068237][ T4507] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 234.080008][ T4507] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 234.088744][ T4507] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 234.100410][ T4507] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 234.109362][ T4507] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 234.117059][ T4507] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 234.127911][ T4507] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 234.147528][ T5663] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 234.279302][ T4507] usb 4-1: USB disconnect, device number 2 [ 234.297314][ T4507] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 234.366875][ T4287] ocfs2: Unmounting device (7,4) on (node local) [ 234.382193][ T4507] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 234.404239][ T4507] keyspan 4-1:1.0: device disconnected [ 234.619923][ T5670] loop1: detected capacity change from 0 to 764 [ 236.801983][ T5686] loop2: detected capacity change from 0 to 512 [ 236.839058][ T5686] EXT4-fs: Ignoring removed bh option [ 237.026830][ T5680] loop1: detected capacity change from 0 to 64 [ 237.039482][ T5686] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.316: corrupted in-inode xattr [ 237.159640][ T5686] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.316: couldn't read orphan inode 15 (err -117) [ 237.198751][ T5686] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 237.906713][ T5700] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 240.645795][ T5710] loop3: detected capacity change from 0 to 64 [ 242.167001][ T5724] loop3: detected capacity change from 0 to 1024 [ 244.048734][ T4320] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 244.101728][ T5733] loop4: detected capacity change from 0 to 256 [ 244.122701][ T5733] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 244.278867][ T5227] libceph: connect (1)[c::]:6789 error -101 [ 244.414105][ T5227] libceph: mon0 (1)[c::]:6789 connect error [ 244.901189][ T5228] libceph: connect (1)[c::]:6789 error -101 [ 244.907283][ T5228] libceph: mon0 (1)[c::]:6789 connect error [ 244.929621][ T5733] ceph: No mds server is up or the cluster is laggy [ 245.129894][ T4320] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 245.176226][ T4320] usb 4-1: config 220 has 0 interfaces, different from the descriptor's value: 3 [ 245.214773][ T5582] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 245.281043][ T4320] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 245.295887][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.323903][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 245.329462][ T4320] usb 4-1: Product: syz [ 245.334011][ T4320] usb 4-1: Manufacturer: syz [ 245.366113][ T4320] usb 4-1: SerialNumber: syz [ 245.988109][ T5748] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 250.041533][ T4320] usb 4-1: USB disconnect, device number 3 [ 250.101566][ T5762] loop1: detected capacity change from 0 to 64 [ 250.359069][ T5769] loop0: detected capacity change from 0 to 256 [ 250.373611][ T5769] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 250.629162][ T4320] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 250.855554][ T4320] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.933584][ T4320] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 251.079829][ T4320] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 251.233891][ T4320] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 251.325249][ T5771] loop1: detected capacity change from 0 to 512 [ 251.465487][ T4320] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 251.521298][ T5771] EXT4-fs: Ignoring removed bh option [ 251.683345][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.855507][ T5771] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.340: corrupted in-inode xattr [ 252.001185][ T5766] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 252.094271][ T5766] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 252.221401][ T5771] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.340: couldn't read orphan inode 15 (err -117) [ 252.338337][ T4320] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 252.497121][ T5771] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 252.535779][ T4320] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 252.696690][ T4320] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 252.920662][ T4320] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 253.255515][ T4320] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 253.303427][ T4320] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 253.357907][ T4320] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 253.463415][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 253.481997][ T4320] usb 4-1: USB disconnect, device number 4 [ 253.541913][ T4320] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 253.614054][ T4320] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 253.651930][ T4320] keyspan 4-1:1.0: device disconnected [ 253.700644][ T4421] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 254.162649][ T5785] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 256.292980][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.299399][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.665779][ T5798] loop2: detected capacity change from 0 to 512 [ 257.673337][ T5798] EXT4-fs: Ignoring removed bh option [ 257.708730][ T5798] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.349: corrupted in-inode xattr [ 257.721384][ T5798] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.349: couldn't read orphan inode 15 (err -117) [ 257.734805][ T5798] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 257.901217][ T5804] loop1: detected capacity change from 0 to 256 [ 258.662316][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 260.927433][ T5812] loop2: detected capacity change from 0 to 131072 [ 260.948979][ T5812] F2FS-fs (loop2): invalid crc value [ 261.031154][ T5812] F2FS-fs (loop2): Found nat_bits in checkpoint [ 261.113816][ T5812] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 261.149172][ T5812] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 261.274017][ T5819] loop4: detected capacity change from 0 to 256 [ 262.696452][ T5819] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 263.745003][ T4365] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 263.871994][ T26] audit: type=1800 audit(1786204985.324:6): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.351" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 264.095673][ T5827] batman_adv: batadv0: Adding interface: veth0 [ 264.101987][ T5827] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.127371][ T5827] batman_adv: batadv0: Interface activated: veth0 [ 267.120033][ T5855] loop3: detected capacity change from 0 to 40427 [ 268.640680][ T5855] F2FS-fs (loop3): invalid crc value [ 268.670512][ T5855] F2FS-fs (loop3): Found nat_bits in checkpoint [ 268.716775][ T5855] F2FS-fs (loop3): Start checkpoint disabled! [ 268.730172][ T5855] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 269.010167][ T5862] syz.3.362: attempt to access beyond end of device [ 269.010167][ T5862] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 269.714802][ T5866] loop1: detected capacity change from 0 to 256 [ 269.730015][ T5866] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 270.432890][ T4523] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 270.566146][ T11] kworker/u4:1: attempt to access beyond end of device [ 270.566146][ T11] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 271.100482][ T5876] loop4: detected capacity change from 0 to 1024 [ 271.174781][ T4389] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 272.603664][ T5890] loop1: detected capacity change from 0 to 256 [ 275.667740][ T5910] loop1: detected capacity change from 0 to 256 [ 275.989804][ T5910] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 276.855286][ T4447] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 278.254390][ T5928] loop4: detected capacity change from 0 to 64 [ 278.868906][ T5928] syz.4.384: attempt to access beyond end of device [ 278.868906][ T5928] loop4: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 278.882530][ T5928] Buffer I/O error on dev loop4, logical block 159, lost async page write [ 278.891302][ T5928] syz.4.384: attempt to access beyond end of device [ 278.891302][ T5928] loop4: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 278.912201][ T5928] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 278.921447][ T5928] syz.4.384: attempt to access beyond end of device [ 278.921447][ T5928] loop4: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 278.935716][ T5928] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 278.944834][ T5928] syz.4.384: attempt to access beyond end of device [ 278.944834][ T5928] loop4: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 278.958421][ T5928] Buffer I/O error on dev loop4, logical block 162, lost async page write [ 279.001079][ T5928] syz.4.384: attempt to access beyond end of device [ 279.001079][ T5928] loop4: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 279.014827][ T5928] Buffer I/O error on dev loop4, logical block 163, lost async page write [ 279.023884][ T5928] syz.4.384: attempt to access beyond end of device [ 279.023884][ T5928] loop4: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 279.038428][ T5928] Buffer I/O error on dev loop4, logical block 167, lost async page write [ 279.047265][ T5928] syz.4.384: attempt to access beyond end of device [ 279.047265][ T5928] loop4: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 279.060759][ T5928] Buffer I/O error on dev loop4, logical block 169, lost async page write [ 279.069675][ T5928] syz.4.384: attempt to access beyond end of device [ 279.069675][ T5928] loop4: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 279.083241][ T5928] Buffer I/O error on dev loop4, logical block 171, lost async page write [ 279.484943][ T5935] loop2: detected capacity change from 0 to 256 [ 279.877842][ T5931] loop3: detected capacity change from 0 to 4096 [ 280.058984][ T5931] ntfs3: Unknown parameter 'nocase' [ 280.205694][ T4389] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 282.143020][ T5947] sched: RT throttling activated [ 282.593584][ T5950] loop0: detected capacity change from 0 to 256 [ 282.631671][ T5950] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 284.388690][ T4447] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 284.630035][ T5959] loop2: detected capacity change from 0 to 256 [ 285.665288][ T5971] batman_adv: batadv0: Adding interface: veth0 [ 285.671748][ T5971] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.697809][ T5971] batman_adv: batadv0: Interface activated: veth0 [ 285.891652][ T5974] loop3: detected capacity change from 0 to 64 [ 285.953589][ T5974] syz.3.399: attempt to access beyond end of device [ 285.953589][ T5974] loop3: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 285.967284][ T5974] Buffer I/O error on dev loop3, logical block 159, lost async page write [ 285.976258][ T5974] syz.3.399: attempt to access beyond end of device [ 285.976258][ T5974] loop3: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 285.993419][ T5974] Buffer I/O error on dev loop3, logical block 160, lost async page write [ 286.003123][ T5974] syz.3.399: attempt to access beyond end of device [ 286.003123][ T5974] loop3: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 286.016485][ T5974] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 286.025399][ T5974] syz.3.399: attempt to access beyond end of device [ 286.025399][ T5974] loop3: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 286.038783][ T5974] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 286.080092][ T5974] syz.3.399: attempt to access beyond end of device [ 286.080092][ T5974] loop3: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 286.093809][ T5974] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 286.103585][ T5974] syz.3.399: attempt to access beyond end of device [ 286.103585][ T5974] loop3: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 286.117164][ T5974] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 286.126167][ T5974] syz.3.399: attempt to access beyond end of device [ 286.126167][ T5974] loop3: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 286.139740][ T5974] Buffer I/O error on dev loop3, logical block 169, lost async page write [ 286.148659][ T5974] syz.3.399: attempt to access beyond end of device [ 286.148659][ T5974] loop3: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 286.162199][ T5974] Buffer I/O error on dev loop3, logical block 171, lost async page write [ 286.596934][ T5980] loop0: detected capacity change from 0 to 512 [ 286.630818][ T5980] EXT4-fs: Ignoring removed bh option [ 286.821453][ T5980] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.402: corrupted in-inode xattr [ 287.046409][ T5980] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.402: couldn't read orphan inode 15 (err -117) [ 287.094107][ T5980] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 288.847618][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 289.109370][ T5997] loop4: detected capacity change from 0 to 256 [ 289.122056][ T5997] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 291.167915][ T6002] loop0: detected capacity change from 0 to 40427 [ 291.205966][ T6002] F2FS-fs (loop0): invalid crc value [ 291.229882][ T6002] F2FS-fs (loop0): Found nat_bits in checkpoint [ 291.265015][ T6002] F2FS-fs (loop0): Start checkpoint disabled! [ 291.296341][ T6002] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 291.332697][ T4373] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 291.589813][ T6007] syz.0.406: attempt to access beyond end of device [ 291.589813][ T6007] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 292.194292][ T4373] kworker/u4:10: attempt to access beyond end of device [ 292.194292][ T4373] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 292.404476][ T6014] loop4: detected capacity change from 0 to 1024 [ 296.823150][ T6028] tty tty24: ldisc open failed (-12), clearing slot 23 [ 297.011373][ T6034] loop4: detected capacity change from 0 to 512 [ 297.039463][ T6034] EXT4-fs: Ignoring removed bh option [ 297.145430][ T6034] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.416: corrupted in-inode xattr [ 297.169918][ T6034] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.416: couldn't read orphan inode 15 (err -117) [ 297.214544][ T6034] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 297.880483][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 298.109745][ T6042] batman_adv: batadv0: Adding interface: veth0 [ 298.115954][ T6042] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.141320][ T6042] batman_adv: batadv0: Interface activated: veth0 [ 298.499088][ T6046] loop2: detected capacity change from 0 to 32768 [ 298.532875][ T6046] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 298.541530][ T6046] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 298.571413][ T6046] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 298.585372][ T4320] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 298.592805][ T4320] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 298.769901][ T4320] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 177ms [ 298.828319][ T4320] gfs2: fsid=syz:syz.0: jid=0: Done [ 299.106319][ T6046] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 300.461050][ T6046] gfs2: fsid=syz:syz.0: found 1 quota changes [ 300.530370][ T6054] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 300.530370][ T6054] inode = 11 2339 [ 300.530370][ T6054] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 300.667511][ T6054] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 300.708334][ T6054] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:6054 [gfs2_quotad] gfs2_quota_sync+0x355/0x780 [ 300.760695][ T6054] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 300.794830][ T6054] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 300.874611][ T6054] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 300.898781][ T6054] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 300.907561][ T6054] gfs2: fsid=syz:syz.0: File system withdrawn [ 300.913924][ T6054] CPU: 0 PID: 6054 Comm: gfs2_quotad Not tainted syzkaller #0 [ 300.921436][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 300.931555][ T6054] Call Trace: [ 300.934887][ T6054] [ 300.937867][ T6054] dump_stack_lvl+0x188/0x24e [ 300.942605][ T6054] ? show_regs_print_info+0x12/0x12 [ 300.947859][ T6054] ? load_image+0x410/0x410 [ 300.952415][ T6054] ? kobject_uevent_env+0x364/0x890 [ 300.957705][ T6054] gfs2_withdraw+0xc69/0x1450 [ 300.962455][ T6054] ? gfs2_lm+0x240/0x240 [ 300.966778][ T6054] ? gfs2_consist_inode_i+0xf1/0x110 [ 300.972159][ T6054] gfs2_inode_refresh+0xb2d/0x1190 [ 300.977326][ T6054] ? gfs2_inode_metasync+0xf0/0xf0 [ 300.982487][ T6054] ? gfs2_glock_nq+0xcee/0x14d0 [ 300.987392][ T6054] gfs2_instantiate+0x15e/0x210 [ 300.992297][ T6054] gfs2_glock_wait+0x1d0/0x2a0 [ 300.997117][ T6054] do_sync+0x4af/0xbb0 [ 301.001233][ T6054] ? gfs2_quota_sync+0x355/0x780 [ 301.006231][ T6054] ? slot_put+0x1e0/0x1e0 [ 301.010699][ T6054] ? __lock_acquire+0x7c40/0x7c40 [ 301.015786][ T6054] ? do_raw_spin_lock+0x128/0x2f0 [ 301.020865][ T6054] ? gfs2_quota_sync+0x355/0x780 [ 301.025862][ T6054] ? do_raw_spin_unlock+0x11d/0x230 [ 301.031115][ T6054] gfs2_quota_sync+0x355/0x780 [ 301.035940][ T6054] gfs2_quotad+0x421/0x690 [ 301.040418][ T6054] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 301.045610][ T6054] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 301.051558][ T6054] ? wake_bit_function+0x200/0x200 [ 301.056723][ T6054] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 301.062701][ T6054] ? __kthread_parkme+0x71/0x1c0 [ 301.067704][ T6054] ? __kthread_parkme+0x15b/0x1c0 [ 301.072813][ T6054] kthread+0x29d/0x330 [ 301.076929][ T6054] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 301.082082][ T6054] ? kthread_blkcg+0xd0/0xd0 [ 301.086717][ T6054] ret_from_fork+0x1f/0x30 [ 301.091239][ T6054] [ 301.752419][ T4283] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 301.767327][ T4283] CPU: 1 PID: 4283 Comm: syz-executor Not tainted syzkaller #0 [ 301.774939][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.785044][ T4283] Call Trace: [ 301.788370][ T4283] [ 301.791346][ T4283] dump_stack_lvl+0x188/0x24e [ 301.796156][ T4283] ? gfs2_assert_warn_i+0xbb/0x2c0 [ 301.801364][ T4283] ? show_regs_print_info+0x12/0x12 [ 301.806621][ T4283] ? load_image+0x410/0x410 [ 301.811180][ T4283] ? do_raw_spin_unlock+0x11d/0x230 [ 301.816427][ T4283] gfs2_assert_warn_i+0x187/0x2c0 [ 301.821509][ T4283] gfs2_quota_cleanup+0x48c/0x670 [ 301.826600][ T4283] gfs2_put_super+0x22f/0x920 [ 301.831332][ T4283] ? gfs2_evict_inode+0x1290/0x1290 [ 301.836583][ T4283] generic_shutdown_super+0x130/0x340 [ 301.842003][ T4283] kill_block_super+0x7c/0xe0 [ 301.846726][ T4283] deactivate_locked_super+0x93/0xf0 [ 301.852058][ T4283] cleanup_mnt+0x471/0x4f0 [ 301.856521][ T4283] task_work_run+0x1d0/0x260 [ 301.861163][ T4283] ? task_work_cancel+0x220/0x220 [ 301.866238][ T4283] ? exit_to_user_mode_loop+0x3b/0x110 [ 301.871747][ T4283] exit_to_user_mode_loop+0xe6/0x110 [ 301.877085][ T4283] exit_to_user_mode_prepare+0xee/0x180 [ 301.882678][ T4283] syscall_exit_to_user_mode+0x16/0x40 [ 301.888176][ T4283] do_syscall_64+0x58/0xa0 [ 301.892641][ T4283] ? clear_bhb_loop+0x60/0xb0 [ 301.897366][ T4283] ? clear_bhb_loop+0x60/0xb0 [ 301.902091][ T4283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.908041][ T4283] RIP: 0033:0x7f1cdc39f317 [ 301.912499][ T4283] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 301.932172][ T4283] RSP: 002b:00007ffd0312dfd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 301.940690][ T4283] RAX: 0000000000000000 RBX: 00007f1cdc434474 RCX: 00007f1cdc39f317 [ 301.948715][ T4283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0312e090 [ 301.956728][ T4283] RBP: 00007ffd0312e090 R08: 00007ffd0312f090 R09: 00000000ffffffff [ 301.964755][ T4283] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0312f120 [ 301.972771][ T4283] R13: 00007f1cdc434474 R14: 0000000000049636 R15: 00007ffd0312f160 [ 301.980848][ T4283] [ 302.018046][ T6062] loop4: detected capacity change from 0 to 1024 [ 303.375971][ T6068] loop3: detected capacity change from 0 to 1024 [ 304.391961][ T6082] loop4: detected capacity change from 0 to 512 [ 304.419715][ T6082] EXT4-fs: Ignoring removed bh option [ 304.687623][ T6082] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.430: corrupted in-inode xattr [ 304.730585][ T6082] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.430: couldn't read orphan inode 15 (err -117) [ 304.772573][ T6082] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 305.767216][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 307.473485][ T6113] loop4: detected capacity change from 0 to 2048 [ 307.489788][ T6113] UDF-fs: bad mount option "gid=00000000004294967040" or missing value [ 308.753488][ T6118] loop2: detected capacity change from 0 to 1024 [ 309.759956][ T6125] loop4: detected capacity change from 0 to 40427 [ 309.780468][ T6125] F2FS-fs (loop4): invalid crc value [ 309.889591][ T6125] F2FS-fs (loop4): Found nat_bits in checkpoint [ 309.934407][ T6125] F2FS-fs (loop4): Start checkpoint disabled! [ 310.008510][ T6125] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 310.272641][ T6133] syz.4.441: attempt to access beyond end of device [ 310.272641][ T6133] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 311.930129][ T4421] kworker/u4:13: attempt to access beyond end of device [ 311.930129][ T4421] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 313.177835][ T6145] trusted_key: encrypted_key: insufficient parameters specified [ 317.665944][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.672368][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.194099][ T6177] loop3: detected capacity change from 0 to 1024 [ 321.294601][ T6181] loop2: detected capacity change from 0 to 1024 [ 322.344378][ T6189] loop4: detected capacity change from 0 to 40427 [ 322.362867][ T6189] F2FS-fs (loop4): invalid crc value [ 322.427330][ T6189] F2FS-fs (loop4): Found nat_bits in checkpoint [ 322.476756][ T6189] F2FS-fs (loop4): Start checkpoint disabled! [ 322.518186][ T6189] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 322.967377][ T6198] syz.4.458: attempt to access beyond end of device [ 322.967377][ T6198] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 324.729159][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 325.218788][ T4507] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 325.883936][ T4329] kworker/u4:7: attempt to access beyond end of device [ 325.883936][ T4329] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 325.948322][ T4507] usb 3-1: Using ep0 maxpacket: 8 [ 325.955324][ T4507] usb 3-1: config 6 has no interfaces? [ 325.984781][ T4507] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 326.017525][ T4507] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.058496][ T4507] usb 3-1: Product: syz [ 326.065227][ T4507] usb 3-1: Manufacturer: syz [ 326.078495][ T4507] usb 3-1: SerialNumber: syz [ 326.309060][ T4507] usb 3-1: USB disconnect, device number 4 [ 326.482319][ T6216] loop1: detected capacity change from 0 to 256 [ 327.719240][ T6225] loop3: detected capacity change from 0 to 1024 [ 328.728674][ T6230] loop2: detected capacity change from 0 to 1024 [ 329.710801][ T6238] loop1: detected capacity change from 0 to 256 [ 329.742142][ T6234] loop4: detected capacity change from 0 to 2048 [ 330.749384][ T4389] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 332.400148][ T6054] INFO: trying to register non-static key. [ 332.406059][ T6054] The code is fine but needs lockdep annotation, or maybe [ 332.413205][ T6054] you didn't initialize this object before use? [ 332.419502][ T6054] turning off the locking correctness validator. [ 332.425853][ T6054] CPU: 1 PID: 6054 Comm: gfs2_quotad Not tainted syzkaller #0 [ 332.433344][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.443438][ T6054] Call Trace: [ 332.446768][ T6054] [ 332.449745][ T6054] dump_stack_lvl+0x188/0x24e [ 332.454488][ T6054] ? show_regs_print_info+0x12/0x12 [ 332.459745][ T6054] ? load_image+0x410/0x410 [ 332.464292][ T6054] ? _find_next_bit+0x11e/0x130 [ 332.469201][ T6054] ? __is_module_percpu_address+0x279/0x3b0 [ 332.475136][ T6054] ? is_kernel_percpu_address+0x18f/0x1b0 [ 332.480902][ T6054] assign_lock_key+0x201/0x230 [ 332.485701][ T6054] ? SOFTIRQ_verbose+0x10/0x10 [ 332.490479][ T6054] ? mark_lock+0x94/0x320 [ 332.494835][ T6054] ? __lock_acquire+0x1465/0x7c40 [ 332.499894][ T6054] register_lock_class+0x21d/0x870 [ 332.505149][ T6054] ? is_dynamic_key+0x260/0x260 [ 332.510034][ T6054] __lock_acquire+0x172/0x7c40 [ 332.514818][ T6054] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 332.520812][ T6054] ? lock_chain_count+0x20/0x20 [ 332.525689][ T6054] ? __free_object+0x218/0xa60 [ 332.530479][ T6054] ? lockdep_hardirqs_on+0x94/0x140 [ 332.535703][ T6054] ? verify_lock_unused+0x140/0x140 [ 332.540945][ T6054] ? alloc_object+0x640/0x640 [ 332.545642][ T6054] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 332.551648][ T6054] ? __lock_acquire+0x7c40/0x7c40 [ 332.556696][ T6054] ? lock_chain_count+0x20/0x20 [ 332.561567][ T6054] lock_acquire+0x1bb/0x4a0 [ 332.566086][ T6054] ? finish_wait+0xbb/0x1c0 [ 332.570633][ T6054] ? timer_delete_sync+0x20/0x20 [ 332.575615][ T6054] ? read_lock_is_recursive+0x10/0x10 [ 332.581012][ T6054] _raw_spin_lock_irqsave+0xb0/0x100 [ 332.586312][ T6054] ? finish_wait+0xbb/0x1c0 [ 332.590833][ T6054] ? _raw_spin_lock+0x40/0x40 [ 332.595552][ T6054] ? update_process_times+0x1b0/0x1b0 [ 332.600936][ T6054] finish_wait+0xbb/0x1c0 [ 332.605280][ T6054] gfs2_quotad+0x501/0x690 [ 332.609714][ T6054] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 332.614832][ T6054] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 332.620781][ T6054] ? wake_bit_function+0x200/0x200 [ 332.625933][ T6054] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 332.631846][ T6054] ? __kthread_parkme+0x71/0x1c0 [ 332.636801][ T6054] ? __kthread_parkme+0x15b/0x1c0 [ 332.641844][ T6054] kthread+0x29d/0x330 [ 332.645917][ T6054] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 332.651035][ T6054] ? kthread_blkcg+0xd0/0xd0 [ 332.655653][ T6054] ret_from_fork+0x1f/0x30 [ 332.660088][ T6054] [ 332.663114][ T6054] list_del corruption. prev->next should be ffffc90004e87e58, but was 0000000000000000. (prev=ffff888050234bd8) [ 332.675313][ T6054] ------------[ cut here ]------------ [ 332.680769][ T6054] kernel BUG at lib/list_debug.c:61! [ 332.686076][ T6054] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 332.692168][ T6054] CPU: 1 PID: 6054 Comm: gfs2_quotad Not tainted syzkaller #0 [ 332.699653][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.709735][ T6054] RIP: 0010:__list_del_entry_valid+0x10a/0x120 [ 332.715909][ T6054] Code: e8 bb cd 0a 06 0f 0b 48 c7 c7 20 62 df 8a 48 89 de e8 aa cd 0a 06 0f 0b 48 c7 c7 80 62 df 8a 48 89 de 4c 89 f9 e8 96 cd 0a 06 <0f> 0b 48 c7 c7 00 63 df 8a 48 89 de 4c 89 f1 e8 82 cd 0a 06 0f 0b [ 332.735609][ T6054] RSP: 0018:ffffc90004e87d30 EFLAGS: 00010046 [ 332.741701][ T6054] RAX: 000000000000006d RBX: ffffc90004e87e58 RCX: 0396152d0497ff00 [ 332.749681][ T6054] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 332.757685][ T6054] RBP: ffff888050234b98 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 332.765669][ T6054] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: dffffc0000000000 [ 332.773649][ T6054] R13: 0000000000000a02 R14: ffff888050234bd8 R15: ffff888050234bd8 [ 332.781635][ T6054] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 332.790569][ T6054] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.797156][ T6054] CR2: 00007f4e2d521338 CR3: 000000005bbf4000 CR4: 00000000003506e0 [ 332.805134][ T6054] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 332.813112][ T6054] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 332.821088][ T6054] Call Trace: [ 332.824369][ T6054] [ 332.827302][ T6054] finish_wait+0xc6/0x1c0 [ 332.831678][ T6054] gfs2_quotad+0x501/0x690 [ 332.836104][ T6054] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 332.841217][ T6054] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 332.847121][ T6054] ? wake_bit_function+0x200/0x200 [ 332.852248][ T6054] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 332.858146][ T6054] ? __kthread_parkme+0x71/0x1c0 [ 332.863097][ T6054] ? __kthread_parkme+0x15b/0x1c0 [ 332.868135][ T6054] kthread+0x29d/0x330 [ 332.872208][ T6054] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 332.877325][ T6054] ? kthread_blkcg+0xd0/0xd0 [ 332.881921][ T6054] ret_from_fork+0x1f/0x30 [ 332.886352][ T6054] [ 332.889382][ T6054] Modules linked in: [ 332.893290][ T6054] ---[ end trace 0000000000000000 ]--- [ 332.898747][ T6054] RIP: 0010:__list_del_entry_valid+0x10a/0x120 [ 332.904920][ T6054] Code: e8 bb cd 0a 06 0f 0b 48 c7 c7 20 62 df 8a 48 89 de e8 aa cd 0a 06 0f 0b 48 c7 c7 80 62 df 8a 48 89 de 4c 89 f9 e8 96 cd 0a 06 <0f> 0b 48 c7 c7 00 63 df 8a 48 89 de 4c 89 f1 e8 82 cd 0a 06 0f 0b [ 332.924534][ T6054] RSP: 0018:ffffc90004e87d30 EFLAGS: 00010046 [ 332.930608][ T6054] RAX: 000000000000006d RBX: ffffc90004e87e58 RCX: 0396152d0497ff00 [ 332.938611][ T6054] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 332.946635][ T6054] RBP: ffff888050234b98 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 332.954623][ T6054] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: dffffc0000000000 [ 332.962630][ T6054] R13: 0000000000000a02 R14: ffff888050234bd8 R15: ffff888050234bd8 [ 332.970647][ T6054] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 332.979584][ T6054] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.986173][ T6054] CR2: 00007f4e2d521338 CR3: 000000005bbf4000 CR4: 00000000003506e0 [ 332.994155][ T6054] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 333.002130][ T6054] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 333.010119][ T6054] Kernel panic - not syncing: Fatal exception [ 333.016347][ T6054] Kernel Offset: disabled [ 333.020694][ T6054] Rebooting in 86400 seconds..