last executing test programs: 4.645398098s ago: executing program 0 (id=578): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000000000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="fd8938ddf449663a000000000000000020001280080001"], 0x40}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c0009"], 0x34}}, 0x0) 4.401454813s ago: executing program 1 (id=580): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback, 0x20}, 0x1c) 4.300998039s ago: executing program 3 (id=581): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 4.262738241s ago: executing program 4 (id=582): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7fdce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548", 0x36, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.23406167s ago: executing program 5 (id=583): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4.212884789s ago: executing program 0 (id=584): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f00000000000000000000000850000000500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r1, 0x25, 0x0, @val=@tracing}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000003c0)=ANY=[], 0x0) 4.100679518s ago: executing program 2 (id=585): socket$netlink(0x10, 0x3, 0x0) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2a, 0x2, 0xffffffff) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket$caif_stream(0x25, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000001a850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3], 0x20) 4.10035352s ago: executing program 1 (id=586): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.02533139s ago: executing program 3 (id=587): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101881, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001418) ioctl$TUNSETOFFLOAD(r0, 0x40107447, 0x20000000) 3.975328403s ago: executing program 5 (id=588): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.961285021s ago: executing program 4 (id=589): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") 3.775772762s ago: executing program 1 (id=590): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fallocate(r1, 0x0, 0x0, 0x5) fallocate(r0, 0x0, 0x0, 0x10fff9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x18, 0x0, 0x2}) 3.775339791s ago: executing program 2 (id=591): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) kexec_load(0x0, 0x0, 0x0, 0x3e0000) 3.772856451s ago: executing program 0 (id=592): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0, 0x0, 0x1ff}, 0x18) socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x24fd, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x13, 0x7, 0xfffd, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040c2", 0x5d}], 0x100000000000000f}, 0x0, 0x80840, 0x1}) io_uring_enter(r4, 0x1d2d, 0x0, 0x0, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r7, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x402c5342, &(0x7f00000000c0)) tkill(0x0, 0x7) 3.632850705s ago: executing program 5 (id=593): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) symlinkat(&(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}]}, 0x1c}}, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="61030cba0406b1d403fe7a70bab94c5aa103"], 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x8, &(0x7f0000001c40)=ANY=[@ANYRES16], 0x0, 0xbbd0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x80000001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) 3.541713415s ago: executing program 3 (id=594): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x1, 0xfda0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000340)="39aafad7", 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x9, 0x80, 0x3, 0x4, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 3.541463187s ago: executing program 4 (id=595): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000540)={0x7ce9, 0x6, 0x0, 0x0, 0x1, 0x100006}) 3.540999586s ago: executing program 5 (id=596): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x200000, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@min_batch_time={'min_batch_time', 0x3d, 0xc0}}, {@delalloc}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@nouid32}, {@resgid}, {@grpquota}, {@sysvgroups}]}, 0x1, 0x573, &(0x7f0000001140)="$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") chdir(&(0x7f0000000080)='./file0\x00') lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000002700)=ANY=[], 0xe01, 0x0) rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 3.435379077s ago: executing program 2 (id=597): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000ffdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="08000e00900000004014da3eba078e9741d587"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x80) 3.264251406s ago: executing program 4 (id=598): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrusage(0x0, &(0x7f0000000780)) 3.263285117s ago: executing program 1 (id=599): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x0, &(0x7f0000000c80)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ioctl$FIBMAP(r0, 0x660c, 0x0) 3.158207303s ago: executing program 2 (id=600): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.155986334s ago: executing program 5 (id=601): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7fdce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548", 0x36, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.964869645s ago: executing program 4 (id=602): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0xfffc, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f00000003c0)={r2, 0x0, 0x10}, &(0x7f00000000c0)=0x18) 1.819764585s ago: executing program 3 (id=603): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.789842528s ago: executing program 2 (id=604): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r0, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1004404, &(0x7f0000000240)={[{@noinit_itable}, {@dioread_lock}, {@auto_da_alloc}, {@lazytime}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0xa}}]}, 0x23, 0x44d, &(0x7f0000000980)="$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") r3 = creat(&(0x7f0000000100)='./bus\x00', 0x100) fcntl$setstatus(r3, 0x4, 0x6100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) gettid() socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xec67ba842dbbc0d2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000004e00)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x0, 0x1081}}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) splice(r6, 0x0, r8, 0x0, 0x7, 0x0) shutdown(r7, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) write$cgroup_type(r3, &(0x7f0000000200), 0x175d9003) 1.710888339s ago: executing program 0 (id=605): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x1, 0xfda0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000340)="39aafad7", 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x9, 0x80, 0x3, 0x4, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 1.632934713s ago: executing program 3 (id=606): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101881, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001418) ioctl$TUNSETOFFLOAD(r0, 0x40107447, 0x20000000) 1.588720728s ago: executing program 4 (id=607): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xf, &(0x7f0000000400)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e736335ef7a0456, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='freezer.parent_freezing\x00', 0x7a05, 0x1700) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1000003, 0x0, 0x4, 0x722}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r2], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x75e559a64ef207b2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) setuid(r2) mount$cgroup(0x0, &(0x7f00000001c0)='./file2\x00', &(0x7f00000004c0), 0x201000, &(0x7f0000000580)={[{@nofavordynmods}, {@cpuset_v2_mode}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2282, 0x0) write$P9_RLERRORu(r3, 0x0, 0x18) 740.863439ms ago: executing program 3 (id=609): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000060000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 629.104808ms ago: executing program 0 (id=610): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) capget(0x0, 0x0) 560.696204ms ago: executing program 1 (id=611): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x9}) 370.327317ms ago: executing program 0 (id=612): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000020605000000000000000000000000000e0003006269746d090000007000000005000400000000ee6892c71d99908bce000900020073797a310000008d29000500000000"], 0x48}}, 0x814) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESOCT=r3], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x4008094) close(r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r7}, 0x10) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f00000000c0)=0x32) read(r3, &(0x7f00000019c0)=""/4093, 0xffd) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) fcntl$setstatus(r9, 0x4, 0x800) waitid$P_PIDFD(0x3, r9, 0x0, 0x8, 0x0) 341.040693ms ago: executing program 2 (id=613): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000ffdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="08000e00900000004014da3eba078e9741d587"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x80) 0s ago: executing program 1 (id=614): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x5, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}]}}]}, 0xa4}}, 0x0) kernel console output (not intermixed with test programs): 003 length: 249 > 9 [ 91.154845][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.163634][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.171709][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.179991][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.180646][ T5876] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.195205][ T5865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.202180][ T5874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.202992][ T5876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.210411][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.217869][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.224645][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.233884][ T5876] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.244999][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.250008][ T5868] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.252879][ T5876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.259351][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.267643][ T5876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.281564][ T5876] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.290172][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.298074][ T5876] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.306164][ T5876] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.314640][ T5876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.322862][ T5876] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.330547][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.339016][ T5876] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.342640][ T5868] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.353618][ T5860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.860991][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 92.135174][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 92.237127][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 92.323519][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.330832][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.338406][ T5854] bridge_slave_0: entered allmulticast mode [ 92.347027][ T5854] bridge_slave_0: entered promiscuous mode [ 92.365094][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 92.395247][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.402642][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.409856][ T5854] bridge_slave_1: entered allmulticast mode [ 92.417025][ T5854] bridge_slave_1: entered promiscuous mode [ 92.433553][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 92.461570][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 92.498327][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.505589][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.513286][ T5855] bridge_slave_0: entered allmulticast mode [ 92.520232][ T5855] bridge_slave_0: entered promiscuous mode [ 92.573899][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.583582][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.591422][ T5855] bridge_slave_1: entered allmulticast mode [ 92.598333][ T5855] bridge_slave_1: entered promiscuous mode [ 92.619067][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.630987][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.786616][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.800235][ T5854] team0: Port device team_slave_0 added [ 92.832806][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.840035][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.848555][ T5856] bridge_slave_0: entered allmulticast mode [ 92.855709][ T5856] bridge_slave_0: entered promiscuous mode [ 92.875595][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.891064][ T5854] team0: Port device team_slave_1 added [ 92.935465][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.942924][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.950169][ T5856] bridge_slave_1: entered allmulticast mode [ 92.957651][ T5856] bridge_slave_1: entered promiscuous mode [ 92.975448][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.982676][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.990879][ T5853] bridge_slave_0: entered allmulticast mode [ 92.997993][ T5853] bridge_slave_0: entered promiscuous mode [ 93.048771][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.057405][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.071567][ T5866] bridge_slave_0: entered allmulticast mode [ 93.078539][ T5866] bridge_slave_0: entered promiscuous mode [ 93.115590][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.123186][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.130446][ T5853] bridge_slave_1: entered allmulticast mode [ 93.137803][ T5853] bridge_slave_1: entered promiscuous mode [ 93.147695][ T5855] team0: Port device team_slave_0 added [ 93.155638][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.163748][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.189798][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.202310][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.209497][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.221413][ T5866] bridge_slave_1: entered allmulticast mode [ 93.228392][ T5866] bridge_slave_1: entered promiscuous mode [ 93.236582][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.250005][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.257357][ T5867] bridge_slave_0: entered allmulticast mode [ 93.264966][ T5867] bridge_slave_0: entered promiscuous mode [ 93.301577][ T5855] team0: Port device team_slave_1 added [ 93.307906][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.315223][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.342332][ T5873] Bluetooth: hci1: command tx timeout [ 93.342369][ T5876] Bluetooth: hci0: command tx timeout [ 93.353735][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.386640][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.394714][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.401964][ T5876] Bluetooth: hci2: command tx timeout [ 93.407599][ T5867] bridge_slave_1: entered allmulticast mode [ 93.412151][ T5876] Bluetooth: hci4: command tx timeout [ 93.413604][ T5873] Bluetooth: hci3: command tx timeout [ 93.419185][ T5876] Bluetooth: hci5: command tx timeout [ 93.426295][ T5867] bridge_slave_1: entered promiscuous mode [ 93.440941][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.452738][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.464991][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.496341][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.526465][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.565651][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.573096][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.599953][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.616153][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.639134][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.654889][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.676641][ T5856] team0: Port device team_slave_0 added [ 93.695674][ T5853] team0: Port device team_slave_0 added [ 93.702302][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.709276][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.735591][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.791434][ T5856] team0: Port device team_slave_1 added [ 93.809629][ T5853] team0: Port device team_slave_1 added [ 93.826391][ T5854] hsr_slave_0: entered promiscuous mode [ 93.836568][ T5854] hsr_slave_1: entered promiscuous mode [ 93.859501][ T5866] team0: Port device team_slave_0 added [ 93.877647][ T5867] team0: Port device team_slave_0 added [ 93.926479][ T5866] team0: Port device team_slave_1 added [ 93.948421][ T5867] team0: Port device team_slave_1 added [ 93.970182][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.977583][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.004649][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.040623][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.048056][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.074349][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.088031][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.095464][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.122013][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.156489][ T5855] hsr_slave_0: entered promiscuous mode [ 94.163341][ T5855] hsr_slave_1: entered promiscuous mode [ 94.170633][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.178708][ T5855] Cannot create hsr debugfs directory [ 94.184918][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.192294][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.218750][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.255195][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.262484][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.289151][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.306933][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.314439][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.340635][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.365007][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.372283][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.398672][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.412319][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.419301][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.445635][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.515139][ T5856] hsr_slave_0: entered promiscuous mode [ 94.522058][ T5856] hsr_slave_1: entered promiscuous mode [ 94.529458][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.548590][ T5856] Cannot create hsr debugfs directory [ 94.640190][ T5853] hsr_slave_0: entered promiscuous mode [ 94.647069][ T5853] hsr_slave_1: entered promiscuous mode [ 94.655932][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.663686][ T5853] Cannot create hsr debugfs directory [ 94.687772][ T5866] hsr_slave_0: entered promiscuous mode [ 94.694286][ T5866] hsr_slave_1: entered promiscuous mode [ 94.700441][ T5866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.708144][ T5866] Cannot create hsr debugfs directory [ 94.794333][ T5867] hsr_slave_0: entered promiscuous mode [ 94.801221][ T5867] hsr_slave_1: entered promiscuous mode [ 94.807382][ T5867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.815726][ T5867] Cannot create hsr debugfs directory [ 95.143745][ T5854] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.199263][ T5854] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.209764][ T5854] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.243661][ T5854] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.292566][ T5855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.313630][ T5855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.326605][ T5855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.345815][ T5855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.401443][ T5876] Bluetooth: hci1: command tx timeout [ 95.401474][ T5873] Bluetooth: hci0: command tx timeout [ 95.425612][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.436237][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.449575][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.459894][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.480827][ T5873] Bluetooth: hci5: command tx timeout [ 95.481021][ T5876] Bluetooth: hci2: command tx timeout [ 95.491073][ T5860] Bluetooth: hci4: command tx timeout [ 95.497222][ T5873] Bluetooth: hci3: command tx timeout [ 95.607872][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.640144][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.662931][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.679772][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.691432][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.746194][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.767648][ T5867] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.822296][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.830418][ T5867] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.843866][ T5867] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.858682][ T5867] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.876535][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.897929][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.905383][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.930017][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.966097][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.976990][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.990495][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.997694][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.008520][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.015667][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.046187][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.063750][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.070930][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.247781][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.352837][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.456060][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.476476][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.484409][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.504177][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.511339][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.533029][ T8] cfg80211: failed to load regulatory.db [ 96.589402][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.650436][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.698673][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.705884][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.723878][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.731144][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.756523][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.778641][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.809883][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.866974][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.874251][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.915051][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.940566][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.947757][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.084194][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.152470][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.159647][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.201324][ T5855] veth0_vlan: entered promiscuous mode [ 97.301895][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.309051][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.394492][ T5855] veth1_vlan: entered promiscuous mode [ 97.482502][ T5873] Bluetooth: hci0: command tx timeout [ 97.487984][ T5873] Bluetooth: hci1: command tx timeout [ 97.529783][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.561072][ T5860] Bluetooth: hci4: command tx timeout [ 97.561843][ T5876] Bluetooth: hci5: command tx timeout [ 97.566614][ T5860] Bluetooth: hci2: command tx timeout [ 97.577733][ T5873] Bluetooth: hci3: command tx timeout [ 97.582575][ T5855] veth0_macvtap: entered promiscuous mode [ 97.637735][ T5854] veth0_vlan: entered promiscuous mode [ 97.709506][ T5855] veth1_macvtap: entered promiscuous mode [ 97.734193][ T5856] veth0_vlan: entered promiscuous mode [ 97.744002][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.753015][ T5854] veth1_vlan: entered promiscuous mode [ 97.777232][ T5856] veth1_vlan: entered promiscuous mode [ 97.809434][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.901807][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.937274][ T5854] veth0_macvtap: entered promiscuous mode [ 97.958828][ T5854] veth1_macvtap: entered promiscuous mode [ 97.975994][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.020137][ T5855] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.030502][ T5855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.042243][ T5855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.052939][ T5855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.076557][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.095935][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.112768][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.150458][ T5856] veth0_macvtap: entered promiscuous mode [ 98.178751][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.190352][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.202087][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.223323][ T5856] veth1_macvtap: entered promiscuous mode [ 98.255575][ T5853] veth0_vlan: entered promiscuous mode [ 98.284189][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.301392][ T5854] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.310158][ T5854] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.321340][ T5854] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.330091][ T5854] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.359638][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.373194][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.385262][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.395987][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.407072][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.433046][ T5853] veth1_vlan: entered promiscuous mode [ 98.448905][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.469100][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.479115][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.489611][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.502605][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.525012][ T5856] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.534104][ T5856] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.543332][ T5856] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.554085][ T5856] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.639375][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.651762][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.666185][ T5867] veth0_vlan: entered promiscuous mode [ 98.694204][ T5853] veth0_macvtap: entered promiscuous mode [ 98.715939][ T5867] veth1_vlan: entered promiscuous mode [ 98.755088][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.768079][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.781441][ T5866] veth0_vlan: entered promiscuous mode [ 98.796722][ T5866] veth1_vlan: entered promiscuous mode [ 98.829571][ T5853] veth1_macvtap: entered promiscuous mode [ 98.885188][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.893346][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.909122][ T5867] veth0_macvtap: entered promiscuous mode [ 98.923885][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.929204][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.952709][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.967148][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.978139][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.988510][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.999121][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.010515][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.039671][ T5867] veth1_macvtap: entered promiscuous mode [ 99.056229][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.074081][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.085669][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.096715][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.106985][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.117906][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.129062][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.210611][ T5866] veth0_macvtap: entered promiscuous mode [ 99.237574][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.239836][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.256306][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.270208][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.280340][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.297635][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.307983][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.319050][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.330401][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.340991][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.352563][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.367646][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.368553][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.383254][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.414140][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.424195][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.435477][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.445681][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.456994][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.466913][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.479301][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.512155][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.523637][ T5866] veth1_macvtap: entered promiscuous mode [ 99.548740][ T5853] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.558879][ T5853] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.569291][ T5873] Bluetooth: hci1: command tx timeout [ 99.575071][ T5860] Bluetooth: hci0: command tx timeout [ 99.580609][ T5853] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.589441][ T5853] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.625670][ T5867] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.636120][ T5867] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.645161][ T5873] Bluetooth: hci5: command tx timeout [ 99.645215][ T5873] Bluetooth: hci4: command tx timeout [ 99.651880][ T5860] Bluetooth: hci3: command tx timeout [ 99.660786][ T5867] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.663560][ T5873] Bluetooth: hci2: command tx timeout [ 99.676786][ T5867] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.755455][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.776612][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.789669][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.800343][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.811598][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.822409][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.832366][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.843544][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.853919][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.864573][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.876033][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.924308][ T3539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.933622][ T3539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.943521][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.954511][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.977659][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.989663][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.010822][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.030344][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.062145][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.073841][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.083974][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.094534][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.106128][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.202482][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.210346][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.234575][ T5973] random: crng reseeded on system resumption [ 100.264512][ T5866] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.283955][ T5866] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.300214][ T5866] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.364710][ T5866] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.447618][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.473039][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.817045][ T5995] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.087812][ T5989] xt_hashlimit: max too large, truncated to 1048576 [ 102.220879][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.273065][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.301231][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.329107][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.515845][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.543217][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.650230][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.698901][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.334191][ T6005] loop0: detected capacity change from 0 to 164 [ 103.385223][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 103.797985][ T6025] loop0: detected capacity change from 0 to 512 [ 103.975762][ T6025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.090936][ T6025] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.281147][ T29] audit: type=1326 audit(1732954765.303:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 104.380650][ T29] audit: type=1326 audit(1732954765.303:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 104.487704][ T29] audit: type=1326 audit(1732954765.313:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 104.540762][ T29] audit: type=1326 audit(1732954765.313:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 104.600144][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.632310][ T29] audit: type=1326 audit(1732954765.313:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 104.854481][ T29] audit: type=1326 audit(1732954765.313:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb883982767 code=0x7ffc0000 [ 104.968962][ T29] audit: type=1326 audit(1732954765.313:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 105.119129][ T29] audit: type=1326 audit(1732954765.313:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 105.203073][ T29] audit: type=1326 audit(1732954765.323:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 105.312324][ T29] audit: type=1326 audit(1732954765.323:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.4.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 106.464788][ T6051] netlink: 36 bytes leftover after parsing attributes in process `syz.0.25'. [ 106.663030][ T6055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28'. [ 106.680792][ T6055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28'. [ 107.227306][ T6065] loop0: detected capacity change from 0 to 512 [ 107.478719][ T6069] loop1: detected capacity change from 0 to 128 [ 107.490319][ T6069] ======================================================= [ 107.490319][ T6069] WARNING: The mand mount option has been deprecated and [ 107.490319][ T6069] and is ignored by this kernel. Remove the mand [ 107.490319][ T6069] option from the mount to silence this warning. [ 107.490319][ T6069] ======================================================= [ 107.906117][ T6065] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.31: corrupted in-inode xattr: invalid ea_ino [ 108.268807][ T6065] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.31: couldn't read orphan inode 15 (err -117) [ 108.381436][ T6069] EXT4-fs (loop1): Test dummy encryption mode enabled [ 108.394462][ T6065] EXT4-fs (loop0): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.411238][ T6069] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.424743][ T6069] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.528426][ T5853] EXT4-fs (loop0): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 108.720049][ T6066] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 109.069066][ T6089] loop5: detected capacity change from 0 to 512 [ 109.081662][ T6089] EXT4-fs: journaled quota format not specified [ 109.110296][ T6087] loop4: detected capacity change from 0 to 2048 [ 109.157253][ T6087] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.255460][ T6069] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 109.613896][ T5856] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.634585][ T6087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.830845][ T6103] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.36: bg 0: block 234: padding at end of block bitmap is not set [ 109.984122][ T6103] EXT4-fs (loop4): Remounting filesystem read-only [ 110.034074][ T6089] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.168709][ T6087] syz.4.36[6087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.168866][ T6087] syz.4.36[6087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.282350][ T6087] syz.4.36[6087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.412324][ T6117] loop3: detected capacity change from 0 to 128 [ 110.442086][ T6104] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 110.443148][ T6117] ext4: Unknown parameter 'permit_directio' [ 110.690305][ T6089] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.143676][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.201390][ T6089] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.261236][ T6122] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 111.638877][ T6089] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.124576][ T6089] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.306587][ T6089] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.325641][ T6089] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.358968][ T6144] loop2: detected capacity change from 0 to 2048 [ 112.408238][ T6144] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.411257][ T6089] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.530847][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 112.530874][ T29] audit: type=1326 audit(1732954773.543:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 112.596108][ T29] audit: type=1326 audit(1732954773.543:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 112.619100][ T29] audit: type=1326 audit(1732954773.543:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 112.634091][ T6144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.730189][ T29] audit: type=1326 audit(1732954773.543:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 112.775712][ T29] audit: type=1326 audit(1732954773.553:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 112.830766][ T29] audit: type=1326 audit(1732954773.613:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 112.854736][ T29] audit: type=1326 audit(1732954773.613:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 113.223019][ T5866] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.339689][ T6175] loop0: detected capacity change from 0 to 512 [ 113.555541][ T6175] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.69: corrupted in-inode xattr: invalid ea_ino [ 113.617822][ T6175] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.69: couldn't read orphan inode 15 (err -117) [ 113.724495][ T6175] EXT4-fs (loop0): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.904190][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.913477][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.990003][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.018595][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.100062][ T5853] EXT4-fs (loop0): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 114.270240][ T6195] wireguard0: entered promiscuous mode [ 114.277331][ T6195] wireguard0: entered allmulticast mode [ 114.467987][ T6203] Zero length message leads to an empty skb [ 114.499590][ T6202] syz.1.80 uses obsolete (PF_INET,SOCK_PACKET) [ 115.237509][ T68] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 115.810654][ T6235] loop0: detected capacity change from 0 to 764 [ 116.295167][ T6249] loop3: detected capacity change from 0 to 256 [ 116.305354][ T29] audit: type=1326 audit(1732954777.343:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.5.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb403180849 code=0x7ffc0000 [ 116.358698][ T29] audit: type=1326 audit(1732954777.343:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.5.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fb403180849 code=0x7ffc0000 [ 116.473357][ T29] audit: type=1326 audit(1732954777.343:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.5.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb403180849 code=0x7ffc0000 [ 116.939717][ T6261] loop1: detected capacity change from 0 to 128 [ 117.021634][ T6261] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.070379][ T6261] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.179006][ T6261] EXT4-fs warning (device loop1): verify_group_input:136: Cannot add at group 3 (only 1 groups) [ 117.406063][ T5856] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.474528][ T6275] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 117.698066][ T6286] mmap: syz.2.115 (6286) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 117.727264][ T6284] syz.2.115[6284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.727390][ T6284] syz.2.115[6284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.814250][ T6284] syz.2.115[6284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.860562][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 117.860589][ T29] audit: type=1326 audit(1732954778.873:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.2.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c7180849 code=0x7ffc0000 [ 118.030919][ T29] audit: type=1326 audit(1732954778.943:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.2.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c7180849 code=0x7ffc0000 [ 118.269681][ T6299] syz.3.121[6299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.269800][ T6299] syz.3.121[6299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.350645][ T6299] syz.3.121[6299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.412005][ T6304] xt_hashlimit: size too large, truncated to 1048576 [ 118.457769][ T6304] xt_hashlimit: max too large, truncated to 1048576 [ 118.512435][ T6305] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 118.561038][ T6305] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 118.910751][ T29] audit: type=1326 audit(1732954779.933:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.5.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4031777e7 code=0x7ffc0000 [ 118.980145][ T29] audit: type=1326 audit(1732954779.943:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.5.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb40311c189 code=0x7ffc0000 [ 119.045759][ T6288] loop0: detected capacity change from 0 to 256 [ 119.088453][ T29] audit: type=1326 audit(1732954779.943:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.5.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb403180849 code=0x7ffc0000 [ 119.127159][ T6288] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.178799][ T6288] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.196467][ T29] audit: type=1326 audit(1732954779.943:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.5.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4031777e7 code=0x7ffc0000 [ 119.248664][ T6288] FAT-fs (loop0): Filesystem has been set read-only [ 119.306468][ T29] audit: type=1326 audit(1732954779.943:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.5.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb40311c189 code=0x7ffc0000 [ 119.380010][ T6322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.401355][ T6322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.416921][ T29] audit: type=1326 audit(1732954779.943:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.5.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4031777e7 code=0x7ffc0000 [ 119.467804][ T6326] loop1: detected capacity change from 0 to 512 [ 119.478451][ T29] audit: type=1326 audit(1732954779.943:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.5.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb40311c189 code=0x7ffc0000 [ 119.478509][ T6322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.537086][ T29] audit: type=1326 audit(1732954779.943:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.5.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4031777e7 code=0x7ffc0000 [ 119.552501][ T6322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.597654][ T6326] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.133: corrupted in-inode xattr: invalid ea_ino [ 119.628094][ T6326] EXT4-fs error (device loop1): ext4_orphan_get:1392: comm syz.1.133: couldn't read orphan inode 15 (err -117) [ 119.658979][ T6326] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.663499][ T6332] netlink: 28 bytes leftover after parsing attributes in process `syz.5.135'. [ 119.680099][ T6332] netlink: 28 bytes leftover after parsing attributes in process `syz.5.135'. [ 119.844543][ T5856] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 120.554386][ T6351] loop0: detected capacity change from 0 to 1024 [ 120.586668][ T6354] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 120.672439][ T6351] EXT4-fs: Ignoring removed orlov option [ 120.678333][ T6351] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.828349][ T6351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.523962][ T6370] loop4: detected capacity change from 0 to 128 [ 121.987317][ T6370] EXT4-fs (loop4): Test dummy encryption mode enabled [ 122.845791][ T6379] netlink: 28 bytes leftover after parsing attributes in process `syz.5.152'. [ 122.869059][ T6379] netlink: 28 bytes leftover after parsing attributes in process `syz.5.152'. [ 122.890950][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 122.890977][ T29] audit: type=1326 audit(1732954783.903:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f7a03780849 code=0x7ffc0000 [ 122.929215][ T29] audit: type=1326 audit(1732954783.903:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a03780849 code=0x7ffc0000 [ 123.166848][ T6372] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 123.228407][ T29] audit: type=1326 audit(1732954783.903:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a03780849 code=0x7ffc0000 [ 123.348444][ T6370] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.366796][ T6370] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.438599][ T29] audit: type=1326 audit(1732954783.903:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a03780849 code=0x7ffc0000 [ 123.460991][ T29] audit: type=1326 audit(1732954783.903:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a03780849 code=0x7ffc0000 [ 123.483395][ T29] audit: type=1326 audit(1732954783.903:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a03780849 code=0x7ffc0000 [ 123.505813][ T29] audit: type=1326 audit(1732954783.903:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a03780849 code=0x7ffc0000 [ 123.624449][ T29] audit: type=1326 audit(1732954783.903:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a03780849 code=0x7ffc0000 [ 123.687037][ T29] audit: type=1326 audit(1732954783.923:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a03780849 code=0x7ffc0000 [ 123.764833][ T29] audit: type=1326 audit(1732954783.923:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a03780849 code=0x7ffc0000 [ 123.812305][ T5867] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.166895][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.572176][ T6402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.604327][ T6406] netlink: 'syz.5.161': attribute type 10 has an invalid length. [ 124.612857][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.631742][ T6402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.649403][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.846880][ T6406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.883848][ T6406] team0: Port device batadv0 added [ 124.921294][ T6417] smc: net device bond0 applied user defined pnetid SYZ0 [ 124.942014][ T6417] smc: net device bond0 erased user defined pnetid SYZ0 [ 125.391024][ T6431] loop0: detected capacity change from 0 to 512 [ 125.477007][ T6431] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.171: corrupted in-inode xattr: invalid ea_ino [ 125.519180][ T6431] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.171: couldn't read orphan inode 15 (err -117) [ 125.581688][ T6431] EXT4-fs (loop0): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.733989][ T6441] batadv_slave_1: entered promiscuous mode [ 125.758118][ T6441] batadv_slave_1: left promiscuous mode [ 125.810197][ T5853] EXT4-fs (loop0): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 125.959363][ T6447] loop0: detected capacity change from 0 to 128 [ 125.983643][ T6447] ext4: Unknown parameter 'mask' [ 126.021990][ T6451] smc: net device bond0 applied user defined pnetid SYZ0 [ 126.030189][ T6451] smc: net device bond0 erased user defined pnetid SYZ0 [ 126.160536][ T6453] loop1: detected capacity change from 0 to 2048 [ 126.186163][ T6453] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.228396][ T6453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.657945][ T6472] loop3: detected capacity change from 0 to 512 [ 126.773195][ T6472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.792874][ T6472] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.928833][ T6481] netlink: 'syz.2.188': attribute type 10 has an invalid length. [ 126.948394][ T5855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.000267][ T6481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.009911][ T6481] team0: Port device batadv0 added [ 127.030409][ T3513] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm kworker/u8:9: bg 0: block 234: padding at end of block bitmap is not set [ 127.065171][ T3513] EXT4-fs (loop1): Remounting filesystem read-only [ 127.182747][ T6485] loop3: detected capacity change from 0 to 512 [ 127.244612][ T6485] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.191: corrupted in-inode xattr: invalid ea_ino [ 127.319095][ T6485] EXT4-fs error (device loop3): ext4_orphan_get:1392: comm syz.3.191: couldn't read orphan inode 15 (err -117) [ 127.362454][ T6485] EXT4-fs (loop3): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.365415][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.385986][ T1122] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 127.672419][ T5855] EXT4-fs (loop3): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 128.343289][ T6517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.202'. [ 128.410803][ T6517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.202'. [ 128.419993][ T6517] netlink: 44 bytes leftover after parsing attributes in process `syz.3.202'. [ 128.524137][ T6523] netlink: 28 bytes leftover after parsing attributes in process `syz.5.206'. [ 128.549007][ T6523] netlink: 28 bytes leftover after parsing attributes in process `syz.5.206'. [ 129.047825][ T6540] loop2: detected capacity change from 0 to 512 [ 129.195014][ T6540] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.211: corrupted in-inode xattr: invalid ea_ino [ 129.215659][ T6540] EXT4-fs error (device loop2): ext4_orphan_get:1392: comm syz.2.211: couldn't read orphan inode 15 (err -117) [ 129.350576][ T6540] EXT4-fs (loop2): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.608641][ T5866] EXT4-fs (loop2): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 129.830138][ T11] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 130.246744][ T6564] loop5: detected capacity change from 0 to 256 [ 130.257103][ T6564] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.276904][ T6564] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 130.278150][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 130.278173][ T29] audit: type=1800 audit(1732954791.313:263): pid=6564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.214" name="file1" dev="loop5" ino=1048605 res=0 errno=0 [ 130.285810][ T6564] FAT-fs (loop5): Filesystem has been set read-only [ 130.876845][ T6575] loop1: detected capacity change from 0 to 1024 [ 130.968912][ T6575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.202009][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.290647][ T6615] netlink: 'syz.5.238': attribute type 10 has an invalid length. [ 132.383197][ T6617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.239'. [ 132.392384][ T6617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.239'. [ 132.975484][ T6629] loop2: detected capacity change from 0 to 2048 [ 133.077913][ T6629] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.228030][ T6629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.588147][ T5866] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.885163][ T29] audit: type=1326 audit(1732954794.913:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648e180849 code=0x7ffc0000 [ 133.907682][ T29] audit: type=1326 audit(1732954794.913:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648e180849 code=0x7ffc0000 [ 133.930058][ T29] audit: type=1326 audit(1732954794.923:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f648e180849 code=0x7ffc0000 [ 133.952449][ T29] audit: type=1326 audit(1732954794.923:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f648e1777e7 code=0x7ffc0000 [ 133.975590][ T29] audit: type=1326 audit(1732954794.923:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f648e11c189 code=0x7ffc0000 [ 133.998736][ T29] audit: type=1326 audit(1732954794.923:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f648e1777e7 code=0x7ffc0000 [ 134.021001][ T29] audit: type=1326 audit(1732954794.923:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f648e11c189 code=0x7ffc0000 [ 134.043331][ T29] audit: type=1326 audit(1732954794.923:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f648e1777e7 code=0x7ffc0000 [ 134.066367][ T29] audit: type=1326 audit(1732954794.923:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f648e11c189 code=0x7ffc0000 [ 134.172126][ T6660] loop2: detected capacity change from 0 to 1024 [ 134.269101][ T6660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.525800][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.571605][ T6667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.602442][ T6667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.641125][ T6667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.759428][ T5866] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.802410][ T6677] netlink: 'syz.5.261': attribute type 10 has an invalid length. [ 134.999225][ T6685] loop2: detected capacity change from 0 to 512 [ 135.007104][ T6685] ext4: Unknown parameter 'seclabel' [ 136.545228][ T6701] loop0: detected capacity change from 0 to 512 [ 136.618074][ T6709] syz.4.273[6709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.618209][ T6709] syz.4.273[6709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.636886][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 136.636914][ T29] audit: type=1326 audit(1732954797.673:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648e180849 code=0x7ffc0000 [ 136.687142][ T6701] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.269: corrupted in-inode xattr: invalid ea_ino [ 136.714230][ T6709] syz.4.273[6709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.729348][ T6709] loop4: detected capacity change from 0 to 512 [ 136.740559][ T6701] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.269: couldn't read orphan inode 15 (err -117) [ 136.751881][ T6701] EXT4-fs (loop0): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.760936][ T6709] EXT4-fs: Ignoring removed orlov option [ 136.778535][ T29] audit: type=1326 audit(1732954797.673:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648e180849 code=0x7ffc0000 [ 136.801455][ T29] audit: type=1326 audit(1732954797.673:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f648e180849 code=0x7ffc0000 [ 136.824242][ T6709] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.834211][ T29] audit: type=1326 audit(1732954797.673:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648e180849 code=0x7ffc0000 [ 136.900070][ T6709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.910312][ T29] audit: type=1326 audit(1732954797.673:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648e180849 code=0x7ffc0000 [ 136.913126][ T6709] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.967196][ T6718] netlink: 'syz.3.277': attribute type 3 has an invalid length. [ 137.012578][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.139320][ T5853] EXT4-fs (loop0): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 137.229009][ T6723] loop1: detected capacity change from 0 to 2048 [ 137.254644][ T6723] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.315007][ T6723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.430581][ T6734] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.278: bg 0: block 234: padding at end of block bitmap is not set [ 137.460800][ T6734] EXT4-fs (loop1): Remounting filesystem read-only [ 137.484275][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.490904][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 137.500017][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.525769][ T6723] syz.1.278[6723] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.525886][ T6723] syz.1.278[6723] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.546411][ T6723] syz.1.278[6723] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.562327][ T6723] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 137.718933][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.076369][ T29] audit: type=1326 audit(1732954799.113:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648e180849 code=0x7ffc0000 [ 138.117869][ T29] audit: type=1326 audit(1732954799.133:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648e180849 code=0x7ffc0000 [ 138.202300][ T29] audit: type=1326 audit(1732954799.133:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f648e180849 code=0x7ffc0000 [ 138.282968][ T29] audit: type=1326 audit(1732954799.133:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648e180849 code=0x7ffc0000 [ 138.370815][ T29] audit: type=1326 audit(1732954799.133:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648e180849 code=0x7ffc0000 [ 138.509142][ T6769] netlink: 76 bytes leftover after parsing attributes in process `syz.5.296'. [ 138.591263][ T6774] netlink: 'syz.2.299': attribute type 10 has an invalid length. [ 138.665249][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.297'. [ 138.738856][ T6778] IPVS: Error joining to the multicast group [ 138.897327][ T6784] loop4: detected capacity change from 0 to 764 [ 139.572266][ T6799] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 140.000888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 140.512818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 141.426503][ T6824] netlink: 'syz.2.314': attribute type 10 has an invalid length. [ 142.348180][ T6853] loop5: detected capacity change from 0 to 1024 [ 142.365905][ T6854] loop1: detected capacity change from 0 to 764 [ 142.441192][ T6853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.515721][ T6869] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 142.546402][ T6853] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2862: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 142.625790][ T6853] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.5.326: corrupted in-inode xattr: bad magic number in in-inode xattr [ 142.671687][ T6853] EXT4-fs error (device loop5): ext4_clear_blocks:874: inode #14: comm syz.5.326: attempt to clear invalid blocks 1634560256 len 1 [ 142.786027][ T6875] loop3: detected capacity change from 0 to 128 [ 142.822319][ T6875] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.881290][ T6875] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.988020][ T5854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.184934][ T5855] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.311256][ T6889] netlink: 28 bytes leftover after parsing attributes in process `syz.5.337'. [ 143.320221][ T6889] netlink: 28 bytes leftover after parsing attributes in process `syz.5.337'. [ 143.412769][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 143.412797][ T29] audit: type=1326 audit(1732954804.443:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca1980849 code=0x7ffc0000 [ 143.444570][ T29] audit: type=1326 audit(1732954804.483:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca1980849 code=0x7ffc0000 [ 143.471445][ T29] audit: type=1326 audit(1732954804.513:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdca1980849 code=0x7ffc0000 [ 143.494293][ T29] audit: type=1326 audit(1732954804.513:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca1980849 code=0x7ffc0000 [ 143.523120][ T29] audit: type=1326 audit(1732954804.563:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca1980849 code=0x7ffc0000 [ 143.545618][ T29] audit: type=1326 audit(1732954804.563:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdca1980849 code=0x7ffc0000 [ 143.568223][ T29] audit: type=1326 audit(1732954804.563:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca1980849 code=0x7ffc0000 [ 143.591058][ T29] audit: type=1326 audit(1732954804.563:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca1980849 code=0x7ffc0000 [ 143.620132][ T29] audit: type=1326 audit(1732954804.653:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdca1980849 code=0x7ffc0000 [ 143.643474][ T29] audit: type=1326 audit(1732954804.683:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca1980849 code=0x7ffc0000 [ 144.084974][ T6916] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 144.341503][ T6928] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 144.348249][ T6928] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 144.377634][ T6928] vhci_hcd vhci_hcd.0: Device attached [ 144.465967][ T6929] vhci_hcd: connection closed [ 144.490867][ T12] vhci_hcd: stop threads [ 144.524008][ T12] vhci_hcd: release socket [ 144.546272][ T12] vhci_hcd: disconnect device [ 144.614820][ T25] vhci_hcd: vhci_device speed not set [ 145.039321][ T6954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.360'. [ 145.049100][ T6954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.360'. [ 145.241415][ T6963] netlink: 'syz.3.363': attribute type 10 has an invalid length. [ 145.522944][ T6966] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 145.994295][ T6987] netlink: 24 bytes leftover after parsing attributes in process `syz.1.374'. [ 146.396319][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.380'. [ 146.410990][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.380'. [ 146.411670][ T6999] loop3: detected capacity change from 0 to 764 [ 147.003547][ T7019] syz.1.387[7019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.003654][ T7019] syz.1.387[7019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.025514][ T7019] syz.1.387[7019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.145405][ T7020] sd 0:0:1:0: device reset [ 147.652518][ T7036] netlink: 'syz.1.394': attribute type 3 has an invalid length. [ 147.660247][ T7036] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 147.700581][ T7036] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.394'. [ 147.954565][ T7044] netlink: 44 bytes leftover after parsing attributes in process `syz.1.401'. [ 148.021319][ T7039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.062298][ T7039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.102191][ T7039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.125137][ T7046] loop4: detected capacity change from 0 to 2048 [ 148.137716][ T7039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.147021][ T7051] syz.0.399[7051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.147140][ T7051] syz.0.399[7051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.168010][ T7046] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.195869][ T7051] syz.0.399[7051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.200232][ T7039] team0: Port device batadv0 removed [ 148.246231][ T7053] loop2: detected capacity change from 0 to 164 [ 148.263496][ T7054] netlink: 76 bytes leftover after parsing attributes in process `syz.3.402'. [ 148.275977][ T7053] Unable to read rock-ridge attributes [ 148.309599][ T7046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.324232][ T7053] Unable to read rock-ridge attributes [ 148.463408][ T7059] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.400: bg 0: block 234: padding at end of block bitmap is not set [ 148.492676][ T7059] EXT4-fs (loop4): Remounting filesystem read-only [ 148.575177][ T7065] loop2: detected capacity change from 0 to 764 [ 148.588406][ T7065] syz.2.407: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 148.621118][ T7065] CPU: 0 UID: 0 PID: 7065 Comm: syz.2.407 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 148.631474][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 148.641580][ T7065] Call Trace: [ 148.644896][ T7065] [ 148.647870][ T7065] dump_stack_lvl+0x16c/0x1f0 [ 148.652721][ T7065] warn_alloc+0x24d/0x3a0 [ 148.657115][ T7065] ? __pfx_warn_alloc+0x10/0x10 [ 148.662068][ T7065] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 148.667962][ T7065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.673761][ T7065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.679548][ T7065] ? kasan_save_stack+0x42/0x60 [ 148.684455][ T7065] ? kasan_save_stack+0x33/0x60 [ 148.689531][ T7065] ? kasan_save_track+0x14/0x30 [ 148.694446][ T7065] ? __kasan_kmalloc+0xaa/0xb0 [ 148.699263][ T7065] ? xskq_create+0x52/0x1d0 [ 148.703837][ T7065] ? do_sock_setsockopt+0x225/0x480 [ 148.707843][ T7067] netlink: 'syz.1.408': attribute type 10 has an invalid length. [ 148.709122][ T7065] ? __sys_setsockopt+0x1a0/0x230 [ 148.721913][ T7065] ? __x64_sys_setsockopt+0xbd/0x160 [ 148.727281][ T7065] __vmalloc_node_range_noprof+0x10df/0x1530 [ 148.733375][ T7065] ? xskq_create+0xfb/0x1d0 [ 148.737969][ T7065] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 148.744399][ T7065] ? xskq_create+0xfb/0x1d0 [ 148.748976][ T7065] vmalloc_user_noprof+0x6b/0x90 [ 148.753993][ T7065] ? xskq_create+0xfb/0x1d0 [ 148.758563][ T7065] xskq_create+0xfb/0x1d0 [ 148.762963][ T7065] xsk_setsockopt+0x757/0xa10 [ 148.767713][ T7065] ? __pfx_xsk_setsockopt+0x10/0x10 [ 148.772992][ T7065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.778866][ T7065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.784565][ T7065] ? find_held_lock+0x2d/0x110 [ 148.788659][ T7069] loop3: detected capacity change from 0 to 764 [ 148.789385][ T7065] ? __pfx_xsk_setsockopt+0x10/0x10 [ 148.800812][ T7065] do_sock_setsockopt+0x225/0x480 [ 148.800887][ T7065] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 148.811526][ T7065] ? lock_acquire+0x2f/0xb0 [ 148.816108][ T7065] __sys_setsockopt+0x1a0/0x230 [ 148.821024][ T7065] __x64_sys_setsockopt+0xbd/0x160 [ 148.826192][ T7065] ? do_syscall_64+0x91/0x250 [ 148.831603][ T7065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 148.837374][ T7065] ? lockdep_hardirqs_on+0x7c/0x110 [ 148.842757][ T7065] do_syscall_64+0xcd/0x250 [ 148.847486][ T7065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.853530][ T7065] RIP: 0033:0x7f96c7180849 [ 148.857976][ T7065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.877627][ T7065] RSP: 002b:00007f96c7fd8058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 148.886083][ T7065] RAX: ffffffffffffffda RBX: 00007f96c7345fa0 RCX: 00007f96c7180849 [ 148.894172][ T7065] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 148.902167][ T7065] RBP: 00007f96c71f3986 R08: 0000000000000020 R09: 0000000000000000 [ 148.910172][ T7065] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 148.918189][ T7065] R13: 0000000000000000 R14: 00007f96c7345fa0 R15: 00007ffe40f945c8 [ 148.926318][ T7065] [ 148.936818][ T7065] Mem-Info: [ 148.940140][ T7065] active_anon:4237 inactive_anon:0 isolated_anon:0 [ 148.940140][ T7065] active_file:11271 inactive_file:38598 isolated_file:0 [ 148.940140][ T7065] unevictable:768 dirty:248 writeback:0 [ 148.940140][ T7065] slab_reclaimable:10253 slab_unreclaimable:100630 [ 148.940140][ T7065] mapped:34786 shmem:1857 pagetables:714 [ 148.940140][ T7065] sec_pagetables:0 bounce:0 [ 148.940140][ T7065] kernel_misc_reclaimable:0 [ 148.940140][ T7065] free:1316414 free_pcp:665 free_cma:0 [ 148.959550][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.988770][ T7065] Node 0 active_anon:16948kB inactive_anon:0kB active_file:45084kB inactive_file:152920kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139144kB dirty:992kB writeback:0kB shmem:5892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11280kB pagetables:2856kB sec_pagetables:0kB all_unreclaimable? no [ 149.047380][ T7065] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 149.077773][ T7065] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 149.105285][ T7065] lowmem_reserve[]: 0 2459 2459 0 0 [ 149.110627][ T7065] Node 0 DMA32 free:1345608kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:15940kB inactive_anon:0kB active_file:45084kB inactive_file:152728kB unevictable:1536kB writepending:992kB present:3129332kB managed:2547168kB mlocked:0kB bounce:0kB free_pcp:2316kB local_pcp:644kB free_cma:0kB [ 149.143075][ T7065] lowmem_reserve[]: 0 0 0 0 0 [ 149.147904][ T7065] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 149.199366][ T7072] delete_channel: no stack [ 149.204511][ T7065] lowmem_reserve[]: 0 0 0 0 0 [ 149.204604][ T7065] Node 1 Normal free:3906780kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:1268kB local_pcp:1000kB free_cma:0kB [ 149.246852][ T7065] lowmem_reserve[]: 0 0 0 0 0 [ 149.260758][ T7065] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 149.289854][ T7065] Node 0 DMA32: 659*4kB (UME) 696*8kB (UME) 655*16kB (UME) 457*32kB (UME) 514*64kB (UME) 142*128kB (UME) 74*256kB (UM) 44*512kB (UM) 9*1024kB (UME) 4*2048kB (UME) 295*4096kB (UM) = 1351580kB [ 149.330772][ T7065] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 149.340454][ T7074] loop1: detected capacity change from 0 to 512 [ 149.367491][ T7065] Node 1 Normal: 3*4kB (ME) 6*8kB (UME) 22*16kB (UME) 204*32kB (UME) 93*64kB (UME) 25*128kB (UM) 12*256kB (UME) 7*512kB (UM) 5*1024kB (UME) 4*2048kB (UE) 945*4096kB (UM) = 3906780kB [ 149.386196][ T7074] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.411: corrupted in-inode xattr: invalid ea_ino [ 149.386719][ T7074] EXT4-fs error (device loop1): ext4_orphan_get:1392: comm syz.1.411: couldn't read orphan inode 15 (err -117) [ 149.410237][ T7065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 149.431086][ T7065] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 149.440031][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.5.412'. [ 149.446350][ T7065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 149.450079][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.5.412'. [ 149.460756][ T7065] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 149.482735][ T7065] 51182 total pagecache pages [ 149.485294][ T7074] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.487431][ T7065] 0 pages in swap cache [ 149.487449][ T7065] Free swap = 124536kB [ 149.570752][ T7065] Total swap = 124996kB [ 149.575022][ T7065] 2097051 pages RAM [ 149.578861][ T7065] 0 pages HighMem/MovableOnly [ 149.590435][ T7065] 428601 pages reserved [ 149.594953][ T7065] 0 pages cma reserved [ 149.695369][ T5856] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 149.823349][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 149.908382][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 149.908410][ T29] audit: type=1326 audit(1732954810.943:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb403180849 code=0x7ffc0000 [ 149.939484][ T29] audit: type=1326 audit(1732954810.983:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fb403180849 code=0x7ffc0000 [ 149.962022][ T29] audit: type=1326 audit(1732954810.983:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb403180849 code=0x7ffc0000 [ 150.028354][ T29] audit: type=1326 audit(1732954811.023:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb403180849 code=0x7ffc0000 [ 150.032625][ T7095] loop3: detected capacity change from 0 to 164 [ 150.051091][ T29] audit: type=1326 audit(1732954811.023:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb403180849 code=0x7ffc0000 [ 150.051157][ T29] audit: type=1326 audit(1732954811.023:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb403180849 code=0x7ffc0000 [ 150.051225][ T29] audit: type=1326 audit(1732954811.023:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb403180849 code=0x7ffc0000 [ 150.051285][ T29] audit: type=1326 audit(1732954811.023:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb403180849 code=0x7ffc0000 [ 150.051345][ T29] audit: type=1326 audit(1732954811.023:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb403180849 code=0x7ffc0000 [ 150.051405][ T29] audit: type=1326 audit(1732954811.033:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.5.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb403180849 code=0x7ffc0000 [ 150.232998][ T7095] Unable to read rock-ridge attributes [ 150.283989][ T7095] Unable to read rock-ridge attributes [ 150.313140][ T7095] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 150.386106][ T7101] netlink: 'syz.1.424': attribute type 10 has an invalid length. [ 150.441738][ T7099] loop0: detected capacity change from 0 to 4096 [ 150.486747][ T7099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.776641][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.172596][ T7131] kernel profiling enabled (shift: 17) [ 151.351066][ T7137] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 151.494604][ T7141] netlink: 'syz.3.441': attribute type 10 has an invalid length. [ 151.547850][ T7143] loop1: detected capacity change from 0 to 2048 [ 151.562522][ T7143] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.680967][ T7143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.893124][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.447'. [ 151.904093][ T7159] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.440: bg 0: block 234: padding at end of block bitmap is not set [ 151.930902][ T7160] netlink: 'syz.0.447': attribute type 7 has an invalid length. [ 151.974289][ T7160] netlink: 'syz.0.447': attribute type 8 has an invalid length. [ 151.999469][ T7159] EXT4-fs (loop1): Remounting filesystem read-only [ 152.022033][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.447'. [ 152.256660][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.293353][ T7178] loop0: detected capacity change from 0 to 128 [ 152.307653][ T7177] loop3: detected capacity change from 0 to 1024 [ 152.320993][ T7171] loop4: detected capacity change from 0 to 1024 [ 152.339601][ T7178] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.355158][ T7178] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.391847][ T7171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 ro without journal. Quota mode: writeback. [ 152.760306][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 153.405113][ T7187] netlink: 'syz.3.458': attribute type 10 has an invalid length. [ 154.951214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 155.053609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 155.401732][ T5853] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.043425][ T7247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.485'. [ 157.945324][ T7272] loop0: detected capacity change from 0 to 256 [ 157.969744][ T7272] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.083305][ T7274] devpts: called with bogus options [ 158.153965][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 158.153994][ T29] audit: type=1800 audit(1732954819.113:457): pid=7256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.487" name="file1" dev="loop0" ino=1048606 res=0 errno=0 [ 158.341440][ T7278] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 158.568308][ T7286] loop2: detected capacity change from 0 to 512 [ 158.596493][ T7286] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.609320][ T7286] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 158.629274][ T7286] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 158.647685][ T7286] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 158.704701][ T7286] System zones: 0-2, 18-18, 34-34 [ 158.738395][ T7286] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 158.771010][ T7292] loop1: detected capacity change from 0 to 4096 [ 158.785999][ T7292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.811991][ T7286] EXT4-fs (loop2): 1 truncate cleaned up [ 158.819135][ T7286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.881366][ T7297] loop4: detected capacity change from 0 to 512 [ 158.948377][ T7297] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.502: corrupted xattr block 95: invalid header [ 159.012970][ T7297] EXT4-fs error (device loop4): ext4_validate_block_bitmap:431: comm syz.4.502: bg 0: block 7: invalid block bitmap [ 159.034770][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.078391][ T5866] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.093677][ T7297] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 159.128736][ T7297] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.502: corrupted xattr block 95: invalid header [ 159.151115][ T7297] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 159.160377][ T7297] EXT4-fs (loop4): 1 orphan inode deleted [ 159.167703][ T7297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.273969][ T29] audit: type=1326 audit(1732954820.313:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 159.300012][ T29] audit: type=1326 audit(1732954820.333:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 159.325211][ T29] audit: type=1326 audit(1732954820.333:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 159.367723][ T29] audit: type=1326 audit(1732954820.333:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 159.408785][ T29] audit: type=1326 audit(1732954820.333:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 159.433093][ T7311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.502'. [ 159.442334][ T7311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.502'. [ 159.464933][ T29] audit: type=1326 audit(1732954820.333:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 159.490898][ T7311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.502'. [ 159.519504][ T7311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.502'. [ 159.521389][ T29] audit: type=1326 audit(1732954820.333:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 159.539147][ T7311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.502'. [ 159.581712][ T29] audit: type=1326 audit(1732954820.333:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 159.604584][ T29] audit: type=1326 audit(1732954820.393:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 159.963409][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.020445][ T7329] loop1: detected capacity change from 0 to 512 [ 160.064139][ T7329] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.516: corrupted in-inode xattr: invalid ea_ino [ 160.089590][ T7329] EXT4-fs error (device loop1): ext4_orphan_get:1392: comm syz.1.516: couldn't read orphan inode 15 (err -117) [ 160.108655][ T7329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.211425][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.255690][ T7338] syz.0.520[7338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.255812][ T7338] syz.0.520[7338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.269532][ T7338] syz.0.520[7338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.293622][ T7336] loop3: detected capacity change from 0 to 4096 [ 160.491242][ T7336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.742097][ T7361] netlink: 28 bytes leftover after parsing attributes in process `syz.5.527'. [ 160.808163][ T5855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.193403][ T7390] netlink: 24 bytes leftover after parsing attributes in process `syz.1.538'. [ 162.308123][ T7394] loop0: detected capacity change from 0 to 4096 [ 162.445562][ T7402] syz.4.542[7402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.445684][ T7402] syz.4.542[7402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.549526][ T7402] syz.4.542[7402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.613340][ T7394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.775272][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.869698][ T7416] loop4: detected capacity change from 0 to 128 [ 163.030103][ T7416] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.101292][ T7416] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 163.159067][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'. [ 163.213112][ T7426] digital: digital_start_poll: Unknown protocol [ 163.365610][ T5867] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.529595][ T7441] delete_channel: no stack [ 163.839832][ T7450] loop3: detected capacity change from 0 to 4096 [ 163.902381][ T7450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.069780][ T5855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.474461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 165.097058][ T7473] syz.4.568[7473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.097182][ T7473] syz.4.568[7473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.108896][ T7473] syz.4.568[7473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.116080][ T7476] loop0: detected capacity change from 0 to 128 [ 165.183665][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 165.183694][ T29] audit: type=1326 audit(1732954826.133:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 165.216349][ T29] audit: type=1326 audit(1732954826.133:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 165.238796][ T29] audit: type=1326 audit(1732954826.153:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 165.261376][ T29] audit: type=1326 audit(1732954826.153:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 165.283933][ T29] audit: type=1326 audit(1732954826.173:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 165.306375][ T29] audit: type=1326 audit(1732954826.183:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 165.330239][ T29] audit: type=1326 audit(1732954826.183:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb883980849 code=0x7ffc0000 [ 165.392588][ T7476] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.435129][ T7476] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 165.482889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 165.805622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 166.282392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 166.340420][ T5853] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.441924][ T7496] loop5: detected capacity change from 0 to 1024 [ 166.553004][ T7496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.766820][ T5854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.048133][ T7517] Illegal XDP return value 3818715172 on prog (id 299) dev syz_tun, expect packet loss! [ 167.066620][ T7523] loop4: detected capacity change from 0 to 512 [ 167.074064][ T7523] EXT4-fs: Ignoring removed oldalloc option [ 167.115009][ T7523] EXT4-fs error (device loop4): ext4_xattr_inode_iget:435: comm syz.4.589: Parent and EA inode have the same ino 15 [ 167.176756][ T7523] EXT4-fs (loop4): Remounting filesystem read-only [ 167.187739][ T7523] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -5) [ 167.200862][ T7523] EXT4-fs (loop4): 1 orphan inode deleted [ 167.207694][ T7523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.275377][ T7529] loop1: detected capacity change from 0 to 128 [ 167.367888][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.398339][ T7529] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.399932][ T29] audit: type=1326 audit(1732954828.433:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.2.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c7180849 code=0x7ffc0000 [ 167.467895][ T7529] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 167.511386][ T29] audit: type=1326 audit(1732954828.473:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.2.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c7180849 code=0x7ffc0000 [ 167.522829][ T7539] loop5: detected capacity change from 0 to 1024 [ 167.552165][ T29] audit: type=1326 audit(1732954828.483:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.2.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96c7180849 code=0x7ffc0000 [ 167.647017][ T7539] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.761448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 167.853607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 167.954027][ T5856] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.030831][ T5854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.251639][ T7560] loop2: detected capacity change from 0 to 512 [ 169.266985][ T7560] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 169.365383][ T7560] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 169.454700][ T7566] loop1: detected capacity change from 0 to 2048 [ 169.462784][ T7566] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.473086][ T7560] EXT4-fs (loop2): 1 truncate cleaned up [ 169.473581][ T7568] loop7: detected capacity change from 0 to 16384 [ 169.481383][ T7560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.637255][ T7566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.204757][ T7457] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 170.243199][ T7457] EXT4-fs (loop1): Remounting filesystem read-only [ 170.277910][ T7560] Cannot find set identified by id 0 to match [ 170.331743][ T7576] loop7: detected capacity change from 16384 to 16383 [ 170.426757][ T7568] I/O error, dev loop7, sector 6656 op 0x0:(READ) flags 0x80700 phys_seg 25 prio class 0 [ 170.455597][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.481868][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 170.481894][ T29] audit: type=1326 audit(1732954831.523:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7585 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a03780849 code=0x7ffc0000 [ 170.526875][ T7589] loop5: detected capacity change from 0 to 256 [ 170.552237][ T29] audit: type=1326 audit(1732954831.553:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7585 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a03780849 code=0x7ffc0000 [ 170.553866][ T7568] I/O error, dev loop7, sector 6912 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 170.639991][ T7568] I/O error, dev loop7, sector 6656 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.650044][ T7589] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 170.652313][ T29] audit: type=1326 audit(1732954831.553:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7585 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f7a03780849 code=0x7ffc0000 [ 170.669716][ T7589] FAT-fs (loop5): Filesystem has been set read-only [ 170.716776][ T7568] Buffer I/O error on dev loop7, logical block 832, async page read [ 170.738740][ T5866] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.747012][ T7592] serio: Serial port ptm0 [ 170.759987][ T7568] I/O error, dev loop7, sector 2560 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 170.768236][ T29] audit: type=1326 audit(1732954831.553:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7585 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a03780849 code=0x7ffc0000 [ 170.817511][ T7568] Buffer I/O error on dev loop7, logical block 320, lost async page write [ 170.818481][ T7568] Buffer I/O error on dev loop7, logical block 321, lost async page write [ 170.818561][ T7568] Buffer I/O error on dev loop7, logical block 322, lost async page write [ 170.818640][ T7568] Buffer I/O error on dev loop7, logical block 323, lost async page write [ 170.818717][ T7568] Buffer I/O error on dev loop7, logical block 324, lost async page write [ 170.822374][ T7568] Buffer I/O error on dev loop7, logical block 325, lost async page write [ 170.850340][ T29] audit: type=1326 audit(1732954831.553:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7585 comm="syz.0.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a03780849 code=0x7ffc0000 [ 170.850409][ T29] audit: type=1326 audit(1732954831.563:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb403180849 code=0x7ffc0000 [ 170.935912][ T29] audit: type=1326 audit(1732954831.563:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb403180849 code=0x7ffc0000 [ 170.958501][ T7594] netlink: 28 bytes leftover after parsing attributes in process `syz.0.612'. [ 170.961010][ T7568] Buffer I/O error on dev loop7, logical block 326, lost async page write [ 170.979179][ T29] audit: type=1326 audit(1732954831.563:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb403180849 code=0x7ffc0000 [ 171.010853][ T7568] Buffer I/O error on dev loop7, logical block 327, lost async page write [ 171.019519][ T7568] Buffer I/O error on dev loop7, logical block 328, lost async page write [ 171.025326][ T29] audit: type=1326 audit(1732954831.563:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb403180849 code=0x7ffc0000 [ 171.088894][ T7568] I/O error, dev loop7, sector 3584 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 171.120828][ T29] audit: type=1326 audit(1732954831.563:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb403180849 code=0x7ffc0000 [ 182.683101][ C1] hrtimer: interrupt took 11569325679 ns [ 182.809894][ T7568] buffer_io_error: 192 callbacks suppressed [ 182.809925][ T7568] Buffer I/O error on dev loop7, logical block 521, lost async page write [ 182.841197][ T7568] Buffer I/O error on dev loop7, logical block 522, lost async page write [ 182.853279][ T7568] Buffer I/O error on dev loop7, logical block 523, lost async page write [ 182.870845][ T7568] Buffer I/O error on dev loop7, logical block 524, lost async page write [ 182.879654][ T7568] Buffer I/O error on dev loop7, logical block 525, lost async page write [ 182.891057][ T7568] Buffer I/O error on dev loop7, logical block 526, lost async page write [ 182.899720][ T7568] Buffer I/O error on dev loop7, logical block 527, lost async page write [ 182.908835][ T7568] Buffer I/O error on dev loop7, logical block 528, lost async page write [ 182.917966][ T7568] Buffer I/O error on dev loop7, logical block 529, lost async page write [ 182.926668][ T7568] Buffer I/O error on dev loop7, logical block 530, lost async page write [ 182.943114][ T7568] I/O error, dev loop7, sector 4608 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 182.971322][ T7568] I/O error, dev loop7, sector 5632 op 0x1:(WRITE) flags 0x800 phys_seg 128 prio class 0 [ 276.140678][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 276.147759][ C0] rcu: (detected by 0, t=10505 jiffies, g=18005, q=830 ncpus=2) [ 276.155506][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 9336 (4294964778-4294955442), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 276.168910][ C0] rcu: rcu_preempt kthread starved for 9336 jiffies! g18005 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 276.180150][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 276.190231][ C0] rcu: RCU grace-period kthread stack dump: [ 276.196520][ C0] task:rcu_preempt state:R running task stack:27600 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 276.208418][ C0] Call Trace: [ 276.211720][ C0] [ 276.214679][ C0] __schedule+0xe58/0x5ad0 [ 276.219158][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 276.224413][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.230117][ C0] ? __pfx___schedule+0x10/0x10 [ 276.235028][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.240711][ C0] ? schedule+0x298/0x350 [ 276.245094][ C0] ? __pfx_lock_release+0x10/0x10 [ 276.250161][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.255845][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.261525][ C0] ? lock_acquire+0x2f/0xb0 [ 276.266189][ C0] ? schedule+0x1fd/0x350 [ 276.270580][ C0] schedule+0xe7/0x350 [ 276.274707][ C0] schedule_timeout+0x124/0x280 [ 276.279611][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 276.285031][ C0] ? __pfx_process_timeout+0x10/0x10 [ 276.290385][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.296060][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 276.301924][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.307599][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 276.313111][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 276.317926][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 276.323254][ C0] ? rcu_gp_init+0xc82/0x1630 [ 276.327984][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.333667][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 276.338918][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.344612][ C0] rcu_gp_kthread+0x271/0x380 [ 276.349335][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 276.354580][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 276.359927][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.365605][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.371285][ C0] ? __kthread_parkme+0x148/0x220 [ 276.376368][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 276.381612][ C0] kthread+0x2c4/0x3a0 [ 276.385730][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 276.390981][ C0] ? __pfx_kthread+0x10/0x10 [ 276.395626][ C0] ret_from_fork+0x48/0x80 [ 276.400084][ C0] ? __pfx_kthread+0x10/0x10 [ 276.404727][ C0] ret_from_fork_asm+0x1a/0x30 [ 276.410087][ C0] [ 276.413136][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 276.419475][ C0] CPU: 0 UID: 0 PID: 7568 Comm: syz.4.607 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 276.429767][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.439854][ C0] RIP: 0010:queued_write_lock_slowpath+0x179/0x330 [ 276.446507][ C0] Code: 03 3d 00 01 00 00 74 37 48 b8 00 00 00 00 00 fc ff df 48 89 d9 48 89 da 48 c1 e9 03 83 e2 07 48 01 c1 83 c2 03 f3 90 0f b6 01 <38> c2 7c 08 84 c0 0f 85 5f 01 00 00 8b 03 3d 00 01 00 00 75 e6 48 [ 276.466242][ C0] RSP: 0018:ffffc900000075f8 EFLAGS: 00000206 [ 276.472355][ C0] RAX: 0000000000000000 RBX: ffffffff900d8300 RCX: fffffbfff201b060 [ 276.480450][ C0] RDX: 0000000000000003 RSI: 0000000000000004 RDI: ffffffff900d8300 [ 276.488451][ C0] RBP: 1ffff92000000ec1 R08: 0000000000000001 R09: fffffbfff201b060 [ 276.496458][ C0] R10: ffffffff900d8303 R11: 0000000000000004 R12: ffffffff900d8304 [ 276.504462][ C0] R13: 0000000000000003 R14: fffffbfff201b060 R15: ffffc90000007638 [ 276.512470][ C0] FS: 00007fb8846de6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 276.521642][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.528260][ C0] CR2: 00007f7a0390cab8 CR3: 000000007cb1e000 CR4: 0000000000350ef0 [ 276.536267][ C0] Call Trace: [ 276.539573][ C0] [ 276.542444][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 276.548840][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 276.554372][ C0] ? timekeeping_advance+0x70a/0xa60 [ 276.559723][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 276.565416][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.571536][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.577759][ C0] ? __asan_memcpy+0x3c/0x60 [ 276.582428][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.588110][ C0] ? rcu_is_watching+0x12/0xc0 [ 276.592941][ C0] ? update_process_times+0x178/0x2d0 [ 276.598801][ C0] ? __pfx_update_process_times+0x10/0x10 [ 276.604568][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.610254][ C0] ? update_wall_time+0x1c/0x40 [ 276.615165][ C0] ? tick_nohz_handler+0x376/0x530 [ 276.620343][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 276.625858][ C0] ? __hrtimer_run_queues+0x5fe/0xae0 [ 276.632101][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 276.638151][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.643841][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 276.649025][ C0] ? __sysvec_apic_timer_interrupt+0x112/0x400 [ 276.655256][ C0] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 276.661163][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 276.667376][ C0] ? queued_write_lock_slowpath+0x179/0x330 [ 276.673340][ C0] ? queued_write_lock_slowpath+0x117/0x330 [ 276.679329][ C0] ? __pfx_queued_write_lock_slowpath+0x10/0x10 [ 276.685895][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.691572][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 276.696904][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.702585][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 276.708269][ C0] do_raw_write_lock+0x1d4/0x3a0 [ 276.713265][ C0] ? __pfx_do_raw_write_lock+0x10/0x10 [ 276.718783][ C0] ? lock_acquire+0x2f/0xb0 [ 276.723326][ C0] ? ___neigh_create+0x9e4/0x2970 [ 276.728412][ C0] ___neigh_create+0x9e4/0x2970 [ 276.733325][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.739358][ C0] ? rcu_is_watching+0x12/0xc0 [ 276.744176][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 276.749438][ C0] ? __pfx____neigh_create+0x10/0x10 [ 276.754777][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.760457][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.766138][ C0] ip6_finish_output2+0x1120/0x2070 [ 276.771399][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.777088][ C0] ip6_finish_output+0x3f9/0x1360 [ 276.782177][ C0] ip6_output+0x1f8/0x540 [ 276.786575][ C0] ? __pfx_ip6_output+0x10/0x10 [ 276.791480][ C0] ndisc_send_skb+0xa69/0x1c50 [ 276.796322][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 276.801582][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.807267][ C0] ? __pfx_dst_output+0x10/0x10 [ 276.812196][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.817872][ C0] ? skb_set_owner_w+0x320/0x710 [ 276.822859][ C0] ? __pfx_ipv6_get_ifaddr+0x10/0x10 [ 276.828205][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.833886][ C0] ? __asan_memcpy+0x3c/0x60 [ 276.838543][ C0] ndisc_send_rs+0x129/0x670 [ 276.843237][ C0] addrconf_rs_timer+0x407/0x840 [ 276.848243][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 276.853774][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.859456][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.865140][ C0] ? lock_acquire+0x2f/0xb0 [ 276.869689][ C0] ? call_timer_fn+0x11a/0x610 [ 276.874512][ C0] call_timer_fn+0x1a3/0x610 [ 276.879227][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 276.884750][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 276.889900][ C0] ? __pfx_lock_release+0x10/0x10 [ 276.894973][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.900648][ C0] ? mark_held_locks+0x9f/0xe0 [ 276.905463][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 276.910977][ C0] __run_timers+0x6e8/0x930 [ 276.915533][ C0] ? __pfx___run_timers+0x10/0x10 [ 276.920600][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 276.926284][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.931964][ C0] ? rcu_is_watching+0x12/0xc0 [ 276.936793][ C0] ? lock_acquire+0x2f/0xb0 [ 276.941336][ C0] ? run_timer_base+0x10c/0x190 [ 276.946238][ C0] run_timer_base+0x114/0x190 [ 276.950965][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 276.956303][ C0] run_timer_softirq+0x1a/0x40 [ 276.961108][ C0] handle_softirqs+0x216/0x8f0 [ 276.965928][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 276.971266][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 276.976957][ C0] __irq_exit_rcu+0x109/0x170 [ 276.981682][ C0] irq_exit_rcu+0x9/0x30 [ 276.985972][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 276.991675][ C0] [ 276.994630][ C0] [ 276.997587][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 277.003615][ C0] RIP: 0010:smp_call_function_many_cond+0x45d/0x1300 [ 277.010348][ C0] Code: 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 ca 0d 0c 00 f3 90 41 0f b6 04 24 <40> 38 c5 7c 08 84 c0 0f 85 a7 0c 00 00 8b 43 08 31 ff 83 e0 01 41 [ 277.030004][ C0] RSP: 0018:ffffc90003917a30 EFLAGS: 00000246 [ 277.036116][ C0] RAX: 0000000000000000 RBX: ffff8880b8744a40 RCX: ffffc9000d84b000 [ 277.044122][ C0] RDX: 0000000000080000 RSI: ffffffff8182b6b6 RDI: 0000000000000005 [ 277.052121][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 277.060140][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed10170e8949 [ 277.068144][ C0] R13: 0000000000000001 R14: ffff8880b8744a48 R15: ffff8880b863fe40 [ 277.076599][ C0] ? smp_call_function_many_cond+0x456/0x1300 [ 277.082754][ C0] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 277.088283][ C0] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 277.093797][ C0] ? __pfx_has_bh_in_lru+0x10/0x10 [ 277.099016][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 277.104352][ C0] blkdev_flush_mapping+0xf1/0x290 [ 277.109541][ C0] blkdev_put_whole+0xc4/0xf0 [ 277.114300][ C0] bdev_release+0x47e/0x6d0 [ 277.118972][ C0] ? __pfx_blkdev_release+0x10/0x10 [ 277.124253][ C0] blkdev_release+0x15/0x20 [ 277.128810][ C0] __fput+0x3fb/0xb60 [ 277.132852][ C0] task_work_run+0x151/0x250 [ 277.137491][ C0] ? __pfx_task_work_run+0x10/0x10 [ 277.142649][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.148324][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 277.154280][ C0] get_signal+0x1d3/0x26c0 [ 277.158764][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.164442][ C0] ? fput+0x1d3/0x440 [ 277.168471][ C0] ? __pfx_get_signal+0x10/0x10 [ 277.173386][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 277.178991][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 277.185318][ C0] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 277.191106][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 277.196897][ C0] do_syscall_64+0xda/0x250 [ 277.201446][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.207404][ C0] RIP: 0033:0x7fb883980849 [ 277.211848][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.231512][ C0] RSP: 002b:00007fb8846de058 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 277.239978][ C0] RAX: 0000000000340000 RBX: 00007fb883b45fa0 RCX: 00007fb883980849 [ 277.247982][ C0] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 277.255994][ C0] RBP: 00007fb8839f3986 R08: 0000000000000000 R09: 0000000000000000 [ 277.264003][ C0] R10: 0000000024002de8 R11: 0000000000000246 R12: 0000000000000000 [ 277.272008][ C0] R13: 0000000000000000 R14: 00007fb883b45fa0 R15: 00007fff9504cec8 [ 277.280037][ C0] [ 277.283111][ C0] sched: DL replenish lagged too much [ 395.490065][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 223s! [kworker/1:2:5305] [ 395.498464][ C1] Modules linked in: [ 395.502374][ C1] irq event stamp: 126061 [ 395.506788][ C1] hardirqs last enabled at (126060): [] irqentry_exit+0x3b/0x90 [ 395.516116][ C1] hardirqs last disabled at (126061): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 395.526572][ C1] softirqs last enabled at (126032): [] neigh_periodic_work+0x767/0xcb0 [ 395.536589][ C1] softirqs last disabled at (126034): [] neigh_periodic_work+0x787/0xcb0 [ 395.546960][ C1] CPU: 1 UID: 0 PID: 5305 Comm: kworker/1:2 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 395.557403][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 395.567473][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 395.574478][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 395.580953][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 30 3b f6 48 89 df e8 be af 3b f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 45 a4 2c f6 65 8b 05 26 9f d3 74 85 c0 74 16 5b [ 395.600586][ C1] RSP: 0018:ffffc9000456fa10 EFLAGS: 00000246 [ 395.606678][ C1] RAX: 0000000000000006 RBX: ffff88807c3ce610 RCX: 1ffffffff2dd36b2 [ 395.614667][ C1] RDX: 0000000000000000 RSI: ffffffff8b6ce000 RDI: ffffffff8bd1d780 [ 395.623172][ C1] RBP: 0000000000000296 R08: 0000000000000001 R09: fffffbfff2dd01a0 [ 395.631156][ C1] R10: ffffffff96e80d07 R11: 0000000000000003 R12: 1ffff920008adf47 [ 395.639141][ C1] R13: ffff8880252473c0 R14: ffff88807c3ce670 R15: ffff88807c3ce678 [ 395.647129][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 395.656075][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.662672][ C1] CR2: 00007f96c730cab8 CR3: 000000000df7e000 CR4: 0000000000350ef0 [ 395.670657][ C1] Call Trace: [ 395.673947][ C1] [ 395.676798][ C1] ? watchdog_timer_fn+0x570/0x7d0 [ 395.681943][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 395.687443][ C1] ? __hrtimer_run_queues+0x5fe/0xae0 [ 395.692861][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 395.698610][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.704277][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 395.709465][ C1] ? __sysvec_apic_timer_interrupt+0x112/0x400 [ 395.715844][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 395.721688][ C1] [ 395.724621][ C1] [ 395.727734][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 395.734293][ C1] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 395.740139][ C1] ref_tracker_free+0x36f/0x820 [ 395.745014][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 395.750408][ C1] ? neigh_destroy+0x339/0x630 [ 395.755200][ C1] ? neigh_periodic_work+0x743/0xcb0 [ 395.760517][ C1] ? process_one_work+0x9c8/0x1ba0 [ 395.765734][ C1] ? worker_thread+0x6c8/0xf00 [ 395.770518][ C1] ? kthread+0x2c4/0x3a0 [ 395.774824][ C1] ? ret_from_fork+0x48/0x80 [ 395.779442][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 395.784427][ C1] ? mark_held_locks+0x9f/0xe0 [ 395.789219][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 395.794551][ C1] neigh_destroy+0x339/0x630 [ 395.799178][ C1] neigh_periodic_work+0x743/0xcb0 [ 395.804414][ C1] ? __pfx_neigh_periodic_work+0x10/0x10 [ 395.810076][ C1] ? rcu_is_watching+0x12/0xc0 [ 395.814871][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.820573][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.826266][ C1] ? process_one_work+0x921/0x1ba0 [ 395.831406][ C1] process_one_work+0x9c8/0x1ba0 [ 395.836376][ C1] ? __pfx_vmstat_update+0x10/0x10 [ 395.841640][ C1] ? __pfx_process_one_work+0x10/0x10 [ 395.847033][ C1] ? rcu_is_watching+0x12/0xc0 [ 395.851826][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.857493][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.863146][ C1] ? assign_work+0x1a0/0x250 [ 395.867801][ C1] worker_thread+0x6c8/0xf00 [ 395.872428][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.878081][ C1] ? __kthread_parkme+0x148/0x220 [ 395.883137][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.888824][ C1] ? __pfx_worker_thread+0x10/0x10 [ 395.893960][ C1] kthread+0x2c4/0x3a0 [ 395.898059][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.903315][ C1] ? __pfx_kthread+0x10/0x10 [ 395.907939][ C1] ret_from_fork+0x48/0x80 [ 395.912375][ C1] ? __pfx_kthread+0x10/0x10 [ 395.917002][ C1] ret_from_fork_asm+0x1a/0x30 [ 395.921817][ C1] [ 395.924841][ C1] Sending NMI from CPU 1 to CPUs 0: [ 395.930054][ C0] NMI backtrace for cpu 0 [ 395.930072][ C0] CPU: 0 UID: 0 PID: 7568 Comm: syz.4.607 Not tainted 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 395.930113][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 395.930133][ C0] RIP: 0010:queued_write_lock_slowpath+0x179/0x330 [ 395.930197][ C0] Code: 03 3d 00 01 00 00 74 37 48 b8 00 00 00 00 00 fc ff df 48 89 d9 48 89 da 48 c1 e9 03 83 e2 07 48 01 c1 83 c2 03 f3 90 0f b6 01 <38> c2 7c 08 84 c0 0f 85 5f 01 00 00 8b 03 3d 00 01 00 00 75 e6 48 [ 395.930232][ C0] RSP: 0018:ffffc900000075f8 EFLAGS: 00000206 [ 395.930260][ C0] RAX: 0000000000000000 RBX: ffffffff900d8300 RCX: fffffbfff201b060 [ 395.930284][ C0] RDX: 0000000000000003 RSI: 0000000000000004 RDI: ffffffff900d8300 [ 395.930307][ C0] RBP: 1ffff92000000ec1 R08: 0000000000000001 R09: fffffbfff201b060 [ 395.930330][ C0] R10: ffffffff900d8303 R11: 0000000000000004 R12: ffffffff900d8304 [ 395.930354][ C0] R13: 0000000000000003 R14: fffffbfff201b060 R15: ffffc90000007638 [ 395.930385][ C0] FS: 00007fb8846de6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 395.930419][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.930444][ C0] CR2: 00007f7a0390cab8 CR3: 000000007cb1e000 CR4: 0000000000350ef0 [ 395.930468][ C0] Call Trace: [ 395.930479][ C0] [ 395.930491][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 395.930541][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 395.930577][ C0] ? nmi_handle+0x1af/0x5d0 [ 395.930616][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.930663][ C0] ? queued_write_lock_slowpath+0x179/0x330 [ 395.930721][ C0] ? default_do_nmi+0x6a/0x160 [ 395.930765][ C0] ? exc_nmi+0x170/0x1e0 [ 395.930807][ C0] ? end_repeat_nmi+0xf/0x53 [ 395.930851][ C0] ? queued_write_lock_slowpath+0x179/0x330 [ 395.930908][ C0] ? queued_write_lock_slowpath+0x179/0x330 [ 395.930966][ C0] ? queued_write_lock_slowpath+0x179/0x330 [ 395.931023][ C0] [ 395.931034][ C0] [ 395.931047][ C0] ? __pfx_queued_write_lock_slowpath+0x10/0x10 [ 395.931103][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.931144][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 395.931186][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.931229][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 395.931273][ C0] do_raw_write_lock+0x1d4/0x3a0 [ 395.931321][ C0] ? __pfx_do_raw_write_lock+0x10/0x10 [ 395.931370][ C0] ? lock_acquire+0x2f/0xb0 [ 395.931416][ C0] ? ___neigh_create+0x9e4/0x2970 [ 395.931470][ C0] ___neigh_create+0x9e4/0x2970 [ 395.931520][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.931565][ C0] ? rcu_is_watching+0x12/0xc0 [ 395.931616][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 395.931672][ C0] ? __pfx____neigh_create+0x10/0x10 [ 395.931720][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.931762][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.931806][ C0] ip6_finish_output2+0x1120/0x2070 [ 395.931860][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.931907][ C0] ip6_finish_output+0x3f9/0x1360 [ 395.931962][ C0] ip6_output+0x1f8/0x540 [ 395.932016][ C0] ? __pfx_ip6_output+0x10/0x10 [ 395.932066][ C0] ndisc_send_skb+0xa69/0x1c50 [ 395.932122][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 395.932175][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.932218][ C0] ? __pfx_dst_output+0x10/0x10 [ 395.932290][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.932331][ C0] ? skb_set_owner_w+0x320/0x710 [ 395.932374][ C0] ? __pfx_ipv6_get_ifaddr+0x10/0x10 [ 395.932429][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.932469][ C0] ? __asan_memcpy+0x3c/0x60 [ 395.932525][ C0] ndisc_send_rs+0x129/0x670 [ 395.932582][ C0] addrconf_rs_timer+0x407/0x840 [ 395.932635][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 395.932684][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.932725][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.932766][ C0] ? lock_acquire+0x2f/0xb0 [ 395.932803][ C0] ? call_timer_fn+0x11a/0x610 [ 395.932842][ C0] call_timer_fn+0x1a3/0x610 [ 395.932877][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 395.932927][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 395.932963][ C0] ? __pfx_lock_release+0x10/0x10 [ 395.933005][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.933045][ C0] ? mark_held_locks+0x9f/0xe0 [ 395.933085][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 395.933136][ C0] __run_timers+0x6e8/0x930 [ 395.933179][ C0] ? __pfx___run_timers+0x10/0x10 [ 395.933218][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 395.933260][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.933300][ C0] ? rcu_is_watching+0x12/0xc0 [ 395.933354][ C0] ? lock_acquire+0x2f/0xb0 [ 395.933396][ C0] ? run_timer_base+0x10c/0x190 [ 395.933438][ C0] run_timer_base+0x114/0x190 [ 395.933476][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 395.933519][ C0] run_timer_softirq+0x1a/0x40 [ 395.933556][ C0] handle_softirqs+0x216/0x8f0 [ 395.933605][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 395.933651][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.933695][ C0] __irq_exit_rcu+0x109/0x170 [ 395.933738][ C0] irq_exit_rcu+0x9/0x30 [ 395.933780][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 395.933834][ C0] [ 395.933845][ C0] [ 395.933857][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 395.933895][ C0] RIP: 0010:smp_call_function_many_cond+0x45d/0x1300 [ 395.933948][ C0] Code: 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 ca 0d 0c 00 f3 90 41 0f b6 04 24 <40> 38 c5 7c 08 84 c0 0f 85 a7 0c 00 00 8b 43 08 31 ff 83 e0 01 41 [ 395.933982][ C0] RSP: 0018:ffffc90003917a30 EFLAGS: 00000246 [ 395.934009][ C0] RAX: 0000000000000000 RBX: ffff8880b8744a40 RCX: ffffc9000d84b000 [ 395.934033][ C0] RDX: 0000000000080000 RSI: ffffffff8182b6b6 RDI: 0000000000000005 [ 395.934056][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 395.934078][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed10170e8949 [ 395.934101][ C0] R13: 0000000000000001 R14: ffff8880b8744a48 R15: ffff8880b863fe40 [ 395.934131][ C0] ? smp_call_function_many_cond+0x456/0x1300 [ 395.934187][ C0] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 395.934241][ C0] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 395.934288][ C0] ? __pfx_has_bh_in_lru+0x10/0x10 [ 395.934335][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 395.934391][ C0] blkdev_flush_mapping+0xf1/0x290 [ 395.934437][ C0] blkdev_put_whole+0xc4/0xf0 [ 395.934476][ C0] bdev_release+0x47e/0x6d0 [ 395.934524][ C0] ? __pfx_blkdev_release+0x10/0x10 [ 395.934570][ C0] blkdev_release+0x15/0x20 [ 395.934614][ C0] __fput+0x3fb/0xb60 [ 395.934658][ C0] task_work_run+0x151/0x250 [ 395.934697][ C0] ? __pfx_task_work_run+0x10/0x10 [ 395.934735][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.934776][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 395.934827][ C0] get_signal+0x1d3/0x26c0 [ 395.934878][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.934918][ C0] ? fput+0x1d3/0x440 [ 395.934956][ C0] ? __pfx_get_signal+0x10/0x10 [ 395.935008][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 395.935061][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 395.935120][ C0] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 395.935164][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 395.935222][ C0] do_syscall_64+0xda/0x250 [ 395.935258][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.935315][ C0] RIP: 0033:0x7fb883980849 [ 395.935342][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.935376][ C0] RSP: 002b:00007fb8846de058 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 395.935414][ C0] RAX: 0000000000340000 RBX: 00007fb883b45fa0 RCX: 00007fb883980849 [ 395.935438][ C0] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 395.935460][ C0] RBP: 00007fb8839f3986 R08: 0000000000000000 R09: 0000000000000000 [ 395.935483][ C0] R10: 0000000024002de8 R11: 0000000000000246 R12: 0000000000000000 [ 395.935506][ C0] R13: 0000000000000000 R14: 00007fb883b45fa0 R15: 00007fff9504cec8 [ 395.935540][ C0] [ 395.936053][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 395.936079][ C1] CPU: 1 UID: 0 PID: 5305 Comm: kworker/1:2 Tainted: G L 6.12.0-syzkaller-10740-g509f806f7f70 #0 [ 395.936133][ C1] Tainted: [L]=SOFTLOCKUP [ 395.936147][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 395.936174][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 395.936226][ C1] Call Trace: [ 395.936238][ C1] [ 395.936253][ C1] dump_stack_lvl+0x3d/0x1f0 [ 395.936318][ C1] panic+0x71d/0x800 [ 395.936374][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.936420][ C1] ? __pfx_panic+0x10/0x10 [ 395.936475][ C1] ? __pfx__printk+0x10/0x10 [ 395.936525][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.936569][ C1] ? __irq_work_queue_local+0xdd/0x460 [ 395.936620][ C1] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 395.936664][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.936708][ C1] ? irq_work_queue+0x2a/0x80 [ 395.936753][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.936797][ C1] ? watchdog_timer_fn+0x5f2/0x7d0 [ 395.936848][ C1] ? watchdog_timer_fn+0x5e5/0x7d0 [ 395.936905][ C1] watchdog_timer_fn+0x603/0x7d0 [ 395.936959][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 395.937009][ C1] __hrtimer_run_queues+0x5fe/0xae0 [ 395.937077][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 395.937130][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.937188][ C1] hrtimer_interrupt+0x392/0x8e0 [ 395.937261][ C1] __sysvec_apic_timer_interrupt+0x112/0x400 [ 395.937311][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 395.937369][ C1] [ 395.937382][ C1] [ 395.937397][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 395.937438][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 395.937497][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 30 3b f6 48 89 df e8 be af 3b f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 45 a4 2c f6 65 8b 05 26 9f d3 74 85 c0 74 16 5b [ 395.937534][ C1] RSP: 0018:ffffc9000456fa10 EFLAGS: 00000246 [ 395.937566][ C1] RAX: 0000000000000006 RBX: ffff88807c3ce610 RCX: 1ffffffff2dd36b2 [ 395.937593][ C1] RDX: 0000000000000000 RSI: ffffffff8b6ce000 RDI: ffffffff8bd1d780 [ 395.937620][ C1] RBP: 0000000000000296 R08: 0000000000000001 R09: fffffbfff2dd01a0 [ 395.937652][ C1] R10: ffffffff96e80d07 R11: 0000000000000003 R12: 1ffff920008adf47 [ 395.937679][ C1] R13: ffff8880252473c0 R14: ffff88807c3ce670 R15: ffff88807c3ce678 [ 395.937729][ C1] ref_tracker_free+0x36f/0x820 [ 395.937773][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 395.937814][ C1] ? neigh_destroy+0x339/0x630 [ 395.937862][ C1] ? neigh_periodic_work+0x743/0xcb0 [ 395.937910][ C1] ? process_one_work+0x9c8/0x1ba0 [ 395.937953][ C1] ? worker_thread+0x6c8/0xf00 [ 395.937994][ C1] ? kthread+0x2c4/0x3a0 [ 395.938043][ C1] ? ret_from_fork+0x48/0x80 [ 395.938081][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 395.938145][ C1] ? mark_held_locks+0x9f/0xe0 [ 395.938191][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 395.938246][ C1] neigh_destroy+0x339/0x630 [ 395.938304][ C1] neigh_periodic_work+0x743/0xcb0 [ 395.938362][ C1] ? __pfx_neigh_periodic_work+0x10/0x10 [ 395.938414][ C1] ? rcu_is_watching+0x12/0xc0 [ 395.938469][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.938520][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.938565][ C1] ? process_one_work+0x921/0x1ba0 [ 395.938613][ C1] process_one_work+0x9c8/0x1ba0 [ 395.938676][ C1] ? __pfx_vmstat_update+0x10/0x10 [ 395.938721][ C1] ? __pfx_process_one_work+0x10/0x10 [ 395.938763][ C1] ? rcu_is_watching+0x12/0xc0 [ 395.938816][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.938870][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.938914][ C1] ? assign_work+0x1a0/0x250 [ 395.938958][ C1] worker_thread+0x6c8/0xf00 [ 395.939012][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.939056][ C1] ? __kthread_parkme+0x148/0x220 [ 395.939109][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 395.939156][ C1] ? __pfx_worker_thread+0x10/0x10 [ 395.939199][ C1] kthread+0x2c4/0x3a0 [ 395.939249][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.939302][ C1] ? __pfx_kthread+0x10/0x10 [ 395.939356][ C1] ret_from_fork+0x48/0x80 [ 395.939395][ C1] ? __pfx_kthread+0x10/0x10 [ 395.939448][ C1] ret_from_fork_asm+0x1a/0x30 [ 395.939523][ C1] [ 397.147774][ C1] Kernel Offset: disabled [ 397.152106][ C1] Rebooting in 86400 seconds..