last executing test programs: 11.243377013s ago: executing program 2 (id=130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 11.082536743s ago: executing program 2 (id=132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206010100000000000000000000800005000100070000000900020073797a31000000000500050002000000050004000000000011000300686173683a69702c706f7274"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 10.891787252s ago: executing program 2 (id=137): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x8000) write$dsp(r0, &(0x7f0000000200)="3a529df598ffb7263c008a006ad2ebe7d88357319d644517bc657731dcbe296dc2e8a1a81cdb8708020098a3e5cfb3b16111e67a4003c274e0099cddf83f650c8827f25fd3228ffd04000000000000000258a4e4a652081b560808328f055491c81e730147c99ae2e8ef94ec783b68a4ffd195f231b694db4d8fe705efaf18a3ddce24479a26c270d8d367b1fa38d38cb64a25561b4c6a4e9f76c59832a0b9739ee15ed044d89d91a23c81eece4eed8a06c46c7f900bcd90ca8123e4982a7a43d85acfd165eafb378a2a206ccf81139ee67a15de4044c46e", 0xffd7) 8.83429113s ago: executing program 5 (id=153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x1e02, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0x1, 0xa}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x74}, 0x1, 0x600}, 0x0) 8.373951709s ago: executing program 5 (id=157): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) listen(r0, 0x0) 7.938896934s ago: executing program 5 (id=161): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000020) 7.55620252s ago: executing program 2 (id=165): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 7.432543767s ago: executing program 5 (id=166): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_FLAGS={0x8}]}, 0x20}}, 0x0) 7.21857858s ago: executing program 3 (id=168): sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="140100001f0001000000000000000000030000000c0001"], 0x114}], 0x1}, 0x0) 7.186804923s ago: executing program 4 (id=169): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) shmget$private(0x0, 0x400000, 0x20, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 6.921631619s ago: executing program 5 (id=171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000100)='G', 0x1}, {&(0x7f00000000c0)="d336bd75243cb9a6418e", 0xa}], 0x3) 6.798204269s ago: executing program 2 (id=172): memfd_create(&(0x7f0000000040)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xa1\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1YV\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\xb8\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\xbe`\'\xcb\xb6\xaf\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11A\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfc\x00\xe3\xde\x00\x00\xa8\xcbo\x90\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x16\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3U\xe6\xa9B\n\xc9%\x82\xed#?\xab\x1c\x11\x00\xc5\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\x00\x00\x00D~\xc9=\x95\xd4\x18\x97J\x1d\xb7\x11\xcbcE\x0eAU\xe6\x19*\x98}!\xde\xf1\xd3\xf7\x84\x9c\xb4\xf1\x17\xf9-\xc6\xba\xe3\xa8oz\b\xfe\xbc\x1b\xff$\xac=\xf2V**\x8f\x84Oq\xe3\xa16\x1d{f\x91\xbbBORJ\xbcm\xfb\xb0Q\x1c\xd9\x1bg\xf5\xc9p\xc5lo\x90\xb0\xd5\x90\x86\x19\xafC\xee7\x91O)\xf1\xf0\x00\x00\x00\x00\x00\x00\x00\x05t\v\x12\x03\xf5hRQ\b\x97\xc3d-\xfb\x12\x1e\xb2\xce\x9br*M\x10\xd5g\fwx\xb8\xa9\t\xc5\xf9W\x9b\x06\xcc\xa0\x1a\x03\v\x14n7\x92{\x8bH\x9d\x95\xe31\xf4hy\xf6%\xcdC\x9cT\xec57\xbd\xd5\x81\xd9\x13\xee\xdf\xef\xf3\x17H\xd2\xe3k\xe0\xe3^y\xe3\xbb(fEt\x15\xeb/\x90\xca\xde\x189\xdfN 7}|\xa8 2\xd9;\xfa\xeayZS\x10.\x8b,\xd0\x02J\xf8>\xe9\xf0\r\xc2A\xc8q\x89\"+\xa6\xa9^E94\x01\xb5\xba]\xa8\xe9\x86\xea\xe5\xbaH\x11\x8fLLJ(\xfb\x96\x15\xbb\a\xcbj\x1b\xfdL\x88\xbf\xd7\x00\x00\x00\x00\x00t\xdd\xe7z\x87N\x9a\xd1\xe8\xe6\xe5\xa5\rz\\ljD\x19|\x84\x90\xaa\x91\x93\xc7\xdf\xd2\xe9h', 0x0) r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0xc4009420, &(0x7f0000000040)) 6.605260943s ago: executing program 4 (id=174): ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) 6.536721191s ago: executing program 3 (id=175): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/stat\x00') unshare(0x8000400) fstat(r0, &(0x7f00000029c0)) 5.940360222s ago: executing program 3 (id=176): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 5.752570846s ago: executing program 1 (id=177): unshare(0x20000400) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x202982, 0x0) fsetxattr$trusted_overlay_origin(r0, 0x0, 0x0, 0x0, 0x3) 5.673100504s ago: executing program 4 (id=178): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x0) 5.50321004s ago: executing program 3 (id=179): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000013c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) 5.396141093s ago: executing program 1 (id=180): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90000fc60040011000a7401000535ae1d37153e37024809", 0x27}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91324fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.757762195s ago: executing program 4 (id=181): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000940)={0x3d520, 0x0, 0x0, 0x2027, 0x0, "0012412d08d500001e200021077b0a008000"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xd) 4.627642674s ago: executing program 1 (id=182): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x3a, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 4.412967428s ago: executing program 5 (id=183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)="011bb6517a4fb60b", 0x8}], 0x1, 0x0, 0x0) 4.107844872s ago: executing program 4 (id=184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x24, 0xd, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x24}}, 0x0) 4.067059498s ago: executing program 3 (id=185): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x0) 3.990139635s ago: executing program 1 (id=186): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0xa0, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0xfffffffffffffffc}}]}) 3.643049337s ago: executing program 4 (id=188): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 3.602161478s ago: executing program 3 (id=189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000c00000018000180140002006d6163767461703000000000000000000c000380040003"], 0x38}}, 0x0) 3.492757904s ago: executing program 1 (id=190): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 2.969160439s ago: executing program 1 (id=191): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="03030000000000000000150000000c0001800800030004"], 0x20}}, 0x0) 2.8283741s ago: executing program 2 (id=192): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005200b3a6"], 0x1c}}, 0x0) 1.054053804s ago: executing program 0 (id=200): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x55b, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x1, 0x3, 0x1}) 784.264631ms ago: executing program 0 (id=201): unshare(0x26020480) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000028c0)=@filter={'filter\x00', 0x2, 0x4, 0x1428, 0xffffffff, 0x1250, 0x1250, 0x1250, 0xfeffffff, 0xffffffff, 0x1358, 0x1358, 0x1358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1108, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0xfd, 0x0, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@frag={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@mh={{0x28}, {"6bbf"}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth1_vlan\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1488) 542.711118ms ago: executing program 0 (id=202): iopl(0x3) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0) 444.851068ms ago: executing program 0 (id=203): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f0000000940)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8000, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}, {@userxattr}], [], 0x2c}) 309.625357ms ago: executing program 0 (id=204): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file1\x00', 0x441c, &(0x7f0000000080)={[{@nodiscard}, {@order_strict}, {@nobarrier}, {@norecovery}, {@discard}, {}, {@errors_continue}, {@nobarrier}, {@nobarrier}]}, 0x1, 0xaab, &(0x7f0000002000)="$eJzs3V2IXFcBAOBzZ3c22WRrpjW12/9oldaf7nbTRFtjm5QGRIQQEBFaX0KaxpBtFFOKCQXTPogvpYXQPPmQii++tKhI2xcJfZAitIgoBZ9q8DVCwYcitCM7c87s7NkZ7kz2Z2Z2vg/OnDn33Lnn3Jk7d+7ce885ARhblcbjvn3bQwivvn3x8J2vvfvy0pSDrTlqjcfJtlQ1hFDE9GS2vA8nmvEnHz1/vFNchL2Nx5QOR661XrszhHAh7AlXQi289OSlyQ/ePPL+6+H0c0cPv/fWxqz9smKjCwAAgCFw9MqBfTf/66+33/i/N+46FLa1pqfj81pMz8Tj/kPxQDkdL1fCynTRFtpNZfNNxlDJ5pvoMF97OdVsvsku5U9ly612mW9bSfkTbdM6rTeMsrQd10JRmVuRrlTm5pr/yUPjf/1UMXfm1OLTZwdUUWDd/ffuEMIeoe9wcQjqIAhrDPVdg94DATTl1wtXubC+V+paS5vsrfxrj1U6v75NdV1ryFjY3ow2e/vPDX35G3ylftjX/zcvuFOB9bMFt6a/39C2Xul7NBPT+XWE/P6lfr//aXn59YhejwG6XUcYlesL3eo5scn1uF7d6p9vF1vVIzFO78OjWX78HjQup+Wf6ah8xkBnHzv/LwjrEm4tBl+HfkN90DsgYGjl983Vo5Sf39eX528ryd9ekj9dkr+jJH9nST6Msz88+3J4pVg+35X/p+/3fNhMtojP9Fmf/Hxkv+Xn9/32a63l5/cTw1Db+edLDz31xN+a9/8Xre3/07i974npWvxuXYkzpPOF+Xn11r3/tZXFVLrMd1NWnRs6zN94vnvlfMXu5eWEtv1Ma/lFPIM7m17RTO/qVt87Vi6/ls03HcP2rL758cmO7HXp+CPtFGdW1GZ5favZekxl9Uj7lRtjnNcDrkfaHlfe/7+09TXu/29dxpoN1eLpU4snHojptJ2+O1HdtjR9YbMrDqxZ/J0qsvSq9j+zYWX7n5nW9Gqlfb+wa3l60b5fqGXT93aZ/mBMp9+5H01MN6bPHf/x4lPrueJAOHvu/Olji4snfrqBT65Ob15ZI/dk6Y9A56xwIYRz509PhmGpqidb/0naLxxbHOBOCdgU888+85P5s+fO33/qmWMnT5w8cWZh/8JDD+9fWPj6w/ON4/r59qP7rXi7MIyv5V//QdcEAAAAAAAAAAAA6NXJq/OX//HON/7ZbP+/3P4vtf9Pd/6m9v+/zNr/Z838WzcIp3aAqR3fqvb2WQerU9l81Rg+my1/d1bOzdnrPhfj1jh+sf1/Ki7v1zXV55Zset5/b5pvNpue95cylfVBUoRf7Giv3xdi/GKMfx1ggIrpzpNjXNa/ddrWU/8Uq/ql+P6o9GQ93tLnlraG1I9Jav+d2nun/kpS/w9p/3/jJtSR9bcZ7QoHvY5AZ//Zyv1/p4OYQddDGEho9PM6BPUY5lCvG8UDGA6DHv8znfdM8Zk/fWf7UkizXXts5f4y778U1mLYx59U/sDH/1zX4YVbZ2d73v9l53PzC0A9OvDid//dVmy4rdfy8/FPUz/Qu/sr/1ux/LQ294beyq+/lpWfXxDq0SNZ+Tt6LH/V+t9xfeU/GstPb9t99/RafrPGRWVlPfLzxun6Xzpv/IOs/IPZ+qe+Pfte/+scqPFQLB/G2Va9Ojcq4/92k9+HsT+m044w3eeQj3fSb/3T/RXpd+DmbPlFye/bFhz/t/7zev1X4zKOyzdjXPZ9mImfadoeax3SlbZ0tcN7u1X3NTCqPtzK1/+E0Q/TQ1CHtYfmz2r7tPRjuPl1eaE9Xa/XB9qnrw6FB2vQ7/+g/ycMuvxBv/9l8vF/82P4fPzfPD8f//d7WX4+/m/++nx8vTw/H/83fz/z8X/z/Fuy5ebjA8+W5N9akn9bSf7tJfl3lOTfWZL/+ZL8u0ry7y7Jv6kk/56S/C92zm+dPvlS99d/3L6obsu/r6T8L5fkb3WpPcq4rj+Ms7x9nu8/jI90/afb9393ST4wui69sfD4E7//Ya3Z/n+qdT4kXcc7FNPV+N/5ZzGdX/cObemlvHdi+mqWP+znO2Cc5P1n5L/v95bkA6Mr3efl+w1jqFjVY09zcozL+q3qdpzPaPlKjL8a46/F+P4Yz8V4PsYLMd67SfVjYzz+uz8eeKVY/r+/K8vv9X7yvD1Q3k/Ugz3WJz8/0O/97Hk/fv1aa/nX2RwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgYCqNx337ZosQXn374uHLf/n2b5emHGzNUWs8Tralqq3XhfBAjCdifDk++eSj54+3x5/GuAh7QxGK1vRw5FqrpJ0hhAthT7gSauGlJy9NfvDmkfdfD6efO3r4vbc27h1oKja6AAAAABig/wcAAP//6SINBg==") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 0s ago: executing program 0 (id=205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.193' (ED25519) to the list of known hosts. [ 61.019125][ T5207] cgroup: Unknown subsys name 'net' [ 61.159870][ T5207] cgroup: Unknown subsys name 'cpuset' [ 61.168485][ T5207] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.544216][ T5207] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.954679][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.966308][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.974645][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.983517][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.991510][ T5231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.999002][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.007930][ T5231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.015832][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.023458][ T5242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.023501][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.046223][ T5242] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.054081][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.054234][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.068570][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.078152][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.087582][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.088235][ T5231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.094945][ T5241] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.101618][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.109525][ T5241] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 65.116538][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.123078][ T5241] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.130963][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.140041][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.143567][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.152694][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.158176][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.165187][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.173067][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.179915][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.185349][ T5241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.199854][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.207793][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.210906][ T5241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.215720][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.230147][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.769031][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 65.795032][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 65.822758][ T5221] chnl_net:caif_netlink_parms(): no params data found [ 65.845020][ T5220] chnl_net:caif_netlink_parms(): no params data found [ 65.992380][ T5218] chnl_net:caif_netlink_parms(): no params data found [ 66.077787][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.085246][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.092838][ T5220] bridge_slave_0: entered allmulticast mode [ 66.100472][ T5220] bridge_slave_0: entered promiscuous mode [ 66.180598][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.190294][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.198302][ T5220] bridge_slave_1: entered allmulticast mode [ 66.205333][ T5220] bridge_slave_1: entered promiscuous mode [ 66.248147][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.255310][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.266489][ T5229] bridge_slave_0: entered allmulticast mode [ 66.274183][ T5229] bridge_slave_0: entered promiscuous mode [ 66.286301][ T5219] chnl_net:caif_netlink_parms(): no params data found [ 66.310111][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.345849][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.353280][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.361257][ T5223] bridge_slave_0: entered allmulticast mode [ 66.369175][ T5223] bridge_slave_0: entered promiscuous mode [ 66.377251][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.384333][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.392392][ T5229] bridge_slave_1: entered allmulticast mode [ 66.399588][ T5229] bridge_slave_1: entered promiscuous mode [ 66.421228][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.457456][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.464678][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.472239][ T5221] bridge_slave_0: entered allmulticast mode [ 66.480656][ T5221] bridge_slave_0: entered promiscuous mode [ 66.489148][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.497165][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.504616][ T5223] bridge_slave_1: entered allmulticast mode [ 66.511764][ T5223] bridge_slave_1: entered promiscuous mode [ 66.531640][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.564373][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.572549][ T5218] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.581542][ T5218] bridge_slave_0: entered allmulticast mode [ 66.588608][ T5218] bridge_slave_0: entered promiscuous mode [ 66.595894][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.604207][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.611531][ T5221] bridge_slave_1: entered allmulticast mode [ 66.618559][ T5221] bridge_slave_1: entered promiscuous mode [ 66.655179][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.691354][ T5220] team0: Port device team_slave_0 added [ 66.698163][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.705815][ T5218] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.713631][ T5218] bridge_slave_1: entered allmulticast mode [ 66.720848][ T5218] bridge_slave_1: entered promiscuous mode [ 66.738003][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.784126][ T5220] team0: Port device team_slave_1 added [ 66.820878][ T5221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.833171][ T5221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.844576][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.861895][ T5229] team0: Port device team_slave_0 added [ 66.888731][ T5218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.907311][ T5218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.952276][ T5229] team0: Port device team_slave_1 added [ 66.967848][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.974885][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.001400][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.027356][ T5221] team0: Port device team_slave_0 added [ 67.068332][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.075341][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.106291][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.129591][ T5218] team0: Port device team_slave_0 added [ 67.138392][ T5221] team0: Port device team_slave_1 added [ 67.147134][ T5223] team0: Port device team_slave_0 added [ 67.153647][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.160991][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.187003][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.202041][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.209165][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.235356][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.248028][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.255144][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.257466][ T5240] Bluetooth: hci5: command tx timeout [ 67.262925][ T5219] bridge_slave_0: entered allmulticast mode [ 67.267727][ T5236] Bluetooth: hci3: command tx timeout [ 67.274935][ T5219] bridge_slave_0: entered promiscuous mode [ 67.279379][ T5236] Bluetooth: hci1: command tx timeout [ 67.314870][ T5218] team0: Port device team_slave_1 added [ 67.331404][ T5223] team0: Port device team_slave_1 added [ 67.344100][ T5236] Bluetooth: hci2: command tx timeout [ 67.344107][ T5240] Bluetooth: hci4: command tx timeout [ 67.344363][ T5240] Bluetooth: hci0: command tx timeout [ 67.383209][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.390529][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.398550][ T5219] bridge_slave_1: entered allmulticast mode [ 67.405344][ T5219] bridge_slave_1: entered promiscuous mode [ 67.422915][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.429928][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.456274][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.476664][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.483621][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.510230][ T5218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.522724][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.530254][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.556844][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.574456][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.582094][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.608484][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.638159][ T5219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.648757][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.655738][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.682037][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.698234][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.705187][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.731446][ T5218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.766604][ T5219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.812439][ T5223] hsr_slave_0: entered promiscuous mode [ 67.819103][ T5223] hsr_slave_1: entered promiscuous mode [ 67.858754][ T5229] hsr_slave_0: entered promiscuous mode [ 67.865525][ T5229] hsr_slave_1: entered promiscuous mode [ 67.871983][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.880424][ T5229] Cannot create hsr debugfs directory [ 67.898016][ T5218] hsr_slave_0: entered promiscuous mode [ 67.904408][ T5218] hsr_slave_1: entered promiscuous mode [ 67.910761][ T5218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.919290][ T5218] Cannot create hsr debugfs directory [ 67.941122][ T5220] hsr_slave_0: entered promiscuous mode [ 67.947564][ T5220] hsr_slave_1: entered promiscuous mode [ 67.953728][ T5220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.962406][ T5220] Cannot create hsr debugfs directory [ 68.014765][ T5221] hsr_slave_0: entered promiscuous mode [ 68.021812][ T5221] hsr_slave_1: entered promiscuous mode [ 68.028416][ T5221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.036366][ T5221] Cannot create hsr debugfs directory [ 68.059532][ T5219] team0: Port device team_slave_0 added [ 68.104516][ T5219] team0: Port device team_slave_1 added [ 68.165014][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.172091][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.198560][ T5219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.253212][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.260726][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.286799][ T5219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.461101][ T5219] hsr_slave_0: entered promiscuous mode [ 68.468544][ T5219] hsr_slave_1: entered promiscuous mode [ 68.474648][ T5219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.482288][ T5219] Cannot create hsr debugfs directory [ 68.699369][ T5220] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.717693][ T5220] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.741059][ T5220] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.751412][ T5220] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.815903][ T5223] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.839796][ T5223] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.860825][ T5223] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.870854][ T5223] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.908850][ T5229] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.920742][ T5229] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.954849][ T5229] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.993334][ T5229] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.033187][ T5218] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.043073][ T5218] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.057451][ T5218] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.087879][ T5218] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.144447][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.152637][ T5221] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.183595][ T5221] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.196707][ T5221] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.209113][ T5221] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.299452][ T5219] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.310796][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.329362][ T5219] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.337404][ T54] Bluetooth: hci3: command tx timeout [ 69.342898][ T5240] Bluetooth: hci5: command tx timeout [ 69.346755][ T54] Bluetooth: hci1: command tx timeout [ 69.362223][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.369506][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.396309][ T5219] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.407959][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.415044][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.417413][ T54] Bluetooth: hci0: command tx timeout [ 69.428258][ T5240] Bluetooth: hci2: command tx timeout [ 69.428271][ T5236] Bluetooth: hci4: command tx timeout [ 69.450491][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.459748][ T5219] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.548711][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.618725][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.637103][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.650865][ T5218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.711638][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.718824][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.756943][ T5218] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.767720][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.774807][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.785373][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.792502][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.820438][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.827562][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.905170][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.913734][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.931338][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.938508][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.010309][ T5219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.042068][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.094795][ T5219] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.133358][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.144830][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.152498][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.174332][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.195976][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.203115][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.274827][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.281987][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.380915][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.388305][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.465054][ T5220] veth0_vlan: entered promiscuous mode [ 70.590712][ T5220] veth1_vlan: entered promiscuous mode [ 70.652492][ T5218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.756846][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.768507][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.781488][ T5220] veth0_macvtap: entered promiscuous mode [ 70.827994][ T5220] veth1_macvtap: entered promiscuous mode [ 70.876768][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.883242][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.888559][ T5218] veth0_vlan: entered promiscuous mode [ 70.920400][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.981602][ T5218] veth1_vlan: entered promiscuous mode [ 71.001073][ T5219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.014931][ T5223] veth0_vlan: entered promiscuous mode [ 71.048550][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.085581][ T5220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.110077][ T5220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.120590][ T5220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.130242][ T5220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.150109][ T5218] veth0_macvtap: entered promiscuous mode [ 71.189765][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.205393][ T5223] veth1_vlan: entered promiscuous mode [ 71.223671][ T5218] veth1_macvtap: entered promiscuous mode [ 71.267814][ T5219] veth0_vlan: entered promiscuous mode [ 71.307618][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.320920][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.333800][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.362959][ T5219] veth1_vlan: entered promiscuous mode [ 71.389728][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.407313][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.418698][ T5240] Bluetooth: hci5: command tx timeout [ 71.424145][ T5240] Bluetooth: hci3: command tx timeout [ 71.426856][ T54] Bluetooth: hci1: command tx timeout [ 71.447412][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.498070][ T54] Bluetooth: hci2: command tx timeout [ 71.503524][ T54] Bluetooth: hci4: command tx timeout [ 71.509543][ T5236] Bluetooth: hci0: command tx timeout [ 71.521296][ T5223] veth0_macvtap: entered promiscuous mode [ 71.530886][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.552043][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.574689][ T5218] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.590552][ T5218] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.600970][ T5218] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.610215][ T5218] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.644726][ T5223] veth1_macvtap: entered promiscuous mode [ 71.673798][ T5219] veth0_macvtap: entered promiscuous mode [ 71.723675][ T5219] veth1_macvtap: entered promiscuous mode [ 71.743508][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.755586][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.770372][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.781091][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.793431][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.805236][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.823817][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.833881][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.845269][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.855530][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.866128][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.877760][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.899658][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.910622][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.920894][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.931735][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.943397][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.953509][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.962023][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.977785][ T5229] veth0_vlan: entered promiscuous mode [ 71.985090][ T5219] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.994124][ T5219] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.005130][ T5219] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.014699][ T5219] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.058152][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.068910][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.080180][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.090931][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.100843][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.112826][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.124488][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.179218][ T5221] veth0_vlan: entered promiscuous mode [ 72.190734][ T5223] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.203689][ T5223] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.205066][ T5220] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.215915][ T5223] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.240137][ T5223] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.270560][ T5229] veth1_vlan: entered promiscuous mode [ 72.299871][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.313758][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.354744][ T5221] veth1_vlan: entered promiscuous mode [ 72.466698][ T5332] loop0: detected capacity change from 0 to 256 [ 72.475796][ T5229] veth0_macvtap: entered promiscuous mode [ 72.515538][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.520588][ T5221] veth0_macvtap: entered promiscuous mode [ 72.531115][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.532641][ T5221] veth1_macvtap: entered promiscuous mode [ 72.580915][ T5229] veth1_macvtap: entered promiscuous mode [ 72.624104][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.634656][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.668926][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.683947][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.706108][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.733209][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.744794][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.756729][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.767188][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.780337][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.793532][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.807908][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.819404][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.831800][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.849171][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.866399][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.877129][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.887053][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.897545][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.909046][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.919546][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.931967][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.964345][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.976032][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.985856][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.998294][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.008434][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.019852][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.030489][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.041159][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.053495][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.063630][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.075879][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.087012][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.092586][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.123643][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.134864][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.144796][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.155448][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.173195][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.196015][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.212660][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.223790][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.238397][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.265439][ T5229] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.286051][ T5229] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.294993][ T5229] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.305544][ T5229] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.328269][ T5221] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.361658][ T5221] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.371276][ T5221] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.389754][ T5221] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.432246][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.465753][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.496339][ T54] Bluetooth: hci3: command tx timeout [ 73.510173][ T5236] Bluetooth: hci5: command tx timeout [ 73.515885][ T54] Bluetooth: hci1: command tx timeout [ 73.576473][ T5236] Bluetooth: hci4: command tx timeout [ 73.577806][ T5240] Bluetooth: hci0: command tx timeout [ 73.581965][ T54] Bluetooth: hci2: command tx timeout [ 73.674557][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.710288][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.780576][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.805490][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.873166][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.914311][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.988847][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.009652][ T5340] loop0: detected capacity change from 0 to 32768 [ 74.029091][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.060040][ T5340] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.10 (5340) [ 74.090032][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.150000][ T5340] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.160176][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.165462][ T5340] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 74.182289][ T5352] openvswitch: netlink: Actions may not be safe on all matching packets [ 74.205322][ T5340] BTRFS info (device loop0): using free-space-tree [ 74.489332][ T5353] loop2: detected capacity change from 0 to 2048 [ 74.496803][ T5353] ======================================================= [ 74.496803][ T5353] WARNING: The mand mount option has been deprecated and [ 74.496803][ T5353] and is ignored by this kernel. Remove the mand [ 74.496803][ T5353] option from the mount to silence this warning. [ 74.496803][ T5353] ======================================================= [ 74.679826][ T5353] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.044755][ T932] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.064786][ T5391] capability: warning: `syz.3.21' uses 32-bit capabilities (legacy support in use) [ 75.145722][ T5391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21'. [ 75.376362][ T932] usb 5-1: Using ep0 maxpacket: 8 [ 75.426960][ T932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.456647][ T932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.467063][ T5340] syz.0.10 (5340) used greatest stack depth: 18608 bytes left [ 75.496985][ T932] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 75.569339][ T932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.610736][ T5220] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.614978][ T5402] loop3: detected capacity change from 0 to 512 [ 75.678534][ T932] usb 5-1: config 0 descriptor?? [ 75.734448][ T5397] loop5: detected capacity change from 0 to 4096 [ 75.950448][ T5397] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 76.198930][ T5413] mmap: syz.2.30 (5413) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.261126][ T5397] ntfs3: loop5: Failed to load $MFT (-22). [ 76.713085][ T5402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.720863][ T932] lenovo 0003:17EF:60A3.0001: item fetching failed at offset 2/5 [ 76.734487][ T932] lenovo 0003:17EF:60A3.0001: hid_parse failed [ 76.740813][ T932] lenovo 0003:17EF:60A3.0001: probe with driver lenovo failed with error -22 [ 76.816329][ T5402] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.907726][ T5288] usb 5-1: USB disconnect, device number 2 [ 77.036706][ T5402] EXT4-fs: Cannot change quota options when quota turned on [ 77.086860][ T5433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38'. [ 77.200025][ T932] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 77.218746][ T5223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.366056][ T932] usb 6-1: Using ep0 maxpacket: 8 [ 77.422765][ T5446] loop1: detected capacity change from 0 to 64 [ 77.429159][ T5287] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.453022][ T5448] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.497453][ T932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.508494][ T932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.518376][ T932] usb 6-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 77.527703][ T932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.546845][ T932] usb 6-1: config 0 descriptor?? [ 77.592468][ T5287] usb 3-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 77.605495][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.653627][ T5287] usb 3-1: config 0 descriptor?? [ 77.683678][ T5287] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 77.854088][ T5456] netlink: 'syz.4.49': attribute type 10 has an invalid length. [ 77.879885][ T5456] netlink: 181292 bytes leftover after parsing attributes in process `syz.4.49'. [ 77.893985][ T5456] openvswitch: netlink: Message has 4 unknown bytes. [ 77.982233][ T932] cherry 0003:046A:0027.0002: unknown main item tag 0x0 [ 77.989585][ T932] cherry 0003:046A:0027.0002: unknown main item tag 0xe [ 78.025549][ T932] cherry 0003:046A:0027.0002: unknown main item tag 0x5 [ 78.055897][ T932] cherry 0003:046A:0027.0002: unknown main item tag 0x4 [ 78.083593][ T932] cherry 0003:046A:0027.0002: ignoring exceeding usage max [ 78.140060][ T932] cherry 0003:046A:0027.0002: usage index exceeded [ 78.164474][ T932] cherry 0003:046A:0027.0002: item 0 0 2 0 parsing failed [ 78.186660][ T932] cherry 0003:046A:0027.0002: probe with driver cherry failed with error -22 [ 78.233327][ T932] usb 6-1: USB disconnect, device number 2 [ 78.289947][ T5287] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 78.302911][ T5287] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 78.355472][ T5287] usb 3-1: USB disconnect, device number 2 [ 78.606050][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.807552][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.834911][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.851990][ T25] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 78.861534][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.909851][ T25] usb 2-1: config 0 descriptor?? [ 79.046850][ T5287] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.204143][ T5504] loop5: detected capacity change from 0 to 16 [ 79.217296][ T5504] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 79.236606][ T5287] usb 4-1: Using ep0 maxpacket: 8 [ 79.246729][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.279745][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.299966][ T5287] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 79.337808][ T25] steelseries 0003:1038:1410.0003: not enough fields in HID_OUTPUT_REPORT 0 [ 79.348572][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.381000][ T5287] usb 4-1: config 0 descriptor?? [ 79.554766][ T5286] usb 2-1: USB disconnect, device number 2 [ 79.578028][ T5514] netlink: 'syz.5.71': attribute type 29 has an invalid length. [ 79.626672][ T5514] netlink: 'syz.5.71': attribute type 29 has an invalid length. [ 79.714063][ T5519] loop2: detected capacity change from 0 to 256 [ 79.746122][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.929715][ T5287] steelseries 0003:1038:1410.0004: unknown main item tag 0x0 [ 79.930757][ T25] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.948532][ T5287] steelseries 0003:1038:1410.0004: report_id 0 is invalid [ 79.955683][ T5287] steelseries 0003:1038:1410.0004: item 0 0 1 8 parsing failed [ 79.972407][ T5287] steelseries 0003:1038:1410.0004: parse failed [ 79.980054][ T5287] steelseries 0003:1038:1410.0004: probe with driver steelseries failed with error -22 [ 79.983014][ T25] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 80.100425][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 80.130484][ T5284] usb 4-1: USB disconnect, device number 2 [ 80.141404][ T5533] loop5: detected capacity change from 0 to 1024 [ 80.161144][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.194478][ T5512] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 80.218189][ T25] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 80.249359][ T5533] UBIFS error (pid: 5533): cannot open "", error -22 [ 80.752434][ T5284] usb 5-1: USB disconnect, device number 3 [ 81.161467][ T8] cfg80211: failed to load regulatory.db [ 81.176302][ T5556] loop2: detected capacity change from 0 to 32768 [ 81.255023][ T5563] loop3: detected capacity change from 0 to 256 [ 81.281922][ T5556] [ 81.281922][ T5556] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.281922][ T5556] [ 81.337099][ T5556] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 81.337099][ T5556] [ 81.507898][ T36] read_mapping_page failed! [ 81.541682][ T36] ERROR: (device loop2): txCommit: [ 81.541682][ T36] [ 81.564854][ T36] jfs_write_inode: jfs_commit_inode failed! [ 81.595424][ T5219] [ 81.595424][ T5219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.595424][ T5219] [ 81.658152][ T5219] [ 81.658152][ T5219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.658152][ T5219] [ 82.294692][ T5587] loop0: detected capacity change from 0 to 256 [ 82.334089][ T5587] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 82.504984][ T5602] Bluetooth: MGMT ver 1.23 [ 82.725908][ T5609] netlink: 216 bytes leftover after parsing attributes in process `syz.4.116'. [ 82.744303][ T5609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'. [ 83.221193][ T5629] loop2: detected capacity change from 0 to 24 [ 83.258504][ T5629] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 83.284836][ T5629] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 83.338721][ T5629] romfs: read error for inode 0x70040 [ 83.349386][ T5636] loop1: detected capacity change from 0 to 1024 [ 83.417743][ T5636] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 83.504685][ T5636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.579102][ T5636] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 83.658009][ T5218] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.882504][ T5654] netlink: 'syz.1.133': attribute type 3 has an invalid length. [ 83.894362][ T5657] loop5: detected capacity change from 0 to 4096 [ 83.996079][ T5654] netlink: 'syz.1.133': attribute type 1 has an invalid length. [ 84.017477][ T5654] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.133'. [ 84.137416][ T5662] loop0: detected capacity change from 0 to 512 [ 84.190407][ T5662] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.258063][ T5652] loop3: detected capacity change from 0 to 40427 [ 84.294689][ T5663] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.307050][ T5652] F2FS-fs (loop3): invalid crc value [ 84.315078][ T5662] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 84.320603][ T5652] F2FS-fs (loop3): Found nat_bits in checkpoint [ 84.350475][ T5662] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 84.430568][ T5662] EXT4-fs (loop0): 1 truncate cleaned up [ 84.446683][ T5662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.481235][ T5652] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 84.518887][ T5662] EXT4-fs: group quota file already specified [ 84.658262][ T5220] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.697664][ T5223] syz-executor: attempt to access beyond end of device [ 84.697664][ T5223] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 84.713445][ T5223] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 85.161153][ T5689] IPVS: Error connecting to the multicast addr [ 85.551768][ T5694] netlink: 188 bytes leftover after parsing attributes in process `syz.5.149'. [ 85.592561][ T5695] loop1: detected capacity change from 0 to 64 [ 86.227169][ T5707] loop3: detected capacity change from 0 to 64 [ 86.375149][ T5707] hfs: request for non-existent node 16777216 in B*Tree [ 86.486597][ T5707] hfs: request for non-existent node 16777216 in B*Tree [ 86.852301][ T5718] netlink: 'syz.1.160': attribute type 11 has an invalid length. [ 86.964822][ T5718] netlink: 'syz.1.160': attribute type 11 has an invalid length. [ 87.052280][ T5718] netlink: 209800 bytes leftover after parsing attributes in process `syz.1.160'. [ 87.388928][ T5728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'. [ 87.688444][ T5734] netlink: 'syz.3.168': attribute type 1 has an invalid length. [ 87.735079][ T29] audit: type=1326 audit(1726959925.371:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5735 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6937def9 code=0x7ffc0000 [ 87.797205][ T5734] netlink: 244 bytes leftover after parsing attributes in process `syz.3.168'. [ 87.946016][ T29] audit: type=1326 audit(1726959925.451:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5735 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f9e6937def9 code=0x7ffc0000 [ 88.198184][ T29] audit: type=1326 audit(1726959925.451:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5735 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6937def9 code=0x7ffc0000 [ 88.326801][ T5284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.396050][ T5284] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 88.434280][ T29] audit: type=1326 audit(1726959925.451:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5735 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6937def9 code=0x7ffc0000 [ 88.510917][ T5284] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 88.624782][ T29] audit: type=1326 audit(1726959925.491:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5735 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f9e6937def9 code=0x7ffc0000 [ 88.778496][ T29] audit: type=1326 audit(1726959925.491:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5735 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6937def9 code=0x7ffc0000 [ 88.865493][ T29] audit: type=1326 audit(1726959925.491:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5735 comm="syz.4.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6937def9 code=0x7ffc0000 [ 89.570894][ T5759] loop4: detected capacity change from 0 to 256 [ 89.660240][ T5760] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.180'. [ 89.741574][ T5760] netlink: 18430 bytes leftover after parsing attributes in process `syz.1.180'. [ 90.199146][ T5738] loop0: detected capacity change from 0 to 32768 [ 90.385276][ T5738] non-latin1 character 0xffff found in JFS file name [ 90.469565][ T5738] mount with iocharset=utf8 to access [ 90.654101][ T5742] loop2: detected capacity change from 0 to 32768 [ 90.794220][ T5742] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.172 (5742) [ 90.960793][ T5742] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.066374][ T5742] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 91.162071][ T5742] BTRFS info (device loop2): using free-space-tree [ 91.220202][ T5742] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 91.276512][ T5742] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 91.349387][ T5742] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 91.496462][ T5742] BTRFS error (device loop2): open_ctree failed [ 92.122911][ T5801] loop0: detected capacity change from 0 to 2048 [ 92.177276][ T5801] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.287239][ T5801] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 93.680679][ T5821] loop0: detected capacity change from 0 to 1024 [ 93.739094][ T5821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.765174][ T5821] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.871746][ T5220] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.023314][ T5826] xt_cgroup: invalid path, errno=-2 [ 94.455273][ T5832] loop0: detected capacity change from 0 to 2048 [ 94.474991][ T5832] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 94.535459][ T5832] syz.0.204: attempt to access beyond end of device [ 94.535459][ T5832] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 94.550443][ T5833] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.975729][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 100.996154][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 101.004911][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 101.015475][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 101.023199][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 101.030982][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 102.475101][ T5240] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 102.497790][ T5240] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 102.510346][ T5240] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 102.525481][ T5240] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 102.533361][ T5240] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 102.542161][ T5240] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 102.588344][ T5236] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 102.606108][ T5236] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 102.614932][ T5236] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 102.627244][ T5236] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 102.635052][ T5236] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 102.643580][ T5236] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 103.044193][ T5236] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 103.056194][ T5236] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 103.064416][ T5236] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 103.072446][ T5236] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 103.083306][ T5236] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 103.098086][ T5236] Bluetooth: hci6: command tx timeout [ 103.104674][ T5236] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 103.177586][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 103.187869][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 103.197637][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 103.209897][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 103.217567][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 103.225188][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 104.616267][ T5236] Bluetooth: hci7: command tx timeout [ 104.696194][ T5236] Bluetooth: hci8: command tx timeout [ 105.186254][ T5236] Bluetooth: hci9: command tx timeout [ 105.192888][ T5236] Bluetooth: hci6: command tx timeout [ 105.256280][ T5236] Bluetooth: hci10: command tx timeout [ 105.384627][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 105.402807][ T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 105.411250][ T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 105.430022][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 105.438514][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 105.456070][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 106.698438][ T54] Bluetooth: hci7: command tx timeout [ 106.776177][ T54] Bluetooth: hci8: command tx timeout [ 107.256271][ T5236] Bluetooth: hci9: command tx timeout [ 107.264307][ T54] Bluetooth: hci6: command tx timeout [ 107.336490][ T54] Bluetooth: hci10: command tx timeout [ 107.497045][ T54] Bluetooth: hci11: command tx timeout [ 108.782783][ T54] Bluetooth: hci7: command tx timeout [ 108.858203][ T54] Bluetooth: hci8: command tx timeout [ 109.336278][ T54] Bluetooth: hci6: command tx timeout [ 109.341762][ T54] Bluetooth: hci9: command tx timeout [ 109.423045][ T54] Bluetooth: hci10: command tx timeout [ 109.576409][ T54] Bluetooth: hci11: command tx timeout [ 110.856185][ T54] Bluetooth: hci7: command tx timeout [ 110.936141][ T54] Bluetooth: hci8: command tx timeout [ 111.416116][ T54] Bluetooth: hci9: command tx timeout [ 111.496395][ T54] Bluetooth: hci10: command tx timeout [ 111.656296][ T54] Bluetooth: hci11: command tx timeout [ 113.736506][ T54] Bluetooth: hci11: command tx timeout [ 114.765943][ C0] sched: DL replenish lagged too much [ 132.305287][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.315984][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 161.320054][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.335636][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.343659][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.351756][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.361164][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 161.393784][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.733902][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.766592][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.778934][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.787225][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 162.795429][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 162.802963][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.903030][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.913935][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.924325][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 162.940707][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.948496][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 162.956088][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.464652][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.474695][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.484518][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.493492][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.500771][ T5240] Bluetooth: hci0: command tx timeout [ 163.516246][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 163.525863][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.585361][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 163.596681][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 163.604754][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 163.615648][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 163.626076][ T5236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 163.636286][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 164.856157][ T5236] Bluetooth: hci1: command tx timeout [ 165.016348][ T5236] Bluetooth: hci3: command tx timeout [ 165.381802][ T54] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 165.391450][ T54] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 165.400724][ T54] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 165.412025][ T54] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 165.422589][ T54] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 165.430568][ T54] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 165.576230][ T5236] Bluetooth: hci0: command tx timeout [ 165.582757][ T54] Bluetooth: hci4: command tx timeout [ 165.736327][ T54] Bluetooth: hci5: command tx timeout [ 166.936154][ T54] Bluetooth: hci1: command tx timeout [ 167.096181][ T54] Bluetooth: hci3: command tx timeout [ 167.496221][ T54] Bluetooth: hci12: command tx timeout [ 167.661573][ T54] Bluetooth: hci4: command tx timeout [ 167.668927][ T5236] Bluetooth: hci0: command tx timeout [ 167.816266][ T5236] Bluetooth: hci5: command tx timeout [ 169.016067][ T5236] Bluetooth: hci1: command tx timeout [ 169.176188][ T5236] Bluetooth: hci3: command tx timeout [ 169.576203][ T5236] Bluetooth: hci12: command tx timeout [ 169.738268][ T54] Bluetooth: hci4: command tx timeout [ 169.745374][ T5236] Bluetooth: hci0: command tx timeout [ 169.896417][ T5236] Bluetooth: hci5: command tx timeout [ 171.096162][ T5236] Bluetooth: hci1: command tx timeout [ 171.256213][ T5236] Bluetooth: hci3: command tx timeout [ 171.656157][ T5236] Bluetooth: hci12: command tx timeout [ 171.816175][ T5236] Bluetooth: hci4: command tx timeout [ 171.976385][ T5236] Bluetooth: hci5: command tx timeout [ 173.742718][ T5236] Bluetooth: hci12: command tx timeout [ 190.701558][ T5236] Bluetooth: hci2: command 0x0406 tx timeout [ 193.744828][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.755951][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 223.326903][ T5236] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 223.338654][ T5236] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 223.362544][ T5236] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 223.374719][ T5236] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 223.382742][ T5236] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 223.390486][ T5236] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 224.272459][ T54] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 224.289182][ T54] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 224.299320][ T54] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 224.307832][ T54] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 224.321429][ T54] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 224.329104][ T54] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 224.448291][ T54] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 224.595521][ T5231] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 224.603626][ T5231] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 224.616704][ T5231] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 224.624435][ T5231] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 224.632257][ T5231] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 224.804835][ T5236] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 224.824196][ T5236] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 224.840843][ T5239] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 224.850402][ T5239] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 224.860560][ T5239] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 224.869575][ T5239] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 224.880102][ T5239] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 224.887958][ T5239] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 224.897899][ T5239] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 224.907666][ T5239] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 224.918374][ T5239] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 224.941592][ T5231] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 225.496281][ T5231] Bluetooth: hci13: command tx timeout [ 226.382694][ T5231] Bluetooth: hci14: command tx timeout [ 226.490063][ T5236] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 226.498828][ T5236] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 226.507221][ T5236] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 226.515331][ T5236] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 226.525012][ T5236] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 226.533813][ T5236] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 226.616421][ T5228] Bluetooth: hci6: command 0x0406 tx timeout [ 226.622563][ T5228] Bluetooth: hci7: command 0x0406 tx timeout [ 226.628763][ T5231] Bluetooth: hci8: command 0x0406 tx timeout [ 226.636067][ T5231] Bluetooth: hci9: command 0x0406 tx timeout [ 226.642093][ T5231] Bluetooth: hci10: command 0x0406 tx timeout [ 226.696138][ T5226] Bluetooth: hci15: command tx timeout [ 227.016180][ T5226] Bluetooth: hci16: command tx timeout [ 227.021990][ T5241] Bluetooth: hci17: command tx timeout [ 227.576084][ T5241] Bluetooth: hci13: command tx timeout [ 228.456105][ T5241] Bluetooth: hci14: command tx timeout [ 228.618778][ T5241] Bluetooth: hci18: command tx timeout [ 228.776093][ T5241] Bluetooth: hci15: command tx timeout [ 229.096160][ T5241] Bluetooth: hci17: command tx timeout [ 229.101710][ T5241] Bluetooth: hci16: command tx timeout [ 229.656007][ T5241] Bluetooth: hci13: command tx timeout [ 230.536090][ T5241] Bluetooth: hci14: command tx timeout [ 230.696327][ T5241] Bluetooth: hci18: command tx timeout [ 230.860170][ T5241] Bluetooth: hci15: command tx timeout [ 231.176177][ T54] Bluetooth: hci17: command tx timeout [ 231.183171][ T5241] Bluetooth: hci16: command tx timeout [ 231.659774][ T5241] Bluetooth: hci11: command 0x0406 tx timeout [ 231.736090][ T5226] Bluetooth: hci13: command tx timeout [ 232.616264][ T5226] Bluetooth: hci14: command tx timeout [ 232.778581][ T5226] Bluetooth: hci18: command tx timeout [ 232.936227][ T5226] Bluetooth: hci15: command tx timeout [ 233.256114][ T5241] Bluetooth: hci17: command tx timeout [ 233.261745][ T5226] Bluetooth: hci16: command tx timeout [ 234.856310][ T5226] Bluetooth: hci18: command tx timeout [ 244.938409][ T30] INFO: task dhcpcd:4889 blocked for more than 143 seconds. [ 244.950340][ T30] Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 244.975942][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.984634][ T30] task:dhcpcd state:D stack:20128 pid:4889 tgid:4889 ppid:4888 flags:0x00000002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 245.078966][ T30] Call Trace: [ 245.082317][ T30] [ 245.085275][ T30] __schedule+0x1895/0x4b30 [ 245.205932][ T30] ? __pfx___schedule+0x10/0x10 [ 245.210865][ T30] ? __pfx_lock_release+0x10/0x10 [ 245.296811][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 245.302403][ T30] ? schedule+0x90/0x320 [ 245.355916][ T30] schedule+0x14b/0x320 [ 245.360163][ T30] schedule_preempt_disabled+0x13/0x30 [ 245.365756][ T30] __mutex_lock+0x6a7/0xd70 [ 245.452568][ T30] ? __mutex_lock+0x52a/0xd70 [ 245.475990][ T30] ? dev_ioctl+0x706/0x1340 [ 245.480594][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 245.485761][ T30] ? dev_load+0x21/0x1f0 [ 245.540593][ T30] dev_ioctl+0x706/0x1340 [ 245.545028][ T30] sock_do_ioctl+0x240/0x460 [ 245.596029][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 245.610403][ T30] ? __pfx_lock_release+0x10/0x10 [ 245.645945][ T30] sock_ioctl+0x626/0x8e0 [ 245.650385][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 245.655277][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.705992][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 245.712072][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.755913][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.761633][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 245.784684][ T30] __se_sys_ioctl+0xfb/0x170 [ 245.790453][ T30] do_syscall_64+0xf3/0x230 [ 245.795099][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.808653][ T30] RIP: 0033:0x7f41a3fc6d49 [ 245.813116][ T30] RSP: 002b:00007ffcf2ba38f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.829086][ T30] RAX: ffffffffffffffda RBX: 00007f41a3ef86c0 RCX: 00007f41a3fc6d49 [ 245.842892][ T30] RDX: 00007ffcf2bb3ae8 RSI: 0000000000008922 RDI: 0000000000000010 [ 245.852326][ T30] RBP: 00007ffcf2bc3ca8 R08: 00007ffcf2bb3aa8 R09: 00007ffcf2bb3a58 [ 245.865902][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.873903][ T30] R13: 00007ffcf2bb3ae8 R14: 0000000000000028 R15: 0000000000008922 [ 245.891687][ T30] [ 245.894860][ T30] INFO: task syz.0.205:5835 blocked for more than 144 seconds. [ 245.908495][ T30] Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 245.915813][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 245.930261][ T30] task:syz.0.205 state:D stack:27360 pid:5835 tgid:5834 ppid:5220 flags:0x00004004 [ 245.944992][ T30] Call Trace: [ 245.952947][ T30] [ 245.958416][ T30] __schedule+0x1895/0x4b30 [ 245.962987][ T30] ? __pfx___schedule+0x10/0x10 [ 245.972586][ T30] ? __pfx_lock_release+0x10/0x10 [ 245.981828][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 245.994021][ T30] ? schedule+0x90/0x320 [ 246.002962][ T30] schedule+0x14b/0x320 [ 246.013023][ T30] schedule_preempt_disabled+0x13/0x30 [ 246.021125][ T30] __mutex_lock+0x6a7/0xd70 [ 246.025802][ T30] ? __mutex_lock+0x52a/0xd70 [ 246.035564][ T30] ? __tun_chr_ioctl+0x48c/0x2400 [ 246.043217][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 246.052931][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.065203][ T30] ? __might_fault+0xc6/0x120 [ 246.075987][ T30] __tun_chr_ioctl+0x48c/0x2400 [ 246.080912][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 246.094618][ T30] ? __fget_files+0x3f3/0x470 [ 246.099657][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.105328][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 246.120653][ T30] __se_sys_ioctl+0xfb/0x170 [ 246.125343][ T30] do_syscall_64+0xf3/0x230 [ 246.134946][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.143935][ T30] RIP: 0033:0x7fe59d77def9 [ 246.153307][ T30] RSP: 002b:00007fe59e503038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.164482][ T30] RAX: ffffffffffffffda RBX: 00007fe59d935f80 RCX: 00007fe59d77def9 [ 246.178741][ T30] RDX: 00000000200000c0 RSI: 00000000400454ca RDI: 0000000000000003 [ 246.192231][ T30] RBP: 00007fe59d7f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 246.204178][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.220925][ T30] R13: 0000000000000000 R14: 00007fe59d935f80 R15: 00007ffd720d5888 [ 246.238731][ T30] [ 246.241878][ T30] INFO: task syz.0.205:5836 blocked for more than 144 seconds. [ 246.253154][ T30] Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 246.264295][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 246.276895][ T30] task:syz.0.205 state:D stack:27392 pid:5836 tgid:5834 ppid:5220 flags:0x00000004 [ 246.293267][ T30] Call Trace: [ 246.300914][ T30] [ 246.303878][ T30] __schedule+0x1895/0x4b30 [ 246.311022][ T30] ? __pfx___schedule+0x10/0x10 [ 246.320498][ T30] ? __pfx_lock_release+0x10/0x10 [ 246.325595][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 246.334822][ T30] ? schedule+0x90/0x320 [ 246.346517][ T30] schedule+0x14b/0x320 [ 246.350732][ T30] schedule_preempt_disabled+0x13/0x30 [ 246.363193][ T30] __mutex_lock+0x6a7/0xd70 [ 246.368053][ T30] ? __mutex_lock+0x52a/0xd70 [ 246.372784][ T30] ? __tun_chr_ioctl+0x48c/0x2400 [ 246.384079][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 246.394436][ T30] __tun_chr_ioctl+0x48c/0x2400 [ 246.404289][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 246.413360][ T30] ? __fget_files+0x3f3/0x470 [ 246.422336][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.431594][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 246.440286][ T30] __se_sys_ioctl+0xfb/0x170 [ 246.444928][ T30] do_syscall_64+0xf3/0x230 [ 246.453440][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.465681][ T30] RIP: 0033:0x7fe59d77def9 [ 246.472591][ T30] RSP: 002b:00007fe59e4e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.486071][ T30] RAX: ffffffffffffffda RBX: 00007fe59d936058 RCX: 00007fe59d77def9 [ 246.494131][ T30] RDX: 000000000000030c RSI: 00000000400454cd RDI: 0000000000000003 [ 246.510053][ T30] RBP: 00007fe59d7f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 246.523094][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.535746][ T30] R13: 0000000000000001 R14: 00007fe59d936058 R15: 00007ffd720d5888 [ 246.547672][ T30] [ 246.552720][ T30] INFO: task syz-executor:5838 blocked for more than 144 seconds. [ 246.560733][ T30] Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 246.576957][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 246.585648][ T30] task:syz-executor state:D stack:24128 pid:5838 tgid:5838 ppid:1 flags:0x00000004 [ 246.604709][ T30] Call Trace: [ 246.608381][ T30] [ 246.611339][ T30] __schedule+0x1895/0x4b30 [ 246.623660][ T30] ? __pfx___schedule+0x10/0x10 [ 246.629568][ T30] ? __pfx_lock_release+0x10/0x10 [ 246.634904][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 246.649095][ T30] ? schedule+0x90/0x320 [ 246.653391][ T30] schedule+0x14b/0x320 [ 246.662337][ T30] schedule_preempt_disabled+0x13/0x30 [ 246.670394][ T30] __mutex_lock+0x6a7/0xd70 [ 246.674949][ T30] ? __mutex_lock+0x52a/0xd70 [ 246.685019][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 246.692710][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 246.710528][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 246.715529][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 246.725602][ T30] ? __lock_acquire+0x1384/0x2050 [ 246.733989][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 246.744446][ T30] netlink_rcv_skb+0x1e5/0x430 [ 246.751708][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 246.761807][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 246.771117][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 246.781247][ T30] netlink_unicast+0x7f8/0x990 [ 246.789226][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 246.794557][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.805903][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.811583][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.823925][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.831293][ T30] ? __check_object_size+0x48e/0x900 [ 246.844250][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 246.849351][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.854925][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.869738][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 246.874725][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.884702][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.894645][ T30] __sock_sendmsg+0x223/0x270 [ 246.902427][ T30] __sys_sendto+0x398/0x4f0 [ 246.913338][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 246.921108][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.932078][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 246.943931][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 246.954882][ T30] ? exc_page_fault+0x590/0x8c0 [ 246.962260][ T30] __x64_sys_sendto+0xde/0x100 [ 246.971658][ T30] do_syscall_64+0xf3/0x230 [ 246.978668][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.984598][ T30] RIP: 0033:0x7f19f857fd8c [ 246.993787][ T30] RSP: 002b:00007fffcdc3b240 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 247.006362][ T30] RAX: ffffffffffffffda RBX: 00007f19f9264620 RCX: 00007f19f857fd8c [ 247.022506][ T30] RDX: 0000000000000028 RSI: 00007f19f9264670 RDI: 0000000000000003 [ 247.032643][ T30] RBP: 0000000000000000 R08: 00007fffcdc3b294 R09: 000000000000000c [ 247.047603][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 247.055603][ T30] R13: 0000000000000000 R14: 00007f19f9264670 R15: 0000000000000000 [ 247.070473][ T30] [ 247.073605][ T30] [ 247.073605][ T30] Showing all locks held in the system: [ 247.084140][ T30] 1 lock held by khungtaskd/30: [ 247.093731][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 247.110816][ T30] 3 locks held by kworker/u8:2/33: [ 247.122282][ T30] #0: ffff88814b764948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 247.135636][ T30] #1: ffffc90000a97d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 247.156318][ T30] #2: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 247.173596][ T30] 3 locks held by kworker/u8:5/80: [ 247.180494][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 247.197991][ T30] #1: ffffc9000256fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 247.215573][ T30] #2: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 247.233483][ T30] 1 lock held by dhcpcd/4889: [ 247.239747][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x706/0x1340 [ 247.256334][ T30] 2 locks held by getty/4971: [ 247.261034][ T30] #0: ffff88814d0000a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 247.279443][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 247.294628][ T30] 3 locks held by kworker/0:4/5286: [ 247.302340][ T30] #0: ffff88801ac79948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 247.323718][ T30] #1: ffffc900036bfd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 247.344745][ T30] #2: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 247.355321][ T30] 3 locks held by kworker/0:5/5287: [ 247.367729][ T30] 4 locks held by kworker/0:6/5291: [ 247.372965][ T30] 1 lock held by syz.5.183/5767: [ 247.383665][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 247.395235][ T30] 1 lock held by syz.4.188/5787: [ 247.404862][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 247.417342][ T30] 2 locks held by syz.3.189/5785: [ 247.422489][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 247.447645][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 247.464395][ T30] 1 lock held by syz.1.191/5799: [ 247.471928][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 247.485726][ T30] 1 lock held by syz.2.192/5803: [ 247.493371][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 247.509882][ T30] 1 lock held by syz.0.205/5835: [ 247.514857][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48c/0x2400 [ 247.528966][ T30] 1 lock held by syz.0.205/5836: [ 247.533941][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48c/0x2400 [ 247.549127][ T30] 1 lock held by syz-executor/5838: [ 247.554348][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 247.569123][ T30] 1 lock held by syz-executor/5846: [ 247.574353][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 247.596403][ T30] 1 lock held by syz-executor/5847: [ 247.601668][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 247.619169][ T30] 1 lock held by syz-executor/5850: [ 247.628780][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 247.643682][ T30] 1 lock held by syz-executor/5852: [ 247.651520][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 247.670480][ T30] 1 lock held by syz-executor/5855: [ 247.675712][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 247.689119][ T30] 1 lock held by syz-executor/5862: [ 247.694336][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 247.708088][ T30] 1 lock held by syz-executor/5868: [ 247.713309][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 247.731071][ T30] 1 lock held by syz-executor/5870: [ 247.742658][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 247.759858][ T30] 1 lock held by syz-executor/5872: [ 247.765088][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 247.783308][ T30] 1 lock held by syz-executor/5874: [ 247.789887][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 247.805102][ T30] 1 lock held by syz-executor/5877: [ 247.811728][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 247.827632][ T30] 1 lock held by syz-executor/5883: [ 247.832864][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 247.849226][ T30] 1 lock held by syz-executor/5889: [ 247.855154][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 247.872060][ T30] 1 lock held by syz-executor/5891: [ 247.877601][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 247.895737][ T30] 1 lock held by syz-executor/5893: [ 247.903340][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 247.921305][ T30] 1 lock held by syz-executor/5894: [ 247.930004][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 247.947503][ T30] 1 lock held by syz-executor/5899: [ 247.954105][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 247.970769][ T30] [ 247.973114][ T30] ============================================= [ 247.973114][ T30] [ 247.984880][ T30] NMI backtrace for cpu 1 [ 247.989230][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 247.999492][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 248.009756][ T30] Call Trace: [ 248.013045][ T30] [ 248.015989][ T30] dump_stack_lvl+0x241/0x360 [ 248.020702][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.025932][ T30] ? __pfx__printk+0x10/0x10 [ 248.030566][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 248.035553][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 248.041048][ T30] ? _printk+0xd5/0x120 [ 248.045229][ T30] ? __pfx__printk+0x10/0x10 [ 248.049848][ T30] ? __wake_up_klogd+0xcc/0x110 [ 248.054820][ T30] ? __pfx__printk+0x10/0x10 [ 248.059436][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.065098][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 248.070158][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 248.076171][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 248.082196][ T30] watchdog+0xff4/0x1040 [ 248.086566][ T30] ? watchdog+0x1ea/0x1040 [ 248.091019][ T30] ? __pfx_watchdog+0x10/0x10 [ 248.095723][ T30] kthread+0x2f2/0x390 [ 248.100079][ T30] ? __pfx_watchdog+0x10/0x10 [ 248.104880][ T30] ? __pfx_kthread+0x10/0x10 [ 248.110013][ T30] ret_from_fork+0x4d/0x80 [ 248.114559][ T30] ? __pfx_kthread+0x10/0x10 [ 248.119204][ T30] ret_from_fork_asm+0x1a/0x30 [ 248.124036][ T30] [ 248.128309][ T30] Sending NMI from CPU 1 to CPUs 0: [ 248.134687][ C0] NMI backtrace for cpu 0 [ 248.134704][ C0] CPU: 0 UID: 0 PID: 5291 Comm: kworker/0:6 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 248.134729][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 248.134750][ C0] Workqueue: events nsim_dev_trap_report_work [ 248.134789][ C0] RIP: 0010:srso_alias_safe_ret+0x5/0x7 [ 248.134823][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 48 8d 64 24 08 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc cc cc cc cc cc [ 248.134841][ C0] RSP: 0018:ffffc900000067e8 EFLAGS: 00000287 [ 248.134860][ C0] RAX: ffffffff89e5297f RBX: ffffc900000068d0 RCX: 1ffff92000000d18 [ 248.134877][ C0] RDX: ffffffff91288754 RSI: 0000000000000002 RDI: ffffc90000007398 [ 248.134894][ C0] RBP: ffffc90000000000 R08: 0000000000000001 R09: ffffc900000069b0 [ 248.134910][ C0] R10: dffffc0000000000 R11: ffffffff81806cf0 R12: ffffc90000008000 [ 248.134927][ C0] R13: ffffc90000007398 R14: ffffc900000068c0 R15: 1ffff92000000d1a [ 248.134946][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 248.134965][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.134981][ C0] CR2: 0000001b32219ff8 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 248.134998][ C0] Call Trace: [ 248.135006][ C0] [ 248.135016][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 248.135051][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 248.135089][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 248.135123][ C0] ? nmi_handle+0x2a/0x5a0 [ 248.135156][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 248.135187][ C0] ? nmi_handle+0x151/0x5a0 [ 248.135209][ C0] ? nmi_handle+0x2a/0x5a0 [ 248.135233][ C0] ? srso_alias_safe_ret+0x5/0x7 [ 248.135262][ C0] ? default_do_nmi+0x63/0x160 [ 248.135299][ C0] ? exc_nmi+0x123/0x1f0 [ 248.135333][ C0] ? end_repeat_nmi+0xf/0x53 [ 248.135363][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 248.135391][ C0] ? nft_do_chain+0x4af/0x1da0 [ 248.135421][ C0] ? srso_alias_safe_ret+0x5/0x7 [ 248.135451][ C0] ? srso_alias_safe_ret+0x5/0x7 [ 248.135482][ C0] ? srso_alias_safe_ret+0x5/0x7 [ 248.135512][ C0] [ 248.135520][ C0] [ 248.135527][ C0] unwind_next_frame+0xc9b/0x22d0 [ 248.135569][ C0] ? nft_synproxy_do_eval+0x362/0xa60 [ 248.135598][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 248.135626][ C0] arch_stack_walk+0x11c/0x150 [ 248.135653][ C0] ? nft_synproxy_do_eval+0x362/0xa60 [ 248.135682][ C0] stack_trace_save+0x118/0x1d0 [ 248.135710][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 248.135737][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.135771][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 248.135794][ C0] ? ref_tracker_alloc+0x14b/0x490 [ 248.135830][ C0] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 248.135868][ C0] ref_tracker_alloc+0x188/0x490 [ 248.135906][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 248.135945][ C0] ? dst_init+0xee/0x490 [ 248.135975][ C0] ? dst_alloc+0x14f/0x190 [ 248.136004][ C0] ? ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 248.136034][ C0] ? ip_route_output_key_hash+0x193/0x2b0 [ 248.136061][ C0] ? ip_route_output_flow+0x29/0x140 [ 248.136084][ C0] ? ip_route_me_harder+0x80d/0x1300 [ 248.136123][ C0] ? synproxy_send_tcp+0x356/0x6c0 [ 248.136146][ C0] ? synproxy_send_client_synack+0x8b8/0xf30 [ 248.136171][ C0] ? nft_synproxy_eval_v4+0x3ca/0x610 [ 248.136199][ C0] ? nft_synproxy_do_eval+0x362/0xa60 [ 248.136237][ C0] dst_init+0xee/0x490 [ 248.136265][ C0] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 248.136299][ C0] dst_alloc+0x14f/0x190 [ 248.136332][ C0] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 248.136368][ C0] ip_route_output_key_hash+0x193/0x2b0 [ 248.136395][ C0] ? ip_route_output_key_hash+0xdf/0x2b0 [ 248.136420][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 248.136449][ C0] ? __pfx_lock_release+0x10/0x10 [ 248.136482][ C0] ? kthread+0x2f2/0x390 [ 248.136510][ C0] ip_route_output_flow+0x29/0x140 [ 248.136535][ C0] ip_route_me_harder+0x80d/0x1300 [ 248.136579][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 248.136618][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.136648][ C0] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 248.136692][ C0] synproxy_send_tcp+0x356/0x6c0 [ 248.136720][ C0] synproxy_send_client_synack+0x8b8/0xf30 [ 248.136757][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 248.136781][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.136813][ C0] ? synproxy_pernet+0x45/0x270 [ 248.136838][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.136871][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 248.136901][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 248.136927][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.136959][ C0] ? nf_ip_checksum+0x13a/0x500 [ 248.136990][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 248.137020][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 248.137045][ C0] ? validate_chain+0x11e/0x5920 [ 248.137071][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.137102][ C0] ? __pfx_validate_chain+0x10/0x10 [ 248.137128][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.137163][ C0] nft_do_chain+0x4af/0x1da0 [ 248.137199][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 248.137224][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 248.137260][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.137302][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 248.137336][ C0] nft_do_chain_inet+0x418/0x6b0 [ 248.137365][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 248.137390][ C0] ? ipt_do_table+0x312/0x1860 [ 248.137426][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 248.137451][ C0] nf_hook_slow+0xc5/0x220 [ 248.137474][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 248.137508][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 248.137542][ C0] NF_HOOK+0x29e/0x450 [ 248.137572][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.137605][ C0] ? NF_HOOK+0x9a/0x450 [ 248.137636][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 248.137670][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 248.137707][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.137737][ C0] ? ip_rcv_finish+0x406/0x560 [ 248.137775][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 248.137808][ C0] NF_HOOK+0x3a6/0x450 [ 248.137838][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.137868][ C0] ? __lock_acquire+0x1384/0x2050 [ 248.137904][ C0] ? NF_HOOK+0x9a/0x450 [ 248.137935][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 248.137966][ C0] ? ip_rcv_core+0x801/0xd10 [ 248.137999][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 248.138037][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 248.138070][ C0] __netif_receive_skb+0x2bf/0x650 [ 248.138108][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 248.138142][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 248.138177][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 248.138211][ C0] ? __pfx_lock_release+0x10/0x10 [ 248.138246][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 248.138279][ C0] process_backlog+0x662/0x15b0 [ 248.138305][ C0] ? process_backlog+0x33b/0x15b0 [ 248.138332][ C0] ? __pfx_process_backlog+0x10/0x10 [ 248.138354][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 248.138390][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 248.138427][ C0] __napi_poll+0xcd/0x490 [ 248.138465][ C0] net_rx_action+0x89b/0x1240 [ 248.138501][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 248.138524][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 248.138580][ C0] handle_softirqs+0x2c7/0x980 [ 248.138613][ C0] ? do_softirq+0x11b/0x1e0 [ 248.138645][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 248.138677][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.138710][ C0] do_softirq+0x11b/0x1e0 [ 248.138739][ C0] [ 248.138749][ C0] [ 248.138758][ C0] ? __pfx_do_softirq+0x10/0x10 [ 248.138788][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 248.138822][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.138854][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.138884][ C0] ? rcu_is_watching+0x15/0xb0 [ 248.138910][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 248.138941][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 248.138974][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 248.139004][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 248.139034][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.139064][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 248.139099][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 248.139141][ C0] ? process_scheduled_works+0x976/0x1850 [ 248.139174][ C0] process_scheduled_works+0xa65/0x1850 [ 248.139223][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 248.139260][ C0] ? assign_work+0x364/0x3d0 [ 248.139293][ C0] worker_thread+0x870/0xd30 [ 248.139328][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.139360][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 248.139389][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 248.139417][ C0] ? __kthread_parkme+0x169/0x1d0 [ 248.139453][ C0] ? __pfx_worker_thread+0x10/0x10 [ 248.139486][ C0] kthread+0x2f2/0x390 [ 248.139506][ C0] ? __pfx_worker_thread+0x10/0x10 [ 248.139538][ C0] ? __pfx_kthread+0x10/0x10 [ 248.139559][ C0] ret_from_fork+0x4d/0x80 [ 248.139593][ C0] ? __pfx_kthread+0x10/0x10 [ 248.139613][ C0] ret_from_fork_asm+0x1a/0x30 [ 248.139657][ C0] [ 249.096498][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 249.103452][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 249.113642][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 249.123723][ T30] Call Trace: [ 249.127039][ T30] [ 249.130000][ T30] dump_stack_lvl+0x241/0x360 [ 249.134729][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.139970][ T30] ? __pfx__printk+0x10/0x10 [ 249.144595][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 249.150625][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.156383][ T30] ? vscnprintf+0x5d/0x90 [ 249.160774][ T30] panic+0x349/0x880 [ 249.164704][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.170380][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 249.176603][ T30] ? __pfx_panic+0x10/0x10 [ 249.181061][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 249.186488][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.192241][ T30] ? __irq_work_queue_local+0x137/0x410 [ 249.197848][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.203582][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 249.209049][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 249.215339][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 249.221542][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.227216][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 249.233462][ T30] watchdog+0x1033/0x1040 [ 249.237835][ T30] ? watchdog+0x1ea/0x1040 [ 249.242299][ T30] ? __pfx_watchdog+0x10/0x10 [ 249.247021][ T30] kthread+0x2f2/0x390 [ 249.251114][ T30] ? __pfx_watchdog+0x10/0x10 [ 249.255831][ T30] ? __pfx_kthread+0x10/0x10 [ 249.260531][ T30] ret_from_fork+0x4d/0x80 [ 249.264983][ T30] ? __pfx_kthread+0x10/0x10 [ 249.269595][ T30] ret_from_fork_asm+0x1a/0x30 [ 249.274595][ T30] [ 249.277770][ T30] Kernel Offset: disabled [ 249.282118][ T30] Rebooting in 86400 seconds..