last executing test programs: 41.790432442s ago: executing program 2 (id=3): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sigaltstack(&(0x7f0000000200)={0x0, 0x180000002, 0xfffffca4}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000580)) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) 40.844638229s ago: executing program 2 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f00000000c0)="0f01d86565660f3841d83ec0ff730f20e06635000020000f22e0662e646536362ef30f1ef80f01ca66b9630001c066b80f00000066ba000000000f300fc7a80400b8e0008ee8f20f709c4c00f4", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x40}, 0x1, 0xd}, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 40.591234562s ago: executing program 2 (id=7): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c0002800800014000000000400000000c0a01020000000000000000010000000900020073797a320000000014000380100000800800034000000002040400800900010073797a30"], 0xe4}}, 0x0) 38.688461828s ago: executing program 2 (id=10): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index=0x3ffffffd, 0x1, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 38.440042651s ago: executing program 2 (id=11): r0 = syz_mount_image$btrfs(&(0x7f0000000240), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000003ec0), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x1}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r1, 0x4, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0xfea0) r3 = dup(r1) copy_file_range(r1, 0x0, r3, &(0x7f0000000640)=0xe000, 0xd8c2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000002480)={{r4}, 0x0, 0x0, @unused, @subvolid=0x3}) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) 36.820971521s ago: executing program 4 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r3 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffd, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000440)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) 35.570473026s ago: executing program 4 (id=18): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000004000), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x13, 0x2000ac0a, r3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 35.069291432s ago: executing program 4 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400", 0x2}], 0x1}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x38, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 34.888768619s ago: executing program 2 (id=23): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000002000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read(r2, 0x0, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) 34.54764686s ago: executing program 4 (id=24): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) unshare(0x4020400) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000540), 0x0, 0x4, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04100404"], 0x7) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x3a8) 34.265994317s ago: executing program 4 (id=26): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000e2ff00000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0xa) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0xc048aeca, &(0x7f0000000580)=ANY=[@ANYRES16=r0]) 33.616716866s ago: executing program 4 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x2020, 0x8, 0x3, 0x5, 0x1}, 0x8) 26.151123486s ago: executing program 0 (id=51): socket(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)) 25.202273864s ago: executing program 0 (id=53): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0x20364, 0x1) getpgid(0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r2, &(0x7f00000004c0)={0x28, 0x0, 0x0, @hyper}, 0x10) recvmmsg$unix(r2, &(0x7f0000002bc0)=[{{0x0, 0x40002, 0x0, 0x0, 0x0, 0xf0ff7f, 0x100000}, 0x8000000}, {{0x0, 0x8, &(0x7f0000000600)=[{0x0, 0x10}], 0x1}}], 0x3fffffffffffca8, 0x0, 0x0) 24.075982038s ago: executing program 0 (id=56): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000000)="d72796ad50"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 23.83330598s ago: executing program 0 (id=58): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1f, 0x14, &(0x7f0000000240)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xacf}, @map_val, @jmp={0x5, 0x1, 0x7, 0x5, 0x2, 0xfffffffffffffffc, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000003ff6)='GPL\x00', 0x80002, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000200)={'bridge_slave_0\x00', @dev}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', @random="4f33e363a4b1"}) 23.553850756s ago: executing program 0 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000006, &(0x7f0000000380)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@quota}, {@minixdf}, {@data_err_abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@bsdgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x8000000d) 23.283866581s ago: executing program 0 (id=62): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0x4048ae9b, &(0x7f0000005580)={{0x0, 0x0, 0x80}}) 19.801998032s ago: executing program 3 (id=76): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x44042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) 19.646659716s ago: executing program 3 (id=77): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r2, &(0x7f0000004d80)={0x2020}, 0x2020) 18.778584626s ago: executing program 3 (id=78): fchmodat(0xffffffffffffffff, 0x0, 0xae) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x42041) syz_usb_disconnect(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) unshare(0x28000600) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff}, 0x0, 0x0) 16.430783643s ago: executing program 3 (id=84): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r4 = eventfd2(0x0, 0x0) io_getevents(r3, 0x1fff, 0x7fffeb3, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x0) ppoll(&(0x7f0000000080)=[{r4, 0xb409}], 0x1, 0x0, 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) 15.444501104s ago: executing program 3 (id=85): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001300)='./file2\x00', 0x0, &(0x7f0000000680)={[{@prjquota}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@sysvgroups}, {@lazytime}, {@errors_continue}, {@grpjquota}]}, 0x1, 0x46a, &(0x7f0000000980)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0xfffffffffffffffe}}}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x34}}], 0x18}}], 0x2, 0x0) 15.278841789s ago: executing program 3 (id=86): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}}, 0x4000) close(r2) 3.724952066s ago: executing program 1 (id=110): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 2.70573243s ago: executing program 1 (id=111): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000100ff00"], 0x34}}, 0x0) 2.461372993s ago: executing program 1 (id=112): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f00000014c0)=ANY=[], 0x1, 0xc4e, &(0x7f00000015c0)="$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") r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000140)='./file1\x00', 0x8002, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) setsockopt(r2, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 1.768171937s ago: executing program 1 (id=113): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000540)=[{0x2, 0x4, 0xe, 0x1}, {0x4, 0x2, 0x7, 0x3}, {0x4, 0x2, 0x5, 0x3}, {0x3, 0x3, 0xf, 0x3}, {0x2, 0x3, 0x5}, {0x2, 0x2, 0xb, 0xc}, {0x5, 0x1, 0xf, 0xa}, {0x0, 0x5, 0xf, 0x7}, {0x5, 0x4, 0x10, 0xb}], 0x10, 0xe, @void, @value}, 0x90) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 1.680496705s ago: executing program 1 (id=114): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@dioread_lock}, {@dioread_nolock}]}, 0xfd, 0x586, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000008c0)="10", 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x127842, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x1c) sendfile(r2, r3, 0x0, 0x1000000201005) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000980)=ANY=[@ANYBLOB="120100003217a6409904581095310000000109023800010000000009040000013d78bf00053306000105240000000d240f0104000000000000000006241a000000090502"], 0x0) 0s ago: executing program 1 (id=115): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x14d35e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) fcntl$setstatus(r1, 0x4, 0x4c00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x0, [], 0x0, "7464fbe08eb369"}) dup(0xffffffffffffffff) dup3(r1, r0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r3, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x8, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a07, 0x20000}]) kernel console output (not intermixed with test programs): DUID 00:04:ef:eb:16:6a:bb:4b:eb:e8:98:52:3b:5c:58:f5:72:fb forked to background, child pid 3306 [ 33.101469][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.123662][ T3307] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts. syzkaller login: [ 51.581024][ T3628] cgroup: Unknown subsys name 'net' [ 51.712271][ T3628] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.099631][ T3628] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.845305][ T3654] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.848570][ T3658] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.853122][ T3654] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.860838][ T3658] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.868375][ T3654] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.875374][ T3658] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.888752][ T3654] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.888798][ T3658] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.896926][ T3654] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.903216][ T3658] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.910544][ T3654] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.917822][ T3658] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.924100][ T3654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.930966][ T3658] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.937855][ T3654] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.945629][ T3658] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.952777][ T3654] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.959349][ T3658] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.973164][ T3654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.973481][ T3658] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.980489][ T3654] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.991306][ T3660] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.995848][ T3654] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.024514][ T3654] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.030606][ T3659] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.038959][ T3659] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.077628][ T3652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.085691][ T3652] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.108239][ T3652] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.115521][ T3652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.385240][ T3650] chnl_net:caif_netlink_parms(): no params data found [ 55.480569][ T3645] chnl_net:caif_netlink_parms(): no params data found [ 55.560935][ T3643] chnl_net:caif_netlink_parms(): no params data found [ 55.591808][ T3642] chnl_net:caif_netlink_parms(): no params data found [ 55.609983][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.617884][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.625713][ T3650] device bridge_slave_0 entered promiscuous mode [ 55.635947][ T3644] chnl_net:caif_netlink_parms(): no params data found [ 55.645158][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.652314][ T3650] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.660781][ T3650] device bridge_slave_1 entered promiscuous mode [ 55.744245][ T3650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.772100][ T3645] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.779693][ T3645] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.787737][ T3645] device bridge_slave_0 entered promiscuous mode [ 55.796335][ T3650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.805440][ T3645] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.813377][ T3645] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.821424][ T3645] device bridge_slave_1 entered promiscuous mode [ 55.865583][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.872822][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.880822][ T3643] device bridge_slave_0 entered promiscuous mode [ 55.922809][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.930216][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.938456][ T3643] device bridge_slave_1 entered promiscuous mode [ 55.947859][ T3650] team0: Port device team_slave_0 added [ 55.955259][ T3645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.985719][ T3650] team0: Port device team_slave_1 added [ 55.993228][ T3645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.002818][ T3642] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.010128][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.018415][ T3642] device bridge_slave_0 entered promiscuous mode [ 56.025615][ T3644] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.032903][ T3644] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.040967][ T3644] device bridge_slave_0 entered promiscuous mode [ 56.070703][ T3642] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.077890][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.085529][ T3642] device bridge_slave_1 entered promiscuous mode [ 56.093054][ T3644] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.100289][ T3644] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.109257][ T3644] device bridge_slave_1 entered promiscuous mode [ 56.118615][ T3643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.146232][ T3645] team0: Port device team_slave_0 added [ 56.167867][ T3643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.177989][ T3650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.184936][ T3650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.211193][ T3650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.224638][ T3650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.231736][ T3650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.257685][ T3650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.270332][ T3645] team0: Port device team_slave_1 added [ 56.309013][ T3642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.319776][ T3644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.331731][ T3644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.351293][ T3643] team0: Port device team_slave_0 added [ 56.366363][ T3642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.392219][ T3643] team0: Port device team_slave_1 added [ 56.407109][ T3645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.414057][ T3645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.440418][ T3645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.482720][ T3645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.489852][ T3645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.521700][ T3645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.543995][ T3644] team0: Port device team_slave_0 added [ 56.561119][ T3650] device hsr_slave_0 entered promiscuous mode [ 56.567884][ T3650] device hsr_slave_1 entered promiscuous mode [ 56.581554][ T3642] team0: Port device team_slave_0 added [ 56.588634][ T3644] team0: Port device team_slave_1 added [ 56.595413][ T3642] team0: Port device team_slave_1 added [ 56.602865][ T3643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.609889][ T3643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.636112][ T3643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.648383][ T3643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.655330][ T3643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.681501][ T3643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.762479][ T3645] device hsr_slave_0 entered promiscuous mode [ 56.770601][ T3645] device hsr_slave_1 entered promiscuous mode [ 56.777412][ T3645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.785129][ T3645] Cannot create hsr debugfs directory [ 56.791456][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.798579][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.825061][ T3642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.836791][ T3644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.843750][ T3644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.870196][ T3644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.898884][ T3643] device hsr_slave_0 entered promiscuous mode [ 56.905639][ T3643] device hsr_slave_1 entered promiscuous mode [ 56.912395][ T3643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.920069][ T3643] Cannot create hsr debugfs directory [ 56.926233][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.933176][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.959172][ T3642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.970985][ T3644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.978198][ T3644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.004738][ T3644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.076633][ T3652] Bluetooth: hci4: command tx timeout [ 57.082677][ T48] Bluetooth: hci2: command tx timeout [ 57.151546][ T3642] device hsr_slave_0 entered promiscuous mode [ 57.157912][ T48] Bluetooth: hci1: command tx timeout [ 57.164007][ T3642] device hsr_slave_1 entered promiscuous mode [ 57.170609][ T3652] Bluetooth: hci3: command tx timeout [ 57.171207][ T48] Bluetooth: hci0: command tx timeout [ 57.182434][ T3642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.190344][ T3642] Cannot create hsr debugfs directory [ 57.199086][ T3644] device hsr_slave_0 entered promiscuous mode [ 57.205737][ T3644] device hsr_slave_1 entered promiscuous mode [ 57.212497][ T3644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.220693][ T3644] Cannot create hsr debugfs directory [ 57.443502][ T3650] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.455699][ T3650] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.476846][ T3650] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.496681][ T3650] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.550251][ T3645] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.574111][ T3645] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.584292][ T3645] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.593652][ T3645] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.648166][ T3643] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.682600][ T3643] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.693214][ T3643] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.703506][ T3643] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.748454][ T3650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.759932][ T3642] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.791361][ T3642] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.804072][ T3642] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.815527][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.825094][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.844314][ T3650] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.855616][ T3642] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.883987][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.893860][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.903058][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.910332][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.924284][ T3644] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.937963][ T3644] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.951833][ T3645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.960153][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.969173][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.979968][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.988621][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.995686][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.007752][ T3644] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.017735][ T3644] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.034876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.043411][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.071938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.081605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.090957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.101533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.110901][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.121658][ T3645] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.140388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.148924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.177014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.185616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.194300][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.201400][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.210459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.219276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.228488][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.235549][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.243441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.252330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.261745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.273992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.283066][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.293422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.302808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.328889][ T3650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.340781][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.354142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.363056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.372355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.381082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.390263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.417091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.425416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.476728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.485238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.512063][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.530434][ T3643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.564935][ T3642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.575182][ T3644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.588249][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.606122][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.620006][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.636928][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.650395][ T3643] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.661075][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.676653][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.685259][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.692385][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.714285][ T3642] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.736591][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.754449][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.765022][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.775286][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.782421][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.795690][ T3644] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.806801][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.814956][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.823406][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.832155][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.843023][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.850176][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.863982][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.900187][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.908558][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.919571][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.929847][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.937008][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.945125][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.954791][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.963713][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.972539][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.981114][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.989869][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.998654][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.005712][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.013629][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.022361][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.031118][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.038259][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.048373][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.057233][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.068135][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.077119][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.084912][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.092634][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.117542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.126601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.135488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.144400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.154080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.162392][ T48] Bluetooth: hci2: command tx timeout [ 59.164147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.167804][ T48] Bluetooth: hci4: command tx timeout [ 59.182155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.191052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.200235][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.208843][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.217580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.233718][ T3642] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.244551][ T3652] Bluetooth: hci0: command tx timeout [ 59.244800][ T3642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.250027][ T3652] Bluetooth: hci3: command tx timeout [ 59.250070][ T3652] Bluetooth: hci1: command tx timeout [ 59.278921][ T3650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.297205][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.305508][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.321288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.331087][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.343568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.353979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.367715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.380162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.389041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.399376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.408127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.418968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.435976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.447988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.455389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.492223][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.503793][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.537535][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.580437][ T3645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.655557][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.669673][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.725365][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.751298][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.779890][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.801866][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.821888][ T3645] device veth0_vlan entered promiscuous mode [ 59.850770][ T3645] device veth1_vlan entered promiscuous mode [ 59.921268][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.932821][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.948580][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.959240][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.973637][ T3645] device veth0_macvtap entered promiscuous mode [ 60.008794][ T3645] device veth1_macvtap entered promiscuous mode [ 60.017427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.029650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.038721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.046910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.059396][ T3644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.079861][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.088579][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.101276][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.109555][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.122977][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.130795][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.150425][ T3645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.163701][ T3643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.174991][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.185851][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.202029][ T3642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.211429][ T3645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.221837][ T3645] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.231792][ T3645] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.240606][ T3645] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.249499][ T3645] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.264759][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.273468][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.282642][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.293485][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.302069][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.310788][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.331109][ T3650] device veth0_vlan entered promiscuous mode [ 60.344509][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.353754][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.378480][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.388125][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.397626][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.406548][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.464787][ T3650] device veth1_vlan entered promiscuous mode [ 60.477945][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.488095][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.497139][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.505652][ T3642] device veth0_vlan entered promiscuous mode [ 60.534534][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.542395][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.550806][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.559602][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.568142][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.577881][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.586406][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.594111][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.602647][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.611657][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.620886][ T3643] device veth0_vlan entered promiscuous mode [ 60.656419][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.664368][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.684289][ T3643] device veth1_vlan entered promiscuous mode [ 60.699368][ T3644] device veth0_vlan entered promiscuous mode [ 60.708875][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.715486][ T3650] device veth0_macvtap entered promiscuous mode [ 60.723611][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.730924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.731523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.748366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.756767][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.765197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.786909][ T3642] device veth1_vlan entered promiscuous mode [ 60.800809][ T3644] device veth1_vlan entered promiscuous mode [ 60.809177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.818584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.827582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.860272][ T3650] device veth1_macvtap entered promiscuous mode [ 60.883330][ T3644] device veth0_macvtap entered promiscuous mode [ 60.908099][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.920934][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.929744][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.938830][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.949567][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.967892][ T3644] device veth1_macvtap entered promiscuous mode [ 60.976339][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.988574][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.000612][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.010294][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.021733][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.033482][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.053396][ T3642] device veth0_macvtap entered promiscuous mode [ 61.080435][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.089197][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.112537][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.122249][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.131520][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.141274][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.150247][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.159379][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.168701][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.177358][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.188903][ T3642] device veth1_macvtap entered promiscuous mode [ 61.198750][ T3643] device veth0_macvtap entered promiscuous mode [ 61.213044][ T3650] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.222377][ T3650] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.231449][ T3650] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.240389][ T48] Bluetooth: hci4: command tx timeout [ 61.240424][ T48] Bluetooth: hci2: command tx timeout [ 61.252244][ T3650] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.279942][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.290938][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.301611][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.312484][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.325394][ T3644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.332780][ T3652] Bluetooth: hci1: command tx timeout [ 61.332811][ T3652] Bluetooth: hci3: command tx timeout [ 61.332837][ T3652] Bluetooth: hci0: command tx timeout [ 61.352517][ T3643] device veth1_macvtap entered promiscuous mode [ 61.363844][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.372479][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.380878][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.390158][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.400004][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.412132][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.424672][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.434995][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.446211][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.458888][ T3644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.489892][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.500728][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.514868][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.525614][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.537189][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.547745][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.560731][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.568765][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.577637][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.587120][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.595941][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.607270][ T3644] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.618600][ T3644] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.627807][ T3644] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.638332][ T3644] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.652668][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.665081][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.675162][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.685964][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.695853][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.706545][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.718723][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.729865][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.741695][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.772797][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.781722][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.793133][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.804773][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.815202][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.826498][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.836697][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.848952][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.860566][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.870452][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.882863][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.892889][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.903589][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.913638][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.924356][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.934463][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.944977][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.962405][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.987865][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.002645][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.015542][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.030630][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.041162][ T3725] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.048958][ T3642] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.072011][ T3642] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.080861][ T3642] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.090724][ T3642] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.115415][ T3643] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.125368][ T3643] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.134464][ T3643] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.147225][ T3643] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.175159][ T3710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.184046][ T3710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.230104][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.294930][ T3710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.304919][ T3710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.323962][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.361626][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.383653][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.391831][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.649452][ T3735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 63.315102][ T3705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.317213][ T48] Bluetooth: hci2: command tx timeout [ 63.324883][ T3652] Bluetooth: hci4: command tx timeout [ 63.332635][ T3705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.347046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.400996][ T48] Bluetooth: hci0: command tx timeout [ 63.684939][ T3657] Bluetooth: hci1: command tx timeout [ 63.691171][ T3652] Bluetooth: hci3: command tx timeout [ 63.882428][ T3705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.922065][ T3705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.963111][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.973050][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.988414][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.002538][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.171651][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.197979][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.210420][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.231598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.245100][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.272471][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.404663][ T3747] loop0: detected capacity change from 0 to 16 [ 64.424112][ T3747] erofs: (device loop0): mounted with root inode @ nid 36. [ 64.504753][ T3747] overlayfs: failed to get redirect (-117) [ 64.533846][ T3755] loop4: detected capacity change from 0 to 512 [ 64.550791][ T3747] overlayfs: failed to get redirect (-117) [ 64.559290][ T3752] loop1: detected capacity change from 0 to 1024 [ 64.575395][ T3747] overlayfs: failed to get redirect (-117) [ 64.576826][ T3755] EXT4-fs: Ignoring removed nobh option [ 64.597044][ T3747] overlayfs: failed to get redirect (-117) [ 64.628016][ T3755] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.641833][ T3747] overlayfs: failed to get redirect (-117) [ 64.650777][ T3752] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 64.660379][ T3747] overlayfs: failed to get redirect (-117) [ 64.661284][ T3752] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 64.684888][ T3747] overlayfs: failed to get redirect (-117) [ 64.729198][ T3747] overlayfs: failed to get redirect (-117) [ 64.739787][ T3755] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 64.751523][ T3747] overlayfs: failed to get redirect (-117) [ 64.768270][ T3747] overlayfs: failed to get redirect (-117) [ 64.838139][ T3755] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 65.542204][ T3755] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 65.631799][ T3755] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 65.724436][ T3755] syz.4.12 (3755) used greatest stack depth: 19712 bytes left [ 65.737014][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 65.749643][ T3650] EXT4-fs (loop4): unmounting filesystem. [ 65.785862][ T3688] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 65.997075][ T3749] loop2: detected capacity change from 0 to 32768 [ 66.026021][ T3688] usb 4-1: Using ep0 maxpacket: 16 [ 66.068711][ T3749] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.11 (3749) [ 66.146012][ T3688] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 66.166044][ T3749] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 66.169017][ T3775] kvm: emulating exchange as write [ 66.185837][ T3688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.306036][ T3749] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 66.345472][ T3749] BTRFS info (device loop2): using free space tree [ 66.395264][ T3688] usb 4-1: config 0 descriptor?? [ 66.441095][ T3688] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 67.186363][ T3749] BTRFS info (device loop2): enabling ssd optimizations [ 67.274216][ T3770] loop0: detected capacity change from 0 to 32768 [ 67.327033][ T3770] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.14 (3770) [ 67.381845][ T3765] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (3765) [ 67.608439][ T3806] Zero length message leads to an empty skb [ 67.648809][ T102] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 67.734263][ T3811] binder: 3810:3811 ioctl c0306201 20000140 returned -14 [ 68.064291][ T3645] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 68.084209][ T3816] loop0: detected capacity change from 0 to 8 [ 68.122500][ T3816] SQUASHFS error: lzo decompression failed, data probably corrupt [ 68.132853][ T3816] SQUASHFS error: Failed to read block 0x91: -5 [ 68.230806][ T3816] SQUASHFS error: Unable to read metadata cache entry [8f] [ 68.262553][ T3816] SQUASHFS error: Unable to read inode 0x11f [ 68.509947][ T3830] capability: warning: `syz.0.25' uses 32-bit capabilities (legacy support in use) [ 69.435883][ T3688] gspca_sonixj: i2c_w8 err -71 [ 69.440747][ T3688] sonixj: probe of 4-1:0.0 failed with error -71 [ 69.453604][ T3688] usb 4-1: USB disconnect, device number 2 [ 70.284568][ T3860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 70.365705][ T3862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 70.769604][ T3857] loop1: detected capacity change from 0 to 32768 [ 70.778775][ T3857] ======================================================= [ 70.778775][ T3857] WARNING: The mand mount option has been deprecated and [ 70.778775][ T3857] and is ignored by this kernel. Remove the mand [ 70.778775][ T3857] option from the mount to silence this warning. [ 70.778775][ T3857] ======================================================= [ 70.839494][ T3857] XFS: ikeep mount option is deprecated. [ 70.873007][ T3857] XFS (loop1): Mounting V5 Filesystem [ 70.943275][ T3857] XFS (loop1): Ending clean mount [ 70.971328][ T3857] XFS (loop1): Quotacheck needed: Please wait. [ 70.999199][ T41] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_cntbt block 0x8 [ 71.018296][ T41] XFS (loop1): Unmount and run xfs_repair [ 71.029891][ T41] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 71.040204][ T41] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 71.049721][ T41] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 80 ................ [ 71.059087][ T41] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 71.068685][ T41] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13 ................ [ 71.083540][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.083695][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.102770][ T41] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 71.122604][ T41] 00000050: 00 00 00 00 00 f9 ff ff ff ff ff ff ff 00 00 00 ................ [ 71.158837][ T41] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.215014][ T41] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.260036][ T41] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 4 error 74 [ 71.311168][ T3857] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 71.458570][ T3688] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_cntbt block 0x8 [ 71.489941][ T3688] XFS (loop1): Unmount and run xfs_repair [ 71.495722][ T3688] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 71.534996][ T3688] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 71.575845][ T3688] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 80 ................ [ 71.584767][ T3688] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 71.626934][ T3688] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13 ................ [ 71.652170][ T3688] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 71.691347][ T3688] 00000050: 00 00 00 00 00 f9 ff ff ff ff ff ff ff 00 00 00 ................ [ 71.711030][ T3688] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.738309][ T3688] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.771424][ T3857] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 4 error 74 [ 71.799135][ T3688] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_cntbt block 0x8 [ 71.805616][ T3857] XFS (loop1): page discard on page ffffea00015101c0, inode 0x244b, pos 0. [ 71.830399][ T3688] XFS (loop1): Unmount and run xfs_repair [ 71.850326][ T3688] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 71.865880][ T3688] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 71.874790][ T3688] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 80 ................ [ 71.905907][ T3688] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 71.914902][ T3688] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13 ................ [ 71.942285][ T3688] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 71.961208][ T3688] 00000050: 00 00 00 00 00 f9 ff ff ff ff ff ff ff 00 00 00 ................ [ 71.985072][ T3688] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.999485][ T3688] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.010484][ T3877] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 4 error 74 [ 72.058485][ T3877] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x6a5/0xb80 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 72.091959][ T3877] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 72.164706][ T3644] XFS (loop1): Unmounting Filesystem [ 73.926001][ T3882] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 74.262556][ T3912] loop0: detected capacity change from 0 to 2048 [ 74.288112][ T3882] usb 4-1: config 1 interface 0 has no altsetting 0 [ 74.301524][ T3912] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.446048][ T3882] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 74.457130][ T3882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.466007][ T3882] usb 4-1: Product: syz [ 74.470208][ T3882] usb 4-1: Manufacturer: syz [ 74.483201][ T3882] usb 4-1: SerialNumber: syz [ 74.956012][ T3825] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.225909][ T3825] usb 1-1: Using ep0 maxpacket: 8 [ 75.571188][ T3882] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 75.655927][ T3825] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 75.675211][ T3825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.695805][ T3825] usb 1-1: Product: syz [ 75.700001][ T3825] usb 1-1: Manufacturer: syz [ 75.704634][ T3825] usb 1-1: SerialNumber: syz [ 75.712543][ T3825] usb 1-1: config 0 descriptor?? [ 75.759403][ T3927] tipc: Started in network mode [ 75.764406][ T3927] tipc: Node identity ffffffff, cluster identity 4711 [ 75.773894][ T3825] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 75.774130][ T3927] tipc: Node number set to 4294967295 [ 76.012564][ T3888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.022467][ T3888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.033536][ T3888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.044723][ T3888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.054931][ T7] usb 4-1: USB disconnect, device number 3 [ 76.070610][ T7] usblp0: removed [ 76.197811][ T22] cfg80211: failed to load regulatory.db [ 76.286015][ T3825] gspca_m5602: Failed to find a sensor [ 76.292094][ T3825] ALi m5602 1-1:0.0: ALi m5602 webcam failed [ 76.307224][ T3825] usb 1-1: USB disconnect, device number 2 [ 76.713505][ T3932] loop3: detected capacity change from 0 to 512 [ 76.748283][ T3932] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 76.772736][ T3932] ext4 filesystem being mounted at /6/bus supports timestamps until 2038 (0x7fffffff) [ 76.910617][ T26] audit: type=1800 audit(1728400208.119:2): pid=3932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.49" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 77.112602][ T26] audit: type=1800 audit(1728400208.319:3): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.49" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 77.544974][ T3643] EXT4-fs (loop3): unmounting filesystem. [ 77.842572][ T3930] loop1: detected capacity change from 0 to 40427 [ 77.853570][ T3930] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 77.862101][ T3930] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 77.891779][ T3930] F2FS-fs (loop1): Found nat_bits in checkpoint [ 78.585287][ T3930] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 78.598604][ T3930] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 78.883618][ T3959] loop3: detected capacity change from 0 to 256 [ 78.961034][ T3930] syz.1.50 (3930): drop_caches: 2 [ 78.985276][ T3959] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 79.113027][ T3962] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.145693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.165005][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.172176][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.182898][ T3930] syz.1.50 (3930): drop_caches: 2 [ 79.344970][ T3968] loop0: detected capacity change from 0 to 1024 [ 79.359436][ T3968] EXT4-fs: Ignoring removed orlov option [ 79.387859][ T3968] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 79.651009][ T3973] loop1: detected capacity change from 0 to 512 [ 79.663942][ T3973] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.677931][ T3973] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.695357][ T3973] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2808: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 79.711452][ T3973] EXT4-fs (loop1): 1 truncate cleaned up [ 79.718133][ T3973] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 79.763443][ T3973] EXT4-fs (loop1): unmounting filesystem. [ 79.827526][ T3976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.63'. [ 79.836587][ T3976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.844305][ T3976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.853217][ T3976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.861068][ T3976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.947057][ T3978] loop1: detected capacity change from 0 to 512 [ 79.974340][ T3978] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.64: invalid indirect mapped block 256 (level 2) [ 79.993490][ T3978] EXT4-fs (loop1): 2 truncates cleaned up [ 79.999307][ T3978] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 80.064852][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 80.328814][ T3981] Invalid option length (1044984) for dns_resolver key [ 80.475964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.381789][ T26] audit: type=1326 audit(1728400212.589:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3989 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc677dff9 code=0x7fc00000 [ 81.409377][ T26] audit: type=1326 audit(1728400212.589:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3989 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fecc677dff9 code=0x7fc00000 [ 81.432431][ T26] audit: type=1326 audit(1728400212.589:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3989 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc677dff9 code=0x7fc00000 [ 81.458247][ T26] audit: type=1326 audit(1728400212.589:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3989 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc677dff9 code=0x7fc00000 [ 81.481585][ T26] audit: type=1326 audit(1728400212.589:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3989 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc677dff9 code=0x7fc00000 [ 81.504050][ T26] audit: type=1326 audit(1728400212.589:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3989 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc677dff9 code=0x7fc00000 [ 81.528624][ T26] audit: type=1326 audit(1728400212.589:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3989 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc677dff9 code=0x7fc00000 [ 81.551631][ T26] audit: type=1326 audit(1728400212.589:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3989 comm="syz.3.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecc677dff9 code=0x7fc00000 [ 82.028910][ T3993] loop1: detected capacity change from 0 to 40427 [ 82.066927][ T3993] F2FS-fs (loop1): Found nat_bits in checkpoint [ 82.152238][ T3993] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 82.292198][ T3993] syz.1.69: attempt to access beyond end of device [ 82.292198][ T3993] loop1: rw=2049, sector=53248, nr_sectors = 4096 limit=40427 [ 82.807201][ T4010] syz.1.69: attempt to access beyond end of device [ 82.807201][ T4010] loop1: rw=2049, sector=49152, nr_sectors = 584 limit=40427 [ 83.020928][ T3644] syz-executor: attempt to access beyond end of device [ 83.020928][ T3644] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 83.123584][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 83.123599][ T26] audit: type=1804 audit(1728400214.329:71): pid=4014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.76" name="/newroot/18/file1" dev="fuse" ino=1 res=1 errno=0 [ 83.191687][ T26] audit: type=1800 audit(1728400214.359:72): pid=4014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.76" name="/" dev="fuse" ino=1 res=0 errno=0 [ 83.234034][ T26] audit: type=1804 audit(1728400214.369:73): pid=4013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.76" name="/newroot/18/file1" dev="fuse" ino=1 res=1 errno=0 [ 83.275911][ T26] audit: type=1800 audit(1728400214.369:74): pid=4013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.76" name="/" dev="fuse" ino=1 res=0 errno=0 [ 84.405900][ T3824] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.356413][ T3824] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 85.367578][ T3824] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 85.378590][ T3824] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 85.395895][ T3824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.426090][ T4025] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 85.667530][ T22] usb 4-1: USB disconnect, device number 4 [ 86.468476][ T3824] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.715854][ T3824] usb 2-1: Using ep0 maxpacket: 8 [ 86.836061][ T3824] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 86.846959][ T3824] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 86.855602][ T3824] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 86.868083][ T3824] usb 2-1: config 250 has no interface number 0 [ 86.874368][ T3824] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 86.889117][ T3824] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 86.901035][ T3824] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 86.911767][ T3824] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 86.922557][ T3824] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 86.936206][ T3824] usb 2-1: config 250 interface 228 has no altsetting 0 [ 87.077223][ T3824] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 87.090200][ T3824] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 87.099517][ T3824] usb 2-1: Product: syz [ 87.103922][ T3824] usb 2-1: SerialNumber: syz [ 87.146711][ T3824] hub 2-1:250.228: bad descriptor, ignoring hub [ 87.156299][ T3824] hub: probe of 2-1:250.228 failed with error -5 [ 87.353664][ T4037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.376068][ T3824] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 87.394264][ T4037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.414626][ T4037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.435351][ T4037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.452101][ T4045] loop3: detected capacity change from 0 to 512 [ 87.489555][ T4045] EXT4-fs (loop3): 1 truncate cleaned up [ 87.495321][ T4045] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 87.547406][ T3643] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /22/file2: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 87.575511][ T3643] EXT4-fs error (device loop3): ext4_lookup:1856: inode #11: comm syz-executor: iget: checksum invalid [ 87.592295][ T3643] EXT4-fs error (device loop3): ext4_lookup:1856: inode #11: comm syz-executor: iget: checksum invalid [ 87.639651][ T4040] EXT4-fs (loop3): unmounting filesystem. [ 87.802670][ T22] usb 2-1: USB disconnect, device number 2 [ 87.811688][ T22] usblp0: removed [ 88.327833][ T4050] loop1: detected capacity change from 0 to 1024 [ 88.334876][ T4050] EXT4-fs: Ignoring removed orlov option [ 88.340992][ T4050] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.363058][ T4050] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 88.461747][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 90.630907][ T4065] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 90.641472][ T4065] EXT4-fs warning (device sda1): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 92.750731][ T4089] device syz_tun entered promiscuous mode [ 92.758626][ T4089] device batadv_slave_0 entered promiscuous mode [ 92.776313][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 93.493735][ T4095] loop1: detected capacity change from 0 to 1024 [ 93.515542][ T4095] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 94.075684][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 95.079499][ T4102] IPv6: NLM_F_REPLACE set, but no existing node found! [ 95.084016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.261309][ T4104] kvm: vcpu 0: requested 88 ns lapic timer period limited to 200000 ns [ 100.416666][ T4132] loop1: detected capacity change from 0 to 2048 [ 100.431895][ T4132] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 100.444477][ T4132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.187105][ T4137] loop1: detected capacity change from 0 to 1024 [ 101.194512][ T4137] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.220958][ T4137] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 101.274811][ T4137] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 101.286980][ T4137] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #15: comm syz.1.114: mark_inode_dirty error [ 101.298974][ T4137] EXT4-fs error (device loop1): ext4_map_blocks:744: inode #15: block 1803188595: comm syz.1.114: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 101.318858][ T4137] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 101.331975][ T4137] EXT4-fs (loop1): This should not happen!! Data will be lost [ 101.331975][ T4137] [ 101.605893][ T3882] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.016080][ T3882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.025845][ T3882] usb 2-1: New USB device found, idVendor=0499, idProduct=1058, bcdDevice=31.95 [ 102.035062][ T3882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.045323][ T3882] usb 2-1: config 0 descriptor?? [ 102.119834][ T3882] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 102.302215][ T3882] usb 2-1: USB disconnect, device number 3 [ 102.833159][ T3644] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 102.848208][ T3644] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 102.861235][ T3644] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #2: comm syz-executor: mark_inode_dirty error [ 102.891009][ T9] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm kworker/u4:0: Invalid block bitmap block 0 in block_group 0 [ 102.907991][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 102.921676][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 102.921676][ T9] [ 102.932994][ T3644] EXT4-fs (loop1): Inode 15 (ffff888070a6bc30): i_reserved_data_blocks (1) not cleared! [ 102.943485][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 132.517411][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.524122][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 180.675923][ T3657] Bluetooth: hci2: command 0x0406 tx timeout [ 180.675939][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 193.960359][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.966734][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 215.076173][ T27] INFO: task kworker/1:3:3633 blocked for more than 143 seconds. [ 215.084288][ T27] Not tainted 6.1.112-syzkaller #0 [ 215.090055][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 215.099552][ T27] task:kworker/1:3 state:D stack:21752 pid:3633 ppid:2 flags:0x00004000 [ 215.109706][ T27] Workqueue: events rfkill_global_led_trigger_worker [ 215.116534][ T27] Call Trace: [ 215.119826][ T27] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 215.122754][ T27] __schedule+0x143f/0x4570 [ 215.127328][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 215.132666][ T27] ? release_firmware_map_entry+0x186/0x186 [ 215.138631][ T27] ? print_irqtrace_events+0x210/0x210 [ 215.144119][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 215.149377][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 215.176542][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 215.181811][ T27] schedule+0xbf/0x180 [ 215.214573][ T27] schedule_preempt_disabled+0xf/0x20 [ 215.220116][ T27] __mutex_lock+0x6b9/0xd80 [ 215.224656][ T27] ? __mutex_lock+0x53c/0xd80 [ 215.229565][ T27] ? rfkill_global_led_trigger_worker+0x23/0xd0 [ 215.236919][ T27] ? mutex_lock_nested+0x10/0x10 [ 215.241876][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 215.247914][ T27] ? print_irqtrace_events+0x210/0x210 [ 215.253385][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 215.259335][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 215.264540][ T27] ? process_one_work+0x7a9/0x11d0 [ 215.269765][ T27] rfkill_global_led_trigger_worker+0x23/0xd0 [ 215.275882][ T27] ? process_one_work+0x7a9/0x11d0 [ 215.280987][ T27] process_one_work+0x8a9/0x11d0 [ 215.286692][ T27] ? worker_detach_from_pool+0x260/0x260 [ 215.292345][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 215.297953][ T27] ? kthread_data+0x4e/0xc0 [ 215.302874][ T27] ? wq_worker_running+0x97/0x190 [ 215.307960][ T27] worker_thread+0xa47/0x1200 [ 215.312662][ T27] ? release_firmware_map_entry+0x186/0x186 [ 215.318810][ T27] kthread+0x28d/0x320 [ 215.322947][ T27] ? worker_clr_flags+0x190/0x190 [ 215.328286][ T27] ? kthread_blkcg+0xd0/0xd0 [ 215.332897][ T27] ret_from_fork+0x1f/0x30 [ 215.337375][ T27] [ 215.340445][ T27] INFO: task syz.2.23:3831 blocked for more than 143 seconds. [ 215.347964][ T27] Not tainted 6.1.112-syzkaller #0 [ 215.353592][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 215.362273][ T27] task:syz.2.23 state:D stack:25832 pid:3831 ppid:3645 flags:0x00004004 [ 215.371507][ T27] Call Trace: [ 215.374773][ T27] [ 215.377738][ T27] __schedule+0x143f/0x4570 [ 215.382264][ T27] ? __mutex_lock+0x6b4/0xd80 [ 215.387014][ T27] ? release_firmware_map_entry+0x186/0x186 [ 215.392938][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 215.398747][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 215.404632][ T27] schedule+0xbf/0x180 [ 215.410548][ T27] schedule_preempt_disabled+0xf/0x20 [ 215.416053][ T27] __mutex_lock+0x6b9/0xd80 [ 215.420617][ T27] ? __mutex_lock+0x53c/0xd80 [ 215.425308][ T27] ? rfkill_unregister+0xcc/0x220 [ 215.430420][ T27] ? mutex_lock_nested+0x10/0x10 [ 215.435390][ T27] ? kobject_put+0x419/0x460 [ 215.440085][ T27] rfkill_unregister+0xcc/0x220 [ 215.444977][ T27] nfc_unregister_device+0x92/0x290 [ 215.450284][ T27] virtual_ncidev_close+0x55/0x90 [ 215.455347][ T27] ? virtual_ncidev_open+0xc0/0xc0 [ 215.460538][ T27] __fput+0x3f6/0x8d0 [ 215.464555][ T27] task_work_run+0x246/0x300 [ 215.469218][ T27] ? task_work_cancel+0x2e0/0x2e0 [ 215.474288][ T27] ? exit_to_user_mode_loop+0x39/0x100 [ 215.479803][ T27] exit_to_user_mode_loop+0xde/0x100 [ 215.485132][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 215.490988][ T27] syscall_exit_to_user_mode+0x60/0x270 [ 215.496748][ T27] do_syscall_64+0x47/0xb0 [ 215.501204][ T27] ? clear_bhb_loop+0x45/0xa0 [ 215.506731][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.512677][ T27] RIP: 0033:0x7f8e69d7dff9 [ 215.517480][ T27] RSP: 002b:00007ffc0867ce08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 215.526252][ T27] RAX: 0000000000000000 RBX: 00007f8e69f37a80 RCX: 00007f8e69d7dff9 [ 215.534313][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 215.542370][ T27] RBP: 00007f8e69f37a80 R08: 0000000000000006 R09: 00007ffc0867d0ff [ 215.550482][ T27] R10: 00000000005f2d68 R11: 0000000000000246 R12: 0000000000010f26 [ 215.558776][ T27] R13: 00007ffc0867cf10 R14: 0000000000000032 R15: ffffffffffffffff [ 215.566875][ T27] [ 215.569949][ T27] INFO: task syz.4.29:3853 blocked for more than 143 seconds. [ 215.578452][ T27] Not tainted 6.1.112-syzkaller #0 [ 215.584100][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 215.592847][ T27] task:syz.4.29 state:D stack:26160 pid:3853 ppid:3650 flags:0x00004004 [ 215.602148][ T27] Call Trace: [ 215.605436][ T27] [ 215.609124][ T27] __schedule+0x143f/0x4570 [ 215.613692][ T27] ? __mutex_lock+0x6b4/0xd80 [ 215.618434][ T27] ? release_firmware_map_entry+0x186/0x186 [ 215.624350][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 215.630671][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 215.636187][ T27] schedule+0xbf/0x180 [ 215.640283][ T27] schedule_preempt_disabled+0xf/0x20 [ 215.645663][ T27] __mutex_lock+0x6b9/0xd80 [ 215.650253][ T27] ? __mutex_lock+0x53c/0xd80 [ 215.654941][ T27] ? nfc_rfkill_set_block+0x4c/0x2f0 [ 215.660800][ T27] ? mutex_lock_nested+0x10/0x10 [ 215.665829][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 215.671086][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 215.676340][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 215.682268][ T27] ? _raw_spin_unlock+0x40/0x40 [ 215.687216][ T27] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 215.692897][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 215.698151][ T27] nfc_rfkill_set_block+0x4c/0x2f0 [ 215.703322][ T27] ? nfc_unregister_device+0x290/0x290 [ 215.708864][ T27] rfkill_set_block+0x1e7/0x430 [ 215.714310][ T27] rfkill_fop_write+0x5b7/0x790 [ 215.719283][ T27] ? rfkill_fop_read+0x470/0x470 [ 215.724277][ T27] ? fsnotify_perm+0x64/0x590 [ 215.729035][ T27] ? security_file_permission+0x75/0xa0 [ 215.734624][ T27] ? rfkill_fop_read+0x470/0x470 [ 215.739841][ T27] vfs_write+0x2d9/0xbc0 [ 215.744115][ T27] ? do_sys_openat2+0x1f9/0x4f0 [ 215.749158][ T27] ? file_end_write+0x250/0x250 [ 215.754037][ T27] ? __fget_files+0x28/0x4a0 [ 215.758895][ T27] ? __fget_files+0x435/0x4a0 [ 215.763608][ T27] ? __fget_files+0x28/0x4a0 [ 215.768533][ T27] ? __fdget_pos+0x1db/0x360 [ 215.773139][ T27] ? ksys_write+0x77/0x2c0 [ 215.777648][ T27] ksys_write+0x19c/0x2c0 [ 215.782027][ T27] ? print_irqtrace_events+0x210/0x210 [ 215.787546][ T27] ? __ia32_sys_read+0x80/0x80 [ 215.792498][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 215.798729][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 215.803949][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 215.810013][ T27] do_syscall_64+0x3b/0xb0 [ 215.814852][ T27] ? clear_bhb_loop+0x45/0xa0 [ 215.819645][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.825571][ T27] RIP: 0033:0x7fe61df7dff9 [ 215.830040][ T27] RSP: 002b:00007fe61ddbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 215.839076][ T27] RAX: ffffffffffffffda RBX: 00007fe61e136130 RCX: 00007fe61df7dff9 [ 215.847138][ T27] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000005 [ 215.855136][ T27] RBP: 00007fe61dff0296 R08: 0000000000000000 R09: 0000000000000000 [ 215.863135][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.871923][ T27] R13: 0000000000000000 R14: 00007fe61e136130 R15: 00007fffa2b17548 [ 215.880561][ T27] [ 215.883679][ T27] [ 215.883679][ T27] Showing all locks held in the system: [ 215.891798][ T27] 1 lock held by rcu_tasks_kthre/12: [ 215.897189][ T27] #0: ffffffff8d32b1d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 215.907714][ T27] 1 lock held by rcu_tasks_trace/13: [ 215.913020][ T27] #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 215.924514][ T27] 1 lock held by khungtaskd/27: [ 215.929431][ T27] #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 215.939369][ T27] 2 locks held by getty/3402: [ 215.944054][ T27] #0: ffff88802e193098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 215.954131][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 215.965678][ T27] 3 locks held by kworker/1:3/3633: [ 215.970968][ T27] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 215.981423][ T27] #1: ffffc90003bffd20 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 215.994382][ T27] #2: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x23/0xd0 [ 216.005819][ T27] 1 lock held by syz-executor/3642: [ 216.011050][ T27] #0: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 [ 216.021868][ T27] 1 lock held by syz-executor/3644: [ 216.027128][ T27] #0: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 [ 216.037321][ T27] 2 locks held by syz.2.23/3831: [ 216.042270][ T27] #0: ffff88805aae0100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x5f/0x290 [ 216.052104][ T27] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 [ 216.062617][ T27] 2 locks held by syz.4.29/3853: [ 216.068865][ T27] #0: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 216.079083][ T27] #1: ffff88805aae0100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x4c/0x2f0 [ 216.088835][ T27] 2 locks held by syz-executor/3963: [ 216.094177][ T27] #0: ffff88807a51e118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 216.104298][ T27] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 216.114301][ T27] 2 locks held by syz-executor/3971: [ 216.119643][ T27] #0: ffff88802dec7118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 216.130546][ T27] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 216.140629][ T27] 1 lock held by syz.3.84/4040: [ 216.145489][ T27] #0: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 [ 216.155656][ T27] 2 locks held by syz-executor/4060: [ 216.161339][ T27] #0: ffff888076984918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 216.171422][ T27] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 216.182163][ T27] 2 locks held by syz-executor/4123: [ 216.187506][ T27] #0: ffff888073ea0918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 216.197705][ T27] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 216.210514][ T27] 2 locks held by syz-executor/4144: [ 216.215923][ T27] #0: ffff888027f4c118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 216.226660][ T27] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 216.236691][ T27] 2 locks held by syz-executor/4147: [ 216.241990][ T27] #0: ffff8880719be118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 216.252149][ T27] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 216.262607][ T27] 2 locks held by syz-executor/4150: [ 216.267955][ T27] #0: ffff88807f028918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 216.278281][ T27] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 216.288852][ T27] 2 locks held by syz-executor/4152: [ 216.294175][ T27] #0: ffff88807c6dc118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 216.304530][ T27] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 216.314586][ T27] 2 locks held by syz-executor/4155: [ 216.319897][ T27] #0: ffff88804e2d0918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 216.330757][ T27] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 216.340796][ T27] 2 locks held by syz-executor/4158: [ 216.346133][ T27] #0: ffff888059588118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 216.356263][ T27] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 216.366313][ T27] 2 locks held by syz-executor/4161: [ 216.371620][ T27] #0: ffff88805c01e118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 216.381693][ T27] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 216.391686][ T27] 2 locks held by syz-executor/4164: [ 216.397225][ T27] #0: ffff88804d8d0118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 216.407549][ T27] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 216.417576][ T27] 2 locks held by syz-executor/4166: [ 216.422901][ T27] #0: ffff888074c5e918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x700 [ 216.433486][ T27] #1: ffffffff8e7aa388 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x30/0x880 [ 216.443509][ T27] [ 216.445899][ T27] ============================================= [ 216.445899][ T27] [ 216.454334][ T27] NMI backtrace for cpu 0 [ 216.458662][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.112-syzkaller #0 [ 216.466553][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.476601][ T27] Call Trace: [ 216.479875][ T27] [ 216.482797][ T27] dump_stack_lvl+0x1e3/0x2cb [ 216.487474][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 216.492927][ T27] ? panic+0x764/0x764 [ 216.496985][ T27] ? vprintk_emit+0x622/0x740 [ 216.501676][ T27] ? printk_sprint+0x490/0x490 [ 216.506438][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 216.511550][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 216.516487][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 216.522634][ T27] ? _printk+0xd1/0x111 [ 216.526784][ T27] ? panic+0x764/0x764 [ 216.530856][ T27] ? __wake_up_klogd+0xcc/0x100 [ 216.535710][ T27] ? panic+0x764/0x764 [ 216.539790][ T27] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 216.545869][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 216.551948][ T27] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 216.557945][ T27] watchdog+0xf88/0xfd0 [ 216.562122][ T27] ? watchdog+0x1f8/0xfd0 [ 216.566451][ T27] kthread+0x28d/0x320 [ 216.570515][ T27] ? hungtask_pm_notify+0x50/0x50 [ 216.575545][ T27] ? kthread_blkcg+0xd0/0xd0 [ 216.580135][ T27] ret_from_fork+0x1f/0x30 [ 216.584573][ T27] [ 216.588317][ T27] Sending NMI from CPU 0 to CPUs 1: [ 216.593757][ C1] NMI backtrace for cpu 1 [ 216.593766][ C1] CPU: 1 PID: 3075 Comm: syslogd Not tainted 6.1.112-syzkaller #0 [ 216.593780][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.593788][ C1] RIP: 0010:unwind_next_frame+0x474/0x2220 [ 216.593808][ C1] Code: 24 10 48 01 c5 48 89 2d 0a 78 d7 0e 48 bf 00 00 00 00 00 fc ff df 0f 85 d7 00 00 00 e9 ad 00 00 00 4d 89 f4 4d 89 f7 48 89 e8 <4c> 29 f8 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 49 [ 216.593827][ C1] RSP: 0018:ffffc90002f6f3a0 EFLAGS: 00000216 [ 216.593840][ C1] RAX: ffffffff8f0dca24 RBX: ffffffff8fd6c7f0 RCX: ffffffff8fac2b26 [ 216.593850][ C1] RDX: ffffffff8fac2b0e RSI: ffffffff8ac000cc RDI: dffffc0000000000 [ 216.593861][ C1] RBP: ffffffff8f0dca24 R08: 0000000000000004 R09: ffffc90002f6f570 [ 216.593871][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8f0dca18 [ 216.593881][ C1] R13: ffffffff8ac000cb R14: ffffffff8f0dca18 R15: ffffffff8f0dca18 [ 216.593892][ C1] FS: 00007fa79112a380(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 216.593905][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.593914][ C1] CR2: 00007f823613cf24 CR3: 000000007d560000 CR4: 00000000003506e0 [ 216.593927][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 216.593935][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 216.593943][ C1] Call Trace: [ 216.593947][ C1] [ 216.593952][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 216.593967][ C1] ? read_lock_is_recursive+0x10/0x10 [ 216.593990][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 216.594005][ C1] ? nmi_handle+0x25/0x440 [ 216.594033][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 216.594056][ C1] ? nmi_handle+0x12e/0x440 [ 216.594077][ C1] ? nmi_handle+0x25/0x440 [ 216.594099][ C1] ? unwind_next_frame+0x474/0x2220 [ 216.594114][ C1] ? default_do_nmi+0x62/0x150 [ 216.594129][ C1] ? exc_nmi+0xa8/0x100 [ 216.594143][ C1] ? end_repeat_nmi+0x16/0x31 [ 216.594166][ C1] ? entry_SYSCALL_64_after_hwframe+0x67/0xd2 [ 216.594189][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.594215][ C1] ? unwind_next_frame+0x474/0x2220 [ 216.594231][ C1] ? unwind_next_frame+0x474/0x2220 [ 216.594248][ C1] ? unwind_next_frame+0x474/0x2220 [ 216.594263][ C1] [ 216.594267][ C1] [ 216.594277][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.594299][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 216.594320][ C1] arch_stack_walk+0x10d/0x140 [ 216.594338][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.594362][ C1] stack_trace_save+0x113/0x1c0 [ 216.594382][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 216.594407][ C1] ? skb_release_data+0x5de/0x7a0 [ 216.594430][ C1] kasan_set_track+0x4b/0x70 [ 216.594452][ C1] ? kasan_set_track+0x4b/0x70 [ 216.594472][ C1] ? kasan_save_free_info+0x27/0x40 [ 216.594487][ C1] ? ____kasan_slab_free+0xd6/0x120 [ 216.594499][ C1] ? __kmem_cache_free+0x25c/0x3c0 [ 216.594516][ C1] ? skb_release_data+0x5de/0x7a0 [ 216.594537][ C1] ? consume_skb+0xa3/0x140 [ 216.594557][ C1] ? __unix_dgram_recvmsg+0xcb3/0x1260 [ 216.594571][ C1] ? sock_read_iter+0x3b2/0x4b0 [ 216.594585][ C1] ? vfs_read+0x88d/0xbf0 [ 216.594597][ C1] ? ksys_read+0x19c/0x2c0 [ 216.594609][ C1] ? do_syscall_64+0x3b/0xb0 [ 216.594620][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.594661][ C1] kasan_save_free_info+0x27/0x40 [ 216.594676][ C1] ____kasan_slab_free+0xd6/0x120 [ 216.594691][ C1] __kmem_cache_free+0x25c/0x3c0 [ 216.594709][ C1] ? skb_release_data+0x5de/0x7a0 [ 216.594732][ C1] skb_release_data+0x5de/0x7a0 [ 216.594758][ C1] consume_skb+0xa3/0x140 [ 216.594780][ C1] __unix_dgram_recvmsg+0xcb3/0x1260 [ 216.594794][ C1] ? aa_file_perm+0x12c/0xf60 [ 216.594819][ C1] ? aa_sk_perm+0x92d/0xa60 [ 216.594834][ C1] ? unix_unhash+0x10/0x10 [ 216.594849][ C1] ? aa_af_perm+0x350/0x350 [ 216.594862][ C1] ? aa_file_perm+0x3e3/0xf60 [ 216.594881][ C1] ? generic_file_write_iter+0xb6/0x310 [ 216.594897][ C1] ? aa_file_perm+0x12c/0xf60 [ 216.594919][ C1] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 216.594937][ C1] ? security_socket_recvmsg+0x86/0xb0 [ 216.594956][ C1] ? unix_dgram_recvmsg+0xaf/0xd0 [ 216.594972][ C1] ? unix_dgram_sendmsg+0x2050/0x2050 [ 216.594989][ C1] sock_read_iter+0x3b2/0x4b0 [ 216.595006][ C1] ? kernel_sock_ip_overhead+0x590/0x590 [ 216.595026][ C1] ? common_file_perm+0x17d/0x1d0 [ 216.595050][ C1] vfs_read+0x88d/0xbf0 [ 216.595067][ C1] ? kernel_read+0x1f0/0x1f0 [ 216.595082][ C1] ? __rseq_handle_notify_resume+0x3b7/0x1500 [ 216.595108][ C1] ? __fdget_pos+0x1db/0x360 [ 216.595123][ C1] ksys_read+0x19c/0x2c0 [ 216.595136][ C1] ? print_irqtrace_events+0x210/0x210 [ 216.595158][ C1] ? vfs_write+0xbc0/0xbc0 [ 216.595172][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 216.595189][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 216.595210][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 216.595229][ C1] do_syscall_64+0x3b/0xb0 [ 216.595241][ C1] ? clear_bhb_loop+0x45/0xa0 [ 216.595262][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.595282][ C1] RIP: 0033:0x7fa79127eb6a [ 216.595293][ C1] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 [ 216.595304][ C1] RSP: 002b:00007ffc14b408b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 216.595317][ C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa79127eb6a [ 216.595327][ C1] RDX: 00000000000000ff RSI: 00005555993ba950 RDI: 0000000000000000 [ 216.595336][ C1] RBP: 00005555993ba910 R08: 0000000000000001 R09: 0000000000000000 [ 216.595344][ C1] R10: 00007fa79141d3a3 R11: 0000000000000246 R12: 00005555993ba99c [ 216.595354][ C1] R13: 00005555993ba950 R14: 0000000000000000 R15: 00007fa79145ba80 [ 216.595370][ C1] [ 216.602500][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 216.602512][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.112-syzkaller #0 [ 216.602532][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.602543][ T27] Call Trace: [ 216.602549][ T27] [ 216.602557][ T27] dump_stack_lvl+0x1e3/0x2cb [ 216.602592][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 216.602622][ T27] ? panic+0x764/0x764 [ 216.602644][ T27] ? llist_add_batch+0x160/0x1d0 [ 216.602677][ T27] ? vscnprintf+0x59/0x80 [ 216.602703][ T27] panic+0x318/0x764 [ 216.602726][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 216.602746][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 216.602773][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 216.602791][ T27] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 216.602814][ T27] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 216.602836][ T27] watchdog+0xfc7/0xfd0 [ 216.602866][ T27] ? watchdog+0x1f8/0xfd0 [ 216.602894][ T27] kthread+0x28d/0x320 [ 216.602911][ T27] ? hungtask_pm_notify+0x50/0x50 [ 216.602935][ T27] ? kthread_blkcg+0xd0/0xd0 [ 216.602954][ T27] ret_from_fork+0x1f/0x30 [ 216.602997][ T27] [ 216.608861][ T27] Kernel Offset: disabled [ 217.289962][ T27] Rebooting in 86400 seconds..