last executing test programs: 2m40.325558872s ago: executing program 0 (id=345): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x42082, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000100)={0x20}, 0xfdef) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000340)=0x1, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000c63289eec99cc0c210210eb176ffcb365d1a98c5a287642d6daa6177323b1a0458b5aba33bef60cb0335210874efe02c05b2aedfca25fa959c05c7ce3926e0312ab507c611b372fea4bc709a2348137c7655bf811a"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}}}}) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xfffffffffffffffe, 0x204001) ioctl$USBDEVFS_RELEASEINTERFACE(r7, 0x80045510, &(0x7f0000000100)=0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r9, &(0x7f0000000000)=0x700, 0x12) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 2m37.896472784s ago: executing program 0 (id=348): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 2m35.515998465s ago: executing program 0 (id=349): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) 2m33.709006073s ago: executing program 0 (id=352): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x20000000005) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_emit_ethernet(0xa2, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaa10aaaaaaaaaaaa86dc6092c01f006c2f00fe8000000000000000000000000000bb00000000000000000000ffff000000002420880b000000000000002113565ccefe5d31f29e248840f7360be63033d565b8cfe3af99d096c6022c5d97cf495bfa81adb370bf61883a57f2000086dd080088be00000004100000000100000000000000080022eb10000000200000000200000000000000000000000800655800000000"], 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e06f40908"], 0xa) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, 0x0) keyctl$join(0x1, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x6, 0x8b14c6a5df82cbe, 0x0, {0x0, r6}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x411}}}, 0x7) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000040), 0x4) 2m32.467904679s ago: executing program 0 (id=355): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000200), 0x84, 0x46c, &(0x7f0000000900)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18003800"/24], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x4000010) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, 0x0, 0x15) dup(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="020a010002000000fdffffff000000002d9e82ef3fcd145cd65b66b3c5da594fad953794a96748e0e7d0ee0090b3bb29f9f493079908debd4c3159bc9800a94a4662638eb315d48d874f0573d625d42c34c06e79f009a16814028a8a89ec9c189e4e6e2b2b233ab90617ee217fa1609eefbda6f2cf4b26849f23f4a1e431a60f753b53e615ae2160d76bf42c172ac9c5240b89b8dafb81f4b470bacd2e976de1b8f1c41cb70dfc2864ef260b483a9be2ac8336f66f"], 0x10}}, 0x0) execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000082000005c578e2c7080bc", @ANYRES32, @ANYBLOB="d40e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r9}, 0x4) 2m29.543019064s ago: executing program 0 (id=359): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x80000000, 0x8000000002}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x3, &(0x7f0000000300)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2m14.399921046s ago: executing program 32 (id=359): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x80000000, 0x8000000002}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x3, &(0x7f0000000300)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 8.61005908s ago: executing program 4 (id=1148): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(r2) 8.301985451s ago: executing program 3 (id=1152): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r0}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) 8.091979752s ago: executing program 4 (id=1153): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB="00005d655f2ea8"], 0x48) 7.911455333s ago: executing program 3 (id=1156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 7.754867443s ago: executing program 4 (id=1158): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 7.751505214s ago: executing program 2 (id=1159): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 7.539893615s ago: executing program 3 (id=1160): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000fe80000000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62c67a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedfb9f64d81584a2e85ab4f6ec718b02d78f2ebf04e6b3b94610a21616181629a03c3dc0bf05e0a71f887833b81db7a10bc53259cb80716f6804934a411d424c1db98d454be1adb2776fdbb92b299d3b80af6987a871b4549fdb4c8297ee31ad925c8b0fb1a9d2589b08ed52602cbc26b56df71201bc4ea8621c56f33d251c1d4589af2dcd78fbb4e34bde02cb3920a30cee9489ee72c3e19304c16c2110e1839712d484b80abe77786a7e2ba834874a4e16b93dd07297554a06c2ad2c906f8ebb1db8730df096709184728d48f0a806696bd0d4b12d0064b933d9675353dae77fe8419451f85da63be78b70ca2a84a77f572d9f289d4313e6f6039fe756ac13a5d08838315dff44cda433cc7bc6b77449f8c", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 7.454257945s ago: executing program 2 (id=1162): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102030400fefdffffff000200875a65969ff57b00"/48], 0xfdef) 7.379956625s ago: executing program 4 (id=1163): socketpair(0x10, 0x3, 0x10, &(0x7f0000003f80)) 7.241589846s ago: executing program 2 (id=1164): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="00000000d3ec66ecc053c543da2e2e", @ANYRES32=r0], 0x48) 7.136041686s ago: executing program 3 (id=1166): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 7.135919086s ago: executing program 4 (id=1167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 7.019070667s ago: executing program 2 (id=1168): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 6.695870798s ago: executing program 1 (id=1170): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b240201064dbd81"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0xa0000004}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000eb740b07f5e90d61efcaa9b738867241491cf4a825db6b102c790cbef20f4c9ca280c4301193e805903dc45878203da9df4ff17daaee8d7554fe1e8f6c6cab531f8dcdc1588d7cda37e54d083eacdac2d5a28c96e7279a779fe202f29532ec4c66b96a905bb3af1125800377c265", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000afed2546546f246d6ab3bd005f72b3fc3b75153e18861d7727cb5ebbea2c8908a7766cba7b7e90a23c6fd3a0e21b46670294796bbd74b3d0afed6bc50fdc59b7be24fc4f5703414f8babe646ede5a68a479d12804800bcd150"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x301500, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@bsdgroups}, {@resuid}, {@dioread_nolock}, {@usrjquota}, {@discard}, {@jqfmt_vfsv1}]}, 0x1, 0x564, &(0x7f0000002bc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a84e60014040000000000000000000000fffffffffffffe8000000000000000000000000000aa"], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000280), 0x208e24b) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x6, 0x3, 0x9, 0x5}, {0x0, 0x0, 0x2, 0x9}, {0x6, 0x9, 0xf, 0x6}, {0x5c, 0x4, 0x7, 0x1}, {0x3, 0x0, 0x9, 0x8}, {0x6, 0x9, 0xff, 0x9}, {0x7, 0xd, 0x8, 0x5}, {0x9, 0x80, 0x10, 0x4}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001680)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00038d0000008d03"]}, 0x0) 6.695685598s ago: executing program 3 (id=1171): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x10000}}) 6.452101489s ago: executing program 2 (id=1172): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff"], 0x5000) 6.37626565s ago: executing program 5 (id=1173): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="b4050000000000006110520000000000070000000000000095000044c51cb05200000000008ef3a960a080406dee7b83fe63afe8b0ba84dfbf4d2758f39602b5a8b6d6a0da46e5e4878057e43acf9d2457b5bd451ddc28a4d7f38da84e44ea72c7c7fc08cacd88abf1d63c85d98dd4f95eb30ae722f6ec83f9332c88d6de56dec585d98f09c03c3ecb29732284bd8539ed4b844eed8340d9f6db0cb60200000087ad14d45ce0b33785fb4cc1e014734133907b009ec7c9bda01c25edec69771acead61e0e7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000740)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 6.30006835s ago: executing program 3 (id=1174): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) readahead(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 5.350481914s ago: executing program 5 (id=1175): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0x41, 0x2f5, &(0x7f0000000b40)="$eJzs3E1rE10UwPGTNG3SlDZZPDygIr3oRjdDG/dCkBbEgFIb8QWEaTPRkDEJmVCJiI0rt34NQ5fdSEHrB+jGnSs34qYbwU1BaySZiZ20kzaNttOS/w/KPZ17T+blTsKZgZnNu6+f5LOWltUrEowoCYrUZFsk3owci+MiEpCAtJoRe2HEbmpyeez7p/NKRJKp1MycUrPJ+SsJpdTE5Lunz1curFfG7qxOrIVlI/5w81viy8b/G2c2f80/zlkqZ6lCsaJ0tVD8XNEXTENlclZeU+qWaeiWoXIFyyjb/cWKs1oplapKL2TGo6WyYVlKL1RV3qiqSlFVylWlP9JzBaVpmhqPyuDYmmw1pcPmpetzc3qyz5Uu9pmHf259395yuf3l+dDo7EnXj26bAADASdWu/8Pu+n+rs/4POG3QXf87alJr1v+3792/0UP9vzbSpf4v7qn/nesL6ejPmkXq/35F9i5K14f6r/9xSpRHReorsvONfvlgZaoVUP8DAAAAAAAAAAAAAAAAAAAAAHAabDUasUajEWu2QbHj5l/YeWCk/b/f24mj4Z5/e65DzVln/geE68G9iIj5aim9lLZbuz+ZlZyYYsiUxORn63xw2PHs9dRMQLXE5b257OQvL6WHOvOnJSZx7/xpO1915g9L1J2fkJj8552f8MwfkUsXXfmaxOTjohTFlEzrvN7JfzGt1LWbqV35o5LxeGIOAAAAAIDTSFN/eF6/a1q3fju/l/sDU57X5yE5G/J33wEAAAAAGBRW9VleN02jfGDwxsk4cPBXZ2DPn/y3wfAh9qLX4G0rCHT75MihDt0RBO13Mu87eNQZ1NHl3J5Z9nHj+w0mfVl7qHnSu5ZEuw6eGPI64PsFYeetzM0l241dY66unvvh3wE/1p8hAAAAAMdgp+j3e0sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhcx/E6Mb/3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpfgcAAP//06IWPQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) 5.057726456s ago: executing program 5 (id=1176): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) 4.15218452s ago: executing program 1 (id=1177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x300) 4.066490471s ago: executing program 5 (id=1178): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x541, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f0000005180)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='8'], 0x38}}], 0x2, 0x0) dup3(r0, r1, 0x0) 3.887488181s ago: executing program 5 (id=1179): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) userfaultfd(0x800) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) 3.576009483s ago: executing program 1 (id=1180): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) 2.699899067s ago: executing program 5 (id=1181): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000280)={0x40, 0xc, 0x7, {0x7, 0x22, "8200279ea9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.608178998s ago: executing program 1 (id=1182): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) 1.996036141s ago: executing program 1 (id=1183): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000240), 0x1, 0x51c, &(0x7f0000001500)="$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") inotify_init1(0x800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 1.346299154s ago: executing program 1 (id=1184): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000002c0)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000300)='./bus\x00', 0x19) 48.93329ms ago: executing program 2 (id=1185): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000110001"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 0s ago: executing program 4 (id=1186): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = gettid() r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) sendto$inet6(r1, &(0x7f0000001480)="7800000018002507b9199b02ffff48000203be0402d6d8935a06022509b15c6869a92393eb253016a4160d0a0000000d0085a268d0bf46d32345653600648d040012000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a0000", 0x62, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fgetxattr(r1, &(0x7f00000001c0)=@known='trusted.overlay.nlink\x00', &(0x7f0000000280)=""/133, 0x85) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = eventfd(0x8800a6) write$eventfd(r4, &(0x7f0000000000)=0xfffffffffffffff7, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.63' (ED25519) to the list of known hosts. [ 66.343393][ T4238] cgroup: Unknown subsys name 'net' [ 66.474723][ T4238] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.950371][ T4238] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.999515][ T4254] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.007833][ T4254] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.024447][ T4264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.032267][ T4264] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.040999][ T4264] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.050412][ T4264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.058271][ T4264] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.058911][ T4267] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.065993][ T4264] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.073568][ T4267] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.086657][ T4267] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.089634][ T4264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.094646][ T4267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.102425][ T4264] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.108678][ T4267] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.115695][ T4264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.123499][ T4267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.129867][ T4264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.136589][ T4267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.145423][ T4264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.152195][ T4267] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.168481][ T4264] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.176104][ T4264] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.183964][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.191254][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.191463][ T4268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.207739][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.227942][ T4252] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.240756][ T4269] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.248127][ T4269] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.547783][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 70.699917][ T4257] chnl_net:caif_netlink_parms(): no params data found [ 70.758960][ T4262] chnl_net:caif_netlink_parms(): no params data found [ 70.823215][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 70.844799][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.853335][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.862361][ T4249] device bridge_slave_0 entered promiscuous mode [ 70.889408][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.896543][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.905168][ T4249] device bridge_slave_1 entered promiscuous mode [ 70.941712][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.949187][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.957452][ T4257] device bridge_slave_0 entered promiscuous mode [ 70.990018][ T4260] chnl_net:caif_netlink_parms(): no params data found [ 71.000128][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.007541][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.015622][ T4257] device bridge_slave_1 entered promiscuous mode [ 71.052830][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.088421][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.123786][ T4257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.143200][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.150448][ T4262] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.160009][ T4262] device bridge_slave_0 entered promiscuous mode [ 71.181150][ T4257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.202628][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.210062][ T4262] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.219056][ T4262] device bridge_slave_1 entered promiscuous mode [ 71.226208][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.233440][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.241861][ T4250] device bridge_slave_0 entered promiscuous mode [ 71.273929][ T4249] team0: Port device team_slave_0 added [ 71.284163][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.286650][ T4249] team0: Port device team_slave_1 added [ 71.290811][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.316010][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.323358][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.331914][ T4250] device bridge_slave_1 entered promiscuous mode [ 71.341440][ T4257] team0: Port device team_slave_0 added [ 71.382028][ T4257] team0: Port device team_slave_1 added [ 71.398145][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.405119][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.431539][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.445196][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.452230][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.478506][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.492004][ T4262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.518572][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.525808][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.534406][ T4260] device bridge_slave_0 entered promiscuous mode [ 71.546229][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.553880][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.562565][ T4260] device bridge_slave_1 entered promiscuous mode [ 71.571137][ T4262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.582258][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.628320][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.646595][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.654033][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.680679][ T4257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.725958][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.733261][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.759711][ T4257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.773045][ T4260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.784876][ T4262] team0: Port device team_slave_0 added [ 71.802898][ T4250] team0: Port device team_slave_0 added [ 71.811166][ T4250] team0: Port device team_slave_1 added [ 71.822529][ T4260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.833838][ T4262] team0: Port device team_slave_1 added [ 71.851497][ T4249] device hsr_slave_0 entered promiscuous mode [ 71.858722][ T4249] device hsr_slave_1 entered promiscuous mode [ 71.899200][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.906181][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.932796][ T4262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.948818][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.955801][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.981951][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.006172][ T4260] team0: Port device team_slave_0 added [ 72.012688][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.020063][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.046262][ T4262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.065738][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.072822][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.099308][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.121983][ T4260] team0: Port device team_slave_1 added [ 72.175885][ T4257] device hsr_slave_0 entered promiscuous mode [ 72.182817][ T4257] device hsr_slave_1 entered promiscuous mode [ 72.190884][ T4257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.199091][ T4257] Cannot create hsr debugfs directory [ 72.229746][ T4250] device hsr_slave_0 entered promiscuous mode [ 72.236592][ T4250] device hsr_slave_1 entered promiscuous mode [ 72.243171][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 72.249977][ T4265] Bluetooth: hci2: command 0x0409 tx timeout [ 72.256637][ T4269] Bluetooth: hci1: command 0x0409 tx timeout [ 72.260140][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.271966][ T4250] Cannot create hsr debugfs directory [ 72.278860][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.285821][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.311881][ T4260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.322579][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 72.328699][ T4269] Bluetooth: hci3: command 0x0409 tx timeout [ 72.367706][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.374689][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.401617][ T4260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.451137][ T4262] device hsr_slave_0 entered promiscuous mode [ 72.458516][ T4262] device hsr_slave_1 entered promiscuous mode [ 72.465123][ T4262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.473301][ T4262] Cannot create hsr debugfs directory [ 72.597943][ T4260] device hsr_slave_0 entered promiscuous mode [ 72.604765][ T4260] device hsr_slave_1 entered promiscuous mode [ 72.611478][ T4260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.619533][ T4260] Cannot create hsr debugfs directory [ 72.840388][ T4249] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.856103][ T4249] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.878527][ T4249] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.892955][ T4249] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.956548][ T4262] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.975161][ T4262] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.985543][ T4262] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.003398][ T4262] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.061001][ T4257] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.073161][ T4257] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.119476][ T4257] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.129590][ T4257] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.153782][ T4250] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.167941][ T4250] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.180467][ T4250] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.195255][ T4250] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.221151][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.281667][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.292391][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.309656][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.329220][ T4260] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.358601][ T4260] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.370604][ T4260] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.381893][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.391463][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.401678][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.409121][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.418494][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.430395][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.439348][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.446441][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.454270][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.471950][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.480652][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.489963][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.502631][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.527088][ T4260] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.543901][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.575540][ T4262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.609753][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.619884][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.631623][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.641685][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.658013][ T4262] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.680627][ T4249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.695917][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.704979][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.713943][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.723125][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.746342][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.765365][ T4257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.781606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.790858][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.802354][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.809547][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.818393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.830009][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.839313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.849812][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.856973][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.888975][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.902550][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.933470][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.941904][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.952611][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.969941][ T4257] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.989261][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.012785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.023708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.041663][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.048893][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.063728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.072788][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.090626][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.097783][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.106027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.115143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.126687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.136324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.145517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.188733][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.199120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.208260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.216788][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.223877][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.233001][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.244085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.254652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.264136][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.271292][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.279035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.288134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.296624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.305461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.314757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.317757][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 74.322892][ T4269] Bluetooth: hci0: command 0x041b tx timeout [ 74.328726][ T4265] Bluetooth: hci1: command 0x041b tx timeout [ 74.337232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.348747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.356208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.365373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.374292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.382547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.391812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.406876][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 74.413066][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 74.414385][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.428260][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.440587][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.454406][ T4250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.467128][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.502599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.513703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.524038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.534443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.543461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.553897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.563281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.572084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.581292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.590157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.598629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.615509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.624354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.638473][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.670928][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.682817][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.692440][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.702709][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.731448][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.749856][ T4260] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.764103][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.777812][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.823579][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.839907][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.857861][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.870204][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.886484][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.893760][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.908659][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.919225][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.929025][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.936654][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.947604][ T4249] device veth0_vlan entered promiscuous mode [ 74.958556][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.978173][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.012844][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.034185][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.093941][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.104928][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.122677][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.135758][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.153329][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.177349][ T4249] device veth1_vlan entered promiscuous mode [ 75.206464][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.221452][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.234323][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.247554][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.256401][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.272826][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.298616][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.311226][ T4260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.322660][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.331752][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.341763][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.350854][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.358751][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.383743][ T4262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.403576][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.412174][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.421340][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.436085][ T4249] device veth0_macvtap entered promiscuous mode [ 75.454365][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.463485][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.473775][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.497438][ T4249] device veth1_macvtap entered promiscuous mode [ 75.506701][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.524912][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.539837][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.552414][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.594669][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.642971][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.658795][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.672093][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.681592][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.697956][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.711608][ T4250] device veth0_vlan entered promiscuous mode [ 75.722683][ T4262] device veth0_vlan entered promiscuous mode [ 75.735129][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.751621][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.771531][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.783522][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.799645][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.818913][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.838562][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.869047][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.878195][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.886225][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.903866][ T4249] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.913310][ T4249] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.923701][ T4249] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.932605][ T4249] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.951302][ T4262] device veth1_vlan entered promiscuous mode [ 75.973491][ T4250] device veth1_vlan entered promiscuous mode [ 76.025084][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.057881][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.067573][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.075968][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.094397][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.104229][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.112067][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.120111][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.129304][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.152613][ T4250] device veth0_macvtap entered promiscuous mode [ 76.164986][ T4250] device veth1_macvtap entered promiscuous mode [ 76.174897][ T4262] device veth0_macvtap entered promiscuous mode [ 76.193574][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.202695][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.214748][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.223816][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.236647][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.278983][ T4262] device veth1_macvtap entered promiscuous mode [ 76.300475][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.311181][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.323508][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.342259][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.350769][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.361625][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.372447][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.381984][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.391390][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.397532][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 76.404495][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.405468][ T4265] Bluetooth: hci2: command 0x040f tx timeout [ 76.417138][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 76.448274][ T4257] device veth0_vlan entered promiscuous mode [ 76.461724][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.475550][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.485603][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 76.485643][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 76.500701][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.511926][ T4250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.521958][ T4250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.530902][ T4250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.539922][ T4250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.553815][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.564042][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.573246][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.582751][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.592038][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.601358][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.622205][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.633776][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.643831][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.654433][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.665791][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.678331][ T4257] device veth1_vlan entered promiscuous mode [ 76.690878][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.705934][ T4260] device veth0_vlan entered promiscuous mode [ 76.712397][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.724924][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.734234][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.744096][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.753042][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.762172][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.770970][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.780535][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.788773][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.830834][ T4260] device veth1_vlan entered promiscuous mode [ 76.843143][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.855639][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.867655][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.878686][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.896383][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.957362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.966105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.981617][ T4262] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.990829][ T4262] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.999870][ T4262] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.008802][ T4262] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.068003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.076659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.085739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.095000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.105349][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.117361][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.128466][ T4260] device veth0_macvtap entered promiscuous mode [ 77.144751][ T4257] device veth0_macvtap entered promiscuous mode [ 77.162773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.172306][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.180707][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.191939][ T4260] device veth1_macvtap entered promiscuous mode [ 77.205833][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.216229][ T4257] device veth1_macvtap entered promiscuous mode [ 77.228150][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.247707][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.258214][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.268222][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.323677][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.335365][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.346208][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.358341][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.368916][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.379522][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.391303][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.415268][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.432011][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.446330][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.485863][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.497133][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.507664][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.517914][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.529906][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.542131][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.551123][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.560227][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.569462][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.579952][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.604948][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.611364][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.625506][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.633768][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.643845][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.655152][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.665263][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.675794][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.688381][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.695941][ T4331] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3'. [ 77.706072][ T4332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 77.762690][ T4332] bond0: (slave bond_slave_0): Releasing backup interface [ 77.792786][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.804787][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.815529][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.827756][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.838681][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.851195][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.862103][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.873157][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.884909][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.898533][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.907395][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.916040][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.925928][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.938453][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.953064][ T4257] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.962821][ T4257] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.972617][ T4257] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.981405][ T4257] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.997738][ T4260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.010237][ T4260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.019279][ T4260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.028160][ T4260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.090766][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.123965][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.177509][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.226531][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.258740][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.286026][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.311629][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.340409][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.359344][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.390531][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.407154][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.434328][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.476938][ T4265] Bluetooth: hci2: command 0x0419 tx timeout [ 78.483013][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 78.489899][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 78.527348][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.527358][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.535334][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.558660][ T4265] Bluetooth: hci3: command 0x0419 tx timeout [ 78.558672][ T4252] Bluetooth: hci4: command 0x0419 tx timeout [ 78.594333][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.619212][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.658873][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.742888][ T4343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 78.875975][ T4346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 79.244342][ T4354] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9'. [ 79.301688][ T4354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9'. [ 79.559540][ T4354] bond0: (slave bond_slave_0): Releasing backup interface [ 79.896420][ T4370] ubi0: attaching mtd0 [ 79.909312][ T4370] ubi0: scanning is finished [ 79.914051][ T4370] ubi0: empty MTD device detected [ 80.147694][ T4370] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 80.155426][ T4370] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 80.163168][ T4370] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 80.170351][ T4370] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 80.177895][ T4370] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 80.184732][ T4370] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 80.192846][ T4370] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1260914298 [ 80.202958][ T4370] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 80.342812][ T4371] ubi0: background thread "ubi_bgt0d" started, PID 4371 [ 80.469060][ T4367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 81.533843][ T126] cfg80211: failed to load regulatory.db [ 84.907280][ T4413] Zero length message leads to an empty skb [ 87.966061][ T4449] ax25_connect(): syz.1.37 uses autobind, please contact jreuter@yaina.de [ 88.834553][ T4458] ======================================================= [ 88.834553][ T4458] WARNING: The mand mount option has been deprecated and [ 88.834553][ T4458] and is ignored by this kernel. Remove the mand [ 88.834553][ T4458] option from the mount to silence this warning. [ 88.834553][ T4458] ======================================================= [ 88.870041][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.331552][ T4477] ubi: mtd0 is already attached to ubi0 [ 91.525815][ T4495] loop0: detected capacity change from 0 to 512 [ 91.906760][ T4500] mmap: syz.2.43 (4500) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.118363][ T4495] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 92.142623][ T4495] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.315905][ T4495] EXT4-fs (loop0): 1 truncate cleaned up [ 92.351231][ T4495] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 94.608642][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 96.361750][ T4553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 96.938730][ T4563] loop2: detected capacity change from 0 to 256 [ 98.416725][ C0] sched: RT throttling activated [ 106.302995][ T4638] loop1: detected capacity change from 0 to 256 [ 108.590761][ T4642] loop2: detected capacity change from 0 to 256 [ 108.790754][ T4638] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 109.157765][ T4654] loop0: detected capacity change from 0 to 256 [ 109.165216][ T4654] FAT-fs (loop0): Unrecognized mount option "iocharset" or missing value [ 110.768244][ T4251] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.578958][ T4686] loop2: detected capacity change from 0 to 256 [ 112.260428][ T4690] loop0: detected capacity change from 0 to 256 [ 112.268387][ T4690] FAT-fs (loop0): Unrecognized mount option "iocharset" or missing value [ 116.071437][ T4699] loop1: detected capacity change from 0 to 256 [ 116.083900][ T4699] FAT-fs (loop1): Unrecognized mount option "iocharset" or missing value [ 117.495710][ T4255] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.164695][ T4716] loop2: detected capacity change from 0 to 512 [ 118.260892][ T4716] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.489355][ T4716] EXT4-fs (loop2): 1 truncate cleaned up [ 118.495066][ T4716] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 119.630298][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 120.976942][ T4740] netlink: 68 bytes leftover after parsing attributes in process `syz.1.131'. [ 123.930775][ T4751] loop0: detected capacity change from 0 to 256 [ 124.348760][ T4756] netlink: 32 bytes leftover after parsing attributes in process `syz.4.136'. [ 124.547930][ T4762] loop0: detected capacity change from 0 to 256 [ 124.602956][ T4762] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 124.981042][ T4772] ubi: mtd0 is already attached to ubi0 [ 125.813808][ T4773] loop2: detected capacity change from 0 to 256 [ 132.709137][ T4816] loop4: detected capacity change from 0 to 256 [ 132.738121][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.749477][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.570775][ T4825] loop3: detected capacity change from 0 to 256 [ 135.293762][ T4827] loop4: detected capacity change from 0 to 1024 [ 135.330745][ T4827] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.478630][ T4827] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 137.673073][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 138.678403][ T4853] loop1: detected capacity change from 0 to 2048 [ 138.822580][ T4853] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 140.080255][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 141.053180][ T4880] loop0: detected capacity change from 0 to 16 [ 141.132986][ T4880] erofs: (device loop0): mounted with root inode @ nid 36. [ 141.906958][ T4886] 9pnet_fd: Insufficient options for proto=fd [ 141.926674][ T4886] 9pnet_fd: Insufficient options for proto=fd [ 143.499238][ T4898] loop1: detected capacity change from 0 to 256 [ 143.818247][ T4265] Bluetooth: Wrong link type (-71) [ 146.069289][ T4898] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 146.723787][ T4914] syz.1.178: attempt to access beyond end of device [ 146.723787][ T4914] loop1: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 146.746065][ T4914] syz.1.178: attempt to access beyond end of device [ 146.746065][ T4914] loop1: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 146.760326][ T4914] syz.1.178: attempt to access beyond end of device [ 146.760326][ T4914] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 146.775958][ T26] audit: type=1800 audit(1732853035.923:2): pid=4914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.178" name="file1" dev="loop1" ino=1048595 res=0 errno=0 [ 148.441319][ T4933] device syzkaller0 entered promiscuous mode [ 149.516019][ T4940] 9pnet_fd: Insufficient options for proto=fd [ 149.615054][ T4940] 9pnet_fd: Insufficient options for proto=fd [ 150.185645][ T4948] loop1: detected capacity change from 0 to 256 [ 153.171233][ T4966] loop0: detected capacity change from 0 to 16 [ 153.203567][ T4966] erofs: (device loop0): mounted with root inode @ nid 36. [ 154.371009][ T4942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 154.571545][ T4973] loop1: detected capacity change from 0 to 256 [ 154.680810][ T4973] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 158.758241][ T4987] loop0: detected capacity change from 0 to 256 [ 158.765595][ T4987] FAT-fs (loop0): Unrecognized mount option "iocharset" or missing value [ 158.776092][ T4265] Bluetooth: Wrong link type (-71) [ 161.801158][ T4998] loop3: detected capacity change from 0 to 2048 [ 162.743356][ T4998] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 164.082184][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 164.116807][ T26] audit: type=1326 audit(1732853053.263:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8152180809 code=0x7ffc0000 [ 164.242168][ T5021] loop0: detected capacity change from 0 to 16 [ 164.305521][ T5021] erofs: (device loop0): mounted with root inode @ nid 36. [ 164.962605][ T26] audit: type=1326 audit(1732853053.593:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8152180809 code=0x7ffc0000 [ 165.091341][ T26] audit: type=1326 audit(1732853053.603:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8152180809 code=0x7ffc0000 [ 165.113359][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.140426][ T26] audit: type=1326 audit(1732853054.033:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8152180809 code=0x7ffc0000 [ 165.162350][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.199484][ T5032] loop1: detected capacity change from 0 to 2048 [ 165.206478][ T26] audit: type=1326 audit(1732853054.033:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8152180809 code=0x7ffc0000 [ 165.228504][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.249812][ T26] audit: type=1326 audit(1732853054.033:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8152180809 code=0x7ffc0000 [ 165.272362][ T26] audit: type=1326 audit(1732853054.083:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8152180809 code=0x7ffc0000 [ 165.294369][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.300907][ T26] audit: type=1326 audit(1732853054.083:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8152180809 code=0x7ffc0000 [ 165.332354][ T26] audit: type=1326 audit(1732853054.083:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8152180809 code=0x7ffc0000 [ 165.393527][ T26] audit: type=1326 audit(1732853054.083:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8152180809 code=0x7ffc0000 [ 165.420929][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 165.444997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 165.454473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 165.462986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 165.497657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 165.607481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 165.617970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 165.697612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 165.715173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 165.847549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 165.866987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 166.278028][ T5032] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 166.430222][ T5042] loop3: detected capacity change from 0 to 2048 [ 166.525960][ T5042] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 166.598831][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 168.402450][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 168.426465][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 168.450116][ T27] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.463414][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.624480][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 168.637020][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 168.680803][ T27] usb 3-1: config 0 descriptor?? [ 168.712134][ T5057] xt_l2tp: v2 doesn't support IP mode [ 169.602008][ T5024] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 169.971425][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 170.400004][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 171.214314][ T5073] xt_l2tp: v2 doesn't support IP mode [ 171.940002][ T27] usb 3-1: USB disconnect, device number 2 [ 172.574201][ T4265] Bluetooth: Wrong link type (-71) [ 175.190870][ T5092] 9pnet_fd: Insufficient options for proto=fd [ 175.215241][ T5089] 9pnet_fd: Insufficient options for proto=fd [ 175.277026][ T4300] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 177.157369][ T5109] block device autoloading is deprecated and will be removed. [ 178.138454][ T5121] loop2: detected capacity change from 0 to 256 [ 180.961305][ T5134] hub 6-0:1.0: USB hub found [ 180.971281][ T5134] hub 6-0:1.0: 1 port detected [ 188.250752][ T5175] loop2: detected capacity change from 0 to 16 [ 188.284999][ T5175] erofs: (device loop2): mounted with root inode @ nid 36. [ 188.321608][ T5175] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 189.380344][ T5184] xt_l2tp: v2 doesn't support IP mode [ 189.388103][ T5184] xt_TPROXY: Can be used only with -p tcp or -p udp [ 190.546727][ T5185] loop0: detected capacity change from 0 to 16 [ 190.951003][ T5185] erofs: (device loop0): mounted with root inode @ nid 36. [ 191.921719][ T5198] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 194.314907][ T5211] loop0: detected capacity change from 0 to 256 [ 194.341459][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.348357][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.180746][ T5216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.268'. [ 197.523742][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 197.540706][ T5220] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 197.551478][ T4252] Bluetooth: hci2: command 0x0406 tx timeout [ 197.558486][ T4265] Bluetooth: hci3: command 0x0406 tx timeout [ 197.565128][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 197.570558][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 198.641859][ T4300] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 200.630726][ T5242] xt_l2tp: v2 doesn't support IP mode [ 203.932571][ T5255] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 207.795862][ T5058] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 208.136814][ T5058] usb 2-1: Using ep0 maxpacket: 32 [ 208.144169][ T5058] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 208.184664][ T5058] usb 2-1: config 0 has no interface number 0 [ 208.207589][ T5058] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 208.411500][ T5058] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.421847][ T5058] usb 2-1: Product: syz [ 208.426077][ T5058] usb 2-1: Manufacturer: syz [ 208.434874][ T5058] usb 2-1: SerialNumber: syz [ 208.458377][ T5058] usb 2-1: config 0 descriptor?? [ 208.471354][ T5058] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 209.365725][ T5058] usb 2-1: qt2_attach - failed to power on unit: -71 [ 209.373398][ T5058] quatech2: probe of 2-1:0.51 failed with error -71 [ 209.384851][ T5058] usb 2-1: USB disconnect, device number 2 [ 209.919291][ T5295] xt_l2tp: v2 doesn't support IP mode [ 210.798466][ T5296] xt_TPROXY: Can be used only with -p tcp or -p udp [ 211.376553][ T5301] loop3: detected capacity change from 0 to 512 [ 211.671939][ T5301] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 212.807313][ T5301] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.461552][ T5328] loop2: detected capacity change from 0 to 512 [ 214.597829][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 214.799510][ T5337] ubi: mtd0 is already attached to ubi0 [ 216.597460][ T5328] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 216.606542][ T5328] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.956059][ T5361] loop4: detected capacity change from 0 to 256 [ 218.142500][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 219.427430][ T4254] Bluetooth: Wrong link type (-71) [ 221.977689][ T5375] loop3: detected capacity change from 0 to 512 [ 222.111030][ T5375] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.311: attempt to clear invalid blocks 1 len 1 [ 222.214616][ T5375] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.311: bg 0: block 343: padding at end of block bitmap is not set [ 222.318571][ T5375] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 222.365601][ T5375] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.311: invalid indirect mapped block 1819239214 (level 0) [ 222.763809][ T5375] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.311: invalid indirect mapped block 1819239214 (level 1) [ 223.124104][ T5375] EXT4-fs (loop3): 1 truncate cleaned up [ 223.156852][ T5375] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 224.920502][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 225.621545][ T5411] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 227.037087][ T5416] loop1: detected capacity change from 0 to 512 [ 227.082242][ T5416] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.321: attempt to clear invalid blocks 1 len 1 [ 227.106148][ T5416] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.321: bg 0: block 343: padding at end of block bitmap is not set [ 227.130879][ T5416] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 227.166150][ T5416] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.321: invalid indirect mapped block 1819239214 (level 0) [ 227.239724][ T5416] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.321: invalid indirect mapped block 1819239214 (level 1) [ 227.398527][ T5416] EXT4-fs (loop1): 1 truncate cleaned up [ 227.404247][ T5416] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 227.807878][ T4254] Bluetooth: Wrong link type (-71) [ 230.614993][ T5446] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 231.312093][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 231.440361][ T5452] loop3: detected capacity change from 0 to 512 [ 231.546864][ T5452] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.332: attempt to clear invalid blocks 1 len 1 [ 231.626278][ T5452] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.332: bg 0: block 343: padding at end of block bitmap is not set [ 231.666923][ T5458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 231.712822][ T5452] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 231.753979][ T5452] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.332: invalid indirect mapped block 1819239214 (level 0) [ 231.758418][ T5460] loop4: detected capacity change from 0 to 256 [ 231.795950][ T5460] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 231.816065][ T5452] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.332: invalid indirect mapped block 1819239214 (level 1) [ 231.842384][ T5452] EXT4-fs (loop3): 1 truncate cleaned up [ 231.853985][ T5452] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 232.844421][ T5465] syz.4.333: attempt to access beyond end of device [ 232.844421][ T5465] loop4: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 232.892927][ T5465] syz.4.333: attempt to access beyond end of device [ 232.892927][ T5465] loop4: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 232.907296][ T5465] syz.4.333: attempt to access beyond end of device [ 232.907296][ T5465] loop4: rw=0, sector=280, nr_sectors = 8 limit=256 [ 233.311051][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 233.311071][ T26] audit: type=1800 audit(1732853122.073:34): pid=5465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.333" name="file1" dev="loop4" ino=1048596 res=0 errno=0 [ 234.194761][ T5478] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 234.584793][ T5480] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 235.479605][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 235.659656][ T5489] ubi: mtd0 is already attached to ubi0 [ 236.815439][ T5490] loop4: detected capacity change from 0 to 512 [ 236.992417][ T5490] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 237.016949][ T5490] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.029590][ T5500] loop2: detected capacity change from 0 to 256 [ 237.098965][ T5500] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 239.163568][ T5512] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 239.430891][ T26] audit: type=1800 audit(1732853128.313:35): pid=5511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.343" name="file1" dev="loop2" ino=1048597 res=0 errno=0 [ 242.284178][ T5528] xt_l2tp: v2 doesn't support IP mode [ 242.307515][ T5528] xt_TPROXY: Can be used only with -p tcp or -p udp [ 243.907015][ T5532] 9pnet: Could not find request transport: fd0x0000000000000004 [ 243.965150][ T5537] 9pnet: Could not find request transport: fd0x0000000000000004 [ 244.125005][ T5541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'. [ 244.428564][ T5550] ubi: mtd0 is already attached to ubi0 [ 245.395674][ T5555] loop0: detected capacity change from 0 to 512 [ 245.459981][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 245.758781][ T5555] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.355: attempt to clear invalid blocks 1 len 1 [ 245.953763][ T5555] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.355: bg 0: block 343: padding at end of block bitmap is not set [ 246.177944][ T5555] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 246.236382][ T5555] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.355: invalid indirect mapped block 1819239214 (level 0) [ 246.337992][ T5555] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.355: invalid indirect mapped block 1819239214 (level 1) [ 246.394645][ T5555] EXT4-fs (loop0): 1 truncate cleaned up [ 246.404312][ T5555] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 247.210441][ T5570] process 'syz.0.355' launched './file0/file0' with NULL argv: empty string added [ 249.678466][ T5585] loop1: detected capacity change from 0 to 256 [ 249.716889][ T5585] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 251.505174][ T5590] ubi: mtd0 is already attached to ubi0 [ 251.736693][ T26] audit: type=1800 audit(1732853140.723:36): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.364" name="file1" dev="loop1" ino=1048598 res=0 errno=0 [ 253.325819][ T5609] xt_l2tp: v2 doesn't support IP mode [ 253.349638][ T5609] xt_TPROXY: Can be used only with -p tcp or -p udp [ 255.378076][ T5622] loop4: detected capacity change from 0 to 256 [ 255.599746][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.606214][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.577905][ T5637] ubi: mtd0 is already attached to ubi0 [ 259.367737][ T4268] Bluetooth: Wrong link type (-71) [ 261.402024][ T5674] loop2: detected capacity change from 0 to 512 [ 261.409909][ T5676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.391'. [ 261.491149][ T5674] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 261.511465][ T5674] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.838349][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 263.473544][ T5705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.403'. [ 263.846691][ T4254] Bluetooth: Wrong link type (-71) [ 263.852420][ T4254] Bluetooth: hci1: link tx timeout [ 263.858980][ T4254] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 265.808819][ T5723] loop4: detected capacity change from 0 to 512 [ 267.388999][ T5723] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 267.409068][ T4268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 267.419004][ T4268] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 267.427227][ T4268] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 267.436022][ T4252] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 267.444106][ T4268] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 267.455069][ T4252] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 267.489688][ T5723] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.434076][ T4257] EXT4-fs (loop4): unmounting filesystem. [ 268.829970][ T5722] chnl_net:caif_netlink_parms(): no params data found [ 269.138734][ T4254] Bluetooth: Wrong link type (-71) [ 270.239504][ T4268] Bluetooth: hci5: command 0x0409 tx timeout [ 270.687225][ T5754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.415'. [ 271.189571][ T5722] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.298469][ T5722] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.509273][ T5722] device bridge_slave_0 entered promiscuous mode [ 271.739356][ T5722] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.839692][ T5779] loop1: detected capacity change from 0 to 512 [ 271.856812][ T5722] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.906861][ T5722] device bridge_slave_1 entered promiscuous mode [ 271.955893][ T5779] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 272.032037][ T5779] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.312689][ T5722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.316987][ T4254] Bluetooth: hci5: command 0x041b tx timeout [ 272.598646][ T5722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.680945][ T5790] loop2: detected capacity change from 0 to 256 [ 273.152328][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 273.890786][ T5722] team0: Port device team_slave_0 added [ 273.925775][ T5722] team0: Port device team_slave_1 added [ 274.116212][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.231766][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.416867][ T4254] Bluetooth: hci5: command 0x040f tx timeout [ 274.806911][ T5722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.819463][ T5722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.826455][ T5722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.863037][ T5722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.397555][ T5809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.432'. [ 276.414749][ T5722] device hsr_slave_0 entered promiscuous mode [ 276.476828][ T4268] Bluetooth: hci5: command 0x0419 tx timeout [ 276.557238][ T5722] device hsr_slave_1 entered promiscuous mode [ 276.578848][ T5722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.617622][ T5722] Cannot create hsr debugfs directory [ 277.130407][ T5835] loop4: detected capacity change from 0 to 256 [ 277.142056][ T5722] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 277.184422][ T5722] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 277.210867][ T5722] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 277.247455][ T5722] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 277.272381][ T5835] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 278.695913][ T5843] syz.4.442: attempt to access beyond end of device [ 278.695913][ T5843] loop4: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 278.772114][ T5843] syz.4.442: attempt to access beyond end of device [ 278.772114][ T5843] loop4: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 278.786226][ T5843] syz.4.442: attempt to access beyond end of device [ 278.786226][ T5843] loop4: rw=0, sector=280, nr_sectors = 8 limit=256 [ 279.206557][ T26] audit: type=1800 audit(1732853167.953:37): pid=5843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.442" name="file1" dev="loop4" ino=1048599 res=0 errno=0 [ 279.562264][ T5722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.623730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.642074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.680849][ T5722] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.708262][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.718031][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.756303][ T4418] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.763569][ T4418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.838846][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.864239][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.974386][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.211637][ T4418] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.218821][ T4418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.809175][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 280.837902][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.924836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.961465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.143951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.211515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.291108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.382750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.477018][ T4298] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 281.558957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 282.086895][ T4298] usb 3-1: Using ep0 maxpacket: 16 [ 282.263055][ T5882] loop3: detected capacity change from 0 to 256 [ 282.456977][ T4298] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.477407][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 282.511457][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 282.909035][ T4298] usb 3-1: config 0 has no interfaces? [ 282.977585][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.121242][ T4298] usb 3-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 283.130501][ T4298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.146698][ T4298] usb 3-1: Product: syz [ 283.150909][ T4298] usb 3-1: Manufacturer: syz [ 283.155569][ T4298] usb 3-1: SerialNumber: syz [ 283.188691][ T4298] usb 3-1: config 0 descriptor?? [ 283.757940][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.776161][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.818181][ T5722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.906130][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.456'. [ 284.166967][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 284.436877][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 286.500924][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 286.520280][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 286.562075][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.577290][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 286.607114][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.632441][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.663105][ T5722] device veth0_vlan entered promiscuous mode [ 286.687450][ T5722] device veth1_vlan entered promiscuous mode [ 286.785552][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 286.797884][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 286.815005][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.833762][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.859924][ T5722] device veth0_macvtap entered promiscuous mode [ 286.881320][ T5722] device veth1_macvtap entered promiscuous mode [ 286.934812][ T5722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.966721][ T5722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.001914][ T5722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.024872][ T5722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.044818][ T5722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.072274][ T5722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.075423][ T2183] usb 3-1: USB disconnect, device number 4 [ 287.083377][ T5722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.108782][ T5722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.134711][ T5722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.145899][ T5722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.166061][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.180169][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 287.190325][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 287.217506][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.267618][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.278694][ T5722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.304291][ T5722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.337109][ T5722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.361278][ T5722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.421578][ T5722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.436497][ T5722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.448195][ T5722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.459222][ T5722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.472537][ T5722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.483517][ T5722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.497461][ T5722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.514428][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.556448][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.590202][ T5722] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.628245][ T5722] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.656979][ T5722] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.666857][ T5722] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.108608][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.166123][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.962631][ T4456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.972614][ T4295] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 289.003219][ T4456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.187069][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 289.205591][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 289.227049][ T4295] usb 5-1: Using ep0 maxpacket: 16 [ 289.242736][ T4295] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.264732][ T4295] usb 5-1: config 0 has no interfaces? [ 289.289368][ T4295] usb 5-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 289.331981][ T4295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.366069][ T4295] usb 5-1: Product: syz [ 289.386742][ T4295] usb 5-1: Manufacturer: syz [ 289.402368][ T4295] usb 5-1: SerialNumber: syz [ 289.449854][ T4295] usb 5-1: config 0 descriptor?? [ 290.450977][ T5970] loop5: detected capacity change from 0 to 256 [ 290.585995][ T5973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.477'. [ 291.581868][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.477'. [ 291.668578][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.477'. [ 296.954934][ T4298] usb 5-1: USB disconnect, device number 3 [ 298.301390][ T6044] loop2: detected capacity change from 0 to 512 [ 298.402538][ T6044] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.507: attempt to clear invalid blocks 1 len 1 [ 298.444973][ T6044] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.507: bg 0: block 343: padding at end of block bitmap is not set [ 298.463485][ T6044] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 298.480893][ T6044] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.507: invalid indirect mapped block 1819239214 (level 0) [ 299.515760][ T6051] loop3: detected capacity change from 0 to 16 [ 299.647126][ T6051] erofs: (device loop3): mounted with root inode @ nid 36. [ 299.883878][ T6044] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.507: invalid indirect mapped block 1819239214 (level 1) [ 300.003288][ T6044] EXT4-fs (loop2): 1 truncate cleaned up [ 300.059538][ T6044] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 301.124507][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 301.315716][ T6075] loop2: detected capacity change from 0 to 256 [ 305.242280][ T4268] Bluetooth: Wrong link type (-71) [ 305.748619][ T6107] ubi: mtd0 is already attached to ubi0 [ 305.984042][ T6109] loop5: detected capacity change from 0 to 256 [ 308.036261][ T6126] device pim6reg1 entered promiscuous mode [ 310.261056][ T6182] syz.2.556[6182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.261170][ T6182] syz.2.556[6182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.169513][ T6203] device pim6reg1 entered promiscuous mode [ 314.924236][ T6246] Driver unsupported XDP return value 0 on prog (id 275) dev N/A, expect packet loss! [ 317.052389][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.058805][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.359957][ T6391] ÿÿÿÿÿÿ: renamed from vlan1 [ 324.370483][ T6382] device pim6reg1 entered promiscuous mode [ 324.744258][ T6410] device pim6reg1 entered promiscuous mode [ 324.898089][ T6415] device syzkaller0 entered promiscuous mode [ 326.510966][ T6459] device pim6reg1 entered promiscuous mode [ 327.220245][ T6477] device wg2 entered promiscuous mode [ 327.433598][ T6484] device pim6reg1 entered promiscuous mode [ 328.397806][ T6505] device pim6reg1 entered promiscuous mode [ 328.967698][ T6519] device pim6reg1 entered promiscuous mode [ 331.364039][ T6577] syz.1.720[6577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.364151][ T6577] syz.1.720[6577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.738714][ T6556] device pim6reg1 entered promiscuous mode [ 339.160045][ T6655] device pim6reg1 entered promiscuous mode [ 339.990917][ T6678] device pim6reg1 entered promiscuous mode [ 340.153041][ T6691] pim6reg: tun_chr_ioctl cmd 35108 [ 340.981219][ T6710] device wg2 entered promiscuous mode [ 341.909482][ T6732] tun0: tun_chr_ioctl cmd 2147767520 [ 342.143099][ T6744] device veth1_macvtap left promiscuous mode [ 342.166667][ T6744] device macsec0 entered promiscuous mode [ 345.450547][ T6815] syz.3.825[6815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 345.450659][ T6815] syz.3.825[6815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.149507][ T6860] syz.1.840[6860] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.188850][ T6860] syz.1.840[6860] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 353.203060][ T6881] device pim6reg1 entered promiscuous mode [ 353.583557][ T6923] syz.3.863[6923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 353.583665][ T6923] syz.3.863[6923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 353.639619][ T6926] syz.5.865[6926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 353.668533][ T6926] syz.5.865[6926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.564974][ T6940] device syzkaller0 entered promiscuous mode [ 356.000431][ T3623] udevd[3623]: worker [4261] terminated by signal 33 (Unknown signal 33) [ 356.013720][ T3623] udevd[3623]: worker [4261] failed while handling '/devices/virtual/block/loop2' [ 358.886095][ T7005] device pim6reg1 entered promiscuous mode [ 359.417299][ T7019] device pim6reg1 entered promiscuous mode [ 359.965939][ T7024] device pim6reg1 entered promiscuous mode [ 366.065327][ T7088] device pim6reg1 entered promiscuous mode [ 366.781928][ T7145] device veth1_macvtap left promiscuous mode [ 366.825101][ T7145] device macsec0 entered promiscuous mode [ 367.934602][ T7179] device syzkaller0 entered promiscuous mode [ 372.281161][ T7213] device pim6reg1 entered promiscuous mode [ 372.307819][ T7247] device pim6reg1 entered promiscuous mode [ 373.874309][ T7288] device pim6reg1 entered promiscuous mode [ 374.153585][ T7304] device pim6reg1 entered promiscuous mode [ 375.385775][ T7337] sock: sock_set_timeout: `syz.5.1037' (pid 7337) tries to set negative timeout [ 378.152095][ T7354] device sit0 entered promiscuous mode [ 378.489780][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.496183][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.194147][ T7407] device pim6reg1 entered promiscuous mode [ 382.037241][ T7444] syz.2.1084[7444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.037346][ T7444] syz.2.1084[7444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.681873][ T7462] device wg2 entered promiscuous mode [ 384.648026][ T7498] device pim6reg1 entered promiscuous mode [ 384.663129][ T7500] loop1: detected capacity change from 0 to 512 [ 384.732378][ T7500] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1107: attempt to clear invalid blocks 1 len 1 [ 384.766028][ T7500] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1107: bg 0: block 343: padding at end of block bitmap is not set [ 384.827655][ T7500] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 384.893449][ T7500] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1107: invalid indirect mapped block 1819239214 (level 0) [ 384.970276][ T7500] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1107: invalid indirect mapped block 1819239214 (level 1) [ 385.048662][ T7500] EXT4-fs (loop1): 1 truncate cleaned up [ 385.054392][ T7500] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 386.209814][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 386.217949][ T4240] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 386.436745][ T4240] usb 5-1: Using ep0 maxpacket: 32 [ 386.445924][ T4240] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 386.479827][ T4240] usb 5-1: config 0 has no interface number 0 [ 386.508913][ T4240] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 386.536686][ T4240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.576683][ T4240] usb 5-1: Product: syz [ 386.580891][ T4240] usb 5-1: Manufacturer: syz [ 386.585518][ T4240] usb 5-1: SerialNumber: syz [ 386.642868][ T4240] usb 5-1: config 0 descriptor?? [ 386.671948][ T4240] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 386.884882][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1119'. [ 386.901356][ T4240] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 386.967090][ T4240] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 387.372072][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 387.381300][ T4240] usb 5-1: USB disconnect, device number 4 [ 387.397697][ T4240] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 387.449906][ T4240] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 387.474782][ T4240] quatech2 5-1:0.51: device disconnected [ 388.007847][ T7559] syz.5.1130[7559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.007949][ T7559] syz.5.1130[7559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.796927][ T4254] Bluetooth: hci5: command 0x0406 tx timeout [ 390.825925][ T7649] bridge0: port 3(vlan2) entered blocking state [ 390.846791][ T7649] bridge0: port 3(vlan2) entered disabled state [ 390.888114][ T7655] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 390.998550][ T7653] device syzkaller0 entered promiscuous mode [ 391.038956][ T7658] loop1: detected capacity change from 0 to 128 [ 391.128218][ T7658] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 391.184226][ T7658] ext4 filesystem being mounted at /238/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 391.518893][ T5058] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 391.721459][ T5058] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 391.746556][ T5058] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 391.781292][ T5058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.417549][ T5058] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 392.424503][ T5058] usb 2-1: No valid video chain found. [ 392.445070][ T7675] loop5: detected capacity change from 0 to 128 [ 392.494876][ T7675] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 392.837032][ T5058] usb 2-1: USB disconnect, device number 3 [ 393.829398][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 395.211781][ T7694] loop1: detected capacity change from 0 to 512 [ 395.237998][ T7694] EXT4-fs: Ignoring removed mblk_io_submit option [ 395.274802][ T7694] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 395.350123][ T7694] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 395.367053][ T7694] System zones: 1-12 [ 395.393677][ T7694] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.1182: corrupted in-inode xattr [ 395.444940][ T7694] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1182: couldn't read orphan inode 15 (err -117) [ 395.491319][ T7694] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 395.673230][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 395.794988][ T7697] loop1: detected capacity change from 0 to 512 [ 395.856187][ T7697] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #3: comm syz.1.1183: corrupted inode contents [ 395.900507][ T7697] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #3: comm syz.1.1183: mark_inode_dirty error [ 395.955689][ T7697] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #3: comm syz.1.1183: corrupted inode contents [ 395.982706][ T7697] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.1183: mark_inode_dirty error [ 396.043102][ T7697] Quota error (device loop1): write_blk: dquota write failed [ 396.066399][ T7697] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 396.092504][ T7697] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.1183: Failed to acquire dquot type 0 [ 396.170121][ T7697] EXT4-fs (loop1): 1 orphan inode deleted [ 396.175953][ T7697] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 396.194156][ T4456] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 396.222144][ T7697] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.223547][ T4456] EXT4-fs error (device loop1): ext4_release_dquot:6824: comm kworker/u4:13: Failed to release dquot type 1 [ 396.341719][ T4260] EXT4-fs (loop1): unmounting filesystem. [ 397.067491][ T7701] loop1: detected capacity change from 0 to 40427 [ 397.125109][ T7701] F2FS-fs (loop1): invalid crc value [ 397.146206][ T7701] F2FS-fs (loop1): Found nat_bits in checkpoint [ 397.243020][ T7701] F2FS-fs (loop1): Start checkpoint disabled! [ 397.302835][ T7701] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 397.678189][ T28] INFO: task syz-executor:4250 blocked for more than 143 seconds. [ 397.728133][ T28] Not tainted 6.1.119-syzkaller #0 [ 397.736387][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.780633][ T28] task:syz-executor state:D stack:21208 pid:4250 ppid:1 flags:0x00004004 [ 397.821091][ T7708] Cannot find set identified by id 0 to match [ 397.849964][ T28] Call Trace: [ 397.853305][ T28] [ 397.859395][ T28] __schedule+0x143f/0x4570 [ 397.864020][ T28] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 397.870376][ T28] ? release_firmware_map_entry+0x186/0x186 [ 397.876390][ T28] ? prepare_to_wait_event+0x3b5/0x3f0 [ 397.882151][ T28] schedule+0xbf/0x180 [ 397.886354][ T28] wb_wait_for_completion+0x162/0x290 [ 397.892003][ T28] ? __bpf_trace_writeback_inode_template+0x20/0x20 [ 397.898909][ T28] ? wake_bit_function+0x210/0x210 [ 397.927504][ T28] __writeback_inodes_sb_nr+0x2ce/0x370 [ 397.936741][ T28] ? writeback_inodes_sb_nr+0x30/0x30 [ 397.944889][ T28] ? get_nr_dirty_inodes+0x2ab/0x2e0 [ 397.950575][ T28] sync_filesystem+0xa0/0x220 [ 397.955454][ T28] generic_shutdown_super+0x6b/0x340 [ 397.963350][ T28] kill_block_super+0x7a/0xe0 [ 397.971516][ T28] deactivate_locked_super+0xa0/0x110 [ 397.983188][ T28] cleanup_mnt+0x490/0x520 [ 397.992124][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 397.997609][ T28] task_work_run+0x246/0x300 [ 398.002559][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 398.007972][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 398.013654][ T28] exit_to_user_mode_loop+0xde/0x100 [ 398.019148][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 398.024944][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 398.030804][ T28] do_syscall_64+0x47/0xb0 [ 398.035402][ T28] ? clear_bhb_loop+0x45/0xa0 [ 398.040336][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.046422][ T28] RIP: 0033:0x7fbc7ef81b37 [ 398.051136][ T28] RSP: 002b:00007ffc24f36f68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 398.059943][ T28] RAX: 0000000000000000 RBX: 00007fbc7eff37dc RCX: 00007fbc7ef81b37 [ 398.070368][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc24f37020 [ 398.095636][ T28] RBP: 00007ffc24f37020 R08: 0000000000000000 R09: 0000000000000000 [ 398.106427][ T28] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc24f380a0 [ 398.114749][ T28] R13: 00007fbc7eff37dc R14: 000000000003be49 R15: 00007ffc24f380e0 [ 398.123156][ T28] [ 398.126385][ T28] [ 398.126385][ T28] Showing all locks held in the system: [ 398.134626][ T28] 1 lock held by rcu_tasks_kthre/12: [ 398.140190][ T28] #0: ffffffff8d32b110 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 398.158918][ T28] 1 lock held by rcu_tasks_trace/13: [ 398.190942][ T28] #0: ffffffff8d32b910 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 398.209359][ T28] 1 lock held by khungtaskd/28: [ 398.214378][ T28] #0: ffffffff8d32af40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 398.224685][ T28] 2 locks held by getty/4005: [ 398.229703][ T28] #0: ffff8880312fb098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 398.239895][ T28] #1: ffffc9000326b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 398.250413][ T28] 1 lock held by syz-executor/4250: [ 398.255707][ T28] #0: ffff888030cc00e0 (&type->s_umount_key#32){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 398.268201][ T28] 1 lock held by syz-executor/4260: [ 398.273603][ T28] #0: ffff888052e740e0 (&type->s_umount_key#58){+.+.}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 398.284405][ T28] 2 locks held by kworker/u4:14/4464: [ 398.290349][ T28] 4 locks held by kworker/u4:18/4743: [ 398.295972][ T28] [ 398.298885][ T28] ============================================= [ 398.298885][ T28] [ 398.303031][ T4743] kworker/u4:18: attempt to access beyond end of device [ 398.303031][ T4743] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 398.308401][ T28] NMI backtrace for cpu 0 [ 398.326077][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.119-syzkaller #0 [ 398.333989][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 398.344066][ T28] Call Trace: [ 398.347373][ T28] [ 398.350317][ T28] dump_stack_lvl+0x1e3/0x2cb [ 398.355028][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 398.360525][ T28] ? panic+0x764/0x764 [ 398.364630][ T28] ? vprintk_emit+0x622/0x740 [ 398.369343][ T28] ? printk_sprint+0x490/0x490 [ 398.374143][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 398.379296][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 398.384272][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 398.390469][ T28] ? _printk+0xd1/0x111 [ 398.394643][ T28] ? panic+0x764/0x764 [ 398.398731][ T28] ? __wake_up_klogd+0xcc/0x100 [ 398.403604][ T28] ? panic+0x764/0x764 [ 398.407691][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 398.413788][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 398.419881][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 398.425890][ T28] watchdog+0xf88/0xfd0 [ 398.430075][ T28] ? watchdog+0x1f8/0xfd0 [ 398.434434][ T28] kthread+0x28d/0x320 [ 398.438534][ T28] ? hungtask_pm_notify+0x50/0x50 [ 398.443594][ T28] ? kthread_blkcg+0xd0/0xd0 [ 398.448243][ T28] ret_from_fork+0x1f/0x30 [ 398.452700][ T28] [ 398.456634][ T28] Sending NMI from CPU 0 to CPUs 1: [ 398.461869][ C1] NMI backtrace for cpu 1 [ 398.461884][ C1] CPU: 1 PID: 4260 Comm: syz-executor Not tainted 6.1.119-syzkaller #0 [ 398.461901][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 398.461910][ C1] RIP: 0010:preempt_count_add+0x6b/0x180 [ 398.461936][ C1] Code: c7 c0 60 31 35 97 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 d9 00 00 00 83 3d 01 a3 d6 15 00 75 11 65 8b 05 e0 e0 a3 7e 0f b6 c0 <3d> f5 00 00 00 73 59 65 8b 05 cf e0 a3 7e 25 ff ff ff 7f 39 d8 75 [ 398.461952][ C1] RSP: 0018:ffffc90003d570e0 EFLAGS: 00000246 [ 398.461967][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff97353103 [ 398.461978][ C1] RDX: dffffc0000000000 RSI: ffffffff83d31968 RDI: 0000000000000001 [ 398.461989][ C1] RBP: 1ffff920007aae3c R08: 0000000000000005 R09: ffffc90003d572d0 [ 398.462000][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807e7fbb80 [ 398.462011][ C1] R13: ffffffff81785870 R14: dffffc0000000000 R15: dffffc0000000000 [ 398.462023][ C1] FS: 0000555566063500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 398.462038][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.462049][ C1] CR2: 00007f02cf10d178 CR3: 000000005cef6000 CR4: 00000000003506e0 [ 398.462063][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 398.462072][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 398.462082][ C1] Call Trace: [ 398.462086][ C1] [ 398.462091][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 398.462116][ C1] ? read_lock_is_recursive+0x10/0x10 [ 398.462143][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 398.462168][ C1] ? nmi_handle+0x25/0x440 [ 398.462200][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 398.462214][ C1] ? nmi_handle+0x12e/0x440 [ 398.462239][ C1] ? nmi_handle+0x25/0x440 [ 398.462264][ C1] ? preempt_count_add+0x6b/0x180 [ 398.462289][ C1] ? default_do_nmi+0x62/0x150 [ 398.462314][ C1] ? exc_nmi+0xa8/0x100 [ 398.462338][ C1] ? end_repeat_nmi+0x16/0x31 [ 398.462362][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 398.462387][ C1] ? f2fs_put_super+0x688/0xc00 [ 398.462407][ C1] ? preempt_count_add+0x6b/0x180 [ 398.462427][ C1] ? preempt_count_add+0x6b/0x180 [ 398.462447][ C1] ? preempt_count_add+0x6b/0x180 [ 398.462467][ C1] [ 398.462472][ C1] [ 398.462477][ C1] ? f2fs_put_super+0x688/0xc00 [ 398.462494][ C1] unwind_next_frame+0xb3/0x2220 [ 398.462518][ C1] ? f2fs_put_super+0x688/0xc00 [ 398.462537][ C1] ? f2fs_put_super+0x688/0xc00 [ 398.462556][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 398.462578][ C1] arch_stack_walk+0x10d/0x140 [ 398.462599][ C1] ? f2fs_put_super+0x688/0xc00 [ 398.462620][ C1] stack_trace_save+0x113/0x1c0 [ 398.462644][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 398.462671][ C1] ? f2fs_destroy_node_manager+0x314/0xea0 [ 398.462694][ C1] kasan_set_track+0x4b/0x70 [ 398.462719][ C1] ? kasan_set_track+0x4b/0x70 [ 398.462743][ C1] ? kasan_save_free_info+0x27/0x40 [ 398.462760][ C1] ? ____kasan_slab_free+0xd6/0x120 [ 398.462774][ C1] ? kmem_cache_free+0x292/0x510 [ 398.462793][ C1] ? f2fs_destroy_node_manager+0x314/0xea0 [ 398.462814][ C1] ? f2fs_put_super+0x688/0xc00 [ 398.462853][ C1] ? __radix_tree_delete+0x1ee/0x3a0 [ 398.462879][ C1] kasan_save_free_info+0x27/0x40 [ 398.462897][ C1] ____kasan_slab_free+0xd6/0x120 [ 398.462913][ C1] kmem_cache_free+0x292/0x510 [ 398.462934][ C1] ? f2fs_destroy_node_manager+0x314/0xea0 [ 398.462958][ C1] f2fs_destroy_node_manager+0x314/0xea0 [ 398.462984][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 398.463001][ C1] ? f2fs_build_node_manager+0x1e40/0x1e40 [ 398.463022][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 398.463067][ C1] ? mark_lock+0x9a/0x340 [ 398.463123][ C1] ? __kmem_cache_free+0x25c/0x3c0 [ 398.463144][ C1] ? f2fs_put_super+0x680/0xc00 [ 398.463165][ C1] f2fs_put_super+0x688/0xc00 [ 398.463184][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 398.463204][ C1] ? f2fs_drop_inode+0x920/0x920 [ 398.463231][ C1] ? f2fs_drop_inode+0x920/0x920 [ 398.463252][ C1] generic_shutdown_super+0x130/0x340 [ 398.463275][ C1] kill_block_super+0x7a/0xe0 [ 398.463304][ C1] kill_f2fs_super+0x2ff/0x3c0 [ 398.463323][ C1] ? __up_read+0x690/0x690 [ 398.463344][ C1] ? f2fs_mount+0x40/0x40 [ 398.463362][ C1] ? unregister_shrinker+0x26d/0x330 [ 398.463384][ C1] ? kfree+0x30/0x190 [ 398.463401][ C1] ? unregister_shrinker+0x26d/0x330 [ 398.463424][ C1] deactivate_locked_super+0xa0/0x110 [ 398.463446][ C1] cleanup_mnt+0x490/0x520 [ 398.463470][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 398.463488][ C1] task_work_run+0x246/0x300 [ 398.463513][ C1] ? task_work_cancel+0x2e0/0x2e0 [ 398.463538][ C1] ? exit_to_user_mode_loop+0x39/0x100 [ 398.463556][ C1] exit_to_user_mode_loop+0xde/0x100 [ 398.463572][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 398.463589][ C1] syscall_exit_to_user_mode+0x60/0x270 [ 398.463608][ C1] do_syscall_64+0x47/0xb0 [ 398.463631][ C1] ? clear_bhb_loop+0x45/0xa0 [ 398.463656][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.463680][ C1] RIP: 0033:0x7f4320f81b37 [ 398.463693][ C1] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 398.463706][ C1] RSP: 002b:00007ffe0664cd48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 398.463722][ C1] RAX: 0000000000000000 RBX: 00007f4320ff37dc RCX: 00007f4320f81b37 [ 398.463733][ C1] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0664ce00 [ 398.463743][ C1] RBP: 00007ffe0664ce00 R08: 0000000000000000 R09: 0000000000000000 [ 398.463753][ C1] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0664de80 [ 398.463764][ C1] R13: 00007f4320ff37dc R14: 0000000000060c87 R15: 00007ffe0664dec0 [ 398.463784][ C1] [ 399.202675][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 399.209745][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.119-syzkaller #0 [ 399.217667][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 399.227738][ T28] Call Trace: [ 399.231027][ T28] [ 399.233972][ T28] dump_stack_lvl+0x1e3/0x2cb [ 399.238683][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 399.244171][ T28] ? panic+0x764/0x764 [ 399.248273][ T28] ? llist_add_batch+0x160/0x1d0 [ 399.253239][ T28] ? vscnprintf+0x59/0x80 [ 399.257595][ T28] panic+0x318/0x764 [ 399.261536][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 399.267808][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 399.273217][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 399.279562][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 399.285725][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 399.291888][ T28] watchdog+0xfc7/0xfd0 [ 399.296067][ T28] ? watchdog+0x1f8/0xfd0 [ 399.300407][ T28] kthread+0x28d/0x320 [ 399.304476][ T28] ? hungtask_pm_notify+0x50/0x50 [ 399.309509][ T28] ? kthread_blkcg+0xd0/0xd0 [ 399.314100][ T28] ret_from_fork+0x1f/0x30 [ 399.318534][ T28] [ 399.321856][ T28] Kernel Offset: disabled [ 399.326199][ T28] Rebooting in 86400 seconds..