last executing test programs: 29.449481398s ago: executing program 1 (id=523): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, 0x0}) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000015c0)=""/4101, 0x1005}], 0x1, 0x5, 0xffffbfff) unshare(0x6a040000) 25.598419806s ago: executing program 1 (id=540): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 25.380851209s ago: executing program 1 (id=544): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "918d5fa0ed61dae0", "c6445087e41a2ca1187d202c24e27406", "78a5c2cd", "b458034a1b474908"}, 0x28) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb}}, 0x0, 0x0, 0x50, 0x0, "a27eeb1839106138172ad1ed7d1d9bfbaeed4520662584241c0e774a4cad546325b89dfb9d33f6fb7f45545dc77c8dcbab7120d7aa88e3f6d21c20b0f00807c80cb089d6c97b63f247377bbfad8c40a1"}, 0xd8) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000580)={0x6, 'ip6tnl0\x00', {0x40}, 0x7}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x50) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{}, 0x0, &(0x7f00000006c0)='%-010d \x00'}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="7fd91d522433a1f5198516cb8ef36d5b3f6b068da48d1e9fb11134df", @ANYRESOCT=r1], 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 25.133145673s ago: executing program 1 (id=546): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000111401001c000000000000000800010000000000"], 0x20}, 0x1, 0xf00}, 0x4008014) 24.169429818s ago: executing program 1 (id=550): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x4, r1, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3}}}, 0x24}}, 0x20040000) 22.865647867s ago: executing program 3 (id=554): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 22.487756253s ago: executing program 3 (id=556): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "918d5fa0ed61dae0", "c6445087e41a2ca1187d202c24e27406", "78a5c2cd", "b458034a1b474908"}, 0x28) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb}}, 0x0, 0x0, 0x50, 0x0, "a27eeb1839106138172ad1ed7d1d9bfbaeed4520662584241c0e774a4cad546325b89dfb9d33f6fb7f45545dc77c8dcbab7120d7aa88e3f6d21c20b0f00807c80cb089d6c97b63f247377bbfad8c40a1"}, 0xd8) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000580)={0x6, 'ip6tnl0\x00', {0x40}, 0x7}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x50) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{}, 0x0, &(0x7f00000006c0)='%-010d \x00'}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="7fd91d522433a1f5198516cb8ef36d5b3f6b068da48d1e9fb11134df", @ANYRESOCT=r1], 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 22.434562713s ago: executing program 1 (id=557): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x0) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="500202020130"], 0x6) 22.329129305s ago: executing program 3 (id=559): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1_to_hsr\x00', &(0x7f0000000440)=@ethtool_sset_info={0x37, 0x4, 0xa}}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', &(0x7f0000000740)={0x800000, 0x148, 0x15}, 0x18) openat(r3, 0x0, 0x515001, 0x415) syz_clone3(&(0x7f00000009c0)={0x400, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x18) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4000000]}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 22.299321766s ago: executing program 4 (id=560): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000111401001c0000000000000008000100000000000800"], 0x20}, 0x1, 0xf00}, 0x4008014) 22.179208777s ago: executing program 0 (id=561): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xff}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 22.118688228s ago: executing program 4 (id=563): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x18) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) read$msr(r0, &(0x7f0000000000)=""/168, 0xa8) 22.109669169s ago: executing program 3 (id=564): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = dup(r0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 21.928785421s ago: executing program 4 (id=566): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 21.918505982s ago: executing program 0 (id=567): syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) keyctl$search(0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffa) 21.298349331s ago: executing program 3 (id=568): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}}, 0x4004010) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x801, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x4, 0x4a080}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 20.966564426s ago: executing program 4 (id=570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd2b, 0x0, {0x0, 0x0, 0x0, r4, {0x6, 0xfff1}, {0x0, 0xfff1}, {0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000800) 20.938607726s ago: executing program 0 (id=571): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r2}, 0x18) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getrlimit(0x1, &(0x7f0000000000)) 20.432552073s ago: executing program 3 (id=574): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x4, 0x355c, 0x573, 0x0, 0xffffffffffffffff, 0x40000000, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000280)={0x0, 0x3f2f, 0x10100, 0x0, 0x8}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 20.372048244s ago: executing program 0 (id=575): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x11409cf, &(0x7f00000002c0)={[{@lazytime}, {@block_validity}]}, 0x0, 0x470, &(0x7f0000003780)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1_to_hsr\x00', &(0x7f0000000440)=@ethtool_sset_info={0x37, 0x4, 0xa}}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', &(0x7f0000000740)={0x800000, 0x148, 0x15}, 0x18) openat(r3, 0x0, 0x515001, 0x415) syz_clone3(&(0x7f00000009c0)={0x400, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x18) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4000000]}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 20.200203737s ago: executing program 4 (id=577): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xff}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 20.129392918s ago: executing program 0 (id=579): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) 19.958736061s ago: executing program 4 (id=581): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) r0 = gettid() syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x16, 0x2}]}) prctl$PR_GET_FPEMU(0x42, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0xf2cccc7fae7881b8, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) iopl(0x3) msgget(0x1, 0x1d8) msgctl$IPC_RMID(0x0, 0x0) msgget(0x3, 0x606) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) write$P9_RGETLOCK(r2, &(0x7f0000001440)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000080), 0x0) 18.491099053s ago: executing program 0 (id=587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd2b, 0x0, {0x0, 0x0, 0x0, r4, {0x6, 0xfff1}, {0x0, 0xfff1}, {0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000800) 15.460411598s ago: executing program 2 (id=599): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}}, 0x4004010) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x801, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x4, 0x4a080}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 15.33729726s ago: executing program 2 (id=600): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x11409cf, &(0x7f00000002c0)={[{@lazytime}, {@block_validity}]}, 0x0, 0x470, &(0x7f0000003780)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1_to_hsr\x00', &(0x7f0000000440)=@ethtool_sset_info={0x37, 0x4, 0xa}}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', &(0x7f0000000740)={0x800000, 0x148, 0x15}, 0x18) openat(r3, 0x0, 0x515001, 0x415) syz_clone3(&(0x7f00000009c0)={0x400, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x18) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4000000]}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 15.262625431s ago: executing program 2 (id=601): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 15.219422632s ago: executing program 2 (id=602): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = dup(r0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 15.174990112s ago: executing program 2 (id=603): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') read$msr(r0, &(0x7f0000000000)=""/168, 0xa8) pread64(r0, &(0x7f0000001240)=""/102391, 0x18ff7, 0x0) 15.120010013s ago: executing program 2 (id=604): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004000)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9}, {0x75, 0x5, 0x2, 0x2, 0xf, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 7.008400995s ago: executing program 32 (id=557): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x0) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="500202020130"], 0x6) 5.004159544s ago: executing program 33 (id=574): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x4, 0x355c, 0x573, 0x0, 0xffffffffffffffff, 0x40000000, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000280)={0x0, 0x3f2f, 0x10100, 0x0, 0x8}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 3.9688642s ago: executing program 34 (id=581): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) r0 = gettid() syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x16, 0x2}]}) prctl$PR_GET_FPEMU(0x42, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0xf2cccc7fae7881b8, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) iopl(0x3) msgget(0x1, 0x1d8) msgctl$IPC_RMID(0x0, 0x0) msgget(0x3, 0x606) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) write$P9_RGETLOCK(r2, &(0x7f0000001440)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000080), 0x0) 3.003383974s ago: executing program 35 (id=587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd2b, 0x0, {0x0, 0x0, 0x0, r4, {0x6, 0xfff1}, {0x0, 0xfff1}, {0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000800) 0s ago: executing program 36 (id=604): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004000)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9}, {0x75, 0x5, 0x2, 0x2, 0xf, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.57' (ED25519) to the list of known hosts. syzkaller login: [ 73.517444][ T4238] cgroup: Unknown subsys name 'net' [ 73.651581][ T4238] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.209508][ T4238] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.751479][ T4254] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.762144][ T4254] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.770209][ T4254] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.778462][ T4254] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.781368][ T4264] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.786784][ T4254] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.796193][ T4264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.808052][ T4254] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.816605][ T4254] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.817564][ T4264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.824976][ T4254] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.831477][ T4264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.838226][ T4254] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.847223][ T4264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.852966][ T4254] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.860002][ T4264] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.866930][ T4254] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.874561][ T4264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.880480][ T4254] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.887377][ T4264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.896796][ T4254] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.901222][ T4264] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.909153][ T4254] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.923164][ T4254] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.931870][ T4254] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.964042][ T4263] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.988864][ T4254] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.996956][ T4254] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.006213][ T4254] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.034110][ T4254] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.472332][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 77.507329][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 77.529453][ T4248] chnl_net:caif_netlink_parms(): no params data found [ 77.590939][ T4258] chnl_net:caif_netlink_parms(): no params data found [ 77.690765][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 77.743747][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.750997][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.760031][ T4250] device bridge_slave_0 entered promiscuous mode [ 77.769426][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.776672][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.785105][ T4249] device bridge_slave_0 entered promiscuous mode [ 77.797957][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.805154][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.813160][ T4249] device bridge_slave_1 entered promiscuous mode [ 77.821449][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.828735][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.836639][ T4248] device bridge_slave_0 entered promiscuous mode [ 77.857212][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.864507][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.872687][ T4250] device bridge_slave_1 entered promiscuous mode [ 77.898940][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.906291][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.914629][ T4248] device bridge_slave_1 entered promiscuous mode [ 77.965562][ T4258] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.972717][ T4258] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.980819][ T4258] device bridge_slave_0 entered promiscuous mode [ 77.999083][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.015896][ T4248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.025895][ T4258] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.033015][ T4258] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.041533][ T4258] device bridge_slave_1 entered promiscuous mode [ 78.050784][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.061917][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.085432][ T4248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.113126][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.156076][ T4258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.190700][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.198116][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.206689][ T4251] device bridge_slave_0 entered promiscuous mode [ 78.217206][ T4248] team0: Port device team_slave_0 added [ 78.224928][ T4258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.237310][ T4250] team0: Port device team_slave_0 added [ 78.245861][ T4249] team0: Port device team_slave_0 added [ 78.253102][ T4250] team0: Port device team_slave_1 added [ 78.267915][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.275413][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.283326][ T4251] device bridge_slave_1 entered promiscuous mode [ 78.291387][ T4248] team0: Port device team_slave_1 added [ 78.306952][ T4249] team0: Port device team_slave_1 added [ 78.354559][ T4258] team0: Port device team_slave_0 added [ 78.362305][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.369495][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.395726][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.443056][ T4258] team0: Port device team_slave_1 added [ 78.449618][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.456946][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.483042][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.497015][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.507729][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.514975][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.541515][ T4248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.553887][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.560884][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.587295][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.612748][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.624194][ T4248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.631198][ T4248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.662713][ T4248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.678291][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.685575][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.711980][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.733016][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.740361][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.767755][ T4258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.805896][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.812868][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.838897][ T4258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.863410][ T4251] team0: Port device team_slave_0 added [ 78.883011][ T4250] device hsr_slave_0 entered promiscuous mode [ 78.890026][ T4250] device hsr_slave_1 entered promiscuous mode [ 78.904965][ T4251] team0: Port device team_slave_1 added [ 78.966834][ T4248] device hsr_slave_0 entered promiscuous mode [ 78.974101][ T4248] device hsr_slave_1 entered promiscuous mode [ 78.980729][ T4248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.988982][ T4248] Cannot create hsr debugfs directory [ 79.027844][ T4258] device hsr_slave_0 entered promiscuous mode [ 79.034916][ T4258] device hsr_slave_1 entered promiscuous mode [ 79.041519][ T4258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.049428][ T4258] Cannot create hsr debugfs directory [ 79.055592][ T4257] Bluetooth: hci3: command 0x0409 tx timeout [ 79.061837][ T4257] Bluetooth: hci0: command 0x0409 tx timeout [ 79.062369][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.068315][ T4254] Bluetooth: hci1: command 0x0409 tx timeout [ 79.075013][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 79.081124][ T4254] Bluetooth: hci4: command 0x0409 tx timeout [ 79.088479][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.119383][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.134436][ T4249] device hsr_slave_0 entered promiscuous mode [ 79.141384][ T4249] device hsr_slave_1 entered promiscuous mode [ 79.148410][ T4249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.156213][ T4249] Cannot create hsr debugfs directory [ 79.183654][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.190630][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.216898][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.354484][ T4251] device hsr_slave_0 entered promiscuous mode [ 79.361473][ T4251] device hsr_slave_1 entered promiscuous mode [ 79.370303][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.378631][ T4251] Cannot create hsr debugfs directory [ 79.636073][ T4250] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.649241][ T4250] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.658987][ T4250] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.670686][ T4250] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.729313][ T4258] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.749844][ T4258] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.759616][ T4258] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.782567][ T4258] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.837280][ T4248] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.858337][ T4248] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.885726][ T4248] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.900868][ T4248] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.941516][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.963554][ T4251] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.978592][ T4251] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.988235][ T4251] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.000323][ T4251] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.047674][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.061975][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.071584][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.115626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.127947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.138365][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.145681][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.155211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.175612][ T4249] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.187845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.200112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.209106][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.216271][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.232689][ T4249] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.244427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.262360][ T4258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.271242][ T4249] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.282963][ T4249] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.314191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.338409][ T4258] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.351044][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.362661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.371623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.380004][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.389469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.425965][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.435155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.444714][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.454156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.462711][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.469967][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.478267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.489069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.498480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.507507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.517120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.527472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.537073][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.544242][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.552162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.605974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.636750][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.680130][ T4248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.700022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.716697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.728439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.740263][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.771281][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.779096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.793689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.802995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.818325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.830314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.844509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.852502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.862424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.878799][ T4248] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.893059][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.909606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.919378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.963150][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.972229][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.994508][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.001653][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.015917][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.026124][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.035285][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.042501][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.050930][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.061465][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.070591][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.077759][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.087009][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.095942][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.105310][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.112599][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.121354][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.131257][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.134279][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 81.139397][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.144868][ T4254] Bluetooth: hci0: command 0x041b tx timeout [ 81.153897][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.163482][ T4257] Bluetooth: hci2: command 0x041b tx timeout [ 81.165628][ T4265] Bluetooth: hci1: command 0x041b tx timeout [ 81.171490][ T4257] Bluetooth: hci3: command 0x041b tx timeout [ 81.187681][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.206642][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.239204][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.253115][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.266060][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.275902][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.286233][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.296497][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.306911][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.344469][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.356284][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.371942][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.381264][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.390427][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.399984][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.409960][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.418718][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.439676][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.448552][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.461826][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.471547][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.480699][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.489618][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.512202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.521937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.539499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.550742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.582996][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.597670][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.607292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.620128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.632117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.646283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.691030][ T4258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.699376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.708938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.719302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.729627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.740563][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.747867][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.757035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.766284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.787306][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.794501][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.809665][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.817874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.827433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.837142][ T4250] device veth0_vlan entered promiscuous mode [ 81.863673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.904693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.915861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.926861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.937164][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.951812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.979419][ T4250] device veth1_vlan entered promiscuous mode [ 82.001104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.019406][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.031972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.047117][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.058661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.072408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.089292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.099824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.112498][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.153703][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.161882][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.179335][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.190371][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.203939][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.218480][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.227892][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.275051][ T4248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.286247][ T4258] device veth0_vlan entered promiscuous mode [ 82.298069][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.330363][ T4250] device veth0_macvtap entered promiscuous mode [ 82.359354][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.371088][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.403468][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.412376][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.432033][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.454469][ T4258] device veth1_vlan entered promiscuous mode [ 82.465954][ T4250] device veth1_macvtap entered promiscuous mode [ 82.495311][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.523760][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.549427][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.569625][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.669273][ T4258] device veth0_macvtap entered promiscuous mode [ 82.711588][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.729936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.754677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.779410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.800268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.822690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.845997][ T4251] device veth0_vlan entered promiscuous mode [ 82.856446][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.867456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.882820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.892074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.911964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.921157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.931774][ T4258] device veth1_macvtap entered promiscuous mode [ 82.948541][ T4251] device veth1_vlan entered promiscuous mode [ 82.965928][ T4250] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.979061][ T4250] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.988353][ T4250] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.997240][ T4250] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.011383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.020337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.029199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.056952][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.068110][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.087124][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.115089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.126097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.133981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.144100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.160250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.171657][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.183621][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.195506][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.213639][ T4257] Bluetooth: hci1: command 0x040f tx timeout [ 83.219703][ T4257] Bluetooth: hci4: command 0x040f tx timeout [ 83.221824][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.226005][ T4257] Bluetooth: hci2: command 0x040f tx timeout [ 83.233319][ T4254] Bluetooth: hci3: command 0x040f tx timeout [ 83.240009][ T4257] Bluetooth: hci0: command 0x040f tx timeout [ 83.257443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.266799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.282975][ T4258] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.292552][ T4258] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.305144][ T4258] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.314327][ T4258] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.367379][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.377143][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.386943][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.396245][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.466657][ T4251] device veth0_macvtap entered promiscuous mode [ 83.475469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.484310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.492890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.511337][ T4249] device veth0_vlan entered promiscuous mode [ 83.524122][ T4251] device veth1_macvtap entered promiscuous mode [ 83.536318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.546534][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.555494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.565389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.574712][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.618353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.631199][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.642854][ T4249] device veth1_vlan entered promiscuous mode [ 83.660915][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.671920][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.682273][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.700307][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.711542][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.729463][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.738102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.746428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.754620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.763672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.781816][ T4248] device veth0_vlan entered promiscuous mode [ 83.798617][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.809529][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.819791][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.831544][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.844877][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.865263][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.884873][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.907406][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.912615][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.915646][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.925680][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.941154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.949610][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.960670][ T4251] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.970369][ T4251] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.979199][ T4251] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.988090][ T4251] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.003947][ T4248] device veth1_vlan entered promiscuous mode [ 84.025012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.034091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.056593][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.066033][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.078683][ T4249] device veth0_macvtap entered promiscuous mode [ 84.089219][ T4249] device veth1_macvtap entered promiscuous mode [ 84.113021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.121621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.131853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.140234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.150455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.161396][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.170411][ T4248] device veth0_macvtap entered promiscuous mode [ 84.215147][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.231756][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.254432][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.268234][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.280978][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.291426][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.302429][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.314334][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.326783][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.342996][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.364451][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.375009][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.386469][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.397249][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.407579][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.418493][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.432404][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.443545][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.457559][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.467335][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.476930][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.488578][ T4248] device veth1_macvtap entered promiscuous mode [ 84.534253][ T4249] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.543009][ T4249] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.556617][ T4249] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.566246][ T4249] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.608170][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.632335][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.650047][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.662555][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.694039][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.706728][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.717879][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.729796][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.742694][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.755646][ T27] audit: type=1326 audit(1743741198.478:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbc18d169 code=0x7ffc0000 [ 84.773240][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.786641][ T27] audit: type=1326 audit(1743741198.478:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbc18d169 code=0x7ffc0000 [ 84.788983][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.827120][ T27] audit: type=1326 audit(1743741198.478:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0fbc18d169 code=0x7ffc0000 [ 84.861124][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.871170][ T27] audit: type=1326 audit(1743741198.478:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbc18d169 code=0x7ffc0000 [ 84.879326][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.901718][ T27] audit: type=1326 audit(1743741198.478:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbc18d169 code=0x7ffc0000 [ 84.939744][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.940343][ T27] audit: type=1326 audit(1743741198.478:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f0fbc18d169 code=0x7ffc0000 [ 84.949248][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.985222][ T27] audit: type=1326 audit(1743741198.478:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbc18d169 code=0x7ffc0000 [ 85.018803][ T27] audit: type=1326 audit(1743741198.478:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f0fbc18d169 code=0x7ffc0000 [ 85.046927][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.055429][ T27] audit: type=1326 audit(1743741198.478:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbc18d169 code=0x7ffc0000 [ 85.067149][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.095263][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.106019][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.116587][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.127533][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.143869][ T4248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.166608][ T4248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.179069][ T4248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.216774][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.232951][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.246738][ T4248] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.256502][ T4248] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.265410][ T4248] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.274621][ T4248] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.291525][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.296460][ T4257] Bluetooth: hci0: command 0x0419 tx timeout [ 85.303613][ T4254] Bluetooth: hci3: command 0x0419 tx timeout [ 85.305827][ T4257] Bluetooth: hci2: command 0x0419 tx timeout [ 85.311826][ T4254] Bluetooth: hci4: command 0x0419 tx timeout [ 85.319054][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 85.331051][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.386150][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.485486][ T4319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.565322][ T4319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.598898][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.640865][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.665058][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.676067][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.681627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.693353][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.737286][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.825940][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.840746][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.861345][ T27] audit: type=1326 audit(1743741199.578:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df018d169 code=0x7ffc0000 [ 85.877438][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.519045][ T4367] lo speed is unknown, defaulting to 1000 [ 86.546368][ T4370] ======================================================= [ 86.546368][ T4370] WARNING: The mand mount option has been deprecated and [ 86.546368][ T4370] and is ignored by this kernel. Remove the mand [ 86.546368][ T4370] option from the mount to silence this warning. [ 86.546368][ T4370] ======================================================= [ 86.635702][ T4367] lo speed is unknown, defaulting to 1000 [ 86.678371][ T4367] lo speed is unknown, defaulting to 1000 [ 86.718918][ T4367] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 86.771119][ T4367] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 86.922164][ T4367] lo speed is unknown, defaulting to 1000 [ 86.936371][ T4367] lo speed is unknown, defaulting to 1000 [ 86.953068][ T4367] lo speed is unknown, defaulting to 1000 [ 86.965264][ T4367] lo speed is unknown, defaulting to 1000 [ 86.991788][ T4367] lo speed is unknown, defaulting to 1000 [ 87.002841][ T4374] loop4: detected capacity change from 0 to 512 [ 87.136359][ T126] cfg80211: failed to load regulatory.db [ 87.143055][ T4374] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.17: bg 0: block 248: padding at end of block bitmap is not set [ 87.237996][ T4374] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.17: Failed to acquire dquot type 1 [ 87.340758][ T4374] EXT4-fs (loop4): 1 truncate cleaned up [ 87.358754][ T4374] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 87.409901][ T4374] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.442341][ T4379] syz.3.19 uses obsolete (PF_INET,SOCK_PACKET) [ 87.564574][ T4381] loop2: detected capacity change from 0 to 512 [ 87.759437][ T4381] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.797113][ T4248] EXT4-fs (loop4): unmounting filesystem. [ 87.824677][ T4381] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.877994][ T4396] netlink: 'syz.3.23': attribute type 10 has an invalid length. [ 88.973023][ T4396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.997530][ T4396] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 89.041043][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.086314][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.107526][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.122186][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 89.156667][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.198695][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.239040][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.300483][ T4404] loop2: detected capacity change from 0 to 512 [ 89.342834][ T4404] EXT4-fs: Ignoring removed nobh option [ 89.368467][ T4404] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.549767][ T4404] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.25: corrupted inode contents [ 89.591826][ T4410] xt_bpf: check failed: parse error [ 89.631987][ T4404] EXT4-fs (loop2): Remounting filesystem read-only [ 89.673360][ T4404] EXT4-fs error (device loop2): ext4_dirty_inode:6089: inode #16: comm syz.2.25: mark_inode_dirty error [ 89.716072][ T4404] EXT4-fs (loop2): Remounting filesystem read-only [ 89.759133][ T4404] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.25: corrupted inode contents [ 89.804458][ T4404] EXT4-fs (loop2): Remounting filesystem read-only [ 89.831182][ T4404] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.25: mark_inode_dirty error [ 89.871550][ T4404] EXT4-fs (loop2): Remounting filesystem read-only [ 89.887199][ T4404] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.25: corrupted inode contents [ 89.919143][ T4404] EXT4-fs (loop2): Remounting filesystem read-only [ 89.935010][ T4404] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 89.947541][ T4404] EXT4-fs (loop2): Remounting filesystem read-only [ 89.954903][ T4404] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.25: corrupted inode contents [ 89.970545][ T4404] EXT4-fs (loop2): Remounting filesystem read-only [ 89.978308][ T4404] EXT4-fs error (device loop2): ext4_truncate:4311: inode #16: comm syz.2.25: mark_inode_dirty error [ 89.990235][ T27] kauditd_printk_skb: 63 callbacks suppressed [ 89.990251][ T27] audit: type=1326 audit(1743741203.708:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4419 comm="syz.4.32" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04df58d169 code=0x0 [ 90.023907][ T4404] EXT4-fs (loop2): Remounting filesystem read-only [ 90.037216][ T4404] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 90.057225][ T27] audit: type=1326 audit(1743741203.778:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4419 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 90.083835][ T4404] EXT4-fs (loop2): Remounting filesystem read-only [ 90.098021][ T27] audit: type=1326 audit(1743741203.778:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4419 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 90.104987][ T4404] EXT4-fs (loop2): 1 truncate cleaned up [ 90.134289][ T9] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 90.152122][ T27] audit: type=1326 audit(1743741203.778:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4419 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 90.164168][ T4404] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 90.182173][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6818: comm kworker/u4:0: Failed to release dquot type 1 [ 90.206588][ T9] EXT4-fs (loop2): Remounting filesystem read-only [ 90.218929][ T27] audit: type=1326 audit(1743741203.778:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4419 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 90.230457][ T4404] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.249450][ T27] audit: type=1326 audit(1743741203.778:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4419 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 90.290631][ T27] audit: type=1326 audit(1743741203.778:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4419 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 90.346863][ T27] audit: type=1326 audit(1743741203.778:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4419 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 90.426584][ T27] audit: type=1326 audit(1743741203.778:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4419 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 90.497686][ T4404] EXT4-fs error (device loop2): ext4_acquire_dquot:6795: comm syz.2.25: Failed to acquire dquot type 1 [ 90.510770][ T4404] EXT4-fs (loop2): Remounting filesystem read-only [ 90.522401][ T4404] EXT4-fs error (device loop2): ext4_acquire_dquot:6795: comm syz.2.25: Failed to acquire dquot type 1 [ 90.563405][ T4404] EXT4-fs (loop2): Remounting filesystem read-only [ 90.593499][ T4423] lo speed is unknown, defaulting to 1000 [ 90.711843][ T4404] lo speed is unknown, defaulting to 1000 [ 91.024009][ T4433] netlink: 'syz.4.37': attribute type 7 has an invalid length. [ 91.189223][ T4437] syz.4.38 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 91.301613][ T4439] netlink: 56 bytes leftover after parsing attributes in process `syz.0.39'. [ 91.585799][ T4445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.41'. [ 92.092691][ T4455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.100235][ T4455] IPv6: NLM_F_CREATE should be set when creating new route [ 92.239594][ T4455] lo speed is unknown, defaulting to 1000 [ 92.981562][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 93.142909][ T4464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'. [ 93.406721][ T4468] loop4: detected capacity change from 0 to 256 [ 93.450126][ T4468] FAT-fs (loop4): bogus number of FAT sectors [ 93.515731][ T4468] FAT-fs (loop4): Can't find a valid FAT filesystem [ 93.547015][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.569628][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.591026][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.637870][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.656108][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.699794][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.072827][ T4476] loop3: detected capacity change from 0 to 512 [ 94.101936][ T4480] Zero length message leads to an empty skb [ 94.260651][ T4476] EXT4-fs (loop3): 1 orphan inode deleted [ 94.267014][ T4319] EXT4-fs error (device loop3): ext4_release_dquot:6818: comm kworker/u4:6: Failed to release dquot type 1 [ 94.276940][ T4476] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 94.295477][ T4476] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.419314][ T4476] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 94.674767][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 95.138876][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.148383][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.156935][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.259382][ T27] kauditd_printk_skb: 227 callbacks suppressed [ 95.259400][ T27] audit: type=1326 audit(1743741208.978:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df018d169 code=0x7ffc0000 [ 95.974963][ T27] audit: type=1326 audit(1743741209.158:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f4df018d169 code=0x7ffc0000 [ 96.023322][ T27] audit: type=1326 audit(1743741209.208:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4499 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df018d169 code=0x7ffc0000 [ 96.231691][ T4511] loop3: detected capacity change from 0 to 512 [ 96.271610][ T4513] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.67'. [ 96.351951][ T4517] loop4: detected capacity change from 0 to 164 [ 96.369295][ T4340] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.471019][ T4519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 96.541743][ T4517] Unsupported NM flag settings (8) [ 96.766511][ T27] audit: type=1326 audit(1743741210.488:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 96.820285][ T27] audit: type=1326 audit(1743741210.488:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 97.194445][ T27] audit: type=1326 audit(1743741210.488:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 97.258753][ T4534] loop3: detected capacity change from 0 to 128 [ 97.843195][ C0] sched: RT throttling activated [ 97.987149][ T27] audit: type=1326 audit(1743741210.488:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 98.172874][ T27] audit: type=1326 audit(1743741210.488:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 98.204541][ T4540] syz.0.77[4540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.204655][ T4540] syz.0.77[4540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.315245][ T4540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'. [ 98.344932][ T27] audit: type=1326 audit(1743741210.488:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 98.435633][ T27] audit: type=1326 audit(1743741210.488:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4524 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 98.629143][ T4541] lo speed is unknown, defaulting to 1000 [ 99.569315][ T4551] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.81'. [ 100.201753][ T4565] loop2: detected capacity change from 0 to 164 [ 100.219043][ T4569] lo speed is unknown, defaulting to 1000 [ 100.221162][ T4572] loop3: detected capacity change from 0 to 512 [ 100.254249][ T4572] EXT4-fs: Ignoring removed nobh option [ 100.369480][ T4572] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.91: corrupted inode contents [ 100.450433][ T4572] EXT4-fs (loop3): Remounting filesystem read-only [ 100.513405][ T4572] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #16: comm syz.3.91: mark_inode_dirty error [ 100.549553][ T4572] EXT4-fs (loop3): Remounting filesystem read-only [ 100.563977][ T4572] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.91: corrupted inode contents [ 100.642302][ T4572] EXT4-fs (loop3): Remounting filesystem read-only [ 100.693260][ T4572] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.91: mark_inode_dirty error [ 100.729903][ T4581] 9pnet_fd: Insufficient options for proto=fd [ 100.743729][ T4572] EXT4-fs (loop3): Remounting filesystem read-only [ 100.750649][ T4572] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.91: corrupted inode contents [ 100.767569][ T27] kauditd_printk_skb: 73 callbacks suppressed [ 100.767585][ T27] audit: type=1326 audit(1743741214.488:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 100.810930][ T4572] EXT4-fs (loop3): Remounting filesystem read-only [ 100.827539][ T4581] loop4: detected capacity change from 0 to 1024 [ 100.843385][ T4572] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 100.872474][ T27] audit: type=1326 audit(1743741214.528:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 100.916700][ T4572] EXT4-fs (loop3): Remounting filesystem read-only [ 100.933398][ T4572] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.91: corrupted inode contents [ 100.965715][ T27] audit: type=1326 audit(1743741214.528:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 100.993672][ T4581] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 101.010503][ T4572] EXT4-fs (loop3): Remounting filesystem read-only [ 101.023222][ T4572] EXT4-fs error (device loop3): ext4_truncate:4311: inode #16: comm syz.3.91: mark_inode_dirty error [ 101.043956][ T4581] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 101.060443][ T4572] EXT4-fs (loop3): Remounting filesystem read-only [ 101.065337][ T4581] EXT4-fs error (device loop4): ext4_get_journal_inode:5723: inode #5: comm syz.4.93: unexpected bad inode w/o EXT4_IGET_BAD [ 101.073280][ T27] audit: type=1326 audit(1743741214.528:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f04df58d1a3 code=0x7ffc0000 [ 101.102958][ T4572] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 101.110773][ T4581] EXT4-fs (loop4): no journal found [ 101.128886][ T4572] EXT4-fs (loop3): Remounting filesystem read-only [ 101.146257][ T4572] EXT4-fs (loop3): 1 truncate cleaned up [ 101.152009][ T4572] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 101.171200][ T27] audit: type=1326 audit(1743741214.528:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f04df58bc1f code=0x7ffc0000 [ 101.173494][ T4581] EXT4-fs (loop4): can't get journal size [ 101.201374][ T11] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 101.216235][ T4572] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.233310][ T11] EXT4-fs error (device loop3): ext4_release_dquot:6818: comm kworker/u4:1: Failed to release dquot type 1 [ 101.259000][ T27] audit: type=1326 audit(1743741214.548:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f04df58d1f7 code=0x7ffc0000 [ 101.313367][ T11] EXT4-fs (loop3): Remounting filesystem read-only [ 101.352702][ T4581] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.401351][ T27] audit: type=1326 audit(1743741214.548:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f04df58bad0 code=0x7ffc0000 [ 101.402019][ T4581] EXT4-fs (loop4): unmounting filesystem. [ 101.487362][ T4572] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 101.513747][ T27] audit: type=1326 audit(1743741214.548:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04df58cd6b code=0x7ffc0000 [ 101.538522][ T4572] EXT4-fs error (device loop3): ext4_acquire_dquot:6795: comm syz.3.91: Failed to acquire dquot type 1 [ 101.563874][ T4597] EXT4-fs error (device loop3): ext4_acquire_dquot:6795: comm syz.3.91: Failed to acquire dquot type 1 [ 101.589487][ T4572] EXT4-fs (loop3): Remounting filesystem read-only [ 101.652451][ T4597] EXT4-fs (loop3): Remounting filesystem read-only [ 101.824518][ T4572] lo speed is unknown, defaulting to 1000 [ 102.265638][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 102.665862][ T4617] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.108'. [ 102.778227][ T4619] loop3: detected capacity change from 0 to 1024 [ 102.866743][ T4619] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 102.979151][ T4619] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.109: Allocating blocks 385-513 which overlap fs metadata [ 103.105358][ T4618] EXT4-fs (loop3): pa ffff888073e82620: logic 16, phys. 129, len 24 [ 103.113934][ T4618] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 103.302410][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 103.391141][ T4640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'. [ 103.750400][ T4650] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 104.134219][ T4660] loop1: detected capacity change from 0 to 512 [ 104.159947][ T4660] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.247296][ T4660] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.128: corrupted in-inode xattr [ 104.305015][ T4664] netlink: 'syz.3.130': attribute type 1 has an invalid length. [ 104.331031][ T4660] EXT4-fs (loop1): Remounting filesystem read-only [ 104.339317][ T4660] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 104.360826][ T4665] Driver unsupported XDP return value 0 on prog (id 58) dev N/A, expect packet loss! [ 104.386666][ T4660] EXT4-fs (loop1): 1 truncate cleaned up [ 104.392501][ T4660] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 104.630711][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 104.869669][ T4676] lo speed is unknown, defaulting to 1000 [ 106.518378][ T4733] unsupported nla_type 52263 [ 106.997239][ T4744] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 107.045587][ T4746] device syzkaller1 entered promiscuous mode [ 107.338787][ T4753] loop3: detected capacity change from 0 to 512 [ 107.431547][ T4340] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.576102][ T27] kauditd_printk_skb: 67 callbacks suppressed [ 107.576124][ T27] audit: type=1326 audit(1743741221.298:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 107.699483][ T27] audit: type=1326 audit(1743741221.298:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 107.788712][ T27] audit: type=1326 audit(1743741221.358:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 107.819817][ T4765] loop3: detected capacity change from 0 to 512 [ 107.871499][ T27] audit: type=1326 audit(1743741221.358:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 107.934230][ T27] audit: type=1326 audit(1743741221.358:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 107.942007][ T4765] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.035623][ T4765] EXT4-fs (loop3): 1 truncate cleaned up [ 108.069573][ T27] audit: type=1326 audit(1743741221.358:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 108.099863][ T4765] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 108.194467][ T27] audit: type=1326 audit(1743741221.358:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 108.287966][ T27] audit: type=1326 audit(1743741221.358:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 108.365794][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 108.402509][ T27] audit: type=1326 audit(1743741221.358:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 108.502174][ T27] audit: type=1326 audit(1743741221.358:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4760 comm="syz.4.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 108.585226][ T4785] process 'syz.1.177' launched '/dev/fd/6' with NULL argv: empty string added [ 108.768495][ T4793] loop3: detected capacity change from 0 to 512 [ 109.240219][ T4810] loop3: detected capacity change from 0 to 2048 [ 111.067001][ T4906] loop4: detected capacity change from 0 to 512 [ 111.108002][ T4906] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 111.162425][ T4906] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.199: corrupted in-inode xattr [ 111.185531][ T4909] lo speed is unknown, defaulting to 1000 [ 111.202926][ T4906] EXT4-fs (loop4): Remounting filesystem read-only [ 111.234514][ T4906] EXT4-fs (loop4): 1 truncate cleaned up [ 111.240281][ T4906] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 111.476292][ T4248] EXT4-fs (loop4): unmounting filesystem. [ 111.747579][ T4918] mmap: syz.4.203 (4918) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.980274][ T4923] binfmt_misc: register: failed to install interpreter file ./file2 [ 113.487442][ T4954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 113.615690][ T4957] loop4: detected capacity change from 0 to 512 [ 113.835767][ T4954] bond0: (slave bond_slave_0): Releasing backup interface [ 114.122363][ T27] kauditd_printk_skb: 41 callbacks suppressed [ 114.122383][ T27] audit: type=1326 audit(1743938522.841:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 114.199829][ T27] audit: type=1326 audit(1743938522.881:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 114.298035][ T27] audit: type=1326 audit(1743938522.891:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 114.440749][ T27] audit: type=1326 audit(1743938522.891:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 114.514865][ T27] audit: type=1326 audit(1743938522.891:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 114.516504][ T4978] hub 9-0:1.0: USB hub found [ 114.588997][ T4978] hub 9-0:1.0: 1 port detected [ 114.624746][ T27] audit: type=1326 audit(1743938522.891:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 114.691554][ T27] audit: type=1326 audit(1743938522.891:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 114.755311][ T27] audit: type=1326 audit(1743938522.891:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 114.817503][ T27] audit: type=1326 audit(1743938522.891:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 114.899478][ T27] audit: type=1326 audit(1743938522.891:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4966 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 115.780098][ T5012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.230'. [ 116.044930][ T5018] lo speed is unknown, defaulting to 1000 [ 116.976810][ T5025] syz.4.233[5025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.976917][ T5025] syz.4.233[5025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.127346][ T5031] loop1: detected capacity change from 0 to 512 [ 117.210912][ T5023] lo speed is unknown, defaulting to 1000 [ 117.310346][ T5031] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.458912][ T5031] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.234: corrupted in-inode xattr [ 117.492422][ T5031] EXT4-fs (loop1): Remounting filesystem read-only [ 117.509840][ T5031] EXT4-fs (loop1): 1 truncate cleaned up [ 117.585310][ T5031] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 117.858484][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 118.119772][ T5055] loop1: detected capacity change from 0 to 1024 [ 118.194148][ T5058] 9pnet_fd: Insufficient options for proto=fd [ 118.256858][ T5055] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 118.320747][ T5055] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 118.375911][ T5055] EXT4-fs (loop1): orphan cleanup on readonly fs [ 118.387903][ T5055] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 118.402127][ T5055] EXT4-fs (loop1): Remounting filesystem read-only [ 118.408901][ T5055] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #3: comm syz.1.241: mark_inode_dirty error [ 118.431095][ T5055] EXT4-fs (loop1): Remounting filesystem read-only [ 118.438234][ T5055] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.241: Invalid block bitmap block 3 in block_group 0 [ 118.456002][ T5055] EXT4-fs (loop1): Remounting filesystem read-only [ 118.462937][ T5055] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 118.514299][ T5055] EXT4-fs (loop1): Remounting filesystem read-only [ 118.521105][ T5055] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #3: comm syz.1.241: mark_inode_dirty error [ 118.543476][ T5069] capability: warning: `syz.3.244' uses 32-bit capabilities (legacy support in use) [ 118.613043][ T5055] EXT4-fs (loop1): Remounting filesystem read-only [ 118.625268][ T5055] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 1: comm syz.1.241: lblock 6 mapped to illegal pblock 1 (length 1) [ 118.694449][ T5055] EXT4-fs (loop1): Remounting filesystem read-only [ 118.702138][ T5055] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 48: comm syz.1.241: lblock 0 mapped to illegal pblock 48 (length 1) [ 118.771857][ T5055] EXT4-fs (loop1): Remounting filesystem read-only [ 118.811560][ T5055] EXT4-fs error (device loop1): ext4_acquire_dquot:6795: comm syz.1.241: Failed to acquire dquot type 0 [ 118.883507][ T5055] EXT4-fs (loop1): Remounting filesystem read-only [ 118.890222][ T5055] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 49: comm syz.1.241: lblock 1 mapped to illegal pblock 49 (length 1) [ 118.890271][ T5080] netlink: 16 bytes leftover after parsing attributes in process `syz.4.248'. [ 118.944285][ T5055] EXT4-fs (loop1): Remounting filesystem read-only [ 118.950931][ T5055] EXT4-fs error (device loop1): ext4_acquire_dquot:6795: comm syz.1.241: Failed to acquire dquot type 0 [ 119.030683][ T5055] EXT4-fs (loop1): Remounting filesystem read-only [ 119.044133][ T5055] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 119.088275][ T5055] EXT4-fs (loop1): Remounting filesystem read-only [ 119.132178][ T5055] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #15: comm syz.1.241: mark_inode_dirty error [ 119.209440][ T5055] EXT4-fs (loop1): Remounting filesystem read-only [ 119.227917][ T5055] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 119.264015][ T5055] EXT4-fs (loop1): 1 orphan inode deleted [ 119.295419][ T5055] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 119.558445][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 120.190502][ T5119] loop3: detected capacity change from 0 to 512 [ 120.863746][ T5141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'. [ 121.093764][ T5153] syz.2.272[5153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.093895][ T5153] syz.2.272[5153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.334012][ T5199] bridge0: port 3(vlan2) entered blocking state [ 122.363549][ T5199] bridge0: port 3(vlan2) entered disabled state [ 122.762516][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 122.762533][ T27] audit: type=1326 audit(1743938531.481:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5209 comm="syz.1.292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0332f8d169 code=0x0 [ 123.090242][ T27] audit: type=1326 audit(1743938531.811:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5225 comm="syz.4.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 123.120949][ T5226] loop4: detected capacity change from 0 to 512 [ 123.153272][ T27] audit: type=1326 audit(1743938531.811:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5225 comm="syz.4.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 123.159530][ T5226] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.236502][ T27] audit: type=1326 audit(1743938531.811:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5225 comm="syz.4.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 123.308542][ T27] audit: type=1326 audit(1743938531.811:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5225 comm="syz.4.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 123.375899][ T5226] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 123.390632][ T27] audit: type=1326 audit(1743938531.811:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5225 comm="syz.4.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 123.413815][ T5226] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.540168][ T27] audit: type=1326 audit(1743938531.811:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5225 comm="syz.4.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 123.621690][ T27] audit: type=1326 audit(1743938531.821:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5225 comm="syz.4.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f04df58d1a3 code=0x7ffc0000 [ 123.637422][ T4248] EXT4-fs (loop4): unmounting filesystem. [ 123.679486][ T27] audit: type=1326 audit(1743938531.841:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5225 comm="syz.4.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f04df58bc1f code=0x7ffc0000 [ 123.803412][ T27] audit: type=1326 audit(1743938531.841:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5225 comm="syz.4.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f04df58d1f7 code=0x7ffc0000 [ 123.957424][ T5245] capability: warning: `syz.0.305' uses deprecated v2 capabilities in a way that may be insecure [ 124.023683][ T5249] program syz.0.305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.338287][ T5258] loop1: detected capacity change from 0 to 512 [ 124.492902][ T5261] loop2: detected capacity change from 0 to 512 [ 124.523634][ T5261] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.591444][ T5261] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.312: corrupted in-inode xattr [ 124.636846][ T5261] EXT4-fs (loop2): Remounting filesystem read-only [ 124.668526][ T5261] EXT4-fs (loop2): 1 truncate cleaned up [ 124.703979][ T5261] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 124.766683][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 125.001528][ T5277] lo speed is unknown, defaulting to 1000 [ 125.011249][ T5281] program syz.0.319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.074456][ T5283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.320'. [ 125.482274][ T5296] loop1: detected capacity change from 0 to 512 [ 125.520237][ T5296] EXT4-fs: Ignoring removed nobh option [ 125.615785][ T5296] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.325: corrupted inode contents [ 125.630713][ T5296] EXT4-fs (loop1): Remounting filesystem read-only [ 125.637750][ T5296] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #16: comm syz.1.325: mark_inode_dirty error [ 125.652290][ T5296] EXT4-fs (loop1): Remounting filesystem read-only [ 125.663711][ T5296] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.325: corrupted inode contents [ 125.698218][ T5296] EXT4-fs (loop1): Remounting filesystem read-only [ 125.704911][ T5296] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.325: mark_inode_dirty error [ 125.726636][ T5296] EXT4-fs (loop1): Remounting filesystem read-only [ 125.737033][ T5296] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.325: corrupted inode contents [ 125.763637][ T5296] EXT4-fs (loop1): Remounting filesystem read-only [ 125.783260][ T5296] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 125.830049][ T5296] EXT4-fs (loop1): Remounting filesystem read-only [ 125.859208][ T5296] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.325: corrupted inode contents [ 125.903749][ T5296] EXT4-fs (loop1): Remounting filesystem read-only [ 125.913689][ T5296] EXT4-fs error (device loop1): ext4_truncate:4311: inode #16: comm syz.1.325: mark_inode_dirty error [ 125.952359][ T5296] EXT4-fs (loop1): Remounting filesystem read-only [ 125.973353][ T5296] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 126.080851][ T5296] EXT4-fs (loop1): Remounting filesystem read-only [ 126.106161][ T5296] EXT4-fs (loop1): 1 truncate cleaned up [ 126.142521][ T5296] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 126.171791][ T4319] EXT4-fs error (device loop1): ext4_release_dquot:6818: comm kworker/u4:6: Failed to release dquot type 1 [ 126.201211][ T5296] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.583136][ T4319] EXT4-fs (loop1): Remounting filesystem read-only [ 127.031293][ T5296] lo speed is unknown, defaulting to 1000 [ 127.120521][ T5325] program syz.3.333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.312129][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 127.835923][ T5343] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.852501][ T5343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.861795][ T5343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.963078][ T27] kauditd_printk_skb: 170 callbacks suppressed [ 127.969584][ T27] audit: type=1326 audit(1743938536.481:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5321 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33d5b84127 code=0x7ffc0000 [ 128.343284][ T27] audit: type=1326 audit(1743938536.481:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5321 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33d5b29359 code=0x7ffc0000 [ 128.427504][ T27] audit: type=1326 audit(1743938536.481:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5321 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f33d5b8d169 code=0x7ffc0000 [ 128.467438][ T5345] loop1: detected capacity change from 0 to 512 [ 128.504167][ T27] audit: type=1326 audit(1743938536.481:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5321 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33d5b84127 code=0x7ffc0000 [ 128.552287][ T27] audit: type=1326 audit(1743938536.481:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5321 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33d5b29359 code=0x7ffc0000 [ 128.592346][ T5345] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 128.606686][ T5348] loop4: detected capacity change from 0 to 512 [ 128.629363][ T5345] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.651303][ T5348] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 128.686312][ T27] audit: type=1326 audit(1743938536.501:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5321 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33d5b84127 code=0x7ffc0000 [ 128.716588][ T5348] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.341: corrupted in-inode xattr [ 128.741406][ T5348] EXT4-fs (loop4): Remounting filesystem read-only [ 128.761864][ T5348] EXT4-fs (loop4): 1 truncate cleaned up [ 128.804070][ T5348] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 128.873471][ T27] audit: type=1326 audit(1743938536.521:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5321 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33d5b29359 code=0x7ffc0000 [ 128.955231][ T27] audit: type=1326 audit(1743938537.041:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5321 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33d5b84127 code=0x7ffc0000 [ 128.960955][ T5364] program syz.3.346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.007262][ T4248] EXT4-fs (loop4): unmounting filesystem. [ 129.015635][ T27] audit: type=1326 audit(1743938537.041:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5321 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33d5b29359 code=0x7ffc0000 [ 129.100537][ T5366] 9pnet_fd: Insufficient options for proto=fd [ 129.108896][ T27] audit: type=1326 audit(1743938537.041:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5321 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33d5b84127 code=0x7ffc0000 [ 129.245529][ T5370] loop4: detected capacity change from 0 to 512 [ 129.267048][ T5370] EXT4-fs: Ignoring removed nobh option [ 129.327920][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 129.328936][ T5370] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.348: corrupted inode contents [ 129.354048][ T5370] EXT4-fs (loop4): Remounting filesystem read-only [ 129.361077][ T5370] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #16: comm syz.4.348: mark_inode_dirty error [ 129.386220][ T5370] EXT4-fs (loop4): Remounting filesystem read-only [ 129.426605][ T5377] loop3: detected capacity change from 0 to 128 [ 129.433927][ T5377] EXT4-fs: Ignoring removed nobh option [ 129.466167][ T5370] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.348: corrupted inode contents [ 129.479443][ T5377] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 129.542683][ T5370] EXT4-fs (loop4): Remounting filesystem read-only [ 129.578912][ T5370] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.348: mark_inode_dirty error [ 129.591445][ T5377] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.663400][ T5370] EXT4-fs (loop4): Remounting filesystem read-only [ 129.670459][ T5370] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.348: corrupted inode contents [ 129.702181][ T5370] EXT4-fs (loop4): Remounting filesystem read-only [ 129.717569][ T5370] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 129.739071][ T5370] EXT4-fs (loop4): Remounting filesystem read-only [ 129.753909][ T5370] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.348: corrupted inode contents [ 129.785774][ T5370] EXT4-fs (loop4): Remounting filesystem read-only [ 129.799796][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 129.809340][ T5370] EXT4-fs error (device loop4): ext4_truncate:4311: inode #16: comm syz.4.348: mark_inode_dirty error [ 129.829573][ T5370] EXT4-fs (loop4): Remounting filesystem read-only [ 129.869773][ T5370] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 129.896473][ T5370] EXT4-fs (loop4): Remounting filesystem read-only [ 129.911826][ T5370] EXT4-fs (loop4): 1 truncate cleaned up [ 129.922457][ T5370] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 129.936276][ T4319] EXT4-fs error (device loop4): ext4_release_dquot:6818: comm kworker/u4:6: Failed to release dquot type 1 [ 129.950451][ T4319] EXT4-fs (loop4): Remounting filesystem read-only [ 129.958289][ T5370] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.109941][ T5370] lo speed is unknown, defaulting to 1000 [ 130.318516][ T5400] program syz.1.359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.297268][ T4248] EXT4-fs (loop4): unmounting filesystem. [ 131.434283][ T5420] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 131.477066][ T5420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.512398][ T5420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.541843][ T5420] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 131.627600][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 131.689007][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.738882][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.901494][ T5440] program syz.4.373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.671684][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.683565][ T5468] loop3: detected capacity change from 0 to 512 [ 132.697777][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.702785][ T5471] program syz.1.388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.735382][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.747819][ T5468] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 132.797962][ T5469] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 132.851964][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 132.908010][ T5468] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.386: corrupted in-inode xattr [ 132.947689][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.955976][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.958970][ T5468] EXT4-fs (loop3): Remounting filesystem read-only [ 132.971690][ T5468] EXT4-fs (loop3): 1 truncate cleaned up [ 132.986204][ T5468] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 133.216785][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.227316][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.931618][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 134.152736][ T5490] lo speed is unknown, defaulting to 1000 [ 134.238053][ T5503] program syz.2.400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.404561][ T5507] lo speed is unknown, defaulting to 1000 [ 134.553299][ T5510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.402'. [ 134.610719][ T5512] loop3: detected capacity change from 0 to 512 [ 134.678246][ T4340] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.691414][ T5510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.402'. [ 134.765434][ T5513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.402'. [ 134.804410][ T5513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.402'. [ 135.071877][ T5526] loop4: detected capacity change from 0 to 512 [ 135.120538][ T5526] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.277230][ T5526] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.407: corrupted in-inode xattr [ 135.323904][ T5526] EXT4-fs (loop4): Remounting filesystem read-only [ 135.478302][ T5526] EXT4-fs (loop4): 1 truncate cleaned up [ 135.487777][ T5526] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 135.504592][ T5537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.511933][ T5537] IPv6: NLM_F_CREATE should be set when creating new route [ 135.678467][ T5537] lo speed is unknown, defaulting to 1000 [ 136.176117][ T5539] loop3: detected capacity change from 0 to 512 [ 136.183584][ T5539] EXT4-fs: Ignoring removed nobh option [ 136.219282][ T5539] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.413: corrupted inode contents [ 136.239280][ T5539] EXT4-fs (loop3): Remounting filesystem read-only [ 136.267968][ T5539] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #16: comm syz.3.413: mark_inode_dirty error [ 136.358331][ T5539] EXT4-fs (loop3): Remounting filesystem read-only [ 136.387901][ T5539] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.413: corrupted inode contents [ 136.431322][ T5539] EXT4-fs (loop3): Remounting filesystem read-only [ 136.446149][ T5539] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.413: mark_inode_dirty error [ 136.516604][ T5539] EXT4-fs (loop3): Remounting filesystem read-only [ 136.527293][ T5539] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.413: corrupted inode contents [ 136.547380][ T4248] EXT4-fs (loop4): unmounting filesystem. [ 136.562085][ T5539] EXT4-fs (loop3): Remounting filesystem read-only [ 136.586951][ T5539] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 136.599072][ T5539] EXT4-fs (loop3): Remounting filesystem read-only [ 136.609980][ T5539] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.413: corrupted inode contents [ 136.629038][ T5539] EXT4-fs (loop3): Remounting filesystem read-only [ 136.652131][ T5539] EXT4-fs error (device loop3): ext4_truncate:4311: inode #16: comm syz.3.413: mark_inode_dirty error [ 136.696645][ T5539] EXT4-fs (loop3): Remounting filesystem read-only [ 136.753910][ T5539] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 136.960794][ T5539] EXT4-fs (loop3): Remounting filesystem read-only [ 137.177616][ T5539] EXT4-fs (loop3): 1 truncate cleaned up [ 137.388806][ T5539] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 137.434194][ T5539] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.507608][ T4319] __quota_error: 85 callbacks suppressed [ 137.507628][ T4319] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 137.583644][ T4319] EXT4-fs error (device loop3): ext4_release_dquot:6818: comm kworker/u4:6: Failed to release dquot type 1 [ 137.668270][ T4319] EXT4-fs (loop3): Remounting filesystem read-only [ 137.697402][ T5561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.420'. [ 137.809164][ T5539] lo speed is unknown, defaulting to 1000 [ 138.176931][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 138.212049][ T5575] lo speed is unknown, defaulting to 1000 [ 138.540998][ T5579] block device autoloading is deprecated and will be removed. [ 140.287789][ T5597] device bond1 entered promiscuous mode [ 140.304636][ T5597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.798399][ T5617] 9pnet_fd: Insufficient options for proto=fd [ 140.960029][ T27] audit: type=1326 audit(1743938549.681:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5616 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0332f8d169 code=0x7ffc0000 [ 141.508493][ T27] audit: type=1326 audit(1743938549.731:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5616 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0332f8d169 code=0x7ffc0000 [ 141.532693][ T27] audit: type=1326 audit(1743938549.741:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5616 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0332f8d1a3 code=0x7ffc0000 [ 141.586697][ T27] audit: type=1326 audit(1743938550.311:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5616 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0332f8bc1f code=0x7ffc0000 [ 141.643734][ T27] audit: type=1326 audit(1743938550.361:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5616 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0332f8d1f7 code=0x7ffc0000 [ 141.703241][ T27] audit: type=1326 audit(1743938550.391:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5616 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0332f8bad0 code=0x7ffc0000 [ 141.770279][ T27] audit: type=1326 audit(1743938550.391:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5616 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0332f8bdca code=0x7ffc0000 [ 141.832034][ T27] audit: type=1326 audit(1743938550.391:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5616 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0332f8d169 code=0x7ffc0000 [ 141.863860][ T5597] bond1 (unregistering): Released all slaves [ 141.911545][ T27] audit: type=1326 audit(1743938550.391:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5616 comm="syz.1.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0332f8d169 code=0x7ffc0000 [ 142.042170][ T5629] 9pnet_fd: Insufficient options for proto=fd [ 143.336838][ T5648] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.373626][ T5648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.407697][ T5648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.552906][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 143.603571][ T5659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.454'. [ 143.638397][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.659230][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.708027][ T5656] lo speed is unknown, defaulting to 1000 [ 143.812931][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 143.812951][ T27] audit: type=1326 audit(1743938552.531:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbc18d169 code=0x7ffc0000 [ 143.900994][ T27] audit: type=1326 audit(1743938552.531:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbc18d169 code=0x7ffc0000 [ 143.991668][ T27] audit: type=1326 audit(1743938552.581:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fbc18d169 code=0x7ffc0000 [ 144.038979][ T5666] netlink: 'syz.0.457': attribute type 72 has an invalid length. [ 144.114803][ T27] audit: type=1326 audit(1743938552.581:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbc18d169 code=0x7ffc0000 [ 144.200631][ T5669] lo speed is unknown, defaulting to 1000 [ 144.217968][ T27] audit: type=1326 audit(1743938552.581:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbc18d169 code=0x7ffc0000 [ 144.321396][ T27] audit: type=1326 audit(1743938552.581:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fbc18d169 code=0x7ffc0000 [ 144.446462][ T27] audit: type=1326 audit(1743938552.581:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbc18d169 code=0x7ffc0000 [ 144.474779][ T5677] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 144.533462][ T27] audit: type=1326 audit(1743938552.581:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f0fbc18d169 code=0x7ffc0000 [ 144.593312][ T27] audit: type=1326 audit(1743938552.581:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbc18d169 code=0x7ffc0000 [ 144.690341][ T27] audit: type=1326 audit(1743938552.581:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbc18d169 code=0x7ffc0000 [ 144.845826][ T5688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.467'. [ 145.196313][ T5699] netlink: 'syz.2.470': attribute type 72 has an invalid length. [ 145.270817][ T5703] lo speed is unknown, defaulting to 1000 [ 145.655041][ T5715] lo speed is unknown, defaulting to 1000 [ 146.402243][ T5726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.481'. [ 146.691347][ T5727] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 147.414229][ T5741] lo speed is unknown, defaulting to 1000 [ 148.246610][ T5744] lo speed is unknown, defaulting to 1000 [ 148.357265][ T5755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.491'. [ 148.630895][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.640488][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.648054][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.029616][ T5770] lo speed is unknown, defaulting to 1000 [ 149.162371][ T27] audit: type=1326 audit(1743938557.881:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 149.209305][ T27] audit: type=1326 audit(1743938557.911:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 149.285624][ T27] audit: type=1326 audit(1743938557.921:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 149.477542][ T27] audit: type=1326 audit(1743938557.931:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 149.506433][ T27] audit: type=1326 audit(1743938557.931:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 149.549941][ T27] audit: type=1326 audit(1743938557.931:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 149.598752][ T27] audit: type=1326 audit(1743938557.931:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 149.627651][ T27] audit: type=1326 audit(1743938557.931:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 149.718999][ T27] audit: type=1326 audit(1743938557.931:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 149.793273][ T27] audit: type=1326 audit(1743938557.931:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 150.108762][ T5795] infiniband syz1: set active [ 150.139131][ T5807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.510'. [ 150.151278][ T5795] infiniband syz1: added syz_tun [ 150.338964][ T5795] RDS/IB: syz1: added [ 150.364292][ T5795] smc: adding ib device syz1 with port count 1 [ 150.373678][ T5795] smc: ib device syz1 port 1 has pnetid [ 150.964213][ T5834] netlink: 'syz.0.521': attribute type 1 has an invalid length. [ 151.006756][ T5834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.284023][ T5837] program syz.1.522 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.874245][ T5839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.910499][ T5839] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 151.952689][ T5839] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 152.297787][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 152.315118][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.331958][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.368530][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 152.380617][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.448560][ T5852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.583941][ T5860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.528'. [ 152.811640][ T5865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'. [ 155.355138][ T5830] siw: device registration error -23 [ 155.355776][ T5874] lo speed is unknown, defaulting to 1000 [ 155.369703][ T5843] lo speed is unknown, defaulting to 1000 [ 156.075365][ T5902] loop4: detected capacity change from 0 to 512 [ 156.187499][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.542'. [ 156.310657][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 156.332420][ T5911] program syz.0.547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.228626][ T5919] lo speed is unknown, defaulting to 1000 [ 157.325223][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 158.552396][ T5923] bond0: (slave bond_slave_0): Releasing backup interface [ 158.626107][ T5932] lo speed is unknown, defaulting to 1000 [ 159.282751][ T5960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.561'. [ 160.268736][ T27] audit: type=1326 audit(1743938568.991:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df018d169 code=0x7ffc0000 [ 160.379391][ T27] audit: type=1326 audit(1743938569.041:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df018d169 code=0x7ffc0000 [ 160.424134][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.468948][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.484094][ T27] audit: type=1326 audit(1743938569.041:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f4df018d169 code=0x7ffc0000 [ 160.503903][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.562046][ T27] audit: type=1326 audit(1743938569.041:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df018d169 code=0x7ffc0000 [ 160.581951][ T5982] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.638957][ T27] audit: type=1326 audit(1743938569.041:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df018d169 code=0x7ffc0000 [ 160.655993][ T5982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.712358][ T5982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.250878][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz.4.577'. [ 161.460734][ T27] audit: type=1326 audit(1743938570.181:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 161.508535][ T27] audit: type=1326 audit(1743938570.181:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 161.582707][ T27] audit: type=1326 audit(1743938570.251:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 161.661152][ T6017] lo speed is unknown, defaulting to 1000 [ 161.676035][ T27] audit: type=1326 audit(1743938570.251:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 161.708718][ T27] audit: type=1326 audit(1743938570.251:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df58d169 code=0x7ffc0000 [ 162.700332][ T6035] infiniband syz1: set active [ 162.706172][ T6035] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.717675][ T6035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.726680][ T6035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.775612][ T6036] infiniband syz1: set active [ 162.781593][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.796681][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.818273][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.830385][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.841373][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.851090][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.072119][ T6069] infiniband syz1: set active [ 165.082147][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.097301][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.105726][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.866927][ T6073] infiniband syz1: set active [ 165.872268][ T6073] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.882835][ T6073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.890897][ T6073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.920901][ T6073] infiniband syz1: set active [ 165.926949][ T6073] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.938202][ T6073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.946069][ T6073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.656984][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.663431][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.105424][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.111769][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.536093][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.542439][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.813307][ T28] INFO: task kworker/1:3:4267 blocked for more than 143 seconds. [ 318.821064][ T28] Not tainted 6.1.132-syzkaller #0 [ 318.832204][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 318.841301][ T28] task:kworker/1:3 state:D stack:22560 pid:4267 ppid:2 flags:0x00004000 [ 318.850986][ T28] Workqueue: events rfkill_sync_work [ 318.856406][ T28] Call Trace: [ 318.859704][ T28] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 318.862640][ T28] __schedule+0x143f/0x4570 [ 318.867915][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 318.874163][ T28] ? print_irqtrace_events+0x210/0x210 [ 318.879681][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 318.885013][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 318.890257][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 318.948323][ T28] schedule+0xbf/0x180 [ 318.952575][ T28] schedule_preempt_disabled+0xf/0x20 [ 318.978986][ T28] __mutex_lock+0x6b9/0xd80 [ 318.983686][ T28] ? __mutex_lock+0x53c/0xd80 [ 318.988400][ T28] ? nfc_rfkill_set_block+0x4c/0x2f0 [ 318.995798][ T28] ? mutex_lock_nested+0x10/0x10 [ 319.000776][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 319.006177][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 319.011431][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 319.017517][ T28] ? _raw_spin_unlock+0x40/0x40 [ 319.022397][ T28] nfc_rfkill_set_block+0x4c/0x2f0 [ 319.027670][ T28] ? nfc_unregister_device+0x290/0x290 [ 319.034136][ T28] rfkill_set_block+0x1e7/0x430 [ 319.039047][ T28] rfkill_sync_work+0x8a/0xe0 [ 319.044024][ T28] ? process_one_work+0x806/0x1260 [ 319.049182][ T28] process_one_work+0x917/0x1260 [ 319.054244][ T28] ? worker_detach_from_pool+0x260/0x260 [ 319.059907][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 319.066441][ T28] ? kthread_data+0x4e/0xc0 [ 319.070996][ T28] ? wq_worker_running+0x97/0x190 [ 319.076143][ T28] worker_thread+0xa47/0x1200 [ 319.080855][ T28] ? _raw_spin_unlock+0x40/0x40 [ 319.086032][ T28] kthread+0x28d/0x320 [ 319.090122][ T28] ? worker_clr_flags+0x190/0x190 [ 319.095194][ T28] ? kthread_blkcg+0xd0/0xd0 [ 319.099807][ T28] ret_from_fork+0x1f/0x30 [ 319.104322][ T28] [ 319.107515][ T28] INFO: task kworker/1:8:5785 blocked for more than 143 seconds. [ 319.115338][ T28] Not tainted 6.1.132-syzkaller #0 [ 319.120999][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 319.129777][ T28] task:kworker/1:8 state:D stack:25688 pid:5785 ppid:2 flags:0x00004000 [ 319.139183][ T28] Workqueue: events rfkill_global_led_trigger_worker [ 319.145959][ T28] Call Trace: [ 319.149265][ T28] [ 319.152249][ T28] __schedule+0x143f/0x4570 [ 319.156897][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 319.162829][ T28] ? print_irqtrace_events+0x210/0x210 [ 319.168410][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 319.173725][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 319.178957][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 319.184247][ T28] schedule+0xbf/0x180 [ 319.188347][ T28] schedule_preempt_disabled+0xf/0x20 [ 319.193905][ T28] __mutex_lock+0x6b9/0xd80 [ 319.198454][ T28] ? __mutex_lock+0x53c/0xd80 [ 319.203229][ T28] ? rfkill_global_led_trigger_worker+0x23/0xd0 [ 319.209503][ T28] ? mutex_lock_nested+0x10/0x10 [ 319.214547][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 319.220587][ T28] ? print_irqtrace_events+0x210/0x210 [ 319.226119][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 319.232052][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 319.237343][ T28] ? process_one_work+0x806/0x1260 [ 319.242530][ T28] rfkill_global_led_trigger_worker+0x23/0xd0 [ 319.248682][ T28] ? process_one_work+0x806/0x1260 [ 319.253886][ T28] process_one_work+0x917/0x1260 [ 319.258884][ T28] ? worker_detach_from_pool+0x260/0x260 [ 319.264636][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 319.270203][ T28] ? kthread_data+0x4e/0xc0 [ 319.274783][ T28] ? wq_worker_running+0x97/0x190 [ 319.279841][ T28] worker_thread+0xa47/0x1200 [ 319.284591][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 319.290529][ T28] kthread+0x28d/0x320 [ 319.294833][ T28] ? worker_clr_flags+0x190/0x190 [ 319.299973][ T28] ? kthread_blkcg+0xd0/0xd0 [ 319.304731][ T28] ret_from_fork+0x1f/0x30 [ 319.309185][ T28] [ 319.312222][ T28] INFO: task syz.1.557:5949 blocked for more than 143 seconds. [ 319.319823][ T28] Not tainted 6.1.132-syzkaller #0 [ 319.325536][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 319.334316][ T28] task:syz.1.557 state:D stack:25864 pid:5949 ppid:4249 flags:0x00004004 [ 319.343996][ T28] Call Trace: [ 319.347295][ T28] [ 319.350248][ T28] __schedule+0x143f/0x4570 [ 319.354976][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 319.360943][ T28] schedule+0xbf/0x180 [ 319.365110][ T28] schedule_timeout+0xac/0x300 [ 319.369919][ T28] ? console_conditional_schedule+0x40/0x40 [ 319.376134][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 319.382191][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 319.387465][ T28] ? wait_for_completion+0x2f9/0x610 [ 319.392780][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 319.398064][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 319.403335][ T28] ? wait_for_completion+0x2f9/0x610 [ 319.408736][ T28] wait_for_completion+0x350/0x610 [ 319.414032][ T28] ? io_schedule+0x100/0x100 [ 319.418655][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 319.423959][ T28] ? __flush_work+0xe5/0xad0 [ 319.428583][ T28] __flush_work+0x95b/0xad0 [ 319.433217][ T28] ? __flush_work+0xe5/0xad0 [ 319.437848][ T28] ? flush_work+0x20/0x20 [ 319.442186][ T28] ? move_linked_works+0x230/0x230 [ 319.447389][ T28] ? print_irqtrace_events+0x210/0x210 [ 319.452886][ T28] ? __cancel_work_timer+0x467/0x6a0 [ 319.458492][ T28] __cancel_work_timer+0x519/0x6a0 [ 319.463979][ T28] ? rcu_is_watching+0x11/0xb0 [ 319.468784][ T28] ? cancel_work_sync+0x20/0x20 [ 319.474022][ T28] ? memcpy+0x3c/0x60 [ 319.478054][ T28] ? nla_put+0x12d/0x1e0 [ 319.482428][ T28] ? nfc_unregister_device+0x5f/0x290 [ 319.487889][ T28] ? mutex_lock_nested+0x10/0x10 [ 319.492857][ T28] ? nfc_genl_device_removed+0x251/0x370 [ 319.498578][ T28] ? nfc_genl_setup_device_added+0x3f0/0x3f0 [ 319.504635][ T28] rfkill_unregister+0x92/0x220 [ 319.509549][ T28] nfc_unregister_device+0x92/0x290 [ 319.515063][ T28] virtual_ncidev_close+0x55/0x90 [ 319.520122][ T28] ? virtual_ncidev_open+0xc0/0xc0 [ 319.525555][ T28] __fput+0x3f6/0x8d0 [ 319.529606][ T28] task_work_run+0x246/0x300 [ 319.538026][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 319.543526][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 319.549600][ T28] exit_to_user_mode_loop+0xde/0x100 [ 319.555317][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 319.560959][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 319.566675][ T28] do_syscall_64+0x47/0xb0 [ 319.571115][ T28] ? clear_bhb_loop+0x45/0xa0 [ 319.575873][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.581790][ T28] RIP: 0033:0x7f0332f8d169 [ 319.586296][ T28] RSP: 002b:00007ffda0846848 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 319.594807][ T28] RAX: 0000000000000000 RBX: 00007f03331a7ba0 RCX: 00007f0332f8d169 [ 319.602821][ T28] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 319.610867][ T28] RBP: 00007f03331a7ba0 R08: 0000000000000344 R09: 00000006a0846b3f [ 319.619357][ T28] R10: 00000000003ffa98 R11: 0000000000000246 R12: 000000000002704e [ 319.627554][ T28] R13: 00007f03331a6080 R14: ffffffffffffffff R15: 00007ffda0846960 [ 319.635747][ T28] [ 319.638831][ T28] INFO: task syz.3.574:6002 blocked for more than 144 seconds. [ 319.646796][ T28] Not tainted 6.1.132-syzkaller #0 [ 319.652457][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 319.663165][ T28] task:syz.3.574 state:D stack:24512 pid:6002 ppid:4258 flags:0x00004004 [ 319.672453][ T28] Call Trace: [ 319.675827][ T28] [ 319.678805][ T28] __schedule+0x143f/0x4570 [ 319.683412][ T28] ? __mutex_lock+0x6b4/0xd80 [ 319.688132][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 319.694115][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 319.699599][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 319.704880][ T28] schedule+0xbf/0x180 [ 319.708987][ T28] schedule_preempt_disabled+0xf/0x20 [ 319.714457][ T28] __mutex_lock+0x6b9/0xd80 [ 319.719004][ T28] ? __mutex_lock+0x53c/0xd80 [ 319.723758][ T28] ? rfkill_fop_open+0x130/0x680 [ 319.728735][ T28] ? mutex_lock_nested+0x10/0x10 [ 319.733804][ T28] ? __init_waitqueue_head+0xaa/0x140 [ 319.739247][ T28] rfkill_fop_open+0x130/0x680 [ 319.744858][ T28] ? rfkill_fop_ioctl+0x230/0x230 [ 319.750492][ T28] misc_open+0x304/0x380 [ 319.754939][ T28] chrdev_open+0x54a/0x630 [ 319.759413][ T28] ? cd_forget+0x160/0x160 [ 319.763942][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 319.769183][ T28] ? fsnotify_perm+0x472/0x590 [ 319.774093][ T28] ? cd_forget+0x160/0x160 [ 319.778642][ T28] do_dentry_open+0x7f9/0x10f0 [ 319.783536][ T28] path_openat+0x2644/0x2e60 [ 319.788710][ T28] ? mark_lock+0x9a/0x340 [ 319.793154][ T28] ? do_filp_open+0x480/0x480 [ 319.797895][ T28] do_filp_open+0x230/0x480 [ 319.802447][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 319.807172][ T28] ? _raw_spin_unlock+0x24/0x40 [ 319.812068][ T28] ? alloc_fd+0x5a0/0x640 [ 319.816472][ T28] do_sys_openat2+0x13b/0x4f0 [ 319.821275][ T28] ? do_sys_open+0x220/0x220 [ 319.825944][ T28] ? __sys_bind+0x287/0x2e0 [ 319.830485][ T28] __x64_sys_openat+0x243/0x290 [ 319.835425][ T28] ? __ia32_sys_open+0x270/0x270 [ 319.840407][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 319.846553][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 319.851797][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 319.857996][ T28] do_syscall_64+0x3b/0xb0 [ 319.862453][ T28] ? clear_bhb_loop+0x45/0xa0 [ 319.867217][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.873300][ T28] RIP: 0033:0x7f0fbc18d169 [ 319.877757][ T28] RSP: 002b:00007f0fbcf3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 319.886274][ T28] RAX: ffffffffffffffda RBX: 00007f0fbc3a6080 RCX: 00007f0fbc18d169 [ 319.894318][ T28] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 319.902406][ T28] RBP: 00007f0fbc20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 319.910491][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.918656][ T28] R13: 0000000000000000 R14: 00007f0fbc3a6080 R15: 00007ffc07964748 [ 319.926788][ T28] [ 319.929863][ T28] INFO: task syz.4.581:6019 blocked for more than 144 seconds. [ 319.937509][ T28] Not tainted 6.1.132-syzkaller #0 [ 319.943322][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 319.952123][ T28] task:syz.4.581 state:D stack:27464 pid:6019 ppid:4248 flags:0x00004004 [ 319.961448][ T28] Call Trace: [ 319.964854][ T28] [ 319.967791][ T28] __schedule+0x143f/0x4570 [ 319.972339][ T28] ? __mutex_lock+0x6b4/0xd80 [ 319.977160][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 319.983243][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 319.988754][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 319.994036][ T28] schedule+0xbf/0x180 [ 319.998154][ T28] schedule_preempt_disabled+0xf/0x20 [ 320.003625][ T28] __mutex_lock+0x6b9/0xd80 [ 320.008173][ T28] ? __mutex_lock+0x53c/0xd80 [ 320.012890][ T28] ? misc_open+0x58/0x380 [ 320.017321][ T28] ? mutex_lock_nested+0x10/0x10 [ 320.022302][ T28] ? kobject_get_unless_zero+0x229/0x320 [ 320.028077][ T28] misc_open+0x58/0x380 [ 320.032449][ T28] chrdev_open+0x54a/0x630 [ 320.037293][ T28] ? cd_forget+0x160/0x160 [ 320.041743][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 320.047038][ T28] ? fsnotify_perm+0x472/0x590 [ 320.051869][ T28] ? cd_forget+0x160/0x160 [ 320.056369][ T28] do_dentry_open+0x7f9/0x10f0 [ 320.061179][ T28] path_openat+0x2644/0x2e60 [ 320.065887][ T28] ? mark_lock+0x9a/0x340 [ 320.070344][ T28] ? do_filp_open+0x480/0x480 [ 320.075369][ T28] do_filp_open+0x230/0x480 [ 320.079915][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 320.084621][ T28] ? _raw_spin_unlock+0x24/0x40 [ 320.089595][ T28] ? alloc_fd+0x5a0/0x640 [ 320.094075][ T28] do_sys_openat2+0x13b/0x4f0 [ 320.098809][ T28] ? do_sys_open+0x220/0x220 [ 320.103454][ T28] ? __might_fault+0xbd/0x110 [ 320.108185][ T28] __x64_sys_openat+0x243/0x290 [ 320.113134][ T28] ? __ia32_sys_open+0x270/0x270 [ 320.118145][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 320.124259][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 320.129582][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 320.135745][ T28] do_syscall_64+0x3b/0xb0 [ 320.140179][ T28] ? clear_bhb_loop+0x45/0xa0 [ 320.144930][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.150856][ T28] RIP: 0033:0x7f04df58d169 [ 320.155374][ T28] RSP: 002b:00007f04e0394038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 320.163977][ T28] RAX: ffffffffffffffda RBX: 00007f04df7a6080 RCX: 00007f04df58d169 [ 320.172088][ T28] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 320.180240][ T28] RBP: 00007f04df60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 320.188387][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.196438][ T28] R13: 0000000000000000 R14: 00007f04df7a6080 R15: 00007fff906801d8 [ 320.204607][ T28] [ 320.207662][ T28] INFO: task syz.0.587:6038 blocked for more than 144 seconds. [ 320.215370][ T28] Not tainted 6.1.132-syzkaller #0 [ 320.221013][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 320.229776][ T28] task:syz.0.587 state:D stack:25752 pid:6038 ppid:4251 flags:0x00004004 [ 320.239131][ T28] Call Trace: [ 320.242443][ T28] [ 320.245914][ T28] __schedule+0x143f/0x4570 [ 320.250489][ T28] ? __mutex_lock+0x6b4/0xd80 [ 320.255827][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 320.261766][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 320.267333][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 320.272563][ T28] schedule+0xbf/0x180 [ 320.276743][ T28] schedule_preempt_disabled+0xf/0x20 [ 320.282185][ T28] __mutex_lock+0x6b9/0xd80 [ 320.286801][ T28] ? __mutex_lock+0x53c/0xd80 [ 320.291512][ T28] ? misc_open+0x58/0x380 [ 320.296038][ T28] ? mutex_lock_nested+0x10/0x10 [ 320.301039][ T28] ? kobject_get_unless_zero+0x229/0x320 [ 320.306800][ T28] misc_open+0x58/0x380 [ 320.311096][ T28] chrdev_open+0x54a/0x630 [ 320.315635][ T28] ? cd_forget+0x160/0x160 [ 320.320103][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 320.325387][ T28] ? fsnotify_perm+0x472/0x590 [ 320.330192][ T28] ? cd_forget+0x160/0x160 [ 320.334717][ T28] do_dentry_open+0x7f9/0x10f0 [ 320.339516][ T28] path_openat+0x2644/0x2e60 [ 320.344194][ T28] ? mark_lock+0x9a/0x340 [ 320.348589][ T28] ? do_filp_open+0x480/0x480 [ 320.353365][ T28] do_filp_open+0x230/0x480 [ 320.358003][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 320.362621][ T28] ? _raw_spin_unlock+0x24/0x40 [ 320.367537][ T28] ? alloc_fd+0x5a0/0x640 [ 320.371976][ T28] do_sys_openat2+0x13b/0x4f0 [ 320.376851][ T28] ? do_sys_open+0x220/0x220 [ 320.381518][ T28] __x64_sys_openat+0x243/0x290 [ 320.386487][ T28] ? __ia32_sys_open+0x270/0x270 [ 320.391562][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 320.397735][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 320.402968][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 320.409311][ T28] do_syscall_64+0x3b/0xb0 [ 320.413980][ T28] ? clear_bhb_loop+0x45/0xa0 [ 320.418694][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.425253][ T28] RIP: 0033:0x7f4df018d169 [ 320.429688][ T28] RSP: 002b:00007f4df105e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 320.438191][ T28] RAX: ffffffffffffffda RBX: 00007f4df03a5fa0 RCX: 00007f4df018d169 [ 320.446228][ T28] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 320.454408][ T28] RBP: 00007f4df020e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 320.462415][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.470464][ T28] R13: 0000000000000001 R14: 00007f4df03a5fa0 R15: 00007ffe1c2feca8 [ 320.478500][ T28] [ 320.481541][ T28] INFO: task syz.2.604:6084 blocked for more than 145 seconds. [ 320.489186][ T28] Not tainted 6.1.132-syzkaller #0 [ 320.495009][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 320.503770][ T28] task:syz.2.604 state:D stack:24512 pid:6084 ppid:4250 flags:0x00004004 [ 320.513024][ T28] Call Trace: [ 320.516557][ T28] [ 320.519524][ T28] __schedule+0x143f/0x4570 [ 320.524146][ T28] ? __mutex_lock+0x6b4/0xd80 [ 320.528865][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 320.534916][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 320.540961][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 320.546296][ T28] schedule+0xbf/0x180 [ 320.550429][ T28] schedule_preempt_disabled+0xf/0x20 [ 320.555914][ T28] __mutex_lock+0x6b9/0xd80 [ 320.560475][ T28] ? __mutex_lock+0x53c/0xd80 [ 320.565380][ T28] ? misc_open+0x58/0x380 [ 320.569793][ T28] ? mutex_lock_nested+0x10/0x10 [ 320.577982][ T28] ? kobject_get_unless_zero+0x229/0x320 [ 320.584280][ T28] misc_open+0x58/0x380 [ 320.588493][ T28] chrdev_open+0x54a/0x630 [ 320.592926][ T28] ? cd_forget+0x160/0x160 [ 320.597600][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 320.602840][ T28] ? fsnotify_perm+0x472/0x590 [ 320.607708][ T28] ? cd_forget+0x160/0x160 [ 320.612155][ T28] do_dentry_open+0x7f9/0x10f0 [ 320.617019][ T28] path_openat+0x2644/0x2e60 [ 320.621650][ T28] ? mark_lock+0x9a/0x340 [ 320.626198][ T28] ? do_filp_open+0x480/0x480 [ 320.630936][ T28] do_filp_open+0x230/0x480 [ 320.635545][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 320.640190][ T28] ? _raw_spin_unlock+0x24/0x40 [ 320.645137][ T28] ? alloc_fd+0x5a0/0x640 [ 320.649503][ T28] do_sys_openat2+0x13b/0x4f0 [ 320.654407][ T28] ? bpf_raw_tracepoint_open+0xcf/0x210 [ 320.659997][ T28] ? do_sys_open+0x220/0x220 [ 320.664744][ T28] __x64_sys_openat+0x243/0x290 [ 320.669619][ T28] ? __ia32_sys_open+0x270/0x270 [ 320.674638][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 320.680667][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 320.685953][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 320.691961][ T28] do_syscall_64+0x3b/0xb0 [ 320.696455][ T28] ? clear_bhb_loop+0x45/0xa0 [ 320.701162][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.707133][ T28] RIP: 0033:0x7f33d5b8d169 [ 320.711565][ T28] RSP: 002b:00007f33d6a4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 320.720094][ T28] RAX: ffffffffffffffda RBX: 00007f33d5da5fa0 RCX: 00007f33d5b8d169 [ 320.728119][ T28] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 320.736280][ T28] RBP: 00007f33d5c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 320.744436][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.752540][ T28] R13: 0000000000000000 R14: 00007f33d5da5fa0 R15: 00007fffbaebbe58 [ 320.760728][ T28] [ 320.763862][ T28] INFO: task syz-executor:6090 blocked for more than 145 seconds. [ 320.771694][ T28] Not tainted 6.1.132-syzkaller #0 [ 320.777476][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 320.786233][ T28] task:syz-executor state:D stack:27560 pid:6090 ppid:1 flags:0x00004000 [ 320.795563][ T28] Call Trace: [ 320.798872][ T28] [ 320.801823][ T28] __schedule+0x143f/0x4570 [ 320.806646][ T28] ? __mutex_lock+0x6b4/0xd80 [ 320.811390][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 320.817410][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 320.822917][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 320.828228][ T28] schedule+0xbf/0x180 [ 320.832342][ T28] schedule_preempt_disabled+0xf/0x20 [ 320.837826][ T28] __mutex_lock+0x6b9/0xd80 [ 320.842386][ T28] ? __mutex_lock+0x53c/0xd80 [ 320.847298][ T28] ? misc_open+0x58/0x380 [ 320.851672][ T28] ? mutex_lock_nested+0x10/0x10 [ 320.856688][ T28] ? kobject_get_unless_zero+0x229/0x320 [ 320.862388][ T28] misc_open+0x58/0x380 [ 320.866660][ T28] chrdev_open+0x54a/0x630 [ 320.871120][ T28] ? cd_forget+0x160/0x160 [ 320.875624][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 320.880960][ T28] ? fsnotify_perm+0x472/0x590 [ 320.885851][ T28] ? cd_forget+0x160/0x160 [ 320.890301][ T28] do_dentry_open+0x7f9/0x10f0 [ 320.895181][ T28] path_openat+0x2644/0x2e60 [ 320.899850][ T28] ? do_filp_open+0x480/0x480 [ 320.904799][ T28] do_filp_open+0x230/0x480 [ 320.909353][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 320.914070][ T28] ? _raw_spin_unlock+0x24/0x40 [ 320.918970][ T28] ? alloc_fd+0x5a0/0x640 [ 320.923397][ T28] do_sys_openat2+0x13b/0x4f0 [ 320.928115][ T28] ? rcu_read_lock_sched_held+0x89/0x130 [ 320.933876][ T28] ? do_sys_open+0x220/0x220 [ 320.938593][ T28] __x64_sys_openat+0x243/0x290 [ 320.943567][ T28] ? __ia32_sys_open+0x270/0x270 [ 320.948558][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 320.955550][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 320.960904][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 320.966996][ T28] do_syscall_64+0x3b/0xb0 [ 320.971636][ T28] ? clear_bhb_loop+0x45/0xa0 [ 320.976414][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.982477][ T28] RIP: 0033:0x7faad298ba51 [ 320.987005][ T28] RSP: 002b:00007fff407a41c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 320.995595][ T28] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007faad298ba51 [ 321.003671][ T28] RDX: 0000000000000002 RSI: 00007faad2a0ec76 RDI: 00000000ffffff9c [ 321.011675][ T28] RBP: 00007faad2a0ec76 R08: 0000000000000000 R09: 00007faad36dd6c0 [ 321.019774][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 321.027993][ T28] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 321.036264][ T28] [ 321.039325][ T28] [ 321.039325][ T28] Showing all locks held in the system: [ 321.047150][ T28] 1 lock held by rcu_tasks_kthre/12: [ 321.052642][ T28] #0: ffffffff8d32e910 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 321.063308][ T28] 1 lock held by rcu_tasks_trace/13: [ 321.068614][ T28] #0: ffffffff8d32f110 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 321.079692][ T28] 1 lock held by khungtaskd/28: [ 321.084601][ T28] #0: ffffffff8d32e740 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 321.094518][ T28] 3 locks held by kworker/u4:2/31: [ 321.099721][ T28] 2 locks held by getty/4007: [ 321.104526][ T28] #0: ffff88814d4e1098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 321.114358][ T28] #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x54a/0x1620 [ 321.124697][ T28] 4 locks held by kworker/1:3/4267: [ 321.129907][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 321.140452][ T28] #1: ffffc90003cf7d20 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 321.152409][ T28] #2: ffffffff8e812788 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_sync_work+0x25/0xe0 [ 321.162456][ T28] #3: ffff888079227100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x4c/0x2f0 [ 321.172273][ T28] 4 locks held by kworker/u4:16/4858: [ 321.177840][ T28] #0: ffff8880b8f3a998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 321.187875][ T28] #1: ffff8880b8f27788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x419/0x790 [ 321.199373][ T28] #2: ffff8880b8f28358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 321.208821][ T28] #3: ffffffff97633088 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x68/0x4e0 [ 321.219226][ T28] 3 locks held by kworker/1:8/5785: [ 321.224487][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 321.235053][ T28] #1: ffffc900055dfd20 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 321.248272][ T28] #2: ffffffff8e812788 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x23/0xd0 [ 321.260125][ T28] 1 lock held by syz.1.557/5949: [ 321.265150][ T28] #0: ffff888079227100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x5f/0x290 [ 321.275261][ T28] 2 locks held by syz.3.574/6002: [ 321.280342][ T28] #0: ffffffff8daaf4c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 321.289073][ T28] #1: ffffffff8e812788 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x130/0x680 [ 321.299564][ T28] 1 lock held by syz.4.581/6019: [ 321.304845][ T28] #0: ffffffff8daaf4c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 321.314565][ T28] 1 lock held by syz.0.587/6038: [ 321.319648][ T28] #0: ffffffff8daaf4c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 321.328517][ T28] 1 lock held by syz.2.604/6084: [ 321.333712][ T28] #0: ffffffff8daaf4c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 321.342410][ T28] 1 lock held by syz-executor/6090: [ 321.347843][ T28] #0: ffffffff8daaf4c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 321.357593][ T28] 1 lock held by syz-executor/6092: [ 321.363006][ T28] #0: ffffffff8daaf4c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 321.371852][ T28] 1 lock held by syz-executor/6094: [ 321.377251][ T28] #0: ffffffff8daaf4c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 321.386298][ T28] 1 lock held by syz-executor/6096: [ 321.391768][ T28] #0: ffffffff8daaf4c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 321.400560][ T28] 1 lock held by syz-executor/6098: [ 321.405892][ T28] #0: ffffffff8daaf4c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 321.415199][ T28] 1 lock held by syz-executor/6100: [ 321.420516][ T28] #0: ffffffff8daaf4c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 321.429153][ T28] 1 lock held by syz-executor/6102: [ 321.434443][ T28] #0: ffffffff8daaf4c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 321.443045][ T28] 1 lock held by syz-executor/6104: [ 321.448572][ T28] #0: ffffffff8daaf4c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 321.458026][ T28] 1 lock held by syz-executor/6106: [ 321.463689][ T28] #0: ffffffff8daaf4c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 321.472358][ T28] 1 lock held by syz-executor/6108: [ 321.477869][ T28] #0: ffffffff8daaf4c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 321.486710][ T28] 1 lock held by syz-executor/6114: [ 321.492117][ T28] #0: ffffffff8daaf4c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 321.500967][ T28] 1 lock held by syz-executor/6116: [ 321.506359][ T28] #0: ffffffff8daaf4c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 321.515085][ T28] 1 lock held by syz-executor/6118: [ 321.520469][ T28] #0: ffffffff8daaf4c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 321.529103][ T28] 1 lock held by syz-executor/6120: [ 321.534412][ T28] #0: ffffffff8daaf4c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 321.542947][ T28] 1 lock held by syz-executor/6122: [ 321.548359][ T28] #0: ffffffff8daaf4c8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 321.557097][ T28] [ 321.559613][ T28] ============================================= [ 321.559613][ T28] [ 321.568406][ T28] NMI backtrace for cpu 1 [ 321.572784][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.132-syzkaller #0 [ 321.580793][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 321.591384][ T28] Call Trace: [ 321.594666][ T28] [ 321.598413][ T28] dump_stack_lvl+0x1e3/0x2cb [ 321.603132][ T28] ? nf_tcp_handle_invalid+0x647/0x647 [ 321.608621][ T28] ? panic+0x764/0x764 [ 321.612710][ T28] ? vprintk_emit+0x622/0x740 [ 321.617417][ T28] ? printk_sprint+0x490/0x490 [ 321.622213][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 321.627360][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 321.632341][ T28] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 321.638531][ T28] ? _printk+0xd1/0x111 [ 321.643147][ T28] ? panic+0x764/0x764 [ 321.647249][ T28] ? __wake_up_klogd+0xcc/0x100 [ 321.652261][ T28] ? panic+0x764/0x764 [ 321.656401][ T28] ? nmi_trigger_cpumask_backtrace+0xfc/0x430 [ 321.662770][ T28] nmi_trigger_cpumask_backtrace+0x1ca/0x430 [ 321.669049][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 321.675190][ T28] watchdog+0xf88/0xfd0 [ 321.679478][ T28] ? watchdog+0x1f8/0xfd0 [ 321.683838][ T28] kthread+0x28d/0x320 [ 321.687925][ T28] ? hungtask_pm_notify+0x50/0x50 [ 321.692997][ T28] ? kthread_blkcg+0xd0/0xd0 [ 321.697592][ T28] ret_from_fork+0x1f/0x30 [ 321.702043][ T28] [ 321.705841][ T28] Sending NMI from CPU 1 to CPUs 0: [ 321.711146][ C0] NMI backtrace for cpu 0 [ 321.711160][ C0] CPU: 0 PID: 4858 Comm: kworker/u4:16 Not tainted 6.1.132-syzkaller #0 [ 321.711181][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 321.711193][ C0] Workqueue: events_unbound toggle_allocation_gate [ 321.711227][ C0] RIP: 0010:toggle_allocation_gate+0xc6/0x480 [ 321.711255][ C0] Code: 1f 42 8d be 04 00 00 00 e8 b7 aa ff ff c7 05 5d bd 5f 0b 00 00 00 00 48 c7 c7 20 7f 42 97 e8 11 91 d3 ff 48 c7 c0 68 b8 a0 8e <48> c1 e8 03 42 80 3c 20 00 74 0c 48 c7 c7 68 b8 a0 8e e8 e3 a8 ff [ 321.711271][ C0] RSP: 0018:ffffc9000506fb40 EFLAGS: 00000293 [ 321.711285][ C0] RAX: ffffffff8ea0b868 RBX: 0000000000000001 RCX: ffff88802dbcbb80 [ 321.711299][ C0] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 321.711310][ C0] RBP: ffffc9000506fc50 R08: ffffffff8152df75 R09: fffffbfff1d416c6 [ 321.711324][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 321.711337][ C0] R13: 1ffff92000a0df68 R14: ffffffff974873a0 R15: ffffffff815b0ee6 [ 321.711351][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 321.711366][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.711379][ C0] CR2: 00007f675dcd7d60 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 321.711394][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 321.711405][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 321.711416][ C0] Call Trace: [ 321.711422][ C0] [ 321.711430][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 321.711451][ C0] ? read_lock_is_recursive+0x10/0x10 [ 321.711481][ C0] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 321.711500][ C0] ? nmi_handle+0x25/0x440 [ 321.711536][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 321.711554][ C0] ? nmi_handle+0x12e/0x440 [ 321.711592][ C0] ? nmi_handle+0x25/0x440 [ 321.711617][ C0] ? toggle_allocation_gate+0xc6/0x480 [ 321.711642][ C0] ? default_do_nmi+0x62/0x150 [ 321.711663][ C0] ? exc_nmi+0xa8/0x100 [ 321.711680][ C0] ? end_repeat_nmi+0x16/0x31 [ 321.711704][ C0] ? process_one_work+0x806/0x1260 [ 321.711728][ C0] ? cpus_read_unlock+0x95/0x130 [ 321.711751][ C0] ? toggle_allocation_gate+0xc6/0x480 [ 321.711776][ C0] ? toggle_allocation_gate+0xc6/0x480 [ 321.711802][ C0] ? toggle_allocation_gate+0xc6/0x480 [ 321.711826][ C0] [ 321.711832][ C0] [ 321.711838][ C0] ? show_object+0xa0/0xa0 [ 321.711861][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 321.711889][ C0] ? print_irqtrace_events+0x210/0x210 [ 321.711914][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 321.711935][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 321.711957][ C0] ? process_one_work+0x806/0x1260 [ 321.711978][ C0] process_one_work+0x917/0x1260 [ 321.712007][ C0] ? worker_detach_from_pool+0x260/0x260 [ 321.712031][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 321.712048][ C0] ? kthread_data+0x4e/0xc0 [ 321.712077][ C0] ? wq_worker_running+0x97/0x190 [ 321.712094][ C0] worker_thread+0xa47/0x1200 [ 321.712117][ C0] ? release_firmware_map_entry+0x18b/0x18b [ 321.712152][ C0] kthread+0x28d/0x320 [ 321.712168][ C0] ? worker_clr_flags+0x190/0x190 [ 321.712189][ C0] ? kthread_blkcg+0xd0/0xd0 [ 321.712206][ C0] ret_from_fork+0x1f/0x30 [ 321.712237][ C0] [ 321.721779][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 321.721804][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.132-syzkaller #0 [ 321.721830][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 321.721846][ T28] Call Trace: [ 321.721855][ T28] [ 321.721866][ T28] dump_stack_lvl+0x1e3/0x2cb [ 321.721903][ T28] ? nf_tcp_handle_invalid+0x647/0x647 [ 321.721928][ T28] ? panic+0x764/0x764 [ 321.721958][ T28] ? llist_add_batch+0x160/0x1d0 [ 321.721988][ T28] ? vscnprintf+0x59/0x80 [ 321.722022][ T28] panic+0x318/0x764 [ 321.722050][ T28] ? nmi_trigger_cpumask_backtrace+0x2db/0x430 [ 321.722076][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 321.722106][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 321.722143][ T28] ? nmi_trigger_cpumask_backtrace+0x2db/0x430 [ 321.722166][ T28] ? nmi_trigger_cpumask_backtrace+0x358/0x430 [ 321.722194][ T28] ? nmi_trigger_cpumask_backtrace+0x35d/0x430 [ 321.722218][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 321.722245][ T28] watchdog+0xfc7/0xfd0 [ 321.722286][ T28] ? watchdog+0x1f8/0xfd0 [ 321.722334][ T28] kthread+0x28d/0x320 [ 321.722356][ T28] ? hungtask_pm_notify+0x50/0x50 [ 321.722385][ T28] ? kthread_blkcg+0xd0/0xd0 [ 321.722409][ T28] ret_from_fork+0x1f/0x30 [ 321.722454][ T28] [ 321.726345][ T28] Kernel Offset: disabled [ 322.172783][ T28] Rebooting in 86400 seconds..