Warning: Permanently added '10.128.10.46' (ED25519) to the list of known hosts. 2024/03/28 21:39:46 fuzzer started 2024/03/28 21:39:47 dialing manager at 10.128.0.169:30012 [ 190.852421][ T5011] cgroup: Unknown subsys name 'net' [ 191.092567][ T5011] cgroup: Unknown subsys name 'rlimit' [ 229.496187][ T1221] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.503309][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 2024/03/28 21:40:46 syscalls: 3852 2024/03/28 21:40:46 code coverage: enabled 2024/03/28 21:40:46 comparison tracing: enabled 2024/03/28 21:40:46 extra coverage: enabled 2024/03/28 21:40:46 delay kcov mmap: enabled 2024/03/28 21:40:46 setuid sandbox: enabled 2024/03/28 21:40:46 namespace sandbox: enabled 2024/03/28 21:40:46 Android sandbox: /sys/fs/selinux/policy does not exist 2024/03/28 21:40:46 fault injection: enabled 2024/03/28 21:40:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/03/28 21:40:46 net packet injection: enabled 2024/03/28 21:40:46 net device setup: enabled 2024/03/28 21:40:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/03/28 21:40:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/03/28 21:40:46 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/03/28 21:40:46 USB emulation: enabled 2024/03/28 21:40:46 hci packet injection: enabled 2024/03/28 21:40:46 wifi device emulation: enabled 2024/03/28 21:40:46 802.15.4 emulation: enabled 2024/03/28 21:40:46 swap file: enabled [ 249.134838][ T5011] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/03/28 21:40:47 starting 5 executor processes [ 251.308620][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.337342][ T5033] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 251.362034][ T5033] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 251.398734][ T5033] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 251.410739][ T5034] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 251.425433][ T5033] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 251.435944][ T5033] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 251.456620][ T5033] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 251.474561][ T5037] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 251.501342][ T5037] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 251.517053][ T5037] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 251.534995][ T5037] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 251.567894][ T5037] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 251.581485][ T5037] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 251.592642][ T5037] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 251.628917][ T5037] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 251.670268][ T5037] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 251.681332][ T5037] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.892447][ T4401] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 251.902749][ T4401] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 251.912947][ T4401] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 251.927857][ T4401] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 251.940438][ T4401] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 251.950178][ T4401] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 252.079258][ T5037] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.109129][ T5037] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.119670][ T5037] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.134893][ T5037] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.148997][ T5037] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 252.158908][ T5037] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.068999][ T5032] chnl_net:caif_netlink_parms(): no params data found [ 253.574118][ T4401] Bluetooth: hci0: command tx timeout [ 253.641541][ T4401] Bluetooth: hci1: command tx timeout [ 253.829715][ T4401] Bluetooth: hci2: command tx timeout [ 253.970367][ T5042] chnl_net:caif_netlink_parms(): no params data found [ 254.040827][ T4401] Bluetooth: hci3: command tx timeout [ 254.090592][ T5030] chnl_net:caif_netlink_parms(): no params data found [ 254.143323][ T5045] chnl_net:caif_netlink_parms(): no params data found [ 254.239091][ T5039] chnl_net:caif_netlink_parms(): no params data found [ 254.360794][ T4401] Bluetooth: hci4: command tx timeout [ 254.529093][ T5032] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.539645][ T5032] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.547442][ T5032] bridge_slave_0: entered allmulticast mode [ 254.556951][ T5032] bridge_slave_0: entered promiscuous mode [ 254.611781][ T5032] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.619938][ T5032] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.627817][ T5032] bridge_slave_1: entered allmulticast mode [ 254.637618][ T5032] bridge_slave_1: entered promiscuous mode [ 254.967147][ T5032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.048154][ T5032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.430465][ T5032] team0: Port device team_slave_0 added [ 255.471647][ T5042] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.479710][ T5042] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.487546][ T5042] bridge_slave_0: entered allmulticast mode [ 255.497341][ T5042] bridge_slave_0: entered promiscuous mode [ 255.569096][ T5032] team0: Port device team_slave_1 added [ 255.644372][ T4401] Bluetooth: hci0: command tx timeout [ 255.739766][ T4401] Bluetooth: hci1: command tx timeout [ 255.763842][ T5042] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.771922][ T5042] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.780196][ T5042] bridge_slave_1: entered allmulticast mode [ 255.789839][ T5042] bridge_slave_1: entered promiscuous mode [ 255.910332][ T4401] Bluetooth: hci2: command tx timeout [ 255.925870][ T5032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.933255][ T5032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.959896][ T5032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.007003][ T5045] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.015228][ T5045] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.023700][ T5045] bridge_slave_0: entered allmulticast mode [ 256.033732][ T5045] bridge_slave_0: entered promiscuous mode [ 256.096038][ T5030] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.105215][ T5030] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.113353][ T5030] bridge_slave_0: entered allmulticast mode [ 256.121330][ T4401] Bluetooth: hci3: command tx timeout [ 256.123368][ T5030] bridge_slave_0: entered promiscuous mode [ 256.141693][ T5032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.148930][ T5032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.177119][ T5032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.226607][ T5045] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.234735][ T5045] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.242866][ T5045] bridge_slave_1: entered allmulticast mode [ 256.252175][ T5045] bridge_slave_1: entered promiscuous mode [ 256.296861][ T5030] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.304935][ T5030] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.312940][ T5030] bridge_slave_1: entered allmulticast mode [ 256.322794][ T5030] bridge_slave_1: entered promiscuous mode [ 256.396728][ T5042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.439878][ T4401] Bluetooth: hci4: command tx timeout [ 256.487116][ T5039] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.495056][ T5039] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.503303][ T5039] bridge_slave_0: entered allmulticast mode [ 256.512466][ T5039] bridge_slave_0: entered promiscuous mode [ 256.535059][ T5039] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.545660][ T5039] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.554342][ T5039] bridge_slave_1: entered allmulticast mode [ 256.564185][ T5039] bridge_slave_1: entered promiscuous mode [ 256.583235][ T5042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.641651][ T5030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.824281][ T5030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.884102][ T5045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.975659][ T5039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.993436][ T5042] team0: Port device team_slave_0 added [ 257.052616][ T5045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.077041][ T5032] hsr_slave_0: entered promiscuous mode [ 257.088767][ T5032] hsr_slave_1: entered promiscuous mode [ 257.106360][ T5042] team0: Port device team_slave_1 added [ 257.125486][ T5039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.144376][ T5030] team0: Port device team_slave_0 added [ 257.291609][ T5030] team0: Port device team_slave_1 added [ 257.382393][ T5045] team0: Port device team_slave_0 added [ 257.524787][ T5039] team0: Port device team_slave_0 added [ 257.540604][ T5045] team0: Port device team_slave_1 added [ 257.556104][ T5039] team0: Port device team_slave_1 added [ 257.637833][ T5042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.645367][ T5042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.672064][ T5042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.690909][ T5042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.698387][ T5042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.725143][ T4401] Bluetooth: hci0: command tx timeout [ 257.730874][ T5042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.805667][ T4401] Bluetooth: hci1: command tx timeout [ 257.902642][ T5030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.909934][ T5030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.937329][ T5030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.959865][ T5030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.967135][ T5030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.993712][ T5030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.006729][ T4401] Bluetooth: hci2: command tx timeout [ 258.048960][ T5045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.056964][ T5045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.084243][ T5045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.158339][ T5039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.166035][ T5039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.193335][ T5039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.204895][ T4401] Bluetooth: hci3: command tx timeout [ 258.209212][ T5045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.217708][ T5045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.244475][ T5045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.260216][ T5039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.267518][ T5039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.294118][ T5039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.411892][ T5042] hsr_slave_0: entered promiscuous mode [ 258.422721][ T5042] hsr_slave_1: entered promiscuous mode [ 258.434479][ T5042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.442603][ T5042] Cannot create hsr debugfs directory [ 258.530864][ T4401] Bluetooth: hci4: command tx timeout [ 259.009087][ T5030] hsr_slave_0: entered promiscuous mode [ 259.020103][ T5030] hsr_slave_1: entered promiscuous mode [ 259.030312][ T5030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.038624][ T5030] Cannot create hsr debugfs directory [ 259.060923][ T5039] hsr_slave_0: entered promiscuous mode [ 259.072075][ T5039] hsr_slave_1: entered promiscuous mode [ 259.082511][ T5039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.090650][ T5039] Cannot create hsr debugfs directory [ 259.160081][ T5045] hsr_slave_0: entered promiscuous mode [ 259.170988][ T5045] hsr_slave_1: entered promiscuous mode [ 259.182370][ T5045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.190440][ T5045] Cannot create hsr debugfs directory [ 259.370657][ T5032] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 259.502841][ T5032] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 259.523735][ T5032] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 259.654358][ T5032] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 259.812274][ T4401] Bluetooth: hci0: command tx timeout [ 259.890551][ T4401] Bluetooth: hci1: command tx timeout [ 260.039816][ T4401] Bluetooth: hci2: command tx timeout [ 260.280673][ T4401] Bluetooth: hci3: command tx timeout [ 260.599721][ T4401] Bluetooth: hci4: command tx timeout [ 260.661716][ T5042] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.691261][ T5042] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 260.730287][ T5042] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 260.761097][ T5042] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 260.898968][ T5045] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 261.020176][ T5045] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 261.047656][ T5045] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 261.186395][ T5030] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 261.215125][ T5030] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 261.239192][ T5045] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.322110][ T5030] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 261.376535][ T5039] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 261.409140][ T5039] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 261.454972][ T5030] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 261.500719][ T5039] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 261.577847][ T5039] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 261.994292][ T5032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.331975][ T5032] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.446789][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.455011][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.626601][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.634626][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.728853][ T5042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.996104][ T5042] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.028051][ T5045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.162624][ T4648] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.170679][ T4648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.227499][ T4648] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.235489][ T4648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.445492][ T5045] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.484205][ T5030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.515669][ T5039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.678206][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.686183][ T5085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.716130][ T5039] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.798471][ T5030] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.863780][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.871851][ T5085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.889667][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.897740][ T5085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.030060][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.038116][ T5085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.055554][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.063695][ T5085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.193656][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.201974][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.616817][ T5045] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 264.628897][ T5045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.798896][ T5030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.751561][ T5032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.419634][ T5032] veth0_vlan: entered promiscuous mode [ 266.584868][ T5032] veth1_vlan: entered promiscuous mode [ 266.629803][ T5042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.087954][ T5032] veth0_macvtap: entered promiscuous mode [ 267.156097][ T5030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.216708][ T5032] veth1_macvtap: entered promiscuous mode [ 267.286287][ T5045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.336528][ T5039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.481891][ T5032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.517903][ T5042] veth0_vlan: entered promiscuous mode [ 267.588639][ T5032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.722883][ T5042] veth1_vlan: entered promiscuous mode [ 267.757444][ T5032] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.767175][ T5032] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.776498][ T5032] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.785818][ T5032] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.977629][ T5045] veth0_vlan: entered promiscuous mode [ 268.130162][ T5045] veth1_vlan: entered promiscuous mode [ 268.152747][ T5030] veth0_vlan: entered promiscuous mode [ 268.259450][ T5030] veth1_vlan: entered promiscuous mode [ 268.400882][ T5042] veth0_macvtap: entered promiscuous mode [ 268.515282][ T5042] veth1_macvtap: entered promiscuous mode [ 268.702612][ T5045] veth0_macvtap: entered promiscuous mode [ 268.749130][ T5042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.764332][ T5042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.782228][ T5042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.816981][ T5030] veth0_macvtap: entered promiscuous mode [ 268.845227][ T5045] veth1_macvtap: entered promiscuous mode [ 268.934764][ T5030] veth1_macvtap: entered promiscuous mode [ 269.012291][ T5042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.023864][ T5042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.040423][ T5042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.172146][ T5045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.183314][ T5045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.193641][ T5045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.204508][ T5045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.225128][ T5045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.238071][ T5042] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.250362][ T5042] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.260232][ T5042] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.269468][ T5042] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.358286][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.369901][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.380294][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.391134][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.404558][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.416485][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.432925][ T5030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.521304][ T5045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.534919][ T5045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.545986][ T5045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.557056][ T5045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.575439][ T5045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.788288][ T5045] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.798126][ T5045] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.809187][ T5045] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.818596][ T5045] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.855078][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.866346][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.877888][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.890291][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.901433][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.912523][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.928789][ T5030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.133559][ T5030] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.143302][ T5030] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.152819][ T5030] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.162259][ T5030] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.886132][ T5039] veth0_vlan: entered promiscuous mode [ 271.039431][ T5039] veth1_vlan: entered promiscuous mode [ 271.568267][ T5039] veth0_macvtap: entered promiscuous mode [ 271.682739][ T5039] veth1_macvtap: entered promiscuous mode [ 271.892154][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.905530][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.915995][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.927167][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.940662][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.953585][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.964724][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.976171][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.992424][ T5039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.312425][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.323908][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.334386][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.345443][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.356143][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.367029][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.377482][ T5039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.388365][ T5039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.404723][ T5039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.468878][ T5039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.479804][ T5039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.488912][ T5039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.498317][ T5039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.514157][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.522625][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.876885][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.885663][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:41:14 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) fallocate(r0, 0x0, 0x0, 0x7fffffff) utime(&(0x7f00000002c0)='./bus\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f00000001c0)='./bus/file0\x00', 0x0, 0x103) [ 277.406433][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.414934][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.612553][ T28] audit: type=1800 audit(1711662074.933:2): pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1944 res=0 errno=0 [ 277.804129][ T4648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.813715][ T4648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:41:15 executing program 3: setitimer(0x2, &(0x7f0000000d40)={{0x7}, {0x5}}, 0x0) [ 278.434004][ T786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.442488][ T786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.459697][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.467715][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:41:16 executing program 1: setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) 21:41:16 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 278.812302][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.830523][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.884835][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.893974][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:41:16 executing program 2: mkdir(&(0x7f00000017c0)='./file0\x00', 0x0) 21:41:16 executing program 0: sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf5, 0x0, &(0x7f00000000c0)) 21:41:16 executing program 1: munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 21:41:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002500)={0xffffffffffffffff}) setsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 21:41:17 executing program 0: chroot(&(0x7f0000000580)='./file0\x00') open(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) 21:41:17 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x19, &(0x7f0000000280)={r2}, 0x8) 21:41:17 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) renameat2(r1, 0x0, r1, &(0x7f0000000300)='./file0\x00', 0x0) 21:41:18 executing program 2: socket(0x0, 0x3, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0) 21:41:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000200)="cb", 0xb600, 0x0, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) 21:41:18 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 281.188711][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.197303][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:41:18 executing program 3: sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf5, 0x0, &(0x7f00000000c0)) [ 281.374488][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 281.466134][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.474649][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.610267][ T5246] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 281.620493][ T5246] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 281.633126][ T5246] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 21:41:19 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000004cc0)='.\x00', &(0x7f0000004d00), 0x0) 21:41:19 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1, 0x0, 0x0) [ 281.939505][ C0] hrtimer: interrupt took 302585 ns 21:41:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000040), 0x8) 21:41:19 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x0, 0xfffffffffffffe01}) 21:41:19 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x19, &(0x7f0000000280)={r2}, 0x8) 21:41:20 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)) r2 = dup(r1) close(r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 21:41:20 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6_sctp(0x1c, 0x0, 0x84) r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000240)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) 21:41:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0) 21:41:20 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) chdir(0x0) 21:41:20 executing program 0: socket(0x0, 0x3, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0) 21:41:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x24, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) 21:41:21 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000002d40)={&(0x7f00000004c0)=@abs, 0x8, &(0x7f00000019c0)=[{&(0x7f0000000500)="bdd6631ae52790f8987f978d5e5bdbd74c87b1c62bc61175f3a2024ce7b8acde50016b894d50225b4d352a51eb57044ecc32a2d45552c98518e78d62ec93d1fb1eefbf71b54b40dc0ab33d3f535178d6eb291c6e44e8023afab8eac4f66e9c57b26d94a02e50c9804b79708936c0db5e514113d939de1fd1d914f7f4e3b454a1ec539198dff892782bc3e312ece27520bc", 0x91}, {&(0x7f00000005c0)="03", 0x1}, {0x0}, {0x0}, {&(0x7f0000000900)="c7", 0x1}], 0x5}, 0x0) [ 283.971480][ T5277] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 283.983036][ T5277] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 283.996281][ T5277] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 21:41:21 executing program 3: link(0x0, &(0x7f0000000040)='./file0\x00') munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 21:41:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 21:41:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000200)="cb", 0xb600, 0x0, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) 21:41:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f0000000180)='GPL\x00'}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00030007"], 0xd) 21:41:22 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) chdir(0x0) 21:41:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x19, &(0x7f0000000280)={r2}, 0x8) [ 285.242858][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. 21:41:22 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f00000014c0), &(0x7f0000001500)=0x4) 21:41:23 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) 21:41:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{}, {0x2}, {0x6}]}) 21:41:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0) 21:41:23 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, 0x0) 21:41:23 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f00000001c0), &(0x7f00000000c0)=0x98) 21:41:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x10, 0x2}, 0x10) 21:41:24 executing program 3: socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x5, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) r1 = socket(0x2, 0x5, 0x0) connect$inet(r1, &(0x7f0000000200)={0x10, 0x2}, 0x10) sendto$inet(r1, &(0x7f0000000240)="b4", 0x1, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) dup2(r0, r1) 21:41:24 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f0000000080)) 21:41:24 executing program 0: socket(0x840000000002, 0x0, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0) 21:41:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x3, 0x8000, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) [ 287.654161][ T5319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 287.665668][ T5319] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 287.677584][ T5319] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 21:41:25 executing program 4: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000040)={[{@usebackuproot}, {@autodefrag}]}, 0x1, 0x510c, &(0x7f0000005180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000800)={0x0, 0x0, 0x7fffffff, 0x3}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x1000000000, 0x80000040000001}) r1 = syz_socket_connect_nvme_tcp() fallocate(r1, 0x9, 0x3, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) [ 289.454877][ T5327] loop4: detected capacity change from 0 to 32768 [ 289.470121][ T5327] btrfs: Deprecated parameter 'usebackuproot' [ 289.476530][ T5327] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 289.534190][ T5327] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (5327) [ 289.585682][ T5327] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 289.596660][ T5327] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 289.606948][ T5327] BTRFS info (device loop4): using free-space-tree [ 289.777090][ T5327] BTRFS info (device loop4): rebuilding free space tree [ 290.074383][ T5344] ===================================================== [ 290.082294][ T5344] BUG: KMSAN: uninit-value in __crc32c_le_base+0x43c/0xd80 [ 290.090097][ T5344] __crc32c_le_base+0x43c/0xd80 [ 290.095273][ T5344] chksum_update+0x5b/0xd0 [ 290.100285][ T5344] crypto_shash_update+0x79/0xa0 [ 290.105786][ T5344] csum_tree_block+0x35f/0x5d0 [ 290.111074][ T5344] btree_csum_one_bio+0x4d5/0xeb0 [ 290.116398][ T5344] btrfs_submit_bio+0x1eb6/0x2930 [ 290.122071][ T5344] write_one_eb+0x13fa/0x1570 [ 290.127044][ T5344] btree_write_cache_pages+0x1d2a/0x29a0 [ 290.144049][ T5344] btree_writepages+0x84/0x270 [ 290.149086][ T5344] do_writepages+0x427/0xc30 [ 290.156929][ T5344] filemap_fdatawrite_wbc+0x1d8/0x270 [ 290.162709][ T5344] filemap_fdatawrite_range+0xe1/0x110 [ 290.168597][ T5344] btrfs_write_marked_extents+0x2e7/0x620 [ 290.174809][ T5344] btrfs_sync_log+0x9fd/0x3830 [ 290.180007][ T5344] btrfs_sync_file+0x144c/0x1c60 [ 290.185313][ T5344] vfs_fsync_range+0x20d/0x270 [ 290.190516][ T5344] btrfs_do_write_iter+0x1c5f/0x2270 [ 290.196065][ T5344] btrfs_file_write_iter+0x38/0x50 [ 290.204352][ T5344] vfs_write+0xb63/0x1520 [ 290.209075][ T5344] ksys_write+0x20f/0x4c0 [ 290.214393][ T5344] __x64_sys_write+0x93/0xe0 [ 290.219530][ T5344] do_syscall_64+0xd5/0x1f0 [ 290.224569][ T5344] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 290.241724][ T5344] [ 290.244204][ T5344] Uninit was created at: [ 290.248805][ T5344] __alloc_pages+0x9d6/0xe70 [ 290.256723][ T5344] __alloc_pages_bulk+0x19e/0x21e0 [ 290.262254][ T5344] btrfs_alloc_page_array+0x9e/0x460 [ 290.267798][ T5344] alloc_extent_buffer+0xa68/0x4180 [ 290.273691][ T5344] btrfs_find_create_tree_block+0x46/0x60 [ 290.284131][ T5344] btrfs_alloc_tree_block+0x35c/0x17c0 [ 290.291284][ T5344] btrfs_add_log_tree+0x1b7/0x7a0 [ 290.296694][ T5344] btrfs_log_inode_parent+0x9b6/0x1dd0 [ 290.302793][ T5344] btrfs_log_dentry_safe+0x9a/0x100 [ 290.308280][ T5344] btrfs_sync_file+0x126c/0x1c60 [ 290.313703][ T5344] vfs_fsync_range+0x20d/0x270 [ 290.318840][ T5344] btrfs_do_write_iter+0x1c5f/0x2270 [ 290.324682][ T5344] btrfs_file_write_iter+0x38/0x50 [ 290.330422][ T5344] vfs_write+0xb63/0x1520 [ 290.346269][ T5344] ksys_write+0x20f/0x4c0 [ 290.354011][ T5344] __x64_sys_write+0x93/0xe0 [ 290.359009][ T5344] do_syscall_64+0xd5/0x1f0 [ 290.364065][ T5344] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 290.370480][ T5344] [ 290.372954][ T5344] CPU: 1 PID: 5344 Comm: syz-executor.4 Not tainted 6.9.0-rc1-syzkaller-00061-g8d025e2092e2 #0 [ 290.383648][ T5344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 290.394109][ T5344] ===================================================== [ 290.401329][ T5344] Disabling lock debugging due to kernel taint [ 290.407669][ T5344] Kernel panic - not syncing: kmsan.panic set ... [ 290.414300][ T5344] CPU: 1 PID: 5344 Comm: syz-executor.4 Tainted: G B 6.9.0-rc1-syzkaller-00061-g8d025e2092e2 #0 [ 290.426387][ T5344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 290.436756][ T5344] Call Trace: [ 290.440194][ T5344] [ 290.443366][ T5344] dump_stack_lvl+0x216/0x2d0 [ 290.448438][ T5344] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.454684][ T5344] dump_stack+0x1e/0x30 [ 290.459154][ T5344] panic+0x4e2/0xcd0 [ 290.463301][ T5344] ? kmsan_get_metadata+0x101/0x1d0 [ 290.468855][ T5344] kmsan_report+0x2d5/0x2e0 [ 290.473692][ T5344] ? sbitmap_get+0x4d5/0x670 [ 290.478624][ T5344] ? __msan_warning+0x95/0x120 [ 290.483688][ T5344] ? __crc32c_le_base+0x43c/0xd80 [ 290.489233][ T5344] ? chksum_update+0x5b/0xd0 [ 290.494536][ T5344] ? crypto_shash_update+0x79/0xa0 [ 290.500038][ T5344] ? csum_tree_block+0x35f/0x5d0 [ 290.505291][ T5344] ? btree_csum_one_bio+0x4d5/0xeb0 [ 290.510806][ T5344] ? btrfs_submit_bio+0x1eb6/0x2930 [ 290.516298][ T5344] ? write_one_eb+0x13fa/0x1570 [ 290.521441][ T5344] ? btree_write_cache_pages+0x1d2a/0x29a0 [ 290.527608][ T5344] ? btree_writepages+0x84/0x270 [ 290.532815][ T5344] ? do_writepages+0x427/0xc30 [ 290.537904][ T5344] ? filemap_fdatawrite_wbc+0x1d8/0x270 [ 290.543712][ T5344] ? filemap_fdatawrite_range+0xe1/0x110 [ 290.549607][ T5344] ? btrfs_write_marked_extents+0x2e7/0x620 [ 290.555771][ T5344] ? btrfs_sync_log+0x9fd/0x3830 [ 290.560987][ T5344] ? btrfs_sync_file+0x144c/0x1c60 [ 290.566390][ T5344] ? vfs_fsync_range+0x20d/0x270 [ 290.571588][ T5344] ? btrfs_do_write_iter+0x1c5f/0x2270 [ 290.577350][ T5344] ? btrfs_file_write_iter+0x38/0x50 [ 290.582927][ T5344] ? vfs_write+0xb63/0x1520 [ 290.587697][ T5344] ? ksys_write+0x20f/0x4c0 [ 290.592472][ T5344] ? __x64_sys_write+0x93/0xe0 [ 290.597518][ T5344] ? do_syscall_64+0xd5/0x1f0 [ 290.602468][ T5344] ? entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 290.608803][ T5344] ? kmsan_get_metadata+0x146/0x1d0 [ 290.614241][ T5344] ? kmsan_get_metadata+0x146/0x1d0 [ 290.619696][ T5344] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.625853][ T5344] ? __module_address+0xef/0x7e0 [ 290.631127][ T5344] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.637271][ T5344] ? kmsan_get_metadata+0x146/0x1d0 [ 290.643153][ T5344] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.649302][ T5344] __msan_warning+0x95/0x120 [ 290.654168][ T5344] __crc32c_le_base+0x43c/0xd80 [ 290.659327][ T5344] chksum_update+0x5b/0xd0 [ 290.664010][ T5344] ? __pfx_chksum_update+0x10/0x10 [ 290.669402][ T5344] crypto_shash_update+0x79/0xa0 [ 290.674623][ T5344] csum_tree_block+0x35f/0x5d0 [ 290.679680][ T5344] ? kmsan_get_metadata+0x146/0x1d0 [ 290.685195][ T5344] ? kmsan_get_metadata+0x146/0x1d0 [ 290.690624][ T5344] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.696772][ T5344] ? kmsan_get_metadata+0x146/0x1d0 [ 290.702209][ T5344] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.708345][ T5344] ? memcmp+0x61/0x1c0 [ 290.712807][ T5344] ? memcmp_extent_buffer+0x139/0x690 [ 290.718477][ T5344] ? btrfs_folio_test_uptodate+0x2ad/0x5d0 [ 290.724904][ T5344] btree_csum_one_bio+0x4d5/0xeb0 [ 290.730304][ T5344] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.736475][ T5344] btrfs_submit_bio+0x1eb6/0x2930 [ 290.741802][ T5344] ? kmsan_get_metadata+0x146/0x1d0 [ 290.747267][ T5344] write_one_eb+0x13fa/0x1570 [ 290.752254][ T5344] btree_write_cache_pages+0x1d2a/0x29a0 [ 290.758173][ T5344] ? kmsan_get_metadata+0x146/0x1d0 [ 290.763641][ T5344] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 290.770183][ T5344] ? kmsan_get_metadata+0x146/0x1d0 [ 290.775629][ T5344] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.781787][ T5344] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 290.788057][ T5344] ? kmsan_get_metadata+0x146/0x1d0 [ 290.793681][ T5344] ? kmem_cache_free+0x257/0xa80 [ 290.799261][ T5344] ? btrfs_sync_file+0x144c/0x1c60 [ 290.804749][ T5344] ? vfs_write+0xb63/0x1520 [ 290.809815][ T5344] btree_writepages+0x84/0x270 [ 290.814912][ T5344] ? __pfx_btree_writepages+0x10/0x10 [ 290.820686][ T5344] do_writepages+0x427/0xc30 [ 290.825682][ T5344] ? kmsan_get_metadata+0x146/0x1d0 [ 290.831140][ T5344] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.837378][ T5344] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.843507][ T5344] filemap_fdatawrite_wbc+0x1d8/0x270 [ 290.849145][ T5344] filemap_fdatawrite_range+0xe1/0x110 [ 290.854909][ T5344] btrfs_write_marked_extents+0x2e7/0x620 [ 290.860924][ T5344] btrfs_sync_log+0x9fd/0x3830 [ 290.865949][ T5344] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 290.872520][ T5344] ? kmsan_get_metadata+0x146/0x1d0 [ 290.877986][ T5344] ? kmsan_get_metadata+0x146/0x1d0 [ 290.883436][ T5344] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.889571][ T5344] ? filter_irq_stacks+0x164/0x1a0 [ 290.895036][ T5344] ? stack_depot_save_flags+0x2c/0x6e0 [ 290.901052][ T5344] ? kmsan_get_metadata+0x146/0x1d0 [ 290.906615][ T5344] ? kmsan_get_metadata+0x146/0x1d0 [ 290.912052][ T5344] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.919305][ T5344] ? kmsan_get_metadata+0x146/0x1d0 [ 290.925096][ T5344] ? __pfx_autoremove_wake_function+0x10/0x10 [ 290.931569][ T5344] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.937722][ T5344] ? kmsan_get_metadata+0x146/0x1d0 [ 290.943197][ T5344] btrfs_sync_file+0x144c/0x1c60 [ 290.948465][ T5344] ? __pfx_btrfs_sync_file+0x10/0x10 [ 290.954017][ T5344] vfs_fsync_range+0x20d/0x270 [ 290.959044][ T5344] btrfs_do_write_iter+0x1c5f/0x2270 [ 290.964607][ T5344] ? filter_irq_stacks+0x164/0x1a0 [ 290.970018][ T5344] ? stack_depot_save_flags+0x2c/0x6e0 [ 290.975745][ T5344] btrfs_file_write_iter+0x38/0x50 [ 290.981125][ T5344] ? __pfx_btrfs_file_write_iter+0x10/0x10 [ 290.987226][ T5344] vfs_write+0xb63/0x1520 [ 290.991874][ T5344] ksys_write+0x20f/0x4c0 [ 290.996604][ T5344] __x64_sys_write+0x93/0xe0 [ 291.001629][ T5344] do_syscall_64+0xd5/0x1f0 [ 291.006534][ T5344] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 291.012760][ T5344] RIP: 0033:0x7fd04887dda9 [ 291.017722][ T5344] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 291.037642][ T5344] RSP: 002b:00007fd0496720c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 291.046318][ T5344] RAX: ffffffffffffffda RBX: 00007fd0489ac050 RCX: 00007fd04887dda9 [ 291.054510][ T5344] RDX: 000000000000000b RSI: 00000000200000c0 RDI: 0000000000000004 [ 291.062699][ T5344] RBP: 00007fd0488ca47a R08: 0000000000000000 R09: 0000000000000000 [ 291.070864][ T5344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.079019][ T5344] R13: 000000000000006e R14: 00007fd0489ac050 R15: 00007fff890bc6b8 [ 291.087276][ T5344] [ 291.090687][ T5344] Kernel Offset: disabled [ 291.095112][ T5344] Rebooting in 86400 seconds..