last executing test programs: 1m7.804599883s ago: executing program 0 (id=574): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x5, 0x4f, 0x0, 0xffff}]}) 1m7.699000227s ago: executing program 0 (id=575): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1m7.529598055s ago: executing program 0 (id=581): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x22008d0, 0x0) 1m7.386782701s ago: executing program 0 (id=584): dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@nodiscard}, {@abort}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) socket(0x2a, 0x6, 0x4) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x4) 1m7.17792553s ago: executing program 1 (id=588): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000005c0)={0x50, 0x0, r1, {0x7, 0x1f, 0xffffffff, 0x0, 0x1e64, 0x0, 0x1, 0x5, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r2, 0xfffffffffffffffc, 0x0) 1m6.622601084s ago: executing program 0 (id=597): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x2, 0xfd, 0x0, 0x4}, {0x6}]}) 1m6.121655005s ago: executing program 0 (id=603): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) io_setup(0x0, &(0x7f0000000040)) 1m6.042297259s ago: executing program 32 (id=603): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) io_setup(0x0, &(0x7f0000000040)) 1m3.784871996s ago: executing program 1 (id=636): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x6400000c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m3.315981686s ago: executing program 1 (id=642): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000140)={&(0x7f0000000080)="f649580a3666440f3a0c718703c4e13dfb647b4864643e640f806a516f553e640fe2ff8fe978d28500000080e486c401dde2592bc4612610c4c481c164a103000000", 0x80000000, 0x0, {[0x7]}}, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000400)) 1m3.121462395s ago: executing program 1 (id=646): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x1a0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x121) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 1m2.596439087s ago: executing program 1 (id=654): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioprio_set$pid(0x2, 0x0, 0x300) 1m1.523043673s ago: executing program 1 (id=667): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000000), 0x3, 0x462, &(0x7f0000000440)="$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") 1m1.295550423s ago: executing program 33 (id=667): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000000), 0x3, 0x462, &(0x7f0000000440)="$eJzs3MtvG8UfAPDv2k76/sW/qjz6AAIFUfFImrSUHriAQOIAEhIcyjEkaVXqNqgJEq0qKAiVI6rEHXFE4i/gBBcEnJC4whWhShXKpaUno7V3Hcd1EufhOK0/H2nbmd3ZzHy9O/HMTuwA+tZw+k8SsTsi/oiIoXp2cYHh+n+3569M/jt/ZTKJavXtf5JauVvzVybzovl5u/JMOaLweRIH29Q7e+nyuYlKZfpilh+dO//B6Oyly8+fPT9xZvrM9IXxkyePHxt78cT4CxsSZxrXrQMfzxza//q719+cPHX9vV++S/L4W+JYlcKSR4aXO+2panVN1W1Ve5rSSWkhucJp1aGutYhOFCMivVwDtf4/FMVYuHhD8dpnPW0c0FWDyx++WgXuY+loHuhH+Rt9Ov/Nt00YdmwZN1+uT4DSuG9nW/1IqTG1H2iZ326k4Yg4dfXO1+kW63kOAQDQoR/S8c9z7cZ/hXiwqdz/sjWUckT8PyL2RsSJ7PnxAxG1sg9FxMONM7Z3VH/rIsnd45/CjTUH14F0/PdStra1ePzXWNgpF7Pcnlr8A8nps5Xpo9lrciQGtqX5sWXq+PHV379c6ljz+C/d0vrzsWDWjhulbYvPmZqYm1hPzM1ufhpxoNQu/qSxEpBExP6IOLDGOs4+8+2hPN26XLZy/N1V/Sbi6fr1vxot8eeSplyb9cnR7VGZPjqa3xV3+/W3a28tVX9z/KUexJ9e/51t7/9G/OWkeb12dvV1XPvziyXnNKu5/4vZnvT+H0zeWfRzPpqYm7s4FjGYvFFvdPP+8ZZy4wvl0/iPHG7f//fGwitxMCLSm/iRiHg0Ih7L2v54RDwREYeXif/nV558f+3xd1ca/1RE3MmeB6x8/RcSg9G6J0v8lf2wbE/x3E/fL6q0vJr40+t/vJY6ku3p5Pdf23a1Saz39QMAAIB7QSEidkdSGGmkC4WRkfrf8O+LnYXKzOzcs6dnPrwwVf+MQDkGCvmTrqGm56Fj2bQ+z4+35I9lz42/Ku6o5UcmZypTvQ4e+tyuJfp/6u9ir1sHdF2p1w0Aekb/h/6l/0P/0v+hf7Xp/zt60Q5g89X6f8tXNX3So7YAm6vl/d+yH/QR83/oX/o/9C/9H/rS7I5Y+UPyzYkkIjouLHH/JqKwJZpxDyX2bY1mdJjo5LdHt74VEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYOP8FwAA//81t+Vk") 17.965515897s ago: executing program 5 (id=1241): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) futex(&(0x7f000000cffc)=0x2, 0x5, 0x10000, 0x0, 0x0, 0x0) 17.915653719s ago: executing program 4 (id=1242): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) msgget$private(0x0, 0x3ac) 17.775484285s ago: executing program 3 (id=1245): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffdf004fff, 0x0) 17.755147276s ago: executing program 4 (id=1246): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) 17.636363761s ago: executing program 3 (id=1249): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mremap(&(0x7f000008b000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 17.628438291s ago: executing program 5 (id=1250): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec8f30f1eff0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x40000002]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 17.578895323s ago: executing program 4 (id=1251): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 17.473142098s ago: executing program 3 (id=1254): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) tgkill(0x0, 0x0, 0x21) 17.456322279s ago: executing program 5 (id=1255): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x2}, {0xfff3, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044074) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) 17.289628426s ago: executing program 3 (id=1257): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 16.888235843s ago: executing program 4 (id=1260): sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0) pipe2$9p(&(0x7f0000002480), 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 16.881077023s ago: executing program 3 (id=1261): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000440)={0x40, 0x14, 0x5, "140eff6a25"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 16.834559726s ago: executing program 5 (id=1262): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000005800), 0x20841, 0x0) 16.636423434s ago: executing program 5 (id=1264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0xd, 0x1}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r3, 0xffffffffffffffff, 0x0) 16.471092061s ago: executing program 2 (id=1267): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) clock_settime(0x2, 0x0) 16.470248841s ago: executing program 6 (id=1268): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) getcwd(&(0x7f0000000380)=""/132, 0x84) 16.377508695s ago: executing program 5 (id=1269): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) 16.376827345s ago: executing program 6 (id=1270): rt_sigaction(0xd, &(0x7f0000000080)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0xb74]}}, 0x0, 0x8, &(0x7f00000000c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) getresuid(0x0, 0x0, 0x0) 16.278119899s ago: executing program 6 (id=1271): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x18}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 16.27792602s ago: executing program 2 (id=1272): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x4, 0x28}, 0x50) 16.175386044s ago: executing program 2 (id=1273): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000040), 0x0, 0x0, 0x2) 16.149456195s ago: executing program 6 (id=1274): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 16.051639339s ago: executing program 2 (id=1275): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb201ffff) 16.050337739s ago: executing program 6 (id=1276): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x840) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 15.905597585s ago: executing program 4 (id=1277): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil) 15.871165347s ago: executing program 2 (id=1278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x2a, 0x0, 0xffffffffffffffff, 0x37}, 0x24) 15.755916782s ago: executing program 4 (id=1279): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_destroy(0x0) 15.641540757s ago: executing program 2 (id=1280): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_SET_DUMPABLE(0x4, 0x3) 15.206641485s ago: executing program 6 (id=1281): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) io_submit(0x0, 0xfffffffffffffd52, 0x0) 13.426684392s ago: executing program 3 (id=1282): rt_sigaction(0xd, &(0x7f0000000080)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0xb74]}}, 0x0, 0x8, &(0x7f00000000c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) getresuid(0x0, 0x0, 0x0) 0s ago: executing program 34 (id=1269): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.239' (ED25519) to the list of known hosts. [ 59.068874][ T4172] cgroup: Unknown subsys name 'net' [ 59.215182][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.648150][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.033882][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 62.132475][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 62.207776][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 62.231321][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.241410][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.250057][ T4194] device bridge_slave_0 entered promiscuous mode [ 62.277497][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.289043][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.297224][ T4194] device bridge_slave_1 entered promiscuous mode [ 62.329550][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.340820][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.364017][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 62.376001][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 62.445651][ T4194] team0: Port device team_slave_0 added [ 62.476945][ T4194] team0: Port device team_slave_1 added [ 62.487112][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.494615][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.503216][ T4183] device bridge_slave_0 entered promiscuous mode [ 62.514524][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.521779][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.529627][ T4182] device bridge_slave_0 entered promiscuous mode [ 62.550228][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.557390][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.565831][ T4183] device bridge_slave_1 entered promiscuous mode [ 62.576297][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.583742][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.591880][ T4182] device bridge_slave_1 entered promiscuous mode [ 62.632042][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.639307][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.665566][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.705450][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.712636][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.738787][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.758631][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.767915][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.775195][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.783000][ T4197] device bridge_slave_0 entered promiscuous mode [ 62.792243][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.806419][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.813848][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.821909][ T4190] device bridge_slave_0 entered promiscuous mode [ 62.831174][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.840628][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.847680][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.855868][ T4197] device bridge_slave_1 entered promiscuous mode [ 62.880597][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.889864][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.896920][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.905000][ T4190] device bridge_slave_1 entered promiscuous mode [ 62.933894][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.958671][ T4183] team0: Port device team_slave_0 added [ 62.966329][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.985765][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.003451][ T4183] team0: Port device team_slave_1 added [ 63.011100][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.036927][ T4182] team0: Port device team_slave_0 added [ 63.059755][ T4194] device hsr_slave_0 entered promiscuous mode [ 63.066517][ T4194] device hsr_slave_1 entered promiscuous mode [ 63.085999][ T4182] team0: Port device team_slave_1 added [ 63.111289][ T4190] team0: Port device team_slave_0 added [ 63.126615][ T4197] team0: Port device team_slave_0 added [ 63.140484][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.147480][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.173700][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.187783][ T4190] team0: Port device team_slave_1 added [ 63.205205][ T4197] team0: Port device team_slave_1 added [ 63.218265][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.225291][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.251225][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.284226][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.291322][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.317300][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.335306][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.342707][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.369647][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.388867][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.395837][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.422239][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.438113][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.445194][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.471213][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.482688][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.489792][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.515717][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.546202][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.553361][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.579566][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.653742][ T4182] device hsr_slave_0 entered promiscuous mode [ 63.661056][ T4182] device hsr_slave_1 entered promiscuous mode [ 63.667749][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.675911][ T4182] Cannot create hsr debugfs directory [ 63.684445][ T4183] device hsr_slave_0 entered promiscuous mode [ 63.691756][ T4183] device hsr_slave_1 entered promiscuous mode [ 63.698431][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.709413][ T4183] Cannot create hsr debugfs directory [ 63.728932][ T4190] device hsr_slave_0 entered promiscuous mode [ 63.735819][ T4190] device hsr_slave_1 entered promiscuous mode [ 63.742754][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 63.749386][ T4184] Bluetooth: hci0: command 0x0409 tx timeout [ 63.755784][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.763452][ T4190] Cannot create hsr debugfs directory [ 63.773192][ T4197] device hsr_slave_0 entered promiscuous mode [ 63.780104][ T4197] device hsr_slave_1 entered promiscuous mode [ 63.786657][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.794379][ T4197] Cannot create hsr debugfs directory [ 63.820652][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 63.826726][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 63.833214][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 64.097684][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.109300][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.119579][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.133393][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.173161][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.186214][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.195340][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.213953][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.286811][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.296387][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.327451][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.347777][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.368212][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.397633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.407513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.434641][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.456308][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.464216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.474521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.484459][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.491707][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.501904][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.511675][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.524922][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.534073][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.546178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.588662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.596484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.610346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.620028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.629005][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.636089][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.658756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.675171][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.686540][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.700827][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.713773][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.735198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.744501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.753674][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.760799][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.769454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.777994][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.787316][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.794446][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.804813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.814795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.829094][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.862177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.871836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.881898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.891156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.903637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.913021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.924956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.933479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.947096][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.962576][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.993165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.002384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.014325][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.032610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.054045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.063657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.083093][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.096260][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.118921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.126842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.138238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.147906][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.157047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.177530][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.189517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.198069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.206232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.216053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.261916][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.274023][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.284050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.294614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.303373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.312874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.321996][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.329108][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.337864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.346915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.356015][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.363136][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.372050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.380872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.390064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.398733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.407127][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.414326][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.423126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.432092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.440705][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.447754][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.456129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.464417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.477774][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.493710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.501758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.513395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.523445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.533683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.547905][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.568372][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.580566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.592575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.602204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.610264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.622033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.637768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.648174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.686920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.703285][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.713349][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.720474][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.735504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.745262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.754586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.764152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.773242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.781936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.790772][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.797828][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.805651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.815211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.819003][ T4254] Bluetooth: hci1: command 0x041b tx timeout [ 65.823571][ T2304] Bluetooth: hci0: command 0x041b tx timeout [ 65.836146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.845339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.881590][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.891485][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.900468][ T4247] Bluetooth: hci2: command 0x041b tx timeout [ 65.901247][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.906511][ T4247] Bluetooth: hci3: command 0x041b tx timeout [ 65.922123][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.922160][ T4247] Bluetooth: hci4: command 0x041b tx timeout [ 65.935584][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.944852][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.954478][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.962963][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.971536][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.980479][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.990383][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.998823][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.007129][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.015655][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.033664][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.045616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.053222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.061846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.074522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.083950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.092859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.104123][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.113867][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.134329][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.180557][ T4194] device veth0_vlan entered promiscuous mode [ 66.202717][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.239190][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.270974][ T4194] device veth1_vlan entered promiscuous mode [ 66.290352][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.300335][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.308286][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.317973][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.335504][ T4197] device veth0_vlan entered promiscuous mode [ 66.359711][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.379980][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.412531][ T4197] device veth1_vlan entered promiscuous mode [ 66.426235][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.441234][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.453449][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.465312][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.478938][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.490915][ T4194] device veth0_macvtap entered promiscuous mode [ 66.509229][ T4194] device veth1_macvtap entered promiscuous mode [ 66.541807][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.559250][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.568073][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.576555][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.585197][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.592995][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.601865][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.610439][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.619027][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.627812][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.638206][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.646061][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.655607][ T4197] device veth0_macvtap entered promiscuous mode [ 66.667222][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.677956][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.691573][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.699324][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.707485][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.717646][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.730006][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.739526][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.748231][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.757325][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.779271][ T4197] device veth1_macvtap entered promiscuous mode [ 66.791399][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.800755][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.808207][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.836183][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.847757][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.861418][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.875171][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.897395][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.914600][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.925756][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.943828][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.955471][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.985644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.995478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.010032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.024115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.041013][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.055335][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.064423][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.073689][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.108056][ T4190] device veth0_vlan entered promiscuous mode [ 67.139138][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.147426][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.161761][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.170166][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.183700][ T4190] device veth1_vlan entered promiscuous mode [ 67.210328][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.219291][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.251834][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.261144][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.271366][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.280437][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.289872][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.298040][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.306851][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.315962][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.325748][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.339675][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.376103][ T4182] device veth0_vlan entered promiscuous mode [ 67.388223][ T420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.400484][ T420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.415602][ T4182] device veth1_vlan entered promiscuous mode [ 67.427497][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.437942][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.446828][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.455609][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.464812][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.480831][ T4183] device veth0_vlan entered promiscuous mode [ 67.516891][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.532496][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.550622][ T4190] device veth0_macvtap entered promiscuous mode [ 67.578386][ T4183] device veth1_vlan entered promiscuous mode [ 67.592845][ T4190] device veth1_macvtap entered promiscuous mode [ 67.633278][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.644439][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.669783][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.674629][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.688686][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.697207][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.705931][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.715235][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.724110][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.746097][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.754807][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.767770][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.780453][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.791881][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.807246][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.822557][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.838359][ T4183] device veth0_macvtap entered promiscuous mode [ 67.855157][ T4182] device veth0_macvtap entered promiscuous mode [ 67.864204][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.873454][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.882274][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.892097][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.899633][ T4254] Bluetooth: hci0: command 0x040f tx timeout [ 67.900405][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 67.917276][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.927838][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.937732][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.948612][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.960993][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.973149][ T4183] device veth1_macvtap entered promiscuous mode [ 67.980048][ T4226] Bluetooth: hci3: command 0x040f tx timeout [ 67.980227][ T2304] Bluetooth: hci4: command 0x040f tx timeout [ 67.992375][ T4226] Bluetooth: hci2: command 0x040f tx timeout [ 67.992661][ T4247] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.006831][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.016594][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.028182][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.040387][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.051173][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.060844][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.069668][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.089018][ T4182] device veth1_macvtap entered promiscuous mode [ 68.097757][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.110984][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.121716][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.124356][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.139312][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.150059][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.159979][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.170999][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.185644][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.198955][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.209769][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.221432][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.232141][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.242670][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.253197][ T4247] usb 3-1: Using ep0 maxpacket: 16 [ 68.254603][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.270936][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.281758][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.292969][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.302132][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.311283][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.320193][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.328726][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.342538][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.353088][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.363413][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.373935][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.386082][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.396861][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.406958][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.417961][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.426943][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.443729][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.455081][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.466133][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.476861][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.487593][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.499283][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.509276][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.519743][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.531092][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.542663][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.552326][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.561828][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.568852][ T4247] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 68.571365][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.580642][ T4247] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 68.601460][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.620113][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.630035][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.639128][ T4247] usb 3-1: Product: syz [ 68.640040][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.643410][ T4247] usb 3-1: Manufacturer: syz [ 68.656608][ T4247] usb 3-1: SerialNumber: syz [ 68.663445][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.665923][ T4247] usb 3-1: config 0 descriptor?? [ 68.682710][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.691819][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.701945][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.863623][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.875919][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.930187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.010182][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.018206][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.060843][ T420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.070899][ T420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.092065][ T4304] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.129293][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.145554][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.179797][ T4297] usb 3-1: USB disconnect, device number 2 [ 69.211165][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.248662][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.260707][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.279821][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.305179][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.308347][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.351394][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.364287][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.378731][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.981181][ T4329] loop1: detected capacity change from 0 to 4096 [ 69.986108][ T4339] process 'syz.4.18' launched './file2' with NULL argv: empty string added [ 69.988865][ T4297] Bluetooth: hci1: command 0x0419 tx timeout [ 70.021212][ T4297] Bluetooth: hci0: command 0x0419 tx timeout [ 70.047719][ T4338] netlink: 'syz.0.19': attribute type 1 has an invalid length. [ 70.060349][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 70.064639][ T4226] Bluetooth: hci4: command 0x0419 tx timeout [ 70.091836][ T4226] Bluetooth: hci2: command 0x0419 tx timeout [ 70.113068][ T4329] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 70.150533][ T4329] ntfs3: loop1: Failed to load $MFT. [ 70.168427][ T4338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 70.250535][ T4344] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20'. [ 70.394213][ T4329] loop1: detected capacity change from 0 to 4096 [ 70.533577][ T4329] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 70.545124][ T4352] netlink: 'syz.4.24': attribute type 12 has an invalid length. [ 70.595382][ T4329] ntfs3: loop1: Failed to load $Extend. [ 70.744746][ T26] audit: type=1800 audit(1763561583.297:2): pid=4329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 70.850179][ T4358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26'. [ 71.006383][ T26] audit: type=1326 audit(1763561583.567:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4330 comm="syz.2.17" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82375c6749 code=0x0 [ 71.183748][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.190910][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.410650][ T4365] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.466850][ T4350] loop0: detected capacity change from 0 to 32768 [ 71.538855][ T1107] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.543965][ T4350] ======================================================= [ 71.543965][ T4350] WARNING: The mand mount option has been deprecated and [ 71.543965][ T4350] and is ignored by this kernel. Remove the mand [ 71.543965][ T4350] option from the mount to silence this warning. [ 71.543965][ T4350] ======================================================= [ 71.579537][ T4370] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.722317][ T4350] XFS (loop0): Mounting V5 Filesystem [ 71.838921][ T1107] usb 5-1: Using ep0 maxpacket: 8 [ 72.066241][ T4384] loop1: detected capacity change from 0 to 40427 [ 72.111331][ T4350] XFS (loop0): Ending clean mount [ 72.162412][ T4384] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 72.170805][ T4384] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 72.178743][ T1107] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 72.189225][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.197245][ T1107] usb 5-1: Product: syz [ 72.199012][ T4384] F2FS-fs (loop1): invalid crc value [ 72.235396][ T4384] F2FS-fs (loop1): Found nat_bits in checkpoint [ 72.259984][ T1107] usb 5-1: Manufacturer: syz [ 72.288552][ T1107] usb 5-1: SerialNumber: syz [ 72.298442][ T4350] XFS (loop0): Quotacheck needed: Please wait. [ 72.338408][ T4384] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 72.345872][ T4384] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 72.352281][ T1107] usb 5-1: config 0 descriptor?? [ 72.373794][ T4397] loop2: detected capacity change from 0 to 512 [ 72.422740][ T4384] attempt to access beyond end of device [ 72.422740][ T4384] loop1: rw=2049, want=45104, limit=40427 [ 72.446385][ T4350] XFS (loop0): Quotacheck: Done. [ 72.658686][ T1107] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 72.679370][ T4397] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000000,. Quota mode: writeback. [ 72.728710][ T4397] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.777641][ T26] audit: type=1800 audit(1763561585.337:4): pid=4397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.37" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 73.437864][ T4190] XFS (loop0): Unmounting Filesystem [ 73.767048][ T4431] loop2: detected capacity change from 0 to 512 [ 73.802694][ T4431] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 73.847542][ T4431] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 73.855942][ T1325] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.863937][ T4431] System zones: 1-12 [ 73.882981][ T4431] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2229: inode #15: comm syz.2.51: corrupted in-inode xattr [ 73.896631][ T4431] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.51: couldn't read orphan inode 15 (err -117) [ 73.918684][ T4431] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,grpid,noauto_da_alloc,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 74.104598][ T4431] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.51: Unrecognised inode hash code 4 [ 74.108663][ T1325] usb 4-1: Using ep0 maxpacket: 32 [ 74.124735][ T4431] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.51: Corrupt directory, running e2fsck is recommended [ 74.213894][ T1107] usb write operation failed. (-71) [ 74.238048][ T1107] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 74.248814][ T1325] usb 4-1: config 0 has no interfaces? [ 74.260229][ T26] audit: type=1326 audit(1763561586.827:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4435 comm="syz.0.52" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fca4be749 code=0x0 [ 74.288808][ T1107] dvbdev: DVB: registering new adapter (Terratec H7) [ 74.295801][ T1107] usb 5-1: media controller created [ 74.318776][ T1107] usb read operation failed. (-71) [ 74.338628][ T1107] usb write operation failed. (-71) [ 74.373097][ T1107] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5 [ 74.400972][ T1107] usb 5-1: USB disconnect, device number 2 [ 74.408932][ T1325] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 74.432388][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.462574][ T1325] usb 4-1: Product: syz [ 74.477258][ T1325] usb 4-1: Manufacturer: syz [ 74.492807][ T1325] usb 4-1: SerialNumber: syz [ 74.514242][ T1325] usb 4-1: config 0 descriptor?? [ 74.835588][ T1325] usb 4-1: USB disconnect, device number 2 [ 74.912973][ T4457] mmap: syz.1.62 (4457) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 75.388763][ T4480] loop2: detected capacity change from 0 to 64 [ 75.453681][ T4474] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 75.477042][ T4480] BFS-fs: bfs_fill_super(): Impossible last inode number 144386 > 513 on loop2 [ 75.536601][ T4474] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 75.873269][ T4463] loop1: detected capacity change from 0 to 32768 [ 76.009378][ T4502] netlink: 'syz.2.83': attribute type 13 has an invalid length. [ 76.017529][ T4502] netlink: 'syz.2.83': attribute type 17 has an invalid length. [ 76.059991][ T4463] XFS (loop1): Mounting V5 Filesystem [ 76.294946][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.361684][ T4463] XFS (loop1): Ending clean mount [ 76.377470][ T4463] XFS (loop1): Quotacheck needed: Please wait. [ 76.406193][ T4502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.465092][ T4463] XFS (loop1): Quotacheck: Done. [ 76.708343][ T4182] XFS (loop1): Unmounting Filesystem [ 76.746875][ T4531] loop2: detected capacity change from 0 to 512 [ 76.792990][ T4531] FAT-fs (loop2): bogus number of FAT sectors [ 76.807863][ T4531] FAT-fs (loop2): Can't find a valid FAT filesystem [ 76.822483][ T4534] device erspan0 entered promiscuous mode [ 76.833867][ T4534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 76.846022][ T4534] device erspan0 left promiscuous mode [ 77.870884][ T4587] Zero length message leads to an empty skb [ 78.017114][ T4595] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 78.052213][ T4601] syz.4.125 uses obsolete (PF_INET,SOCK_PACKET) [ 78.226826][ T4607] gfs2: gfs2 mount does not exist [ 78.501241][ T4627] capability: warning: `syz.4.137' uses deprecated v2 capabilities in a way that may be insecure [ 79.114130][ T4652] loop3: detected capacity change from 0 to 512 [ 79.378547][ T1325] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.508133][ T4665] loop0: detected capacity change from 0 to 1024 [ 79.618294][ T4665] EXT4-fs (loop0): inline encryption not supported [ 79.618849][ T1325] usb 5-1: Using ep0 maxpacket: 32 [ 79.641020][ T4670] loop1: detected capacity change from 0 to 128 [ 79.661047][ T4665] EXT4-fs (loop0): Ignoring removed bh option [ 79.679430][ T4665] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.735927][ T4675] loop3: detected capacity change from 0 to 256 [ 79.760383][ T1325] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 79.784908][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.797279][ T4665] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,lazytime,bh,errors=remount-ro,. Quota mode: writeback. [ 79.803304][ T1325] usb 5-1: config 0 descriptor?? [ 79.881349][ T4675] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 80.036573][ T4686] loop2: detected capacity change from 0 to 512 [ 80.072594][ T4686] EXT4-fs (loop2): Ignoring removed orlov option [ 80.079359][ T1325] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 80.091476][ T1325] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 80.105968][ T4665] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.153: Allocating blocks 497-513 which overlap fs metadata [ 80.143647][ T4686] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 80.170938][ T4665] EXT4-fs (loop0): Remounting filesystem read-only [ 80.179416][ T1325] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 80.186603][ T1325] usb 5-1: media controller created [ 80.203484][ T4665] EXT4-fs (loop0): pa ffff8880742b37e0: logic 128, phys. 385, len 8 [ 80.204455][ T4686] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2229: inode #15: comm syz.2.161: corrupted in-inode xattr [ 80.212276][ T4665] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 80.219336][ T4665] EXT4-fs (loop0): Remounting filesystem read-only [ 80.284136][ T4686] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.161: couldn't read orphan inode 15 (err -117) [ 80.304594][ T1325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.325733][ T4686] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,user_xattr,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,nodiscard,,errors=continue. Quota mode: none. [ 80.422915][ T1325] az6027: usb out operation failed. (-71) [ 80.468689][ T1325] az6027: usb out operation failed. (-71) [ 80.485145][ T1325] stb0899_attach: Driver disabled by Kconfig [ 80.504078][ T1325] az6027: no front-end attached [ 80.504078][ T1325] [ 80.548625][ T1325] az6027: usb out operation failed. (-71) [ 80.554442][ T1325] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 80.581571][ T1325] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 80.655643][ T1325] dvb-usb: schedule remote query interval to 400 msecs. [ 80.681294][ T1325] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 80.730852][ T1325] usb 5-1: USB disconnect, device number 3 [ 80.771269][ T4708] device bond0 entered promiscuous mode [ 80.792652][ T4708] device bond_slave_0 entered promiscuous mode [ 80.834340][ T4708] device bond_slave_1 entered promiscuous mode [ 80.862579][ T1325] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 81.040737][ T4715] loop1: detected capacity change from 0 to 2048 [ 81.161852][ T4715] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 81.275204][ T4715] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 81.296058][ T4715] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 604 with error 28 [ 81.310428][ T4715] EXT4-fs (loop1): This should not happen!! Data will be lost [ 81.310428][ T4715] [ 81.320174][ T4715] EXT4-fs (loop1): Total free blocks count 0 [ 81.326267][ T4715] EXT4-fs (loop1): Free/Dirty block details [ 81.332427][ T4715] EXT4-fs (loop1): free_blocks=2415919104 [ 81.338558][ T4715] EXT4-fs (loop1): dirty_blocks=608 [ 81.343781][ T4715] EXT4-fs (loop1): Block reservation details [ 81.367420][ T4719] loop4: detected capacity change from 0 to 4096 [ 81.374146][ T4715] EXT4-fs (loop1): i_reserved_data_blocks=38 [ 81.422823][ T7] cfg80211: failed to load regulatory.db [ 81.539773][ T26] audit: type=1326 audit(1763561594.107:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.0.175" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fca4be749 code=0x0 [ 83.027631][ T4759] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.984135][ T4796] loop9: detected capacity change from 0 to 7 [ 84.041965][ T4796] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 84.048289][ T4796] loop9: partition table partially beyond EOD, truncated [ 84.082665][ T4796] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 84.718403][ T4797] syz.0.200 (4797) used greatest stack depth: 20864 bytes left [ 85.074077][ T4824] loop1: detected capacity change from 0 to 128 [ 85.364126][ T4833] loop0: detected capacity change from 0 to 512 [ 85.532110][ T4833] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 85.550011][ T4833] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 85.565578][ T4833] System zones: 0-1, 15-15, 18-18, 34-34 [ 85.599274][ T4833] EXT4-fs (loop0): orphan cleanup on readonly fs [ 85.605759][ T4833] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 85.685574][ T4833] EXT4-fs warning (device loop0): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 85.752557][ T4833] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 85.781284][ T4833] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.219: bg 0: block 40: padding at end of block bitmap is not set [ 85.854230][ T4833] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 85.877322][ T4833] EXT4-fs (loop0): 1 truncate cleaned up [ 85.892027][ T4833] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 85.935195][ T4842] can: request_module (can-proto-0) failed. [ 86.207202][ T4854] loop0: detected capacity change from 0 to 512 [ 86.264011][ T4854] FAT-fs (loop0): bogus number of FAT sectors [ 86.278791][ T4854] FAT-fs (loop0): Can't find a valid FAT filesystem [ 86.978108][ T4899] cgroup2: Unknown parameter 'pids_localevents' [ 87.526622][ T26] audit: type=1326 audit(1763561600.087:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be7ebd749 code=0x7ffc0000 [ 87.600929][ T26] audit: type=1326 audit(1763561600.087:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be7ebd749 code=0x7ffc0000 [ 87.668927][ T26] audit: type=1326 audit(1763561600.117:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0be7ebd749 code=0x7ffc0000 [ 87.758593][ T26] audit: type=1326 audit(1763561600.117:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be7ebd749 code=0x7ffc0000 [ 87.803247][ T26] audit: type=1326 audit(1763561600.117:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be7ebd749 code=0x7ffc0000 [ 87.860406][ T26] audit: type=1326 audit(1763561600.137:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0be7ebd749 code=0x7ffc0000 [ 87.882258][ T4907] loop4: detected capacity change from 0 to 40427 [ 87.906094][ T26] audit: type=1326 audit(1763561600.137:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be7ebd749 code=0x7ffc0000 [ 87.934780][ T26] audit: type=1326 audit(1763561600.137:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be7ebd749 code=0x7ffc0000 [ 87.960967][ T26] audit: type=1326 audit(1763561600.137:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0be7ebd749 code=0x7ffc0000 [ 87.996340][ T4907] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 88.034539][ T4907] F2FS-fs (loop4): invalid crc value [ 88.072923][ T26] audit: type=1326 audit(1763561600.137:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4916 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be7ebd749 code=0x7ffc0000 [ 88.092257][ T4907] F2FS-fs (loop4): Found nat_bits in checkpoint [ 88.201634][ T4907] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 88.638621][ T4959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.461242][ T5000] loop1: detected capacity change from 0 to 512 [ 89.475309][ T4998] loop2: detected capacity change from 0 to 1024 [ 89.543487][ T4998] EXT4-fs (loop2): Ignoring removed nobh option [ 89.555733][ T5000] FAT-fs (loop1): bogus number of FAT sectors [ 89.565874][ T5000] FAT-fs (loop1): Can't find a valid FAT filesystem [ 89.582902][ T4998] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.676681][ T4998] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,jqfmt=vfsv1,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,dioread_nolock,dioread_nolock,,errors=continue. Quota mode: writeback. [ 89.984641][ T4992] loop4: detected capacity change from 0 to 32768 [ 89.998943][ T5020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.175756][ T4992] XFS (loop4): Mounting V5 Filesystem [ 90.343748][ T4992] XFS (loop4): Ending clean mount [ 90.372267][ T4992] XFS (loop4): Quotacheck needed: Please wait. [ 90.493984][ T4992] XFS (loop4): Quotacheck: Done. [ 90.812579][ T5069] loop0: detected capacity change from 0 to 2048 [ 90.910780][ T5069] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 91.073378][ T5069] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 91.107472][ T5069] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1278 with error 28 [ 91.145874][ T4183] XFS (loop4): Unmounting Filesystem [ 91.172055][ T5069] EXT4-fs (loop0): This should not happen!! Data will be lost [ 91.172055][ T5069] [ 91.191616][ T5069] EXT4-fs (loop0): Total free blocks count 0 [ 91.236746][ T5069] EXT4-fs (loop0): Free/Dirty block details [ 91.253819][ T5069] EXT4-fs (loop0): free_blocks=2415919104 [ 91.271393][ T5069] EXT4-fs (loop0): dirty_blocks=1280 [ 91.277160][ T5069] EXT4-fs (loop0): Block reservation details [ 91.283691][ T5069] EXT4-fs (loop0): i_reserved_data_blocks=80 [ 92.058135][ T5104] binder: Bad value for 'max' [ 92.065798][ T5081] loop1: detected capacity change from 0 to 40427 [ 92.131182][ T5109] netlink: 'syz.3.340': attribute type 2 has an invalid length. [ 92.157806][ T5081] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 92.180112][ T5112] netlink: 'syz.4.341': attribute type 5 has an invalid length. [ 92.180412][ T5113] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.212520][ T5081] F2FS-fs (loop1): invalid crc value [ 92.220116][ T5112] netlink: 'syz.4.341': attribute type 5 has an invalid length. [ 92.239366][ T5081] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.465479][ T5081] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 93.525899][ T5162] loop3: detected capacity change from 0 to 2048 [ 93.711372][ T5162] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.005137][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 94.005152][ T26] audit: type=1326 audit(1763561606.567:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5182 comm="syz.0.372" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fca4be749 code=0x0 [ 94.245071][ T5193] loop2: detected capacity change from 0 to 512 [ 94.376368][ T5193] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 94.405808][ T5193] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 94.418865][ T5193] System zones: 0-1, 15-15, 18-18, 34-34 [ 94.425712][ T5193] EXT4-fs (loop2): orphan cleanup on readonly fs [ 94.506143][ T5193] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 94.575068][ T5193] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 94.628714][ T5193] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 94.669568][ T5193] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.377: bg 0: block 40: padding at end of block bitmap is not set [ 94.704851][ T5216] bridge0: port 3(syz_tun) entered blocking state [ 94.728926][ T5216] bridge0: port 3(syz_tun) entered disabled state [ 94.761056][ T5216] device syz_tun entered promiscuous mode [ 94.763828][ T5193] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 94.798980][ T5216] bridge0: port 3(syz_tun) entered blocking state [ 94.805845][ T5216] bridge0: port 3(syz_tun) entered forwarding state [ 94.818829][ T5193] EXT4-fs (loop2): 1 truncate cleaned up [ 94.848516][ T5193] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 95.329393][ T26] audit: type=1326 audit(1763561607.897:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82375c6749 code=0x7ffc0000 [ 95.419033][ T26] audit: type=1326 audit(1763561607.897:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82375c6749 code=0x7ffc0000 [ 95.559186][ T26] audit: type=1326 audit(1763561607.897:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f82375c6749 code=0x7ffc0000 [ 95.676698][ T26] audit: type=1326 audit(1763561607.897:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82375c6749 code=0x7ffc0000 [ 95.817071][ T26] audit: type=1326 audit(1763561607.897:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82375c6749 code=0x7ffc0000 [ 95.907137][ T26] audit: type=1326 audit(1763561607.897:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f82375c6749 code=0x7ffc0000 [ 96.009015][ T26] audit: type=1326 audit(1763561607.897:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82375c6749 code=0x7ffc0000 [ 96.116883][ T26] audit: type=1326 audit(1763561607.897:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82375c6749 code=0x7ffc0000 [ 96.167768][ T5282] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 96.183117][ T5282] IPVS: lc: FWM 3 0x00000003 - no destination available [ 96.309834][ T5286] loop4: detected capacity change from 0 to 1024 [ 96.407778][ T5286] EXT4-fs (loop4): Ignoring removed nobh option [ 96.416078][ T5286] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.504610][ T5286] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,jqfmt=vfsv1,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,dioread_nolock,dioread_nolock,,errors=continue. Quota mode: writeback. [ 97.531836][ T5362] loop4: detected capacity change from 0 to 512 [ 97.731911][ T5361] loop3: detected capacity change from 0 to 40427 [ 97.751780][ T5362] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 97.767054][ T5362] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 97.783895][ T5362] System zones: 0-1, 15-15, 18-18, 34-34 [ 97.795673][ T5362] EXT4-fs (loop4): orphan cleanup on readonly fs [ 97.810304][ T5361] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 97.818127][ T5361] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 97.832777][ T5362] EXT4-fs warning (device loop4): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 97.854248][ T5361] F2FS-fs (loop3): invalid crc value [ 97.908233][ T5362] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 97.916038][ T5361] F2FS-fs (loop3): Found nat_bits in checkpoint [ 97.940243][ T5362] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.454: bg 0: block 40: padding at end of block bitmap is not set [ 97.981497][ T5361] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 97.988657][ T5361] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 97.996800][ T5362] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 98.058819][ T5362] EXT4-fs (loop4): 1 truncate cleaned up [ 98.064615][ T5362] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 98.292328][ T5361] attempt to access beyond end of device [ 98.292328][ T5361] loop3: rw=2049, want=45224, limit=40427 [ 98.400010][ T5378] ªªªªªª: renamed from vlan0 [ 98.513929][ T4305] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 98.535075][ T4305] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 98.728495][ T4305] attempt to access beyond end of device [ 98.728495][ T4305] loop3: rw=1, want=45232, limit=40427 [ 99.187131][ T5421] input: syz1 as /devices/virtual/input/input6 [ 99.330277][ T5427] loop0: detected capacity change from 0 to 1024 [ 99.398777][ T5427] EXT4-fs (loop0): Ignoring removed nobh option [ 99.462259][ T5427] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.561100][ T5427] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,jqfmt=vfsv1,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,dioread_nolock,dioread_nolock,,errors=continue. Quota mode: writeback. [ 100.466445][ T5468] syz.1.496 (5468): attempted to duplicate a private mapping with mremap. This is not supported. [ 100.641484][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 100.641498][ T26] audit: type=1326 audit(1763561612.940:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.4.497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbe0c3a749 code=0x0 [ 100.687651][ T5474] overlayfs: failed to get inode (-116) [ 100.740958][ T5474] overlayfs: failed to get inode (-116) [ 101.240492][ T5496] loop0: detected capacity change from 0 to 512 [ 101.301164][ T5496] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.368411][ T5496] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.388107][ T5500] loop1: detected capacity change from 0 to 1024 [ 101.433010][ T5496] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2229: inode #15: comm syz.0.513: corrupted in-inode xattr [ 101.442685][ T5448] loop3: detected capacity change from 0 to 32768 [ 101.571820][ T5500] EXT4-fs (loop1): Ignoring removed nobh option [ 101.612063][ T5496] EXT4-fs (loop0): get orphan inode failed [ 101.631069][ T5448] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.463 (5448) [ 101.652312][ T5496] EXT4-fs (loop0): mount failed [ 101.685851][ T5500] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.763685][ T5500] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,jqfmt=vfsv1,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,dioread_nolock,dioread_nolock,,errors=continue. Quota mode: writeback. [ 101.889937][ T5448] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 101.997838][ T5448] BTRFS info (device loop3): using free space tree [ 102.021505][ T5448] BTRFS info (device loop3): has skinny extents [ 102.509347][ T5448] BTRFS info (device loop3): enabling ssd optimizations [ 103.053275][ T5509] loop0: detected capacity change from 0 to 40427 [ 103.107906][ T5563] kvm: MWAIT instruction emulated as NOP! [ 103.115325][ T5509] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 103.160797][ T5509] F2FS-fs (loop0): invalid crc value [ 103.216175][ T5509] F2FS-fs (loop0): Found nat_bits in checkpoint [ 103.357982][ T5509] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 104.000551][ T5601] netlink: 52 bytes leftover after parsing attributes in process `syz.2.546'. [ 104.068767][ T5604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 105.341597][ T5668] binder: Binderfs stats mode cannot be changed during a remount [ 105.603166][ T5680] loop0: detected capacity change from 0 to 4096 [ 105.919751][ T5680] EXT4-fs (loop0): Test dummy encryption mode enabled [ 105.948421][ T5680] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 105.976033][ T5680] System zones: 0-5 [ 105.999071][ T5680] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue. Quota mode: writeback. [ 106.042289][ T5680] EXT4-fs (loop0): shut down requested (1) [ 106.065994][ T5680] overlayfs: failed to get metacopy (-5) [ 106.268595][ T5678] loop3: detected capacity change from 0 to 40427 [ 106.322121][ T5678] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 106.352327][ T4190] bridge0: port 3(syz_tun) entered disabled state [ 106.353008][ T5678] F2FS-fs (loop3): invalid crc value [ 106.412551][ T4190] device syz_tun left promiscuous mode [ 106.436184][ T5678] F2FS-fs (loop3): Found nat_bits in checkpoint [ 106.436723][ T4190] bridge0: port 3(syz_tun) entered disabled state [ 106.576632][ T5678] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 106.710492][ T420] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.864006][ T420] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.957639][ T420] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.008381][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.088174][ T420] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.609387][ T5731] chnl_net:caif_netlink_parms(): no params data found [ 108.094318][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.120400][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.128648][ T5731] device bridge_slave_0 entered promiscuous mode [ 108.216001][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.223155][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.269139][ T5731] device bridge_slave_1 entered promiscuous mode [ 108.399965][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.440545][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.634134][ T5731] team0: Port device team_slave_0 added [ 108.666362][ T5731] team0: Port device team_slave_1 added [ 108.727696][ T5811] loop2: detected capacity change from 0 to 764 [ 108.804492][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.844493][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.949586][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.165773][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'. [ 109.199075][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.208125][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.257276][ T1325] Bluetooth: hci2: command 0x0409 tx timeout [ 109.289390][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.590816][ T5731] device hsr_slave_0 entered promiscuous mode [ 109.639050][ T5731] device hsr_slave_1 entered promiscuous mode [ 109.693062][ T5731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.746346][ T5731] Cannot create hsr debugfs directory [ 109.818713][ T5854] loop1: detected capacity change from 0 to 128 [ 109.903461][ T420] device hsr_slave_0 left promiscuous mode [ 109.970708][ T420] device hsr_slave_1 left promiscuous mode [ 109.983282][ T420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.014186][ T420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.027697][ T5862] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 110.057617][ T420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.075931][ T420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.100804][ T5862] FAT-fs (loop1): Filesystem has been set read-only [ 110.140726][ T420] device bridge_slave_1 left promiscuous mode [ 110.155284][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.219588][ T4182] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 110.248603][ T420] device bridge_slave_0 left promiscuous mode [ 110.257636][ T4182] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 110.275029][ T420] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.311967][ T4182] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 110.337984][ T420] device veth1_macvtap left promiscuous mode [ 110.344769][ T420] device veth0_macvtap left promiscuous mode [ 110.375343][ T420] device veth1_vlan left promiscuous mode [ 110.396343][ T420] device veth0_vlan left promiscuous mode [ 110.727605][ T420] team0 (unregistering): Port device team_slave_1 removed [ 110.746881][ T420] team0 (unregistering): Port device team_slave_0 removed [ 110.764836][ T420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.773942][ T420] device bond_slave_1 left promiscuous mode [ 110.787202][ T420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.797658][ T420] device bond_slave_0 left promiscuous mode [ 110.866613][ T420] bond0 (unregistering): Released all slaves [ 111.418678][ T5731] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.489051][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 111.513076][ T5731] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.541078][ T5731] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.597834][ T5731] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.098850][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.202219][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.219608][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.252627][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.312494][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.337428][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.363193][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.370345][ T4278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.436677][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.469909][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.515725][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.540812][ T5897] loop2: detected capacity change from 0 to 40427 [ 112.553974][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.561064][ T4278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.609271][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.645795][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.654709][ T5897] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 112.690029][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.699825][ T5897] F2FS-fs (loop2): invalid crc value [ 112.715031][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.734188][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.756260][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.757519][ T5897] F2FS-fs (loop2): Found nat_bits in checkpoint [ 112.765113][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.800371][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.821839][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.857767][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.917501][ T5731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.957831][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.003694][ T5897] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 113.102794][ T5928] chnl_net:caif_netlink_parms(): no params data found [ 113.594939][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.618200][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.674877][ T5928] device bridge_slave_0 entered promiscuous mode [ 113.692868][ T1325] Bluetooth: hci2: command 0x040f tx timeout [ 113.730416][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.749923][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.775666][ T5928] device bridge_slave_1 entered promiscuous mode [ 113.958893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.981526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.995255][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.069812][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.115309][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.143638][ T5984] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 114.289673][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 114.638640][ T5928] team0: Port device team_slave_0 added [ 114.685672][ T5928] team0: Port device team_slave_1 added [ 114.758612][ T5584] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.780927][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.787928][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.843723][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.873948][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.927267][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.997327][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.158882][ T5584] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.174314][ T5584] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.184159][ T5584] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 115.207069][ T5584] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.228173][ T5584] usb 4-1: config 0 descriptor?? [ 115.248707][ T5928] device hsr_slave_0 entered promiscuous mode [ 115.267950][ T5928] device hsr_slave_1 entered promiscuous mode [ 115.284938][ T5928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.308561][ T5928] Cannot create hsr debugfs directory [ 115.343434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.359466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.432715][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.452959][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.519811][ T5731] device veth0_vlan entered promiscuous mode [ 115.532882][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.542656][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.566902][ T5731] device veth1_vlan entered promiscuous mode [ 115.743408][ T5584] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 115.775694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.789188][ T5584] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 115.815653][ T5584] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 115.822687][ T5584] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 115.843349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.863093][ T5584] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 115.891686][ T5731] device veth0_macvtap entered promiscuous mode [ 115.904060][ T5584] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 115.907161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.920911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.930058][ T5584] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 115.949398][ T5731] device veth1_macvtap entered promiscuous mode [ 115.966810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.983085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.994766][ T5582] Bluetooth: hci2: command 0x0419 tx timeout [ 116.009456][ T5584] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 116.058733][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.100036][ T5731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.114763][ T5731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.128555][ T5731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.149199][ T5731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.172222][ T5731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.176483][ T5584] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00 [ 116.191036][ T5731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.210179][ T5731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.228606][ T5731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.245509][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.264600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.275714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.311570][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.336575][ T5731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.354509][ T5731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.364485][ T5731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.384078][ T5731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.396657][ T5731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.407381][ T5731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.418118][ T5731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.428679][ T5731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.440673][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.452528][ T5731] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.463102][ T5731] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.472333][ T5731] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.482128][ T5731] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.496471][ T1107] Bluetooth: hci0: command 0x041b tx timeout [ 116.499478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.511581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.544308][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.562919][ T4226] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 116.636906][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.687134][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.721660][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.751505][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.795024][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.815207][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.823354][ T5928] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 116.826708][ T5584] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 116.870959][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.881855][ T5584] usb 4-1: USB disconnect, device number 3 [ 116.894174][ T5928] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 116.963066][ T5928] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 117.018992][ T4226] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 117.030363][ T5928] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 117.041457][ T4226] usb 5-1: config 1 has no interface number 0 [ 117.047597][ T4226] usb 5-1: config 1 interface 105 has no altsetting 0 [ 117.079146][ T26] audit: type=1326 audit(1780339073.364:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6074 comm="syz.2.716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82375c6749 code=0x0 [ 117.264069][ T4226] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 117.273205][ T4226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.328474][ T4226] usb 5-1: Product: syz [ 117.332704][ T4226] usb 5-1: Manufacturer: syz [ 117.358255][ T4226] usb 5-1: SerialNumber: syz [ 117.395885][ T6084] fido_id[6084]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 117.449439][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.513793][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.532983][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.595298][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.627443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.651546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.720436][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.727609][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.737732][ T4226] aqc111: probe of 5-1:1.105 failed with error -71 [ 117.768112][ T4226] usb 5-1: USB disconnect, device number 4 [ 117.842396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.872965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.891047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.907187][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.914331][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.944299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.954509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.997400][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.041235][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.107463][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.153382][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.176150][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.186074][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.197060][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.218046][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.270481][ T5928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.291836][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.714897][ T4246] Bluetooth: hci0: command 0x040f tx timeout [ 118.724491][ T144] device hsr_slave_0 left promiscuous mode [ 118.732690][ T144] device hsr_slave_1 left promiscuous mode [ 118.755757][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.773984][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.835302][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.852343][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.867896][ T144] device bridge_slave_1 left promiscuous mode [ 118.937765][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.959263][ T144] device bridge_slave_0 left promiscuous mode [ 118.965626][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.001874][ T144] device veth1_macvtap left promiscuous mode [ 119.013663][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061bf6800: rx timeout, send abort [ 119.020844][ T144] device veth0_macvtap left promiscuous mode [ 119.028866][ T144] device veth1_vlan left promiscuous mode [ 119.547336][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061bf6c00: rx timeout, send abort [ 119.557427][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061bf6800: abort rx timeout. Force session deactivation [ 119.784549][ T1325] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.815536][ T144] team0 (unregistering): Port device team_slave_1 removed [ 119.833102][ T144] team0 (unregistering): Port device team_slave_0 removed [ 119.848793][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.866616][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.995118][ T144] bond0 (unregistering): Released all slaves [ 120.055941][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.737'. [ 120.088839][ C1] vcan0 (unregistering): j1939_tp_rxtimer: 0xffff888061bf6c00: abort rx timeout. Force session deactivation [ 120.112282][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.119732][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.133057][ T26] audit: type=1326 audit(1780339076.235:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.4.746" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbe0c3a749 code=0x0 [ 120.179357][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.205381][ T1325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.217581][ T1325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.232023][ T1325] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 120.273663][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.303351][ T1325] usb 3-1: config 0 descriptor?? [ 120.576194][ T6198] netlink: 16 bytes leftover after parsing attributes in process `syz.3.753'. [ 120.868316][ T1325] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 120.875430][ T1325] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 120.895359][ T1325] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 120.915077][ T1325] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 120.925837][ T1325] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 120.930168][ T5584] Bluetooth: hci0: command 0x0419 tx timeout [ 120.940655][ T1325] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 120.979389][ T1325] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 121.013201][ T1325] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 121.118348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.164749][ T1325] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 121.183062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.270533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.303962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.325859][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.367900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.413585][ T5928] device veth0_vlan entered promiscuous mode [ 121.465504][ T5928] device veth1_vlan entered promiscuous mode [ 121.550215][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.564288][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.598099][ T5928] device veth0_macvtap entered promiscuous mode [ 121.659578][ T5928] device veth1_macvtap entered promiscuous mode [ 121.760685][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.791666][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.838347][ T6168] cp2112 0003:10C4:EA90.0002: Error starting transaction: -38 [ 121.868637][ T1325] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 121.880000][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.893164][ T1325] usb 3-1: USB disconnect, device number 3 [ 121.921308][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.931162][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.034287][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.100766][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.142770][ T6250] fido_id[6250]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 122.149436][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.219653][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.279864][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.315097][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.369480][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.395534][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.429342][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.466960][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.533953][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.571577][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.602999][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.637154][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.685038][ T5928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.737941][ T5928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.773450][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.799869][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.848523][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.860564][ T5928] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.885769][ T5928] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.917939][ T5928] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.944047][ T5928] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.172200][ T6166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.228757][ T6166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.285944][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.336883][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.354379][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.386509][ T26] audit: type=1326 audit(1780339079.284:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.2.778" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82375c6749 code=0x0 [ 123.415920][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 123.432207][ T6257] loop5: detected capacity change from 0 to 40427 [ 123.534788][ T6257] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 123.562847][ T6257] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 123.583103][ T6257] F2FS-fs (loop5): invalid crc value [ 123.652339][ T6257] F2FS-fs (loop5): Found nat_bits in checkpoint [ 123.886673][ T6257] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 123.916532][ T6257] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 124.557778][ T6344] loop3: detected capacity change from 0 to 2048 [ 124.659604][ T6344] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.683293][ T26] audit: type=1800 audit(1780339080.504:91): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.797" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 125.811765][ T5582] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 126.206375][ T5582] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 126.243905][ T5582] usb 3-1: config 1 has no interface number 0 [ 126.251254][ T5582] usb 3-1: config 1 interface 105 has no altsetting 0 [ 126.282602][ T6435] binder: Bad value for 'max' [ 126.430224][ T5582] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 126.480665][ T5582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.504492][ T5582] usb 3-1: Product: syz [ 126.508710][ T5582] usb 3-1: Manufacturer: syz [ 126.513323][ T5582] usb 3-1: SerialNumber: syz [ 126.771470][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.845872][ T5582] aqc111: probe of 3-1:1.105 failed with error -71 [ 126.853514][ T6465] netlink: 'syz.3.830': attribute type 16 has an invalid length. [ 126.876399][ T6465] netlink: 'syz.3.830': attribute type 17 has an invalid length. [ 126.885337][ T5582] usb 3-1: USB disconnect, device number 4 [ 127.008960][ T6465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.219073][ T6483] loop4: detected capacity change from 0 to 2048 [ 127.274627][ T6483] UDF-fs: bad mount option "•m2" or missing value [ 127.492304][ T6497] loop5: detected capacity change from 0 to 1024 [ 127.578061][ T6497] EXT4-fs (loop5): inline encryption not supported [ 127.596384][ T6497] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.721145][ T6497] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,norecovery,user_xattr,grpquota,discard,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,lazytime,. Quota mode: writeback. [ 127.889580][ T6515] loop2: detected capacity change from 0 to 1764 [ 127.917727][ T6523] netlink: 41402 bytes leftover after parsing attributes in process `syz.6.854'. [ 128.568482][ T6558] block device autoloading is deprecated and will be removed. [ 129.678222][ T5586] kernel write not supported for file bpf-prog (pid: 5586 comm: kworker/1:13) [ 130.584762][ T6665] loop3: detected capacity change from 0 to 512 [ 130.739124][ T6669] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 131.460279][ T6655] loop4: detected capacity change from 0 to 40427 [ 131.561317][ T6655] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 131.576558][ T6655] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 131.614451][ T6655] F2FS-fs (loop4): Found nat_bits in checkpoint [ 131.698056][ T6655] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 131.722987][ T6655] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 132.032628][ T6726] netlink: 'syz.6.921': attribute type 4 has an invalid length. [ 132.132489][ T6724] netlink: 'syz.6.921': attribute type 4 has an invalid length. [ 132.393709][ T26] audit: type=1326 audit(1780339087.737:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6736 comm="syz.6.924" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6ae0d6749 code=0x0 [ 132.642168][ T6719] loop2: detected capacity change from 0 to 40427 [ 132.747735][ T6719] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 132.786245][ T6719] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 132.835557][ T6719] F2FS-fs (loop2): invalid crc value [ 132.933752][ T6719] F2FS-fs (loop2): Found nat_bits in checkpoint [ 133.151882][ T6719] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 133.169985][ T6719] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 133.477918][ T6793] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 133.504292][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 133.848895][ T6818] loop6: detected capacity change from 0 to 512 [ 134.016725][ T6818] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.189580][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.953'. [ 134.348389][ T6848] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[ [ 134.348389][ T6848] Q&|xù [ 134.575666][ T26] audit: type=1326 audit(1780339089.773:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.3.960" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0be7ebd749 code=0x0 [ 135.016647][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.023032][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.211226][ T6878] netlink: 'syz.6.969': attribute type 33 has an invalid length. [ 135.246917][ T6878] netlink: 152 bytes leftover after parsing attributes in process `syz.6.969'. [ 135.347425][ T6879] loop2: detected capacity change from 0 to 512 [ 135.350797][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.969'. [ 135.668961][ T26] audit: type=1326 audit(1780339090.805:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.4.961" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbe0c3a749 code=0x0 [ 136.524836][ T6921] kvm: vcpu 0: requested 2048 ns lapic timer period limited to 200000 ns [ 136.567413][ T6921] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 136.889483][ T6948] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 137.955265][ T7003] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1007'. [ 138.015456][ T26] audit: type=1800 audit(1780339093.000:95): pid=6997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1004" name="file1" dev="overlay" ino=1214 res=0 errno=0 [ 138.186442][ T26] audit: type=1800 audit(1780339093.047:96): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1004" name="file1" dev="overlay" ino=1214 res=0 errno=0 [ 138.248180][ T7013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1009'. [ 141.327352][ T6791] Set syz1 is full, maxelem 65536 reached [ 141.415766][ T7122] loop3: detected capacity change from 0 to 2048 [ 141.535569][ T7122] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.030872][ T26] audit: type=1326 audit(1780339096.772:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7147 comm="syz.3.1060" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0be7ebd749 code=0x0 [ 142.437366][ T7162] loop6: detected capacity change from 0 to 2048 [ 142.505172][ T7162] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.664202][ T7181] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1071'. [ 142.813986][ T26] audit: type=1326 audit(1780339097.513:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.2.1074" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82375c6749 code=0x0 [ 143.528566][ T7235] loop5: detected capacity change from 0 to 512 [ 143.598947][ T7237] loop3: detected capacity change from 0 to 256 [ 143.767648][ T7237] FAT-fs (loop3): Directory bread(block 64) failed [ 143.785068][ T7237] FAT-fs (loop3): Directory bread(block 65) failed [ 143.823494][ T7237] FAT-fs (loop3): Directory bread(block 66) failed [ 143.865819][ T7237] FAT-fs (loop3): Directory bread(block 67) failed [ 143.897548][ T7237] FAT-fs (loop3): Directory bread(block 68) failed [ 143.932134][ T7237] FAT-fs (loop3): Directory bread(block 69) failed [ 143.938754][ T7237] FAT-fs (loop3): Directory bread(block 70) failed [ 143.996095][ T7237] FAT-fs (loop3): Directory bread(block 71) failed [ 144.002885][ T7237] FAT-fs (loop3): Directory bread(block 72) failed [ 144.087994][ T7237] FAT-fs (loop3): Directory bread(block 73) failed [ 145.234499][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1121'. [ 145.248039][ T26] audit: type=1326 audit(1780339099.793:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7242 comm="syz.2.1095" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82375c6749 code=0x0 [ 145.465407][ T7316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1124'. [ 147.280492][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1150'. [ 148.560435][ T7383] loop4: detected capacity change from 0 to 40427 [ 148.591069][ T26] audit: type=1326 audit(1780339102.936:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.5.1167" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bf94d4749 code=0x0 [ 148.653000][ T7383] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 148.690382][ T7383] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 148.758308][ T7383] F2FS-fs (loop4): invalid crc value [ 148.834775][ T7383] F2FS-fs (loop4): Found nat_bits in checkpoint [ 148.864962][ T7443] can: request_module (can-proto-0) failed. [ 149.088667][ T7383] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 149.149961][ T7383] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 149.719440][ T13] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 150.139997][ T13] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 150.156298][ T13] usb 6-1: config 0 has no interface number 0 [ 150.188082][ T13] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 150.215872][ T13] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 150.280305][ T13] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 150.317696][ T13] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 150.634414][ T13] usb 6-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 150.662045][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.670553][ T13] usb 6-1: Product: syz [ 150.674954][ T13] usb 6-1: Manufacturer: syz [ 150.680566][ T13] usb 6-1: SerialNumber: syz [ 150.692622][ T13] usb 6-1: config 0 descriptor?? [ 150.758742][ T13] xpad 6-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 150.809513][ T13] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.237/input/input7 [ 151.050273][ T5586] usb 6-1: USB disconnect, device number 2 [ 151.068195][ T5586] xpad 6-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 154.155677][ T7612] loop5: detected capacity change from 0 to 1764 [ 154.444660][ T7630] loop5: detected capacity change from 0 to 512 [ 154.494943][ T7630] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 154.708928][ T7630] EXT4-fs (loop5): 1 truncate cleaned up [ 154.714631][ T7630] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000000012,inode_readahead_blks=0x0000000000000020,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 155.402407][ T7685] loop6: detected capacity change from 0 to 16 [ 155.428570][ T7681] device syzkaller1 entered promiscuous mode [ 155.457047][ T7685] erofs: (device loop6): mounted with root inode @ nid 36. [ 155.481811][ T7689] device veth0 entered promiscuous mode [ 155.497793][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1255'. [ 156.336553][ T6064] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 156.626142][ T6064] usb 4-1: Using ep0 maxpacket: 32 [ 156.781516][ T6064] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.825344][ T6064] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.882825][ T6064] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 156.905623][ T7751] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 156.926181][ T6064] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.944720][ T7751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.962861][ T6064] usb 4-1: config 0 descriptor?? [ 157.021026][ T7751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.030820][ T7751] device bridge_slave_0 left promiscuous mode [ 157.095740][ T7751] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.152772][ T7751] device bridge_slave_1 left promiscuous mode [ 157.187486][ T7751] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.247436][ T7751] bond0: (slave bond_slave_0): Releasing backup interface [ 157.309704][ T7751] bond0: (slave bond_slave_1): Releasing backup interface [ 157.404140][ T7751] team0: Port device team_slave_0 removed [ 157.424294][ T7751] team0: Port device team_slave_1 removed [ 157.452892][ T7751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.467042][ T7751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.476669][ T7751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.492398][ T7751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.517870][ T6064] ft260 0003:0403:6030.0003: unknown main item tag 0x7 [ 157.536795][ T6064] ft260 0003:0403:6030.0003: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 157.604351][ T7751] syz.6.1276 (7751) used greatest stack depth: 20328 bytes left [ 157.756433][ T6064] ft260 0003:0403:6030.0003: chip code: 6424 8183 [ 158.214583][ T6064] ft260 0003:0403:6030.0003: failed to retrieve status: -32 [ 158.821877][ T6064] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 159.764792][ T4226] usb 4-1: USB disconnect, device number 4 [ 191.789399][ T4226] Bluetooth: hci3: command 0x0406 tx timeout [ 191.789565][ T5582] Bluetooth: hci1: command 0x0406 tx timeout [ 191.802306][ T5582] Bluetooth: hci4: command 0x0406 tx timeout [ 200.493492][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.500093][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 240.904575][ T5584] Bluetooth: hci2: command 0x0406 tx timeout [ 246.361838][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 265.975669][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.982008][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.510701][ T27] INFO: task syz.5.1269:7728 blocked for more than 143 seconds. [ 318.518643][ T27] Not tainted syzkaller #0 [ 318.524188][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 318.533155][ T27] task:syz.5.1269 state:D stack:25168 pid: 7728 ppid: 5731 flags:0x00004004 [ 318.542485][ T27] Call Trace: [ 318.545783][ T27] [ 318.548737][ T27] __schedule+0x11bb/0x4390 [ 318.553912][ T27] ? 0xffffffffa0002178 [ 318.558104][ T27] ? release_firmware_map_entry+0x190/0x190 [ 318.564167][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 318.570182][ T27] ? lock_chain_count+0x20/0x20 [ 318.575543][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 318.580602][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 318.587204][ T27] schedule+0x11b/0x1e0 [ 318.591410][ T27] rwsem_down_write_slowpath+0xc46/0x11f0 [ 318.597280][ T27] ? rwsem_write_trylock+0x1b0/0x1b0 [ 318.602589][ T27] ? __might_sleep+0xf0/0xf0 [ 318.607447][ T27] ? preempt_count_add+0x8d/0x190 [ 318.612541][ T27] ? clear_nonspinnable+0x60/0x60 [ 318.617684][ T27] userfaultfd_release+0x192/0x580 [ 318.622816][ T27] ? userfaultfd_ioctl+0x4260/0x4260 [ 318.628819][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 318.634823][ T27] ? ima_file_free+0xe5/0x3e0 [ 318.639595][ T27] ? userfaultfd_ioctl+0x4260/0x4260 [ 318.644903][ T27] __fput+0x234/0x930 [ 318.648986][ T27] task_work_run+0x125/0x1a0 [ 318.653607][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 318.659000][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 318.664911][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 318.670468][ T27] do_syscall_64+0x58/0xa0 [ 318.674897][ T27] ? clear_bhb_loop+0x30/0x80 [ 318.679587][ T27] ? clear_bhb_loop+0x30/0x80 [ 318.684327][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 318.690271][ T27] RIP: 0033:0x7f7bf94d4749 [ 318.696657][ T27] RSP: 002b:00007ffe0f623718 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 318.705164][ T27] RAX: 0000000000000000 RBX: 00007f7bf972cda0 RCX: 00007f7bf94d4749 [ 318.713212][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 318.721186][ T27] RBP: 00007f7bf972cda0 R08: 0000000000007924 R09: 000000080f623a0f [ 318.729201][ T27] R10: 00007f7bf972ccb0 R11: 0000000000000246 R12: 00000000000257e8 [ 318.737575][ T27] R13: 00007f7bf972b090 R14: ffffffffffffffff R15: 00007ffe0f623830 [ 318.745638][ T27] [ 318.748678][ T27] INFO: task syz.5.1269:7731 blocked for more than 143 seconds. [ 318.756458][ T27] Not tainted syzkaller #0 [ 318.761625][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 318.770626][ T27] task:syz.5.1269 state:D stack:26528 pid: 7731 ppid: 5731 flags:0x00004004 [ 318.779910][ T27] Call Trace: [ 318.783191][ T27] [ 318.786119][ T27] __schedule+0x11bb/0x4390 [ 318.790727][ T27] ? release_firmware_map_entry+0x190/0x190 [ 318.796654][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 318.802716][ T27] ? lock_chain_count+0x20/0x20 [ 318.807621][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 318.813015][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 318.818418][ T27] schedule+0x11b/0x1e0 [ 318.823068][ T27] schedule_preempt_disabled+0xf/0x20 [ 318.828478][ T27] rwsem_down_read_slowpath+0x528/0x990 [ 318.834130][ T27] ? down_write_killable_nested+0x90/0x90 [ 318.839877][ T27] ? read_lock_is_recursive+0x10/0x10 [ 318.845880][ T27] ? mm_release+0x326/0x3b0 [ 318.850503][ T27] ? exit_mm_release+0x30/0x30 [ 318.855353][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 318.860609][ T27] down_read+0x96/0x2e0 [ 318.864934][ T27] exit_mm+0xda/0x6c0 [ 318.868948][ T27] ? kmem_cache_free+0x14c/0x210 [ 318.873971][ T27] ? do_exit+0x20a0/0x20a0 [ 318.878681][ T27] ? taskstats_exit+0x439/0xab0 [ 318.883644][ T27] ? sync_mm_rss+0x211/0x350 [ 318.888254][ T27] do_exit+0x5a1/0x20a0 [ 318.892453][ T27] ? put_task_struct+0x80/0x80 [ 318.897295][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 318.903292][ T27] ? lock_chain_count+0x20/0x20 [ 318.908218][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 318.913260][ T27] do_group_exit+0x12e/0x300 [ 318.917945][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 318.923159][ T27] get_signal+0x6ca/0x12c0 [ 318.929611][ T27] arch_do_signal_or_restart+0xc1/0x1300 [ 318.935278][ T27] ? get_page+0xe0/0xe0 [ 318.939523][ T27] ? get_sigframe_size+0x10/0x10 [ 318.944487][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 318.950567][ T27] ? exit_to_user_mode_loop+0x3b/0x130 [ 318.956314][ T27] exit_to_user_mode_loop+0x9e/0x130 [ 318.961723][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 318.967297][ T27] irqentry_exit_to_user_mode+0x5/0x30 [ 318.972837][ T27] exc_page_fault+0x88/0x100 [ 318.977448][ T27] asm_exc_page_fault+0x22/0x30 [ 318.982364][ T27] RIP: 0033:0x7f7bf949c3ad [ 318.986785][ T27] RSP: 002b:00007f7bf773b028 EFLAGS: 00010283 [ 318.993261][ T27] RAX: 0000200000ffc020 RBX: 00007f7bf972afa0 RCX: 0000000000000048 [ 319.001335][ T27] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000200000ffc020 [ 319.009319][ T27] RBP: 00007f7bf9558f91 R08: 0000000000000048 R09: 0000000000000000 [ 319.017628][ T27] R10: 0000200000ffc000 R11: 0000200000000000 R12: 0000000000000000 [ 319.025722][ T27] R13: 00007f7bf972b038 R14: 00007f7bf972afa0 R15: 00007ffe0f6235b8 [ 319.033804][ T27] [ 319.036865][ T27] INFO: task syz.5.1269:7737 blocked for more than 143 seconds. [ 319.044962][ T27] Not tainted syzkaller #0 [ 319.049922][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 319.059024][ T27] task:syz.5.1269 state:D stack:27984 pid: 7737 ppid: 5731 flags:0x00004004 [ 319.068680][ T27] Call Trace: [ 319.071975][ T27] [ 319.074911][ T27] __schedule+0x11bb/0x4390 [ 319.079555][ T27] ? release_firmware_map_entry+0x190/0x190 [ 319.085474][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 319.091548][ T27] ? lock_chain_count+0x20/0x20 [ 319.096873][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 319.101939][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 319.107446][ T27] schedule+0x11b/0x1e0 [ 319.111707][ T27] schedule_preempt_disabled+0xf/0x20 [ 319.117093][ T27] rwsem_down_read_slowpath+0x528/0x990 [ 319.122747][ T27] ? down_write_killable_nested+0x90/0x90 [ 319.128592][ T27] ? read_lock_is_recursive+0x10/0x10 [ 319.133981][ T27] ? mm_release+0x326/0x3b0 [ 319.138499][ T27] ? exit_mm_release+0x30/0x30 [ 319.143374][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 319.148599][ T27] down_read+0x96/0x2e0 [ 319.152861][ T27] exit_mm+0xda/0x6c0 [ 319.156867][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 319.164312][ T27] ? do_exit+0x20a0/0x20a0 [ 319.168802][ T27] ? taskstats_exit+0x439/0xab0 [ 319.174253][ T27] ? sync_mm_rss+0x211/0x350 [ 319.178878][ T27] do_exit+0x5a1/0x20a0 [ 319.183150][ T27] ? put_task_struct+0x80/0x80 [ 319.187927][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 319.194072][ T27] ? lock_chain_count+0x20/0x20 [ 319.198923][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 319.204040][ T27] do_group_exit+0x12e/0x300 [ 319.208912][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 319.214235][ T27] get_signal+0x6ca/0x12c0 [ 319.218673][ T27] arch_do_signal_or_restart+0xc1/0x1300 [ 319.224318][ T27] ? futex_exit_release+0x1c0/0x1c0 [ 319.229649][ T27] ? get_sigframe_size+0x10/0x10 [ 319.234618][ T27] ? exit_to_user_mode_loop+0x3b/0x130 [ 319.240153][ T27] exit_to_user_mode_loop+0x9e/0x130 [ 319.245461][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 319.251075][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 319.256637][ T27] do_syscall_64+0x58/0xa0 [ 319.261062][ T27] ? clear_bhb_loop+0x30/0x80 [ 319.265733][ T27] ? clear_bhb_loop+0x30/0x80 [ 319.270728][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 319.276645][ T27] RIP: 0033:0x7f7bf94d4749 [ 319.282183][ T27] RSP: 002b:00007f7bf771a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 319.291122][ T27] RAX: fffffffffffffe00 RBX: 00007f7bf972b098 RCX: 00007f7bf94d4749 [ 319.299623][ T27] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7bf972b098 [ 319.307624][ T27] RBP: 00007f7bf972b090 R08: 0000000000000000 R09: 0000000000000000 [ 319.315932][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.323977][ T27] R13: 00007f7bf972b128 R14: 00007ffe0f6234d0 R15: 00007ffe0f6235b8 [ 319.332016][ T27] [ 319.335062][ T27] [ 319.335062][ T27] Showing all locks held in the system: [ 319.342959][ T27] 1 lock held by khungtaskd/27: [ 319.347817][ T27] #0: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 319.357548][ T27] 2 locks held by getty/3946: [ 319.362236][ T27] #0: ffff88814d2b8098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 319.372123][ T27] #1: ffffc900025ce2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 319.382263][ T27] 1 lock held by syz-executor/4172: [ 319.387520][ T27] #0: ffff88807bfcf828 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x15d/0x2b0 [ 319.397852][ T27] 1 lock held by udevd/4174: [ 319.402467][ T27] #0: ffff88801adc3228 (&mm->mmap_lock){++++}-{3:3}, at: __vm_munmap+0xf3/0x230 [ 319.412091][ T27] 2 locks held by syz-executor/4183: [ 319.417688][ T27] #0: ffffffff8c1a68f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x21f/0x1380 [ 319.426702][ T27] #1: ffff88807abe2b28 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 319.435756][ T27] 2 locks held by syz-executor/4194: [ 319.441277][ T27] #0: ffffffff8c1a68f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x21f/0x1380 [ 319.450201][ T27] #1: ffff88801adc4e28 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 319.459267][ T27] 2 locks held by syz-executor/4197: [ 319.464563][ T27] #0: ffffffff8c1a68f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x21f/0x1380 [ 319.473402][ T27] #1: ffff88801adc5528 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 319.482474][ T27] 2 locks held by kworker/u4:5/4274: [ 319.487758][ T27] #0: ffff8880b903a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 319.498151][ T27] #1: ffff8880b9027888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: try_to_wake_up+0x5c/0x1050 [ 319.509575][ T27] 2 locks held by syz-executor/5928: [ 319.515789][ T27] #0: ffffffff8c1a68f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x21f/0x1380 [ 319.525410][ T27] #1: ffff88807f55dc28 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 319.535152][ T27] 2 locks held by dhcpcd-run-hook/7726: [ 319.540730][ T27] #0: ffffffff8c1a68f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x21f/0x1380 [ 319.549632][ T27] #1: ffff88807d4dea28 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x238/0x1380 [ 319.558673][ T27] 1 lock held by syz.5.1269/7728: [ 319.563696][ T27] #0: ffff88807d4d9d28 (&mm->mmap_lock){++++}-{3:3}, at: userfaultfd_release+0x192/0x580 [ 319.573814][ T27] 1 lock held by syz.5.1269/7731: [ 319.578941][ T27] #0: ffff88807d4d9d28 (&mm->mmap_lock){++++}-{3:3}, at: exit_mm+0xda/0x6c0 [ 319.587863][ T27] 1 lock held by syz.5.1269/7737: [ 319.592904][ T27] #0: ffff88807d4d9d28 (&mm->mmap_lock){++++}-{3:3}, at: exit_mm+0xda/0x6c0 [ 319.601794][ T27] [ 319.604128][ T27] ============================================= [ 319.604128][ T27] [ 319.612986][ T27] NMI backtrace for cpu 1 [ 319.617333][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 319.624517][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 319.634585][ T27] Call Trace: [ 319.637859][ T27] [ 319.640804][ T27] dump_stack_lvl+0x168/0x230 [ 319.645509][ T27] ? show_regs_print_info+0x20/0x20 [ 319.650709][ T27] ? load_image+0x3b0/0x3b0 [ 319.655246][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 319.660360][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 319.665296][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 319.671448][ T27] ? _printk+0xcc/0x110 [ 319.675608][ T27] ? load_image+0x3b0/0x3b0 [ 319.680119][ T27] ? load_image+0x3b0/0x3b0 [ 319.684623][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 319.690704][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 319.696676][ T27] watchdog+0xe0f/0xe50 [ 319.700826][ T27] kthread+0x436/0x520 [ 319.704884][ T27] ? hungtask_pm_notify+0x40/0x40 [ 319.709919][ T27] ? kthread_blkcg+0xd0/0xd0 [ 319.714498][ T27] ret_from_fork+0x1f/0x30 [ 319.718913][ T27] [ 319.722530][ T27] Sending NMI from CPU 1 to CPUs 0: [ 319.727945][ C0] NMI backtrace for cpu 0 [ 319.727954][ C0] CPU: 0 PID: 13 Comm: kworker/0:1 Not tainted syzkaller #0 [ 319.727969][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 319.727978][ C0] Workqueue: events nsim_dev_trap_report_work [ 319.727996][ C0] RIP: 0010:___slab_alloc+0xca9/0xdf0 [ 319.728012][ C0] Code: ff ff ff e8 39 ea ed 07 85 c0 4d 89 f4 0f 84 d2 00 00 00 49 8b 44 24 10 83 78 28 00 0f 89 44 01 00 00 8b 43 28 49 8b 44 05 00 <49> 89 04 24 49 83 44 24 08 08 48 8b 1b 48 83 c3 20 e8 a1 f7 ed 07 [ 319.728025][ C0] RSP: 0018:ffffc90000d27a08 EFLAGS: 00000082 [ 319.728036][ C0] RAX: ffff8880601de000 RBX: ffff888016842140 RCX: 92b4133ec6c06b00 [ 319.728048][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b2f00 RDI: ffffffff8a59e580 [ 319.728058][ C0] RBP: 0000000000000202 R08: dffffc0000000000 R09: fffffbfff1ff7c19 [ 319.728069][ C0] R10: fffffbfff1ff7c19 R11: 1ffffffff1ff7c18 R12: ffff8880b903dfe0 [ 319.728080][ C0] R13: ffff8880601d8000 R14: ffff8880b903dfe0 R15: ffff8880b903e000 [ 319.728091][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 319.728104][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 319.728113][ C0] CR2: 00007f12fdc7d05b CR3: 000000007e37a000 CR4: 00000000003506f0 [ 319.728126][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 319.728135][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 319.728144][ C0] Call Trace: [ 319.728148][ C0] [ 319.728154][ C0] ? nsim_dev_trap_report_work+0x2a1/0xb40 [ 319.728171][ C0] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 319.728186][ C0] ? nsim_dev_trap_report_work+0x2a1/0xb40 [ 319.728199][ C0] ? __alloc_skb+0xf4/0x750 [ 319.728215][ C0] ? nsim_dev_trap_report_work+0x2a1/0xb40 [ 319.728230][ C0] __alloc_skb+0x22c/0x750 [ 319.728246][ C0] nsim_dev_trap_report_work+0x2a1/0xb40 [ 319.728271][ C0] process_one_work+0x863/0x1000 [ 319.728294][ C0] ? worker_detach_from_pool+0x240/0x240 [ 319.728308][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 319.728327][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 319.728341][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 319.728356][ C0] ? wq_worker_running+0x97/0x170 [ 319.728371][ C0] worker_thread+0xaa8/0x12a0 [ 319.728399][ C0] kthread+0x436/0x520 [ 319.728412][ C0] ? rcu_lock_release+0x20/0x20 [ 319.728425][ C0] ? kthread_blkcg+0xd0/0xd0 [ 319.728439][ C0] ret_from_fork+0x1f/0x30 [ 319.728461][ C0] [ 319.730742][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 319.976140][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 319.983334][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 319.993504][ T27] Call Trace: [ 319.996788][ T27] [ 319.999710][ T27] dump_stack_lvl+0x168/0x230 [ 320.004397][ T27] ? show_regs_print_info+0x20/0x20 [ 320.009614][ T27] ? load_image+0x3b0/0x3b0 [ 320.014129][ T27] panic+0x2c9/0x7f0 [ 320.018052][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 320.023682][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 320.028182][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 320.034342][ T27] watchdog+0xe4e/0xe50 [ 320.038523][ T27] kthread+0x436/0x520 [ 320.042666][ T27] ? hungtask_pm_notify+0x40/0x40 [ 320.047814][ T27] ? kthread_blkcg+0xd0/0xd0 [ 320.052514][ T27] ret_from_fork+0x1f/0x30 [ 320.056952][ T27] [ 320.060330][ T27] Kernel Offset: disabled [ 320.064670][ T27] Rebooting in 86400 seconds..