last executing test programs: 2m44.330206207s ago: executing program 0 (id=30): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x884) 2m43.802328605s ago: executing program 0 (id=37): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0xf22) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x3) 2m43.503085573s ago: executing program 0 (id=39): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) open$dir(&(0x7f0000000680)='./file0\x00', 0x103240, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 2m43.071310802s ago: executing program 0 (id=41): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640bb321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd91be4587f90e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1786eda2b20"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4040000) 2m42.661662219s ago: executing program 0 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xa) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x1005, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r0, &(0x7f0000000000)='./file0\x00', 0x4) 2m42.458200107s ago: executing program 0 (id=46): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 2m26.876538749s ago: executing program 32 (id=46): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 12.639949644s ago: executing program 4 (id=482): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x11, 0x5}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 11.873155088s ago: executing program 1 (id=487): open(0x0, 0x80242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 10.165152051s ago: executing program 5 (id=491): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) 9.96770683s ago: executing program 4 (id=493): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, 0x0, &(0x7f0000000200)) r2 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) sendmmsg(r2, &(0x7f00000030c0), 0x0, 0x9200000000000000) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB="820a080000000000280012800b0001"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 9.878109333s ago: executing program 5 (id=494): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r6, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) 9.28662992s ago: executing program 4 (id=496): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x164) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') symlink(&(0x7f0000000080)='mnt\x00', &(0x7f00000000c0)='./file0\x00') io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000), 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 9.284491261s ago: executing program 1 (id=497): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d00010000600009040080020300000009210804000122050009058103"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$kcm(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1) r2 = syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x5599, &(0x7f0000005680)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x40000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000002480)={{r3}, 0x0, 0x0, @unused, @subvolid=0x3}) syz_usb_control_io(r0, 0x0, 0x0) ioctl$XFS_IOC_INUMBERS(r2, 0x80405880, &(0x7f0000000180)={{0x3, 0x1, 0x1, 0x9, 0xfffffff9}, [{0xd73, 0xd, 0xa, 0x2}, {0x3, 0xffffffff, 0xfc, 0x4}, {0x7, 0xfffffffffffffff9, 0x7, 0x8}, {0xc0, 0x8, 0x77, 0x7}]}) 8.89650975s ago: executing program 3 (id=499): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000440)='nl80211\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x5, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) write$P9_RGETATTR(r1, &(0x7f00000004c0)={0xa0, 0x19, 0x1, {0xc00, {0x1, 0x0, 0x5}, 0x58, 0xffffffffffffffff, 0x0, 0x100, 0x4, 0xfffffffffffffffe, 0x2, 0x8c6, 0x540b, 0x8, 0x9, 0xc, 0xf, 0x1, 0x8, 0x1, 0x6, 0x8}}, 0xa0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r4, 0x5608) 8.760136813s ago: executing program 5 (id=500): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x2}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000002c0)=@udp6=r3}, 0x20) recvmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c854}, 0x4000040) close_range(r0, 0xffffffffffffffff, 0x0) 8.753688952s ago: executing program 4 (id=501): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 8.634592216s ago: executing program 2 (id=502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 8.632900028s ago: executing program 3 (id=503): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 8.305112858s ago: executing program 3 (id=504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 6.565159021s ago: executing program 2 (id=505): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) socket(0x2b, 0x80801, 0x1) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket(0x2000000000000021, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.537369893s ago: executing program 5 (id=506): openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) syslog(0x3, &(0x7f00000004c0)=""/164, 0xa4) 6.261943564s ago: executing program 3 (id=507): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001000370400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="01f10500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x4011}, 0x40004) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe000030a}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast2}}}], 0x20}}], 0x1, 0x80) 5.729395735s ago: executing program 4 (id=508): open(0x0, 0x80242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 5.718322815s ago: executing program 1 (id=518): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x3) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) io_setup(0x7, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x5000009) open(0x0, 0x189a7c, 0x113) pwritev2(r0, 0x0, 0x0, 0x6000004, 0x0, 0x0) 5.714550283s ago: executing program 2 (id=509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) 4.578693036s ago: executing program 2 (id=510): syz_clone(0x40022080, &(0x7f00000000c0)="8af7d1", 0x3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0x1}}}, 0x24}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="944c", 0x2}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.700273245s ago: executing program 1 (id=511): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x8, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0xffff8000, 0x2, 0x0, 0x4}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x40) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r5, 0x0, r0, 0x0, 0xffff, 0x2) 3.621708102s ago: executing program 2 (id=512): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe539, 0x800, 0x400001, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.641207243s ago: executing program 1 (id=513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) 1.465167951s ago: executing program 1 (id=514): unshare(0x2040400) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x80000) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 1.396127227s ago: executing program 3 (id=515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x11d, 0x1b, 0x0, 0x0) 1.328252208s ago: executing program 4 (id=516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f00000002c0)="1d5a8ee982673e1ceea4f7faca7d1f850fc857d3469b5fe572db003a391c48b7750b8d21878068caaae983b19fdb53be16d16d01e85f1e28d9335e822918d62e59f9106ce6d2e3bc00881bf13995edcecaa11e445592de03c56a0768f755a540045bcbce53109c247a86a5b5930cafe60853184338e188967a1990c69550c9403194aa5fd496e21bc40c", 0x6, r0, 0x4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r0}, 0x38) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000740)={'bridge_slave_1\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3b71d00b}}) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x5, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c00)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93b7b7c4", 0xf6d}], 0x1) write$sndseq(r1, &(0x7f0000000280)=[{0x5, 0xd, 0x6, 0x6, @tick=0x3, {0xfe, 0x7f}, {0xd, 0x65}, @time=@tick=0x9}], 0x1c) 1.072663363s ago: executing program 5 (id=517): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r3}, 0x20) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x6) recvmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.064392879s ago: executing program 2 (id=519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 293.620826ms ago: executing program 3 (id=520): ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0x4, 0xa, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 0s ago: executing program 5 (id=521): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0xfeffffff, r2, 0x3, {0x3b4, 0x6d3}, 0x6}, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. [ 84.675690][ T5828] cgroup: Unknown subsys name 'net' [ 84.793377][ T5828] cgroup: Unknown subsys name 'cpuset' [ 84.802763][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.470731][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.914753][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.922604][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.930670][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.940281][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.948521][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.959119][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.961327][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.972638][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.984171][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.993082][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.018188][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.030634][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.038713][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.047663][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.056948][ T5162] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.066117][ T5162] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.074443][ T5162] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.082901][ T5162] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.091427][ T5162] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.103965][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.118127][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.135468][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.147827][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.158394][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.166800][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.833036][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 89.985640][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 90.021802][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 90.237071][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.249100][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.257011][ T5852] bridge_slave_0: entered allmulticast mode [ 90.265369][ T5852] bridge_slave_0: entered promiscuous mode [ 90.276313][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 90.329330][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.336751][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.344193][ T5852] bridge_slave_1: entered allmulticast mode [ 90.352297][ T5852] bridge_slave_1: entered promiscuous mode [ 90.390061][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 90.404003][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.411397][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.419546][ T5841] bridge_slave_0: entered allmulticast mode [ 90.427508][ T5841] bridge_slave_0: entered promiscuous mode [ 90.500256][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.507639][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.515268][ T5841] bridge_slave_1: entered allmulticast mode [ 90.523174][ T5841] bridge_slave_1: entered promiscuous mode [ 90.537082][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.605391][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.624383][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.631894][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.639541][ T5851] bridge_slave_0: entered allmulticast mode [ 90.647833][ T5851] bridge_slave_0: entered promiscuous mode [ 90.698289][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.705893][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.713481][ T5851] bridge_slave_1: entered allmulticast mode [ 90.721705][ T5851] bridge_slave_1: entered promiscuous mode [ 90.742798][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.805791][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.818339][ T5852] team0: Port device team_slave_0 added [ 90.882632][ T5852] team0: Port device team_slave_1 added [ 90.906209][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.962449][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.970183][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.977567][ T5842] bridge_slave_0: entered allmulticast mode [ 90.986627][ T5842] bridge_slave_0: entered promiscuous mode [ 91.001370][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.026381][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.033973][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.041734][ T5849] bridge_slave_0: entered allmulticast mode [ 91.050016][ T5849] bridge_slave_0: entered promiscuous mode [ 91.062312][ T5841] team0: Port device team_slave_0 added [ 91.082220][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.089903][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.091924][ T5162] Bluetooth: hci0: command tx timeout [ 91.097321][ T5842] bridge_slave_1: entered allmulticast mode [ 91.106379][ T5842] bridge_slave_1: entered promiscuous mode [ 91.110263][ T5848] Bluetooth: hci1: command tx timeout [ 91.123430][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.130824][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.157210][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.168075][ T5162] Bluetooth: hci2: command tx timeout [ 91.174337][ T5162] Bluetooth: hci3: command tx timeout [ 91.210971][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.219902][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.228028][ T5849] bridge_slave_1: entered allmulticast mode [ 91.236193][ T5849] bridge_slave_1: entered promiscuous mode [ 91.243459][ T5162] Bluetooth: hci4: command tx timeout [ 91.253428][ T5841] team0: Port device team_slave_1 added [ 91.288766][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.295765][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.321874][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.336661][ T5851] team0: Port device team_slave_0 added [ 91.396666][ T5851] team0: Port device team_slave_1 added [ 91.431247][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.438233][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.464382][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.481274][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.496219][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.523291][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.534434][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.541768][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.569226][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.599064][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.606845][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.633030][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.648177][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.694734][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.702245][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.728278][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.786367][ T5842] team0: Port device team_slave_0 added [ 91.805318][ T993] cfg80211: failed to load regulatory.db [ 91.833873][ T5849] team0: Port device team_slave_0 added [ 91.847732][ T5852] hsr_slave_0: entered promiscuous mode [ 91.856171][ T5852] hsr_slave_1: entered promiscuous mode [ 91.875273][ T5842] team0: Port device team_slave_1 added [ 91.915932][ T5849] team0: Port device team_slave_1 added [ 91.950604][ T5841] hsr_slave_0: entered promiscuous mode [ 91.957726][ T5841] hsr_slave_1: entered promiscuous mode [ 91.965026][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 91.971053][ T5841] Cannot create hsr debugfs directory [ 91.993210][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.000240][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.026669][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.102760][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.110019][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.137013][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.166554][ T5851] hsr_slave_0: entered promiscuous mode [ 92.173791][ T5851] hsr_slave_1: entered promiscuous mode [ 92.180907][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 92.187214][ T5851] Cannot create hsr debugfs directory [ 92.195032][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.202964][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.229957][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.291748][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.298951][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.325314][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.501674][ T5842] hsr_slave_0: entered promiscuous mode [ 92.508916][ T5842] hsr_slave_1: entered promiscuous mode [ 92.515786][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 92.521947][ T5842] Cannot create hsr debugfs directory [ 92.615455][ T5849] hsr_slave_0: entered promiscuous mode [ 92.623400][ T5849] hsr_slave_1: entered promiscuous mode [ 92.630393][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 92.636161][ T5849] Cannot create hsr debugfs directory [ 93.158958][ T5848] Bluetooth: hci1: command tx timeout [ 93.165195][ T5162] Bluetooth: hci0: command tx timeout [ 93.193189][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.207203][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.221350][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.234868][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.242580][ T5848] Bluetooth: hci2: command tx timeout [ 93.248283][ T5162] Bluetooth: hci3: command tx timeout [ 93.318883][ T5848] Bluetooth: hci4: command tx timeout [ 93.366783][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.383752][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.417404][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.433064][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.554668][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.569290][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.588350][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.608377][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.734592][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.747362][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.762216][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.774266][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.805472][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.960789][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.976852][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.993686][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.001507][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.020023][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.044436][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.073971][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.098478][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.107058][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.172390][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.266334][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.323847][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.332123][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.372010][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.379653][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.490973][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.605801][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.675209][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.702743][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.714544][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.752476][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.759820][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.771012][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.778260][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.821866][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.829185][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.865415][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.873709][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.888104][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.922756][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.930184][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.983181][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.990468][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.064829][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.241575][ T5848] Bluetooth: hci0: command tx timeout [ 95.241599][ T5162] Bluetooth: hci1: command tx timeout [ 95.321645][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.331243][ T5848] Bluetooth: hci3: command tx timeout [ 95.333329][ T5162] Bluetooth: hci2: command tx timeout [ 95.399354][ T5162] Bluetooth: hci4: command tx timeout [ 95.741489][ T5841] veth0_vlan: entered promiscuous mode [ 95.822125][ T5852] veth0_vlan: entered promiscuous mode [ 95.835993][ T5841] veth1_vlan: entered promiscuous mode [ 95.861754][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.905290][ T5852] veth1_vlan: entered promiscuous mode [ 95.957449][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.999532][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.043598][ T5841] veth0_macvtap: entered promiscuous mode [ 96.072386][ T5841] veth1_macvtap: entered promiscuous mode [ 96.125236][ T5852] veth0_macvtap: entered promiscuous mode [ 96.152340][ T5842] veth0_vlan: entered promiscuous mode [ 96.162347][ T5852] veth1_macvtap: entered promiscuous mode [ 96.211492][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.227123][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.277702][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.301530][ T5851] veth0_vlan: entered promiscuous mode [ 96.314388][ T5842] veth1_vlan: entered promiscuous mode [ 96.322318][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.331271][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.354666][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.374142][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.410646][ T5851] veth1_vlan: entered promiscuous mode [ 96.424038][ T5849] veth0_vlan: entered promiscuous mode [ 96.453847][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.486205][ T5849] veth1_vlan: entered promiscuous mode [ 96.507600][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.517666][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.558357][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.570067][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.675024][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.690759][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.724843][ T5842] veth0_macvtap: entered promiscuous mode [ 96.776160][ T5842] veth1_macvtap: entered promiscuous mode [ 96.793761][ T5851] veth0_macvtap: entered promiscuous mode [ 96.820452][ T5849] veth0_macvtap: entered promiscuous mode [ 96.843935][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.854814][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.876453][ T5851] veth1_macvtap: entered promiscuous mode [ 96.898450][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.912782][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.923093][ T5849] veth1_macvtap: entered promiscuous mode [ 96.960682][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.025592][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.042117][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.056060][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.063909][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.115669][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.156030][ T1338] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.167746][ T1338] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.192312][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.211279][ T1338] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.222021][ T1338] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.236932][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.318887][ T5162] Bluetooth: hci1: command tx timeout [ 97.325151][ T5162] Bluetooth: hci0: command tx timeout [ 97.628926][ T5848] Bluetooth: hci3: command tx timeout [ 97.634777][ T5848] Bluetooth: hci4: command tx timeout [ 97.645110][ T5162] Bluetooth: hci2: command tx timeout [ 97.715715][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.028750][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.113437][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.176817][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.199567][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.271416][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.304421][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.376403][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.411322][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.719231][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.737092][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.791413][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.822871][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.908540][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.940207][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.112408][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.150690][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.258000][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.299536][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.338027][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.365604][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.814828][ T6002] loop3: detected capacity change from 0 to 164 [ 101.277332][ T6005] batman_adv: batadv0: Adding interface: dummy0 [ 101.309674][ T6005] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.398547][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 101.437790][ T6005] batman_adv: batadv0: Interface activated: dummy0 [ 101.528386][ T6008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.635875][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.725313][ T6008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.774568][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.832980][ T6008] batman_adv: batadv0: Interface deactivated: dummy0 [ 101.884089][ T6008] batman_adv: batadv0: Removing interface: dummy0 [ 102.521235][ T6012] netlink: 156 bytes leftover after parsing attributes in process `syz.0.18'. [ 102.539816][ T6014] capability: warning: `syz.3.19' uses deprecated v2 capabilities in a way that may be insecure [ 102.599537][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 103.376395][ T6029] sctp: [Deprecated]: syz.2.26 (pid 6029) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.376395][ T6029] Use struct sctp_sack_info instead [ 104.241085][ T6036] syz_tun: entered allmulticast mode [ 104.317623][ T6035] syz_tun: left allmulticast mode [ 104.480580][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.30'. [ 104.522344][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.31'. [ 104.541002][ T6046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.33'. [ 104.667621][ T6044] Zero length message leads to an empty skb [ 104.892431][ T6056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.35'. [ 105.001998][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35'. [ 105.233499][ T30] audit: type=1804 audit(1773921810.006:2): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.39" name="/newroot/8/file0" dev="tmpfs" ino=61 res=1 errno=0 [ 105.281443][ T6067] ref_ctr increment failed for inode: 0x3d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807f4d1900 [ 105.385530][ T6065] uprobe: syz.0.39:6065 failed to unregister, leaking uprobe [ 105.451431][ T6040] loop2: detected capacity change from 0 to 40427 [ 105.469533][ T6040] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 105.500688][ T6040] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 105.996874][ T6040] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 106.022308][ T6078] pimreg: entered allmulticast mode [ 106.039345][ T6040] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 106.053609][ T6078] pimreg: left allmulticast mode [ 106.071555][ T6040] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 106.704033][ T6098] loop1: detected capacity change from 0 to 512 [ 107.012867][ T6098] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c018, mo2=0082] [ 107.022034][ T6098] System zones: 0-2, 18-18, 34-35 [ 107.201629][ T6098] EXT4-fs error (device loop1): __ext4_iget:5381: inode #3: block 127754: comm syz.1.48: invalid block [ 107.213290][ T6098] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 107.229343][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 107.245935][ C1] EXT4-fs (loop1): initial error at time 1773921811: __ext4_iget:5381: inode 3: block 127754 [ 107.256211][ C1] EXT4-fs (loop1): last error at time 1773921811: __ext4_iget:5381: inode 3: block 127754 [ 107.384820][ T6098] EXT4-fs error (device loop1): ext4_quota_enable:7195: comm syz.1.48: Bad quota inode: 3, type: 0 [ 107.396684][ T6098] loop1: lost filesystem error report for type 5 error -117 [ 107.502224][ T6098] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 107.532702][ T6098] EXT4-fs (loop1): mount failed [ 109.859994][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 109.972930][ T1338] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.984407][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 110.006332][ T1338] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.041230][ T1338] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.071089][ T1338] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.914095][ T6141] loop2: detected capacity change from 0 to 128 [ 112.092819][ T6141] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.601836][ T6141] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.654016][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.58'. [ 112.764843][ T30] audit: type=1326 audit(1773921817.536:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.3.58" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84b8b9c799 code=0x0 [ 112.880468][ T6141] EXT4-fs (loop2): shut down requested (2) [ 112.991697][ T5851] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.128886][ T5938] IPVS: starting estimator thread 0... [ 113.150460][ T6157] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.200970][ T5957] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.239116][ T6158] IPVS: using max 29 ests per chain, 69600 per kthread [ 113.379556][ T5957] usb 2-1: Using ep0 maxpacket: 8 [ 113.411968][ T5957] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 113.430508][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.447507][ T5957] usb 2-1: Product: syz [ 113.470518][ T5957] usb 2-1: Manufacturer: syz [ 113.486609][ T5957] usb 2-1: SerialNumber: syz [ 113.524777][ T5957] usb 2-1: config 0 descriptor?? [ 113.699234][ T6170] netlink: 'syz.3.69': attribute type 4 has an invalid length. [ 113.762925][ T5957] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 113.787837][ T6170] netlink: 'syz.3.69': attribute type 4 has an invalid length. [ 115.223333][ T5957] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 115.286675][ T5957] usb 2-1: USB disconnect, device number 2 [ 115.649942][ T6189] input: syz1 as /devices/virtual/input/input5 [ 115.679703][ T6191] loop3: detected capacity change from 0 to 1764 [ 115.698274][ T6191] iso9660: Bad value for 'gid' [ 115.705514][ T6191] iso9660: Bad value for 'gid' [ 115.780375][ T6191] evm: overlay not supported [ 115.928570][ T6196] loop4: detected capacity change from 0 to 1024 [ 116.801297][ T6196] loop4: detected capacity change from 1024 to 64 [ 116.860683][ T6200] syz.4.80: attempt to access beyond end of device [ 116.860683][ T6200] loop4: rw=0, sector=288, nr_sectors = 4 limit=64 [ 116.910411][ T6213] netlink: 'syz.3.84': attribute type 3 has an invalid length. [ 116.923150][ T6200] Buffer I/O error on dev loop4, logical block 72, async page read [ 116.953761][ T6196] Dev loop4: unable to read RDB block 8 [ 116.965774][ T6200] syz.4.80: attempt to access beyond end of device [ 116.965774][ T6200] loop4: rw=0, sector=292, nr_sectors = 4 limit=64 [ 116.994782][ T6200] Buffer I/O error on dev loop4, logical block 73, async page read [ 117.027832][ T6196] loop4: unable to read partition table [ 117.066656][ T6196] loop_reread_partitions: partition scan of loop4 (ï5ŸA;¹8o÷Ö¤®mÝûÑÎ])Âî^\©) failed (rc=-5) [ 117.806272][ T5852] syz-executor: attempt to access beyond end of device [ 117.806272][ T5852] loop4: rw=2049, sector=1022, nr_sectors = 1 limit=64 [ 118.639841][ T6228] vlan2: entered promiscuous mode [ 118.646273][ T6228] vlan2: entered allmulticast mode [ 118.652283][ T6228] hsr_slave_1: entered allmulticast mode [ 118.698993][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 119.252656][ T6238] netlink: 16 bytes leftover after parsing attributes in process `syz.2.92'. [ 119.828381][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.93'. [ 120.568312][ T6255] cgroup: fork rejected by pids controller in /syz2 [ 121.159347][ T6616] netlink: 'syz.4.103': attribute type 32 has an invalid length. [ 122.266753][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 122.285942][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 122.295765][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 122.306859][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 122.322648][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 122.477401][ T6783] loop4: detected capacity change from 0 to 512 [ 122.554328][ T6783] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 122.641980][ T6783] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 122.771218][ T6783] EXT4-fs (loop4): 1 truncate cleaned up [ 122.800153][ T6783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.094629][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.783764][ T6778] chnl_net:caif_netlink_parms(): no params data found [ 124.239908][ T6778] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.276740][ T6778] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.303856][ T6778] bridge_slave_0: entered allmulticast mode [ 124.339185][ T6778] bridge_slave_0: entered promiscuous mode [ 124.362961][ T5848] Bluetooth: hci5: command tx timeout [ 124.380476][ T6778] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.432053][ T6778] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.486371][ T6778] bridge_slave_1: entered allmulticast mode [ 124.533012][ T6778] bridge_slave_1: entered promiscuous mode [ 124.771283][ T6778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.958343][ T6778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.217530][ T6778] team0: Port device team_slave_0 added [ 125.298092][ T6778] team0: Port device team_slave_1 added [ 125.484521][ T6818] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 125.863958][ T6828] loop2: detected capacity change from 0 to 512 [ 125.895571][ T6828] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 125.911595][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.920812][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.960668][ T6828] EXT4-fs (loop2): 1 truncate cleaned up [ 125.985815][ T6828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.167794][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.440007][ T5848] Bluetooth: hci5: command tx timeout [ 127.160183][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.178195][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.265619][ T6778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.330886][ T1343] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.353495][ T6852] loop3: detected capacity change from 0 to 512 [ 127.373463][ T1343] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.396245][ T6852] ======================================================= [ 127.396245][ T6852] WARNING: The mand mount option has been deprecated and [ 127.396245][ T6852] and is ignored by this kernel. Remove the mand [ 127.396245][ T6852] option from the mount to silence this warning. [ 127.396245][ T6852] ======================================================= [ 127.442400][ T1343] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.494122][ T1343] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.518320][ T6852] EXT4-fs: Ignoring removed bh option [ 127.531393][ T1343] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.580546][ T1343] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.582711][ T6852] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.3.124: corrupted xattr block 95: invalid header [ 127.636754][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.701244][ T6852] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 127.703467][ T6852] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 127.712781][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 127.712816][ C0] EXT4-fs (loop3): initial error at time 1773921832: ext4_expand_extra_isize_ea:2808: inode 11 [ 127.712847][ C0] EXT4-fs (loop3): last error at time 1773921832: ext4_expand_extra_isize_ea:2808: inode 11 [ 127.738999][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.812281][ T6852] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.124: bg 0: block 7: invalid block bitmap [ 127.824124][ T6778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.857133][ T6852] loop3: lost filesystem error report for type 5 error -117 [ 127.863687][ T6852] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 127.893483][ T6852] loop3: lost filesystem error report for type 5 error -117 [ 127.896125][ T6852] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2970: inode #11: comm syz.3.124: corrupted xattr block 95: invalid header [ 127.919111][ T1343] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.948690][ T6852] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 127.948865][ T1343] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.980073][ T6852] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 128.018813][ T6852] EXT4-fs (loop3): 1 orphan inode deleted [ 128.033512][ T6852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.277881][ T6778] hsr_slave_0: entered promiscuous mode [ 128.292473][ T6778] hsr_slave_1: entered promiscuous mode [ 128.301715][ T6778] debugfs: 'hsr0' already exists in 'hsr' [ 128.321797][ T6778] Cannot create hsr debugfs directory [ 128.531956][ T6869] loop4: detected capacity change from 0 to 16 [ 128.672389][ T5848] Bluetooth: hci5: command tx timeout [ 130.015850][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.260977][ T6879] loop3: detected capacity change from 0 to 128 [ 130.467016][ T30] audit: type=1804 audit(1773921835.236:4): pid=6882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.132" name="/newroot/39/file0/bus" dev="loop3" ino=1048605 res=1 errno=0 [ 130.551093][ T30] audit: type=1804 audit(1773921835.316:5): pid=6879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.132" name="/newroot/39/file0/bus" dev="loop3" ino=1048605 res=1 errno=0 [ 130.683605][ T6778] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 130.722752][ T6778] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 130.758908][ T5848] Bluetooth: hci5: command tx timeout [ 130.777284][ T6778] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 130.803945][ T6778] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 131.024816][ T6898] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 131.137991][ T6877] loop1: detected capacity change from 0 to 32768 [ 131.218459][ T6877] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 131.375994][ T6877] XFS (loop1): Ending clean mount [ 131.454157][ T6778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.502252][ T6877] XFS (loop1): Quotacheck needed: Please wait. [ 131.611138][ T6778] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.758267][ T6877] XFS (loop1): Quotacheck: Done. [ 131.868560][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.875985][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.989324][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.996539][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.249707][ T30] audit: type=1326 audit(1773921837.016:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b8b9c799 code=0x7ffc0000 [ 132.299418][ T30] audit: type=1326 audit(1773921837.016:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b8b9c799 code=0x7ffc0000 [ 132.354722][ T30] audit: type=1326 audit(1773921837.066:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84b8b9c799 code=0x7ffc0000 [ 132.383876][ T6922] loop3: detected capacity change from 0 to 1024 [ 132.403164][ T30] audit: type=1326 audit(1773921837.076:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b8b9c799 code=0x7ffc0000 [ 132.501802][ T30] audit: type=1326 audit(1773921837.076:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b8b9c799 code=0x7ffc0000 [ 132.535201][ T30] audit: type=1326 audit(1773921837.096:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84b8b9c799 code=0x7ffc0000 [ 132.677967][ T30] audit: type=1326 audit(1773921837.096:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b8b9c799 code=0x7ffc0000 [ 132.714993][ T5849] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 132.772116][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.780536][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.814802][ T30] audit: type=1326 audit(1773921837.106:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b8b9c799 code=0x7ffc0000 [ 133.555055][ T6778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.910529][ T5957] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 135.082080][ T5957] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.103981][ T6778] veth0_vlan: entered promiscuous mode [ 135.109901][ T5957] usb 3-1: config 0 has no interfaces? [ 135.118124][ T5957] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 135.148805][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.175551][ T6778] veth1_vlan: entered promiscuous mode [ 135.207902][ T5957] usb 3-1: config 0 descriptor?? [ 135.342798][ T6778] veth0_macvtap: entered promiscuous mode [ 135.371243][ T6778] veth1_macvtap: entered promiscuous mode [ 135.429190][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.470155][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.511547][ T1116] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.552231][ T1116] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.588455][ T1116] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.638396][ T1116] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.313095][ T1343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.341987][ T1343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.470403][ T525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.489677][ T525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.231370][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 137.231384][ T30] audit: type=1804 audit(1773921842.006:48): pid=6970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.152" name="/newroot/44/file0" dev="tmpfs" ino=252 res=1 errno=0 [ 137.508306][ T30] audit: type=1326 audit(1773921842.276:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.5.153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93f679c799 code=0x0 [ 137.653148][ T24] usb 3-1: USB disconnect, device number 2 [ 140.820064][ T6992] loop5: detected capacity change from 0 to 256 [ 140.973975][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.162'. [ 141.060344][ T6992] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 141.094075][ T7000] gtp0: entered promiscuous mode [ 141.211188][ T6992] exFAT-fs (loop5): valid_size(150994954) is greater than size(10) [ 141.250133][ T7008] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff) [ 141.307440][ T7004] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 141.315000][ T30] audit: type=1800 audit(1773921846.076:50): pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.157" name="file1" dev="loop5" ino=1048611 res=0 errno=0 [ 141.372716][ T7004] block device autoloading is deprecated and will be removed. [ 141.389218][ T6998] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 141.463312][ T6998] block device autoloading is deprecated and will be removed. [ 141.803277][ T6992] kAFS: unable to lookup cell 'syz1' [ 142.263790][ T7016] loop3: detected capacity change from 0 to 1024 [ 142.337969][ T7016] EXT4-fs: Ignoring removed orlov option [ 142.548003][ T7025] netlink: 'syz.2.168': attribute type 10 has an invalid length. [ 142.595823][ T7016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.637444][ T7025] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 143.072776][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.158991][ T7051] netlink: 28 bytes leftover after parsing attributes in process `syz.5.175'. [ 144.324919][ T7053] netlink: 28 bytes leftover after parsing attributes in process `syz.5.175'. [ 144.762695][ T7043] loop3: detected capacity change from 0 to 512 [ 144.837455][ T7043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 144.930844][ T30] audit: type=1800 audit(1773921849.706:51): pid=7062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.176" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 144.978844][ T7043] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.328206][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.183'. [ 146.767539][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 146.951570][ T7078] nbd: socks must be embedded in a SOCK_ITEM attr [ 147.006680][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.183'. [ 147.035141][ T5858] block nbd64: NBD_DISCONNECT [ 147.058222][ T7079] nbd: device at index 64 is going down [ 147.274041][ T7088] lo speed is unknown, defaulting to 1000 [ 147.392731][ T7088] lo speed is unknown, defaulting to 1000 [ 148.545810][ T5860] udevd[5860]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 148.598535][ T7088] lo speed is unknown, defaulting to 1000 [ 148.724562][ T7088] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 148.884138][ T7088] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 148.999246][ T7088] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 149.116589][ T7088] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 149.339197][ T7088] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 149.822155][ T7088] lo speed is unknown, defaulting to 1000 [ 149.924584][ T7088] lo speed is unknown, defaulting to 1000 [ 149.976951][ T7088] lo speed is unknown, defaulting to 1000 [ 150.044913][ T7088] lo speed is unknown, defaulting to 1000 [ 150.275559][ T7088] lo speed is unknown, defaulting to 1000 [ 150.616432][ T7088] lo speed is unknown, defaulting to 1000 [ 152.184385][ T1116] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.381296][ T1116] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.074356][ T1116] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.672624][ T5162] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.686369][ T5162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.695115][ T5162] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.713774][ T5162] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.722728][ T5162] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.777208][ T7159] loop5: detected capacity change from 0 to 4096 [ 154.954095][ T1116] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.026160][ T7162] netlink: 'syz.1.209': attribute type 27 has an invalid length. [ 155.034665][ T7157] lo speed is unknown, defaulting to 1000 [ 155.135942][ T7167] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.438759][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.446592][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.557837][ T30] audit: type=1800 audit(1773921860.326:52): pid=7159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.208" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 155.768697][ T5915] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 155.922256][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.934395][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 155.953531][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 155.975674][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 155.986301][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.005795][ T7159] NILFS error (device loop5): nilfs_dotdot: directory #12 missing '.' [ 156.014858][ T5915] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 156.035175][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.054208][ T5915] usb 3-1: Product: syz [ 156.068691][ T5915] usb 3-1: Manufacturer: syz [ 156.073711][ T5915] usb 3-1: SerialNumber: syz [ 156.099548][ T5915] usb 3-1: config 0 descriptor?? [ 156.130462][ T5915] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 156.151009][ T7159] Remounting filesystem read-only [ 156.161714][ T5915] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 156.464772][ T7178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.546425][ T7163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.556173][ T7163] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.572051][ T7181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.590050][ T7163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.612945][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.663782][ T7176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.716139][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.741092][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.757230][ T5915] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 156.765103][ T5848] Bluetooth: hci3: command tx timeout [ 156.775581][ T5915] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 157.007117][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.016681][ T1116] bridge_slave_1: left allmulticast mode [ 157.022802][ T1116] bridge_slave_1: left promiscuous mode [ 157.035358][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.053467][ T1116] bridge_slave_0: left allmulticast mode [ 157.068195][ T1116] bridge_slave_0: left promiscuous mode [ 157.078022][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.428765][ T5915] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 157.449020][ T5915] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 157.793513][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.804527][ T5915] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 157.814938][ T5915] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 158.489569][ T5915] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 158.502783][ T5915] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 158.519075][ T5915] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 158.526813][ T5915] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 158.547171][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.565538][ T5915] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 158.588396][ T1116] bond0 (unregistering): Released all slaves [ 158.647855][ T5915] usb 3-1: USB disconnect, device number 3 [ 158.839338][ T5848] Bluetooth: hci3: command tx timeout [ 160.076236][ T7214] kvm: pic: non byte write [ 160.383023][ T7157] chnl_net:caif_netlink_parms(): no params data found [ 160.767176][ T1116] hsr_slave_0: left promiscuous mode [ 160.811599][ T1116] hsr_slave_1: left promiscuous mode [ 160.851502][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.904136][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.927029][ T5848] Bluetooth: hci3: command tx timeout [ 160.973225][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.993635][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.037258][ T1116] veth1_macvtap: left promiscuous mode [ 161.056298][ T1116] veth0_macvtap: left promiscuous mode [ 161.078117][ T1116] veth1_vlan: left promiscuous mode [ 161.096486][ T1116] veth0_vlan: left promiscuous mode [ 163.005430][ T5848] Bluetooth: hci3: command tx timeout [ 163.486915][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 163.642371][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 164.485441][ T7157] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.511033][ T7157] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.520571][ T7157] bridge_slave_0: entered allmulticast mode [ 164.541887][ T7157] bridge_slave_0: entered promiscuous mode [ 164.579803][ T7157] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.589778][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.597285][ T7157] bridge_slave_1: entered allmulticast mode [ 164.608415][ T7157] bridge_slave_1: entered promiscuous mode [ 164.628458][ T7239] lo speed is unknown, defaulting to 1000 [ 164.886836][ T7157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.007749][ T7157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.417203][ T7157] team0: Port device team_slave_0 added [ 165.458024][ T7157] team0: Port device team_slave_1 added [ 165.751227][ T7289] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 165.768815][ T7289] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 165.799792][ T5923] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 166.257022][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.267875][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.336008][ T7157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.394276][ T7157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.408686][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 166.414022][ T7157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.486499][ T5923] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 166.515104][ T5923] usb 2-1: config 0 has no interface number 0 [ 166.520132][ T7157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.566112][ T5923] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 166.643269][ T5923] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 166.685594][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.725856][ T5923] usb 2-1: Product: syz [ 166.763392][ T5923] usb 2-1: Manufacturer: syz [ 166.808139][ T5923] usb 2-1: SerialNumber: syz [ 166.845854][ T5923] usb 2-1: config 0 descriptor?? [ 166.873534][ T7282] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.954515][ T7157] hsr_slave_0: entered promiscuous mode [ 167.009541][ T7157] hsr_slave_1: entered promiscuous mode [ 167.127354][ T7282] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.015352][ T5848] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 168.988808][ T5915] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 169.168760][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 169.184846][ T5915] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 169.202103][ T5923] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 169.219146][ T5915] usb 3-1: config 0 has no interface number 0 [ 169.244159][ T5923] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 169.292243][ T5923] asix 2-1:0.188: probe with driver asix failed with error -71 [ 169.313951][ T5915] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 169.344560][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.372619][ T5923] usb 2-1: USB disconnect, device number 3 [ 169.386424][ T5915] usb 3-1: Product: syz [ 169.404245][ T5915] usb 3-1: Manufacturer: syz [ 169.424282][ T5915] usb 3-1: SerialNumber: syz [ 169.506514][ T5915] usb 3-1: config 0 descriptor?? [ 169.752164][ T7157] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 169.832992][ T7157] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 169.883016][ T7157] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 169.955357][ T7157] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 169.972131][ T5915] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 170.002870][ T5915] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 170.971349][ T7357] mmap: syz.1.246 (7357) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 171.466825][ T7157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.951650][ T7362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.796052][ T7364] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 172.854391][ T7364] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 172.881659][ T1116] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 172.946097][ T1116] bond1: (slave macvlan2): link status up again after 0 ms [ 172.956942][ T7157] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.991485][ T5915] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 173.041661][ T1116] bond1: (slave macvlan2): link status up again after 0 ms [ 173.043687][ T5915] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 173.051517][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.064491][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.083800][ T1116] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 173.111621][ T36] bond1: (slave macvlan2): link status up again after 0 ms [ 173.128439][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.135709][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.165520][ T1343] bond1: (slave macvlan2): link status up again after 0 ms [ 173.198981][ T1343] bond1: (slave macvlan2): link status up again after 0 ms [ 173.230842][ T5915] usb 3-1: USB disconnect, device number 4 [ 173.246784][ T1338] bond1: (slave macvlan2): link status up again after 0 ms [ 173.330366][ T1338] bond1: (slave macvlan2): link status up again after 0 ms [ 173.392098][ T36] bond1: (slave macvlan2): link status up again after 0 ms [ 174.124549][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.254'. [ 175.030195][ T7157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.071481][ T7157] veth0_vlan: entered promiscuous mode [ 176.189806][ T7157] veth1_vlan: entered promiscuous mode [ 177.937391][ T36] net_ratelimit: 21 callbacks suppressed [ 177.937441][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 177.968127][ T7157] veth0_macvtap: entered promiscuous mode [ 178.090545][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 178.192710][ T7440] team0: entered promiscuous mode [ 178.218681][ T7440] team_slave_0: entered promiscuous mode [ 178.226088][ T7440] team_slave_1: entered promiscuous mode [ 178.233977][ T7440] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 178.268089][ T7440] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 178.281561][ T7157] veth1_macvtap: entered promiscuous mode [ 178.538740][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.635520][ T7157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.690631][ T1343] bond1: (slave macvlan2): failed to get link speed/duplex [ 178.756812][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.953464][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.973604][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.011854][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.074718][ T7460] nfs: Unknown parameter 'f' [ 179.758933][ T7459] process 'syz.5.267' launched '/dev/fd/4' with NULL argv: empty string added [ 179.834809][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 180.050575][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 180.274926][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.324468][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.158451][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.172602][ T525] bond1: (slave macvlan2): failed to get link speed/duplex [ 181.205125][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.298192][ T525] bond1: (slave macvlan2): failed to get link speed/duplex [ 181.454407][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 181.609104][ T525] bond1: (slave macvlan2): failed to get link speed/duplex [ 181.749031][ T525] bond1: (slave macvlan2): failed to get link speed/duplex [ 181.996809][ T7495] syzkaller0: entered promiscuous mode [ 182.025520][ T7495] syzkaller0: entered allmulticast mode [ 182.302290][ T7500] loop3: detected capacity change from 0 to 128 [ 182.405696][ T7500] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.503108][ T7500] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 182.618224][ T7507] loop5: detected capacity change from 0 to 16 [ 182.671902][ T7507] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 183.039109][ T12] net_ratelimit: 8 callbacks suppressed [ 183.039131][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 183.805446][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 183.948737][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 183.972433][ T5842] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.098764][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 184.229902][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 184.652061][ T7524] warning: `syz.3.280' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 184.764059][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 185.343721][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 185.468842][ T525] bond1: (slave macvlan2): failed to get link speed/duplex [ 185.608718][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 185.774459][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 186.863530][ T7559] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 188.142934][ T68] net_ratelimit: 12 callbacks suppressed [ 188.142954][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 188.309009][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 188.431053][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 188.560059][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 188.669572][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 188.745026][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 188.809061][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 188.954906][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 189.033709][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 189.085772][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 189.146791][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 189.488770][ T7577] team1: entered promiscuous mode [ 189.523755][ T7577] team1: entered allmulticast mode [ 189.546058][ T7577] 8021q: adding VLAN 0 to HW filter on device team1 [ 189.583000][ T7578] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 189.891886][ T7578] team2: entered promiscuous mode [ 189.916873][ T7578] team2: entered allmulticast mode [ 189.927755][ T7578] 8021q: adding VLAN 0 to HW filter on device team2 [ 189.954977][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 190.008756][ T30] audit: type=1804 audit(1773921894.676:53): pid=7590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.296" name="/newroot/4/file0" dev="tmpfs" ino=38 res=1 errno=0 [ 190.109536][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 191.522023][ T7601] syzkaller0: entered promiscuous mode [ 191.550639][ T7601] syzkaller0: entered allmulticast mode [ 191.768677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 192.232346][ T7609] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 192.239206][ T7609] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 192.311174][ T7612] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(8) [ 192.317820][ T7612] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 192.390791][ T7609] vhci_hcd vhci_hcd.0: Device attached [ 192.419378][ T7612] vhci_hcd vhci_hcd.0: Device attached [ 192.460200][ T7616] vhci_hcd: connection closed [ 192.460315][ T7615] vhci_hcd: connection closed [ 192.507167][ T36] vhci_hcd vhci_hcd.4: stop threads [ 192.545330][ T36] vhci_hcd vhci_hcd.4: release socket [ 192.757948][ T36] vhci_hcd vhci_hcd.4: disconnect device [ 192.781376][ T36] vhci_hcd vhci_hcd.4: stop threads [ 192.795094][ T36] vhci_hcd vhci_hcd.4: release socket [ 193.430361][ T36] vhci_hcd vhci_hcd.4: disconnect device [ 193.441060][ T36] net_ratelimit: 12 callbacks suppressed [ 193.441084][ T36] bond1: (slave macvlan2): failed to get link speed/duplex [ 193.569451][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 193.729612][ T1343] bond1: (slave macvlan2): failed to get link speed/duplex [ 193.858744][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 193.868746][ T993] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 193.988763][ T1343] bond1: (slave macvlan2): failed to get link speed/duplex [ 194.060439][ T993] usb 2-1: Using ep0 maxpacket: 32 [ 194.081346][ T993] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 194.102738][ T993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.119967][ T1338] bond1: (slave macvlan2): failed to get link speed/duplex [ 194.186252][ T993] usb 2-1: config 0 descriptor?? [ 194.208074][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.214572][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.258754][ T1338] bond1: (slave macvlan2): failed to get link speed/duplex [ 194.378732][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 194.448963][ T993] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 194.509068][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 194.536141][ T993] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 194.573784][ T993] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 194.645696][ T993] usb 2-1: media controller created [ 194.653757][ T1343] bond1: (slave macvlan2): failed to get link speed/duplex [ 194.820375][ T993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.457387][ T993] DVB: Unable to find symbol dib7000p_attach() [ 196.466833][ T993] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 196.548017][ T7647] netlink: 'syz.2.310': attribute type 1 has an invalid length. [ 197.478668][ T993] rc_core: IR keymap rc-dib0700-rc5 not found [ 197.507192][ T993] Registered IR keymap rc-empty [ 197.663184][ T993] dvb-usb: could not initialize remote control. [ 197.669724][ T993] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 197.689391][ T993] usb 2-1: USB disconnect, device number 4 [ 199.668349][ T993] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 200.340613][ T7661] loop5: detected capacity change from 0 to 4096 [ 200.584034][ T7655] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.643447][ T7661] ntfs3(loop5): Failed to read $AttrDef (-4). [ 200.649938][ T7655] bond1: (slave bond2): making interface the new active one [ 200.715850][ T7655] bond1: (slave bond2): Enslaving as an active interface with an up link [ 200.865241][ T7656] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 200.899209][ T7671] netlink: 14 bytes leftover after parsing attributes in process `syz.1.315'. [ 201.172907][ T525] net_ratelimit: 12 callbacks suppressed [ 201.172928][ T525] bond1: (slave macvlan2): failed to get link speed/duplex [ 201.353260][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 201.518777][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 201.658740][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 201.848096][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 202.121686][ T525] bond1: (slave macvlan2): failed to get link speed/duplex [ 202.380767][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 202.597661][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 202.891984][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 203.092350][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 206.261293][ T12] net_ratelimit: 20 callbacks suppressed [ 206.261314][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 206.422953][ T1343] bond1: (slave macvlan2): failed to get link speed/duplex [ 206.635939][ T7716] bond1: (slave macvlan2): failed to get link speed/duplex [ 206.989623][ T1343] bond1: (slave macvlan2): failed to get link speed/duplex [ 207.583113][ T7712] bond1: (slave macvlan2): failed to get link speed/duplex [ 208.958879][ T1343] bond1: (slave macvlan2): failed to get link speed/duplex [ 209.078764][ T1343] bond1: (slave macvlan2): failed to get link speed/duplex [ 209.190552][ T7712] bond1: (slave macvlan2): failed to get link speed/duplex [ 209.328750][ T7712] bond1: (slave macvlan2): failed to get link speed/duplex [ 209.568879][ T7712] bond1: (slave macvlan2): failed to get link speed/duplex [ 211.649132][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 211.655488][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 211.662457][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 211.668650][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 211.778804][ T525] net_ratelimit: 6 callbacks suppressed [ 211.778825][ T525] bond1: (slave macvlan2): failed to get link speed/duplex [ 212.248626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 212.347748][ T7716] bond1: (slave macvlan2): failed to get link speed/duplex [ 212.480495][ T7712] bond1: (slave macvlan2): failed to get link speed/duplex [ 212.652276][ T7712] bond1: (slave macvlan2): failed to get link speed/duplex [ 212.810611][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 212.960243][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 213.088734][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 213.218852][ T7712] bond1: (slave macvlan2): failed to get link speed/duplex [ 213.349202][ T7712] bond1: (slave macvlan2): failed to get link speed/duplex [ 213.488957][ T7716] bond1: (slave macvlan2): failed to get link speed/duplex [ 213.528385][ T30] audit: type=1326 audit(1773921918.296:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.5.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f679c799 code=0x7fc00000 [ 213.619778][ T30] audit: type=1326 audit(1773921918.326:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.5.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f93f679c799 code=0x7fc00000 [ 215.337655][ T7814] loop3: detected capacity change from 0 to 512 [ 215.390111][ T7814] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 215.401323][ T7814] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 215.410591][ T7814] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #13: comm syz.3.350: iget: bad i_size value: 12154757448730 [ 215.428745][ T7814] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 215.430992][ T7814] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.350: couldn't read orphan inode 13 (err -117) [ 215.440260][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 215.440288][ C0] EXT4-fs (loop3): initial error at time 1773921920: ext4_orphan_get:1391: inode 13 [ 215.440325][ C0] EXT4-fs (loop3): last error at time 1773921920: ext4_orphan_get:1391: inode 13 [ 215.508691][ T7814] loop3: lost filesystem error report for type 5 error -117 [ 215.534830][ T7814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.803793][ T7826] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.814534][ T7826] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.902726][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.056323][ T7830] netlink: 'syz.3.354': attribute type 2 has an invalid length. [ 216.064573][ T7830] tipc: Started in network mode [ 216.069637][ T7830] tipc: Node identity 1340008, cluster identity 4711 [ 216.078034][ T7830] tipc: Node number set to 20185096 [ 216.502233][ T30] audit: type=1326 audit(1773921921.036:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b0b9c799 code=0x7ffc0000 [ 216.873060][ T12] net_ratelimit: 18 callbacks suppressed [ 216.873114][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 216.932775][ T30] audit: type=1326 audit(1773921921.436:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f79b0b9c799 code=0x7ffc0000 [ 217.216852][ T58] bond1: (slave macvlan2): failed to get link speed/duplex [ 217.252002][ T30] audit: type=1326 audit(1773921921.586:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b0b9c799 code=0x7ffc0000 [ 217.450491][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 217.627205][ T30] audit: type=1326 audit(1773921921.586:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b0b9c799 code=0x7ffc0000 [ 217.745333][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 217.973166][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 218.109140][ T7712] bond1: (slave macvlan2): failed to get link speed/duplex [ 218.239248][ T58] bond1: (slave macvlan2): failed to get link speed/duplex [ 218.378745][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 218.522506][ T7716] bond1: (slave macvlan2): failed to get link speed/duplex [ 218.658801][ T7716] bond1: (slave macvlan2): failed to get link speed/duplex [ 219.057422][ T7862] netlink: 'syz.2.363': attribute type 10 has an invalid length. [ 219.527143][ T7862] team0: Device vxcan1 is of different type [ 220.753585][ T7874] loop5: detected capacity change from 0 to 512 [ 220.761017][ T7876] loop3: detected capacity change from 0 to 128 [ 220.813465][ T7876] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.880202][ T7873] netlink: 40 bytes leftover after parsing attributes in process `syz.2.367'. [ 220.900766][ T7874] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 220.959189][ T7876] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 220.965167][ T7874] EXT4-fs (loop5): group descriptors corrupted! [ 220.987774][ T7877] netlink: 40 bytes leftover after parsing attributes in process `syz.2.367'. [ 221.073102][ T7876] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 221.099821][ T7876] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 221.145829][ T7873] bond3: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 221.226891][ T7877] bond3: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 221.297433][ T7882] fscrypt: loop3: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13 [ 221.475576][ T5842] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.915327][ T7712] net_ratelimit: 14 callbacks suppressed [ 221.915381][ T7712] bond1: (slave macvlan2): failed to get link speed/duplex [ 222.209031][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 222.223363][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 222.811900][ T7889] bridge_slave_1 (unregistering): left allmulticast mode [ 222.955571][ T7889] bridge_slave_1 (unregistering): left promiscuous mode [ 223.017766][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.479202][ T7897] netlink: 'syz.5.372': attribute type 4 has an invalid length. [ 223.480260][ T7152] bond1: (slave macvlan2): failed to get link speed/duplex [ 223.541483][ T7901] netlink: 'syz.5.372': attribute type 4 has an invalid length. [ 223.554313][ T7893] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 223.600138][ T7893] kvm: requested 133257 ns i8254 timer period limited to 200000 ns [ 223.675056][ T7893] kvm: requested 116495 ns i8254 timer period limited to 200000 ns [ 223.690650][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 223.719249][ T7893] kvm: requested 50285 ns i8254 timer period limited to 200000 ns [ 223.727414][ T7893] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 223.745980][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.374'. [ 223.757320][ T7893] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 223.780412][ T7893] kvm: requested 191085 ns i8254 timer period limited to 200000 ns [ 223.846008][ T7152] bond1: (slave macvlan2): failed to get link speed/duplex [ 223.885375][ T7893] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 223.937931][ T7893] kvm: requested 114819 ns i8254 timer period limited to 200000 ns [ 223.978813][ T7152] bond1: (slave macvlan2): failed to get link speed/duplex [ 224.017078][ T7893] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 224.108726][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 224.385811][ T7914] netlink: 'syz.3.377': attribute type 1 has an invalid length. [ 225.304483][ T7914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.616205][ T7918] vlan2: entered allmulticast mode [ 225.648390][ T7918] veth0_to_bond: entered allmulticast mode [ 226.396392][ T7918] bond1: (slave vlan2): Opening slave failed [ 226.499192][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 226.720863][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 226.934745][ T58] bond1: (slave macvlan2): failed to get link speed/duplex [ 227.760757][ T7712] bond1: (slave macvlan2): failed to get link speed/duplex [ 227.842739][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'. [ 227.874268][ T7948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.932166][ T7948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.039265][ T58] bond1: (slave macvlan2): failed to get link speed/duplex [ 228.200099][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 228.328839][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 228.563347][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.389'. [ 229.269117][ T7152] bond1: (slave macvlan2): failed to get link speed/duplex [ 229.469977][ T58] bond1: (slave macvlan2): failed to get link speed/duplex [ 229.792330][ T7971] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.801386][ T7971] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.810067][ T7971] overlayfs: missing 'lowerdir' [ 230.519695][ T7968] bridge_slave_0: left allmulticast mode [ 230.550421][ T7968] bridge_slave_0: left promiscuous mode [ 230.588410][ T7968] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.667509][ T7968] bridge_slave_1: left allmulticast mode [ 230.705980][ T7968] bridge_slave_1: left promiscuous mode [ 230.722991][ T7968] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.828200][ T29] IPVS: starting estimator thread 0... [ 230.844844][ T7968] bond0: (slave bond_slave_0): Releasing backup interface [ 230.879979][ T5923] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 230.956169][ T7968] bond0: (slave bond_slave_1): Releasing backup interface [ 230.968802][ T7979] IPVS: using max 29 ests per chain, 69600 per kthread [ 231.043677][ T7968] team0: Port device team_slave_0 removed [ 231.086898][ T7968] team0: Port device team_slave_1 removed [ 231.107084][ T5923] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.123285][ T5923] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.138897][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.149677][ T5923] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 231.169671][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 231.170886][ T7968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.207005][ T5923] usb 3-1: SerialNumber: syz [ 231.235676][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.265003][ T7968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.294656][ T7968] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.343980][ T7970] team0: Mode changed to "activebackup" [ 231.489592][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 231.644560][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 231.730358][ T5923] usb 3-1: 0:2 : does not exist [ 231.796959][ T5923] usb 3-1: USB disconnect, device number 5 [ 232.758468][ T1116] net_ratelimit: 1 callbacks suppressed [ 232.758491][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 233.704052][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 234.064832][ T8009] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 234.988866][ T7719] bond1: (slave macvlan2): failed to get link speed/duplex [ 235.265551][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.440478][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 235.512854][ T8018] loop4: detected capacity change from 0 to 4096 [ 235.579372][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 235.718806][ T7719] bond1: (slave macvlan2): failed to get link speed/duplex [ 235.998950][ T7719] bond1: (slave macvlan2): failed to get link speed/duplex [ 236.239930][ T7712] bond1: (slave macvlan2): failed to get link speed/duplex [ 236.485451][ T7152] bond1: (slave macvlan2): failed to get link speed/duplex [ 236.638696][ T7712] bond1: (slave macvlan2): failed to get link speed/duplex [ 237.834065][ T68] net_ratelimit: 3 callbacks suppressed [ 237.834080][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 238.018741][ T7152] bond1: (slave macvlan2): failed to get link speed/duplex [ 238.097655][ T8018] loop4: detected capacity change from 0 to 32768 [ 238.160242][ T525] bond1: (slave macvlan2): failed to get link speed/duplex [ 238.289669][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 238.349859][ T8018] JBD2: Ignoring recovery information on journal [ 238.418678][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 238.473612][ T8018] JBD2: journal reset failed [ 238.480797][ T8018] (syz.4.408,8018,0):ocfs2_journal_load:1157 ERROR: Failed to load journal! [ 238.518235][ T8018] (syz.4.408,8018,0):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -4 [ 238.568727][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 238.716365][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 238.955927][ T8058] netlink: 'syz.1.419': attribute type 27 has an invalid length. [ 238.964304][ T8058] netlink: 'syz.1.419': attribute type 4 has an invalid length. [ 238.973070][ T8058] netlink: 144 bytes leftover after parsing attributes in process `syz.1.419'. [ 239.027726][ T7712] bond1: (slave macvlan2): failed to get link speed/duplex [ 240.173348][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 240.329730][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 240.620143][ T29] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 240.630244][ T8071] netlink: 44 bytes leftover after parsing attributes in process `syz.5.424'. [ 240.639583][ T8071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.424'. [ 240.650729][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.424'. [ 241.256120][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 241.293621][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.342794][ T29] usb 2-1: New USB device found, idVendor=1803, idProduct=5510, bcdDevice=7d.bf [ 241.368942][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.399108][ T29] usb 2-1: Product: syz [ 241.412852][ T29] usb 2-1: Manufacturer: syz [ 241.451771][ T29] usb 2-1: SerialNumber: syz [ 241.460715][ T8076] batman_adv: batadv0: Adding interface: dummy0 [ 241.478713][ T8076] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.549543][ T8076] batman_adv: batadv0: Interface activated: dummy0 [ 241.572184][ T29] usb 2-1: config 0 descriptor?? [ 241.657225][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.425'. [ 241.759218][ T8076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.920967][ T29] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 241.928535][ T8076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.969887][ T29] usb 2-1: USB disconnect, device number 5 [ 241.985750][ T8076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.130915][ T8076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.159125][ T8076] batman_adv: batadv0: Interface deactivated: dummy0 [ 242.171602][ T8076] batman_adv: batadv0: Removing interface: dummy0 [ 242.881258][ T7152] net_ratelimit: 70 callbacks suppressed [ 242.881280][ T7152] bond1: (slave macvlan2): failed to get link speed/duplex [ 242.965409][ T8093] syzkaller0: entered promiscuous mode [ 242.990301][ T8093] syzkaller0: entered allmulticast mode [ 243.270277][ T525] bond1: (slave macvlan2): failed to get link speed/duplex [ 243.421244][ T525] bond1: (slave macvlan2): failed to get link speed/duplex [ 243.559042][ T7712] bond1: (slave macvlan2): failed to get link speed/duplex [ 243.709658][ T7712] bond1: (slave macvlan2): failed to get link speed/duplex [ 243.848776][ T7152] bond1: (slave macvlan2): failed to get link speed/duplex [ 244.018704][ T7152] bond1: (slave macvlan2): failed to get link speed/duplex [ 244.150869][ T8112] syz.3.437 uses obsolete (PF_INET,SOCK_PACKET) [ 244.168985][ T7152] bond1: (slave macvlan2): failed to get link speed/duplex [ 244.428947][ T7152] bond1: (slave macvlan2): failed to get link speed/duplex [ 244.588767][ T7152] bond1: (slave macvlan2): failed to get link speed/duplex [ 245.506182][ T8128] loop1: detected capacity change from 0 to 2048 [ 245.678386][ T8128] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.516669][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 247.912130][ T7152] net_ratelimit: 25 callbacks suppressed [ 247.912146][ T7152] bond1: (slave macvlan2): failed to get link speed/duplex [ 248.059970][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 248.198714][ T7716] bond1: (slave macvlan2): failed to get link speed/duplex [ 248.329170][ T7716] bond1: (slave macvlan2): failed to get link speed/duplex [ 248.461544][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 248.588820][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 248.718793][ T525] bond1: (slave macvlan2): failed to get link speed/duplex [ 248.848849][ T7716] bond1: (slave macvlan2): failed to get link speed/duplex [ 248.931073][ T30] audit: type=1326 audit(1773921953.706:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.1.456" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79b0b9c799 code=0x0 [ 248.979080][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 249.098710][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 249.321924][ T8155] loop2: detected capacity change from 0 to 32768 [ 249.400964][ T8155] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 249.515992][ T8155] XFS (loop2): Ending clean mount [ 249.605758][ T8155] XFS (loop2): User initiated shutdown received. [ 249.637732][ T8155] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:466). Shutting down filesystem. [ 249.705139][ T8155] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 249.795396][ T5851] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 250.214843][ T8201] binder_alloc: 8200: pid 8200 spamming oneway? 1 buffers allocated for a total size of 4096 [ 250.415188][ T30] audit: type=1800 audit(1773921955.186:61): pid=8203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.463" name="bus" dev="overlay" ino=482 res=0 errno=0 [ 252.028793][ T5923] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 252.191610][ T5923] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 252.218386][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.249569][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.262349][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 252.299023][ T5923] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 252.309012][ T5923] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 252.323041][ T5923] usb 3-1: Manufacturer: syz [ 252.353276][ T5923] usb 3-1: config 0 descriptor?? [ 252.818467][ T8232] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.471'. [ 252.845453][ T8232] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 252.929350][ T7152] net_ratelimit: 28 callbacks suppressed [ 252.929410][ T7152] bond1: (slave macvlan2): failed to get link speed/duplex [ 253.049058][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 253.159065][ T525] bond1: (slave macvlan2): failed to get link speed/duplex [ 253.253060][ T5923] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 253.300431][ T7716] bond1: (slave macvlan2): failed to get link speed/duplex [ 253.390345][ T5923] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 253.430698][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 253.471625][ T5923] usb 3-1: USB disconnect, device number 6 [ 253.549525][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 253.680670][ T7716] bond1: (slave macvlan2): failed to get link speed/duplex [ 253.814732][ T7716] bond1: (slave macvlan2): failed to get link speed/duplex [ 254.070155][ T8236] fido_id[8236]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 254.902848][ T7716] bond1: (slave macvlan2): failed to get link speed/duplex [ 255.344563][ T7719] bond1: (slave macvlan2): failed to get link speed/duplex [ 255.633314][ T8247] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 255.661849][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.681838][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.301545][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 256.325159][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'. [ 256.500854][ T7719] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.530907][ T7719] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.559252][ T7719] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.595488][ T7719] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.588973][ T29] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 257.788677][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 257.797619][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.813663][ T29] usb 3-1: config 0 has no interfaces? [ 257.842197][ T29] usb 3-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 257.873753][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.903987][ T29] usb 3-1: Product: syz [ 257.918289][ T29] usb 3-1: Manufacturer: syz [ 257.933608][ T29] usb 3-1: SerialNumber: syz [ 257.955500][ T29] usb 3-1: config 0 descriptor?? [ 258.000673][ T68] net_ratelimit: 17 callbacks suppressed [ 258.000693][ T68] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.158712][ T525] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.348388][ T7152] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.508717][ T7719] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.661843][ T7719] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.840185][ T7719] bond1: (slave macvlan2): failed to get link speed/duplex [ 258.925505][ T8301] netlink: 14 bytes leftover after parsing attributes in process `syz.4.493'. [ 259.118804][ T7152] bond1: (slave macvlan2): failed to get link speed/duplex [ 259.258775][ T7152] bond1: (slave macvlan2): failed to get link speed/duplex [ 259.293765][ T993] usb 3-1: USB disconnect, device number 7 [ 259.407240][ T8310] loop4: detected capacity change from 0 to 128 [ 259.419111][ T7719] bond1: (slave macvlan2): failed to get link speed/duplex [ 259.468732][ T8310] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 259.494258][ T8310] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 259.549690][ T58] bond1: (slave macvlan2): failed to get link speed/duplex [ 259.670144][ T5923] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 259.752850][ T8310] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 259.852822][ T7157] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 259.862061][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 259.894460][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.928766][ T5923] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.968844][ T5923] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.990222][ T5923] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.023207][ T5923] usb 2-1: config 0 interface 0 has no altsetting 0 [ 260.032242][ T5923] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 260.042220][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.076500][ T8323] syzkaller0: entered promiscuous mode [ 260.087041][ T8323] syzkaller0: entered allmulticast mode [ 260.094385][ T5923] usb 2-1: config 0 descriptor?? [ 260.123641][ T8325] binder: BINDER_SET_CONTEXT_MGR already set [ 260.177322][ T8325] binder: 8324:8325 ioctl 4018620d 200000004a80 returned -16 [ 260.646155][ T8312] loop1: detected capacity change from 0 to 32768 [ 260.914120][ T8312] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.497 (8312) [ 261.398883][ T8312] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 261.409698][ T8312] BTRFS info (device loop1): using blake2b checksum algorithm [ 262.400699][ T8312] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 262.402996][ T8312] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 262.412399][ T8312] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 262.423634][ T8312] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 262.435589][ T8312] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 262.445311][ T8312] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 262.455301][ T8312] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 262.483657][ T8312] BTRFS error (device loop1): open_ctree failed: -12 [ 262.610106][ T5923] usbhid 2-1:0.0: can't add hid device: -71 [ 262.651527][ T5923] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 262.752856][ T5923] usb 2-1: USB disconnect, device number 6 [ 264.031697][ T8360] lo speed is unknown, defaulting to 1000 [ 264.038752][ T7152] net_ratelimit: 8 callbacks suppressed [ 264.038768][ T7152] bond1: (slave macvlan2): failed to get link speed/duplex [ 264.160740][ T7152] bond1: (slave macvlan2): failed to get link speed/duplex [ 264.320639][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 264.958837][ T7152] bond1: (slave macvlan2): failed to get link speed/duplex [ 265.171133][ T7152] bond1: (slave macvlan2): failed to get link speed/duplex [ 265.379076][ T58] bond1: (slave macvlan2): failed to get link speed/duplex [ 265.442004][ T8360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.507'. [ 265.498791][ T58] bond1: (slave macvlan2): failed to get link speed/duplex [ 265.525471][ T8360] gtp0: entered promiscuous mode [ 265.633018][ T58] bond1: (slave macvlan2): failed to get link speed/duplex [ 266.059130][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 266.319997][ T525] bond1: (slave macvlan2): failed to get link speed/duplex [ 269.088851][ T31] INFO: task syz.0.46:6086 blocked for more than 143 seconds. [ 269.096465][ T31] Not tainted syzkaller #0 [ 269.111237][ T31] Blocked by coredump. [ 269.121966][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 269.134310][ T7712] net_ratelimit: 15 callbacks suppressed [ 269.134332][ T7712] bond1: (slave macvlan2): failed to get link speed/duplex [ 269.168239][ T31] task:syz.0.46 state:D stack:25760 pid:6086 tgid:6086 ppid:5841 task_flags:0x40044c flags:0x00080002 [ 269.199873][ T31] Call Trace: [ 269.208391][ T31] [ 269.213439][ T31] __schedule+0x1665/0x5590 [ 269.225224][ T31] ? __pfx___schedule+0x10/0x10 [ 269.247477][ T31] ? schedule+0x90/0x360 [ 269.270124][ T31] schedule+0x164/0x360 [ 269.286797][ T31] schedule_preempt_disabled+0x13/0x30 [ 269.288963][ T7712] bond1: (slave macvlan2): failed to get link speed/duplex [ 269.308103][ T31] rwsem_down_read_slowpath+0x6d9/0x940 [ 269.329099][ T31] ? rwsem_down_read_slowpath+0x596/0x940 [ 269.342918][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 269.353959][ T31] ? do_futex+0x395/0x420 [ 269.361539][ T31] down_read+0x99/0x2e0 [ 269.373818][ T31] ? exit_mm+0x64/0x250 [ 269.386930][ T31] exit_mm+0x73/0x250 [ 269.404739][ T31] ? unwind_deferred_task_exit+0x67/0xa0 [ 269.418893][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 269.421833][ T31] do_exit+0x8b9/0x2490 [ 269.453024][ T31] ? __pfx_do_exit+0x10/0x10 [ 269.500256][ T31] do_group_exit+0x21b/0x2d0 [ 269.534940][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.551098][ T31] get_signal+0x1284/0x1330 [ 269.570054][ T7712] bond1: (slave macvlan2): failed to get link speed/duplex [ 269.586547][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 269.616732][ T31] ? __pfx___schedule+0x10/0x10 [ 269.639178][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 269.656045][ T8398] loop4: detected capacity change from 0 to 32768 [ 269.669185][ T31] ? schedule+0x16e/0x360 [ 269.679271][ T31] irqentry_exit+0x188/0x700 [ 269.688460][ T31] ? trace_irq_disable+0x3b/0x150 [ 269.698526][ T31] asm_exc_page_fault+0x26/0x30 [ 269.704184][ T31] RIP: 0033:0x7efd36871632 [ 269.709052][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 269.709414][ T31] RSP: 002b:00007ffe82e47500 EFLAGS: 00010202 [ 269.766076][ T31] RAX: 0000000000008008 RBX: 00007efd37745720 RCX: 0000000000000000 [ 269.791186][ T31] RDX: 0000001b31e1c000 RSI: 0000000000000008 RDI: 00007efd37745720 [ 269.811996][ T8398] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.516 (8398) [ 269.825958][ T31] RBP: 00000000000002d3 R08: 00007efd36c00000 R09: 00007efd36c16218 [ 269.849347][ T31] R10: 0000000000000007 R11: 0000000000000006 R12: ffffffff821e7226 [ 269.849993][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 269.895764][ T31] R13: 00007efd36c16218 R14: 000000000000017c R15: ffffffffffff8000 [ 269.945398][ T31] ? __vmap_pages_range_noflush+0x7f6/0xf40 [ 269.984403][ T31] [ 269.995922][ T31] INFO: task syz.0.46:6088 blocked for more than 144 seconds. [ 270.003604][ T7712] bond1: (slave macvlan2): failed to get link speed/duplex [ 270.050015][ T31] Not tainted syzkaller #0 [ 270.065295][ T31] Blocked by coredump. [ 270.075406][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 270.107406][ T31] task:syz.0.46 state:D stack:26152 pid:6088 tgid:6086 ppid:5841 task_flags:0x40044c flags:0x00080002 [ 270.120294][ T1116] bond1: (slave macvlan2): failed to get link speed/duplex [ 270.156164][ T31] Call Trace: [ 270.161376][ T8398] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 270.178611][ T31] [ 270.185510][ T31] __schedule+0x1665/0x5590 [ 270.210664][ T31] ? __pfx___schedule+0x10/0x10 [ 270.218038][ T8398] BTRFS info (device loop4): using blake2b checksum algorithm [ 270.244077][ T31] ? schedule+0x90/0x360 [ 270.259189][ T7712] bond1: (slave macvlan2): failed to get link speed/duplex [ 270.268729][ T31] schedule+0x164/0x360 [ 270.285256][ T31] schedule_preempt_disabled+0x13/0x30 [ 270.309900][ T31] rwsem_down_read_slowpath+0x6d9/0x940 [ 270.321894][ T31] ? rwsem_down_read_slowpath+0x596/0x940 [ 270.335195][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 270.350084][ T31] ? do_futex+0x395/0x420 [ 270.372988][ T31] down_read+0x99/0x2e0 [ 270.402426][ T31] ? exit_mm+0x64/0x250 [ 270.417394][ T31] exit_mm+0x73/0x250 [ 270.421953][ T12] bond1: (slave macvlan2): failed to get link speed/duplex [ 270.445865][ T31] ? unwind_deferred_task_exit+0x67/0xa0 [ 270.485837][ T31] do_exit+0x8b9/0x2490 [ 270.510293][ T31] ? update_se+0x399/0x620 [ 270.537142][ T31] ? __pfx_do_exit+0x10/0x10 [ 270.559014][ T31] do_group_exit+0x21b/0x2d0 [ 270.586844][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.618091][ T31] get_signal+0x1284/0x1330 [ 270.632996][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 270.655269][ T31] ? __pfx___schedule+0x10/0x10 [ 270.675710][ T31] ? rcu_is_watching+0x15/0xb0 [ 270.700211][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 270.721586][ T31] ? schedule+0x16e/0x360 [ 270.736749][ T31] exit_to_user_mode_loop+0x86/0x480 [ 270.768180][ T31] ? rcu_is_watching+0x15/0xb0 [ 270.797438][ T31] do_syscall_64+0x32d/0xf80 [ 270.823332][ T8398] BTRFS error (device loop4): open_ctree failed: -4 [ 270.830810][ T31] ? trace_irq_disable+0x3b/0x150 [ 270.848172][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.864109][ T31] ? clear_bhb_loop+0x40/0x90 [ 270.875755][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.890194][ T31] RIP: 0033:0x7efd3699c799 [ 270.900707][ T31] RSP: 002b:00007efd34bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 270.920267][ T31] RAX: 0000000000000116 RBX: 00007efd36c15fa0 RCX: 00007efd3699c799 [ 270.939427][ T31] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 270.958697][ T31] RBP: 00007efd36a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 270.982825][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.007343][ T31] R13: 00007efd36c16038 R14: 00007efd36c15fa0 R15: 00007ffe82e474a8 [ 271.027012][ T31] [ 271.040010][ T31] INFO: task syz.0.46:6092 blocked for more than 145 seconds. [ 271.085605][ T31] Not tainted syzkaller #0 [ 271.096548][ T31] Blocked by coredump. [ 271.106829][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 271.125315][ T31] task:syz.0.46 state:D stack:23072 pid:6092 tgid:6086 ppid:5841 task_flags:0x40054c flags:0x00080002 [ 271.156258][ T31] Call Trace: [ 271.165835][ T31] [ 271.174575][ T31] __schedule+0x1665/0x5590 [ 271.188834][ T31] ? __pfx___schedule+0x10/0x10 [ 271.204890][ T31] ? schedule+0x90/0x360 [ 271.219759][ T31] schedule+0x164/0x360 [ 271.236893][ T31] schedule_preempt_disabled+0x13/0x30 [ 271.260364][ T31] rwsem_down_read_slowpath+0x6d9/0x940 [ 271.278987][ T31] ? rwsem_down_read_slowpath+0x596/0x940 [ 271.298980][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 271.330299][ T31] ? do_futex+0x395/0x420 [ 271.348617][ T31] down_read+0x99/0x2e0 [ 271.368635][ T31] ? exit_mm+0x64/0x250 [ 271.383203][ T31] exit_mm+0x73/0x250 [ 271.401966][ T31] ? unwind_deferred_task_exit+0x67/0xa0 [ 271.430901][ T31] do_exit+0x8b9/0x2490 [ 271.451670][ T31] ? futex_hash+0x40/0x2d0 [ 271.468769][ T31] ? __pfx_do_exit+0x10/0x10 [ 271.485483][ T31] do_group_exit+0x21b/0x2d0 [ 271.504027][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 271.524300][ T31] get_signal+0x1284/0x1330 [ 271.540029][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 271.558048][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 271.577569][ T31] exit_to_user_mode_loop+0x86/0x480 [ 271.594695][ T31] ? rcu_is_watching+0x15/0xb0 [ 271.611828][ T31] do_syscall_64+0x32d/0xf80 [ 271.627766][ T31] ? trace_irq_disable+0x3b/0x150 [ 271.655043][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.676695][ T31] ? clear_bhb_loop+0x40/0x90 [ 271.694058][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.712322][ T31] RIP: 0033:0x7efd3699c799 [ 271.734703][ T31] RSP: 002b:00007efd34bb40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 271.763681][ T31] RAX: fffffffffffffe00 RBX: 00007efd36c16188 RCX: 00007efd3699c799 [ 271.796151][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efd36c16188 [ 271.818181][ T31] RBP: 00007efd36c16180 R08: 0000000000000000 R09: 0000000000000000 [ 271.830874][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.846342][ T31] R13: 00007efd36c16218 R14: 00007ffe82e473c0 R15: 00007ffe82e474a8 [ 271.870074][ T31] [ 271.879999][ T31] [ 271.879999][ T31] Showing all locks held in the system: [ 272.009009][ T31] 1 lock held by khungtaskd/31: [ 272.021645][ T31] #0: ffffffff8e75d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 272.047081][ T31] 2 locks held by getty/5598: [ 272.067943][ T31] #0: ffff888036dd10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 272.151871][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 272.179051][ T31] 2 locks held by kworker/0:6/5923: [ 272.197193][ T31] 1 lock held by syz.0.46/6086: [ 272.211280][ T31] #0: ffff888032c20338 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x250 [ 272.263234][ T31] 1 lock held by syz.0.46/6088: [ 272.298173][ T31] #0: ffff888032c20338 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x250 [ 272.351622][ T31] 1 lock held by syz.0.46/6092: [ 272.376121][ T31] #0: ffff888032c20338 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x250 [ 272.415266][ T31] 1 lock held by syz-executor/7157: [ 272.436576][ T31] 3 locks held by kworker/u8:11/7712: [ 272.456436][ T31] 2 locks held by syz.5.521/8413: [ 272.476340][ T31] [ 272.502048][ T31] ============================================= [ 272.502048][ T31] [ 272.549287][ T31] NMI backtrace for cpu 1 [ 272.549329][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 272.549351][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.549363][ T31] Call Trace: [ 272.549371][ T31] [ 272.549380][ T31] dump_stack_lvl+0xe8/0x150 [ 272.549416][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 272.549448][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 272.549480][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 272.549514][ T31] sys_info+0x135/0x170 [ 272.549542][ T31] watchdog+0x1002/0x1060 [ 272.549575][ T31] ? watchdog+0x1da/0x1060 [ 272.549606][ T31] kthread+0x388/0x470 [ 272.549631][ T31] ? __pfx_watchdog+0x10/0x10 [ 272.549653][ T31] ? __pfx_kthread+0x10/0x10 [ 272.549679][ T31] ret_from_fork+0x51e/0xb90 [ 272.549712][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 272.549746][ T31] ? __switch_to+0xc7d/0x1450 [ 272.549776][ T31] ? __pfx_kthread+0x10/0x10 [ 272.549811][ T31] ret_from_fork_asm+0x1a/0x30 [ 272.549848][ T31] [ 272.549876][ T31] Sending NMI from CPU 1 to CPUs 0: [ 272.628883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 272.633391][ C0] NMI backtrace for cpu 0 [ 272.633405][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 272.633424][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.633434][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 272.633464][ C0] Code: e8 0e a9 82 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 af 23 ec fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da a6 73 06 cc 44 89 f9 80 e1 07 [ 272.633478][ C0] RSP: 0018:ffffffff8e4076f0 EFLAGS: 00000002 [ 272.633493][ C0] RAX: 1ffffffff34bf100 RBX: 00000000000003fd RCX: 0000000000000000 [ 272.633505][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 272.633515][ C0] RBP: ffffffff9a5f9070 R08: ffff888140ed0237 R09: 1ffff110281da046 [ 272.633528][ C0] R10: dffffc0000000000 R11: ffffffff854409c0 R12: dffffc0000000000 [ 272.633540][ C0] R13: 0000000000000000 R14: ffffffff9a5f8de0 R15: 0000000000000000 [ 272.633551][ C0] FS: 0000000000000000(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 272.633565][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.633576][ C0] CR2: 00002000003dc030 CR3: 000000000e54a000 CR4: 00000000003526f0 [ 272.633591][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 272.633602][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 272.633613][ C0] Call Trace: [ 272.633620][ C0] [ 272.633628][ C0] wait_for_lsr+0x1a1/0x2f0 [ 272.633655][ C0] serial8250_console_write+0x1348/0x1ba0 [ 272.633687][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 272.633711][ C0] ? lock_acquire+0xf0/0x2e0 [ 272.633740][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 272.633762][ C0] ? console_flush_all+0x123/0xb20 [ 272.633783][ C0] console_flush_all+0x718/0xb20 [ 272.633807][ C0] ? console_flush_all+0x123/0xb20 [ 272.633831][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 272.633855][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 272.633881][ C0] console_unlock+0xd1/0x1c0 [ 272.633901][ C0] ? __pfx_console_unlock+0x10/0x10 [ 272.633922][ C0] ? vprintk_emit+0x2cf/0x560 [ 272.633940][ C0] ? vprintk_emit+0x2cf/0x560 [ 272.633957][ C0] ? vprintk_emit+0x2cf/0x560 [ 272.633976][ C0] vprintk_emit+0x485/0x560 [ 272.633996][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 272.634015][ C0] ? finish_task_switch+0x41f/0xbe0 [ 272.634043][ C0] _printk+0xdd/0x130 [ 272.634064][ C0] ? __pfx__printk+0x10/0x10 [ 272.634088][ C0] can_stop_idle_tick+0x20d/0x220 [ 272.634113][ C0] tick_nohz_idle_stop_tick+0x139/0xcc0 [ 272.634137][ C0] ? trace_irq_disable+0x3b/0x150 [ 272.634160][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 272.634184][ C0] ? __pfx_tick_nohz_idle_stop_tick+0x10/0x10 [ 272.634210][ C0] ? check_tsc_unstable+0x9/0x20 [ 272.634231][ C0] ? tsc_verify_tsc_adjust+0x234/0x300 [ 272.634254][ C0] ? arch_cpu_idle_enter+0x9/0x20 [ 272.634282][ C0] do_idle+0x209/0x5f0 [ 272.634303][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 272.634324][ C0] ? __pfx_do_idle+0x10/0x10 [ 272.634345][ C0] cpu_startup_entry+0x43/0x60 [ 272.634362][ C0] rest_init+0x2de/0x300 [ 272.634388][ C0] start_kernel+0x38f/0x3e0 [ 272.634410][ C0] x86_64_start_reservations+0x24/0x30 [ 272.634436][ C0] x86_64_start_kernel+0x143/0x1c0 [ 272.634462][ C0] common_startup_64+0x13e/0x147 [ 272.634490][ C0] [ 273.068518][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 273.075447][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 273.084595][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 273.094672][ T31] Call Trace: [ 273.097962][ T31] [ 273.100903][ T31] vpanic+0x56c/0xa60 [ 273.104929][ T31] ? __pfx___schedule+0x10/0x10 [ 273.109789][ T31] ? __pfx_vpanic+0x10/0x10 [ 273.114326][ T31] panic+0xc5/0xd0 [ 273.118062][ T31] ? __pfx_panic+0x10/0x10 [ 273.122496][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 273.127897][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 273.134099][ T31] watchdog+0x105b/0x1060 [ 273.138448][ T31] ? watchdog+0x1da/0x1060 [ 273.142886][ T31] kthread+0x388/0x470 [ 273.146987][ T31] ? __pfx_watchdog+0x10/0x10 [ 273.151668][ T31] ? __pfx_kthread+0x10/0x10 [ 273.156268][ T31] ret_from_fork+0x51e/0xb90 [ 273.160875][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 273.165996][ T31] ? __switch_to+0xc7d/0x1450 [ 273.170684][ T31] ? __pfx_kthread+0x10/0x10 [ 273.175281][ T31] ret_from_fork_asm+0x1a/0x30 [ 273.180076][ T31] [ 273.183850][ T31] Kernel Offset: disabled [ 273.188178][ T31] Rebooting in 86400 seconds..