last executing test programs: 15.359634856s ago: executing program 1 (id=1012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000002380)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./tracing\x00', &(0x7f0000000680)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./tracing/events/sched/filter\x00', 0x2240, 0x13) readv(r2, &(0x7f0000000700)=[{0x0}], 0x1) bind$inet(0xffffffffffffffff, &(0x7f000001b380)={0x2, 0x4e20, @multicast2}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x42202) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f00007af000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 14.389332883s ago: executing program 1 (id=1013): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000140)={0x11, 0x17, 0x1, 0x1, 0x0, 0x6, @random="e21022333144"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xff59, 0x0, 0x0, &(0x7f0000000380)}, 0x80) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1, 0x5}, 0x1c) write(r0, &(0x7f0000000000)="01000000", 0x4) 11.297766841s ago: executing program 1 (id=1038): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'syzkaller0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008010}, 0x44890) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 10.892238747s ago: executing program 4 (id=1041): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='fdinfo/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) read$FUSE(r0, &(0x7f0000001440)={0x2020}, 0x229) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 10.790737298s ago: executing program 1 (id=1043): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000f40)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000f80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000fc0), 0x0, 0x0) read$msr(r2, &(0x7f0000002e40)=""/102368, 0x18fe0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000280)={r2, &(0x7f0000000000)=',?\x00', 0x4000, &(0x7f0000000180)={@_ha_fsid={[0xfffffffd, 0x1f92]}, {0x1, 0x49, 0x3, 0x8}}, 0x40, 0x0, &(0x7f0000000240)=0xc6c}) sched_setscheduler(0x0, 0x1, &(0x7f000001bf80)=0x5) io_uring_setup(0x1b56, &(0x7f00000002c0)={0x0, 0x1, 0x400, 0x3, 0x402c1}) r3 = fsopen(&(0x7f0000000340)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000380)='addr\x00', &(0x7f00000003c0)='127.0.0.1\x00', 0x0) syz_usb_connect(0x5, 0x59, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000440)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000480)='vers\x00', &(0x7f00000004c0)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000500)='mountproto\x00', &(0x7f0000000540)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000580)='timeo\x00Ms\xac\xc6Md5\xf5IU\xd5\xed\x9a\xc0{R\xbe\xbf\x93\x88\xd7E\xf9\xff\xff\xff\xd2\xedQQ\xca4\x95N)c]>\x0f$*\xc0\x93?T\xc7HF\xe5pI\xb8>x}\x9f8\x8bT\xf3\xda|)[{\xa5\x97\xef\x86\r\xb7\xc5\xbed\x85\xf2\xbf\'\n\xd5s\xdd\xdbh\xc5\xe9)\xe3\xd8\xfd\xc2E\xec\xc7\b\xf4\t\x8b\xb8\x9e\xf7\xff[\xccmb\xe6}\xde\xc7\xf7\xc7\xe4h\xa2\x9b\xc3\\\x97/\xb5Y\xeehD{\xa4\x88\xd7g\x82\xae\x15^\x02\xd6\xaaeW\xb6\x81\x8dq~W\xec\xf8G\xd0mf\xf1z\xb8hG\xd8SN', &(0x7f0000000680)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 10.71300233s ago: executing program 2 (id=1045): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) 9.269717416s ago: executing program 4 (id=1047): socketpair(0x27, 0x3, 0x0, &(0x7f0000000680)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup(0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000400)=r2) ppoll(&(0x7f0000000440)=[{r2, 0x1000}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000540)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f00000005c0)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000640)={0x1, 0x1, &(0x7f00000006c0)=""/231, &(0x7f0000000a80)=""/87, &(0x7f0000000b00)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000b80)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000bc0)=0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x224800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_setup_io_uring(0x487a, &(0x7f0000000c00)={0x0, 0xb04, 0x8, 0x0, 0x381}, &(0x7f0000000140), &(0x7f0000000040), &(0x7f00000003c0)) r4 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000180)={0x0, 0x1257, 0x800, 0x3, 0x4000255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x10, 0x0, 0x3dd, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x99a2, 0x4, 0x2, 0x7d}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) 8.858309585s ago: executing program 2 (id=1050): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000140)={0x11, 0x17, 0x1, 0x1, 0x0, 0x6, @random="e21022333144"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xff59, 0x0, 0x0, &(0x7f0000000380)}, 0x80) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1, 0x5}, 0x1c) write(r0, &(0x7f0000000000)="01000000", 0x4) 7.34085797s ago: executing program 1 (id=1051): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) write(r0, &(0x7f00000000c0)="09000000010001", 0x7) 6.220224728s ago: executing program 2 (id=1055): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'syzkaller0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008010}, 0x44890) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 5.850831421s ago: executing program 4 (id=1058): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fanotify_init(0x2, 0x800) mremap(&(0x7f00001c7000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x38, 0x20000800, &(0x7f00000003c0)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r5, &(0x7f0000000480)=""/15, 0xf) r6 = fsopen(&(0x7f00000004c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r8 = openat$cgroup_subtree(r7, &(0x7f0000000500), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000540)=ANY=[@ANYBLOB='-cpu'], 0x5) socket$inet6(0xa, 0x80002, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="e6", 0x1) tee(r1, r0, 0x800000003, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r9 = io_uring_setup(0x7ff, &(0x7f0000000200)={0x0, 0x2bfc, 0xc000, 0x8, 0x3de, 0x0, r7}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) io_uring_enter(r9, 0x2219, 0xea61, 0x16, 0x0, 0x0) 5.705326092s ago: executing program 2 (id=1060): name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0xa00) 5.363782691s ago: executing program 4 (id=1062): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4) sendmmsg$inet(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)='t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)='1', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)='w', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000980)="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", 0x104}, {&(0x7f0000000ac0)="f14d2f9588ecd8f9a4816db9910586f4c9f73bfa7063d778472b1daca90692b69cb1033fd3d2066fa155a76d948e90eb3e77e752f90bfbc92d290840a6489629ffbb80e643fccd31b3cdc763801b9e4f9eaa3b07d87c86f152726c1c4019a60829dfe76594890fa95414c904a4c41d8f841e1db33da5a315cf87481c39109f83fabb9f208b528b580efb8f7ad01fedca2cd7941ea61e2d35076dd70365800511643a0688693e94779aed429703753eb9", 0xb0}], 0x2}}], 0x4, 0x40028d0) 5.29889219s ago: executing program 2 (id=1063): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000f40)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000f80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000fc0), 0x0, 0x0) read$msr(r2, &(0x7f0000002e40)=""/102368, 0x18fe0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000280)={r2, &(0x7f0000000000)=',?\x00', 0x4000, &(0x7f0000000180)={@_ha_fsid={[0xfffffffd, 0x1f92]}, {0x1, 0x49, 0x3, 0x8}}, 0x40, 0x0, &(0x7f0000000240)=0xc6c}) sched_setscheduler(0x0, 0x1, &(0x7f000001bf80)=0x5) io_uring_setup(0x1b56, &(0x7f00000002c0)={0x0, 0x1, 0x400, 0x3, 0x402c1}) r3 = fsopen(&(0x7f0000000340)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000380)='addr\x00', &(0x7f00000003c0)='127.0.0.1\x00', 0x0) syz_usb_connect(0x5, 0x59, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000440)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000480)='vers\x00', &(0x7f00000004c0)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000500)='mountproto\x00', &(0x7f0000000540)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000580)='timeo\x00Ms\xac\xc6Md5\xf5IU\xd5\xed\x9a\xc0{R\xbe\xbf\x93\x88\xd7E\xf9\xff\xff\xff\xd2\xedQQ\xca4\x95N)c]>\x0f$*\xc0\x93?T\xc7HF\xe5pI\xb8>x}\x9f8\x8bT\xf3\xda|)[{\xa5\x97\xef\x86\r\xb7\xc5\xbed\x85\xf2\xbf\'\n\xd5s\xdd\xdbh\xc5\xe9)\xe3\xd8\xfd\xc2E\xec\xc7\b\xf4\t\x8b\xb8\x9e\xf7\xff[\xccmb\xe6}\xde\xc7\xf7\xc7\xe4h\xa2\x9b\xc3\\\x97/\xb5Y\xeehD{\xa4\x88\xd7g\x82\xae\x15^\x02\xd6\xaaeW\xb6\x81\x8dq~W\xec\xf8G\xd0mf\xf1z\xb8hG\xd8SN', &(0x7f0000000680)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 5.11683553s ago: executing program 0 (id=1066): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = msgget$private(0x0, 0x193) msgsnd(r2, &(0x7f0000002780)=ANY=[@ANYBLOB="02"], 0x8, 0x0) msgrcv(r2, &(0x7f0000002800)={0x0, ""/8}, 0x10, 0x3, 0x1000) msgctl$IPC_SET(r2, 0x1, &(0x7f0000002840)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x1c9, 0x3}, 0x0, 0x0, 0x165, 0x4, 0x3, 0xfffffffffffffffe, 0x3, 0xba, 0x1, 0xffff, 0xffffffffffffffff}) fadvise64(r1, 0x80e10001, 0x19, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002940)={0x11, 0x14, &(0x7f0000002a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32], &(0x7f0000002ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000002b00)='gtp\x00') bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b40)={r3}, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002c80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010326bd7000fb9a3b2eecdbdfa51c000000180001"], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x40006) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000c040) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x400, 0x6, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc94}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4b73}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-arm64\x00'}, 0x58) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) read$FUSE(r5, &(0x7f0000000440)={0x2020}, 0x2020) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002b80), 0x8000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r6, 0x408c5333, &(0x7f0000002bc0)={0xa29fc7bb, 0x4, 0x0, 'queue0\x00', 0x9}) 3.664229239s ago: executing program 4 (id=1067): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000400)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000480)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000500)=@file={0x1}, 0x6e) 3.641114651s ago: executing program 3 (id=1068): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0) read$dsp(r0, &(0x7f0000001600)=""/4086, 0xff6) read$dsp(r0, &(0x7f0000002640)=""/92, 0x5c) 3.124418151s ago: executing program 3 (id=1070): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f000000a300)=ANY=[@ANYBLOB], 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) syz_emit_vhci(0x0, 0x7) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f000000a340)={0x0, 0x3, "a465d3", 0x3, 0xaa}) 2.830117591s ago: executing program 5 (id=1071): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$setregset(0x4205, r1, 0x2, &(0x7f0000000140)={0x0}) 2.704545583s ago: executing program 0 (id=1072): syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 2.482715245s ago: executing program 4 (id=1073): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x8c16, &(0x7f0000000180)=ANY=[], 0x8, 0x2bf, &(0x7f00000002c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x2000, 0x1e1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6, 0x12, r0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x0, 0x0}, 0x6) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r2, 0x20, &(0x7f0000000680)={&(0x7f00000006c0)=""/243, 0xfffffffffffffdb4, 0x0, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x7921efe2e7499c5c, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40801, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x5437, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000ac0)={'ipvlan0\x00', &(0x7f0000000980)=@ethtool_gstrings={0x1b, 0x0, 0xf6, "c783d6873d72c874703d0788ed5f330c82491179170d415477b5ea4930aee7d5f54b571b910df4c3436c152f6382d6b34012f32e163ded107a52c673724f21623acbc1715db81933b390c87d1441cc61102063e49b2bb83d674d30797a8815cc7cc08187cf46b6125c1e75002984ac5b083143fef739725b2b41589da88288d606b6565cd8f49395b23e75ed755d4d17f02994ab3f61f6a964d8fa3f92240dde0d948e8a71d4f7995979ee7022b98c35f471ad31d74593bb4fe83bf072ef33d30389f7001b49d7fb48d161eee41f0fb010dec54aa5875a4374c564ff49f0f3214d6f3a26eddb00d27bcce9431cb8115fa52b04c40354"}}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x80) fallocate(r4, 0x0, 0x4000000, 0x7) 2.348688166s ago: executing program 5 (id=1074): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=4']) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x107002e, &(0x7f0000000380)=ANY=[], 0x4, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x800, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./bus\x00', 0x3820c50, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000300), 0x8, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2.216618134s ago: executing program 3 (id=1075): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fanotify_init(0x2, 0x800) mremap(&(0x7f00001c7000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x38, 0x20000800, &(0x7f00000003c0)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r5, &(0x7f0000000480)=""/15, 0xf) r6 = fsopen(&(0x7f00000004c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r8 = openat$cgroup_subtree(r7, &(0x7f0000000500), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000540)=ANY=[@ANYBLOB='-cpu'], 0x5) socket$inet6(0xa, 0x80002, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="e6", 0x1) tee(r1, r0, 0x800000003, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r9 = io_uring_setup(0x7ff, &(0x7f0000000200)={0x0, 0x2bfc, 0xc000, 0x8, 0x3de, 0x0, r7}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) io_uring_enter(r9, 0x2219, 0xea61, 0x16, 0x0, 0x0) 2.215389616s ago: executing program 0 (id=1076): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0xc, &(0x7f0000000080)=ANY=[], 0x1, 0x1ce, &(0x7f00000005c0)="$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") r0 = open(&(0x7f00000007c0)='./file1\x00', 0x4000, 0x21) preadv2(r0, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0) 2.022307039s ago: executing program 2 (id=1077): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./sys\x00', &(0x7f0000000c00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) pread64(r0, &(0x7f0000000000)=""/161, 0xa1, 0x5) 1.59358879s ago: executing program 5 (id=1078): capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x19, 0x0, &(0x7f0000000240)="5351e31d94c9f8291396b461802305624443ed337301000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1.421942683s ago: executing program 0 (id=1079): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000440)='./tracing\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/trace_clock\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='counter', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/events/sched/filter\x00', 0x1, 0x0) writev(r1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) capget(0x0, &(0x7f0000000140)={0x1, 0x3, 0x7, 0x2, 0xac5d}) timer_delete(0x0) r2 = syz_open_dev$loop(&(0x7f0000000540), 0x6, 0x8d8a2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x1000, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237600a8ca5b07dcc14fa02c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) ioctl$BLKRRPART(r2, 0x125f, 0x0) 1.41595653s ago: executing program 3 (id=1080): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400001d000080000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0800040036ee"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4c844) 1.080809115s ago: executing program 5 (id=1081): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000005800)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000005840)='fd', 0x0, r0) write$tun(r0, &(0x7f0000005880)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x2) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) setpgid(0x0, r2) statfs(&(0x7f00000058c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005900)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000005940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000059c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 1.005393086s ago: executing program 3 (id=1082): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 912.220191ms ago: executing program 0 (id=1083): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000480)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 796.274702ms ago: executing program 1 (id=1084): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = msgget$private(0x0, 0x193) msgsnd(r2, &(0x7f0000002780)=ANY=[@ANYBLOB="02"], 0x8, 0x0) msgrcv(r2, &(0x7f0000002800)={0x0, ""/8}, 0x10, 0x3, 0x1000) msgctl$IPC_SET(r2, 0x1, &(0x7f0000002840)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x1c9, 0x3}, 0x0, 0x0, 0x165, 0x4, 0x3, 0xfffffffffffffffe, 0x3, 0xba, 0x1, 0xffff, 0xffffffffffffffff}) fadvise64(r1, 0x80e10001, 0x19, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002940)={0x11, 0x14, &(0x7f0000002a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000002ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000002b00)='gtp\x00') bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b40)={r3}, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002c80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010326bd7000fb9a3b2eecdbdfa51c000000180001"], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x40006) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000c040) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x400, 0x6, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc94}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4b73}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-arm64\x00'}, 0x58) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) read$FUSE(r5, &(0x7f0000000440)={0x2020}, 0x2020) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002b80), 0x8000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r6, 0x408c5333, &(0x7f0000002bc0)={0xa29fc7bb, 0x4, 0x0, 'queue0\x00', 0x9}) 600.126705ms ago: executing program 3 (id=1085): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000380)=0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) 529.50935ms ago: executing program 5 (id=1086): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$setregset(0x4205, r1, 0x2, &(0x7f0000000140)={0x0}) 332.064436ms ago: executing program 0 (id=1087): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004a04003c00680000ff069078e0000001000000009402890374830f20ac1414aa7f000001000000004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="510a0005a8e1d6f6"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x24, r1, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={0x0, &(0x7f0000000700)=""/106, &(0x7f0000000780), &(0x7f00000007c0), 0x80, r6, 0x0, 0x7}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r12 = syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x0, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r14 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r12, 0x2) syz_ublk_setup_queues(r14, r13, &(0x7f0000000540)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r8}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x200, 0x2, 0x1af, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r14, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, 0x0, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, &(0x7f0000000180)) 0s ago: executing program 5 (id=1088): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc/sys/kernel/printk\x00', 0x1, 0x0) write(r2, &(0x7f0000000ac0)='0 0', 0x3) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/sys/kernel/panic_on_warn\x00', 0x1, 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000bc0)='./sys\x00', &(0x7f0000000c00)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000c40)='./sys/module/kernel/parameters/panic_on_warn\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r4, &(0x7f0000000cc0)='test,0x8000000000000000,0x1000\x00', 0x1e) close(r4) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, 0x0, 0x0) bind$rxrpc(r1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={0x0, 0x40c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. [ 79.413656][ T5618] cgroup: Unknown subsys name 'net' [ 79.535663][ T5618] cgroup: Unknown subsys name 'cpuset' [ 79.545281][ T5618] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.046256][ T5618] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.844744][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.860506][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.868580][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.869073][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.877454][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.892157][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.894602][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.895302][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.907090][ T4947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.921492][ T4947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.946333][ T4947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.948528][ T4947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.952311][ T4947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.955043][ T4947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.955268][ T4947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.957274][ T4947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.961339][ T4947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.962107][ T4947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.972056][ T4947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.980139][ T4947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.024133][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.025530][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.026210][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.028142][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.030134][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.039969][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.049601][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.053857][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.076079][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.090223][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.272587][ T5631] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.284716][ T5631] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.285432][ T5646] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 85.311650][ T5638] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 85.314226][ T5639] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 85.316470][ T5640] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 85.321201][ T5631] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.366443][ T5630] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 85.661880][ T5631] infiniband rxe0: set active [ 85.664022][ T5631] infiniband rxe0: added rxe_eth0 [ 85.691943][ T5631] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 85.691981][ T5631] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 85.692032][ T5631] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 85.717191][ T4959] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.737507][ T5631] RDS/IB: rxe0: added [ 85.737820][ T5631] smc: adding ib device rxe0 with port count 1 [ 85.737905][ T5631] smc: ib device rxe0 port 1 has no pnetid [ 85.787415][ T5641] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.788432][ T5631] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.961069][ T4947] Bluetooth: hci0: command tx timeout [ 85.961362][ T5634] Bluetooth: hci1: command tx timeout [ 86.041656][ T5632] Bluetooth: hci2: command tx timeout [ 86.041873][ T5634] Bluetooth: hci3: command tx timeout [ 86.121822][ T5632] Bluetooth: hci4: command tx timeout [ 86.122088][ T5634] Bluetooth: hci5: command tx timeout [ 86.162488][ T5631] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.448149][ T985] cfg80211: failed to load regulatory.db [ 86.624179][ T5631] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.789604][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.789725][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.790239][ T5638] bridge_slave_0: entered allmulticast mode [ 86.815173][ T5638] bridge_slave_0: entered promiscuous mode [ 86.825762][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.825898][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.826056][ T5638] bridge_slave_1: entered allmulticast mode [ 86.828242][ T5638] bridge_slave_1: entered promiscuous mode [ 86.989813][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.989976][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.990084][ T5630] bridge_slave_0: entered allmulticast mode [ 86.992106][ T5630] bridge_slave_0: entered promiscuous mode [ 86.994612][ T5631] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.997108][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.997216][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.998390][ T5630] bridge_slave_1: entered allmulticast mode [ 87.004043][ T5630] bridge_slave_1: entered promiscuous mode [ 87.134488][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.162674][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.163109][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.163245][ T5639] bridge_slave_0: entered allmulticast mode [ 87.165218][ T5639] bridge_slave_0: entered promiscuous mode [ 87.223664][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.239563][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.240822][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.241277][ T5639] bridge_slave_1: entered allmulticast mode [ 87.243562][ T5639] bridge_slave_1: entered promiscuous mode [ 87.257908][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.273934][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.274385][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.274825][ T5646] bridge_slave_0: entered allmulticast mode [ 87.276753][ T5646] bridge_slave_0: entered promiscuous mode [ 87.320717][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.332941][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.333060][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.333193][ T5646] bridge_slave_1: entered allmulticast mode [ 87.336336][ T5646] bridge_slave_1: entered promiscuous mode [ 87.368292][ T5631] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.387149][ T5638] team0: Port device team_slave_0 added [ 87.408341][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.408554][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.409587][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.409729][ T5640] bridge_slave_0: entered allmulticast mode [ 87.415464][ T5640] bridge_slave_0: entered promiscuous mode [ 87.445635][ T5638] team0: Port device team_slave_1 added [ 87.465148][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.465375][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.465481][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.465617][ T5640] bridge_slave_1: entered allmulticast mode [ 87.467951][ T5640] bridge_slave_1: entered promiscuous mode [ 87.472567][ T5630] team0: Port device team_slave_0 added [ 87.526558][ T5646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.580947][ T5630] team0: Port device team_slave_1 added [ 87.582191][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.582206][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.582236][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.587608][ T5646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.609589][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.643975][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.643993][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.644033][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.709475][ T5639] team0: Port device team_slave_0 added [ 87.714477][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.715542][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.715556][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.715585][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.734308][ T5646] team0: Port device team_slave_0 added [ 87.739910][ T5639] team0: Port device team_slave_1 added [ 87.806275][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.806297][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.806327][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.893494][ T5646] team0: Port device team_slave_1 added [ 87.909108][ T5640] team0: Port device team_slave_0 added [ 87.914614][ T5640] team0: Port device team_slave_1 added [ 88.002685][ T5638] hsr_slave_0: entered promiscuous mode [ 88.003574][ T5638] hsr_slave_1: entered promiscuous mode [ 88.010199][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.010214][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.010239][ T5646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.014155][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.014170][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.014198][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.016914][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.016927][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.016954][ T5646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.041628][ T5632] Bluetooth: hci0: command tx timeout [ 88.041726][ T5634] Bluetooth: hci1: command tx timeout [ 88.042596][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.042610][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.042639][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.087259][ T5630] hsr_slave_0: entered promiscuous mode [ 88.088700][ T5630] hsr_slave_1: entered promiscuous mode [ 88.089609][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 88.089626][ T5630] Cannot create hsr debugfs directory [ 88.090910][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.090924][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.090953][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.104529][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.104547][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.104577][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.120853][ T5632] Bluetooth: hci2: command tx timeout [ 88.121010][ T5634] Bluetooth: hci3: command tx timeout [ 88.162744][ T5631] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.200535][ T5632] Bluetooth: hci4: command tx timeout [ 88.200641][ T5634] Bluetooth: hci5: command tx timeout [ 88.448320][ T5646] hsr_slave_0: entered promiscuous mode [ 88.449272][ T5646] hsr_slave_1: entered promiscuous mode [ 88.449861][ T5646] debugfs: 'hsr0' already exists in 'hsr' [ 88.449878][ T5646] Cannot create hsr debugfs directory [ 88.537041][ T5639] hsr_slave_0: entered promiscuous mode [ 88.537934][ T5639] hsr_slave_1: entered promiscuous mode [ 88.538539][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 88.538557][ T5639] Cannot create hsr debugfs directory [ 88.585375][ T5640] hsr_slave_0: entered promiscuous mode [ 88.587087][ T5640] hsr_slave_1: entered promiscuous mode [ 88.587706][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 88.587723][ T5640] Cannot create hsr debugfs directory [ 89.216989][ T5638] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.223622][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.224782][ T5638] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.247543][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.260310][ T5638] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.267617][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.268760][ T5638] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.273511][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.402452][ T5630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.406481][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.407683][ T5630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.423266][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.457407][ T5630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.465417][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.493984][ T5630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.497579][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.548511][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.548624][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.548747][ T5631] bridge_slave_0: entered allmulticast mode [ 89.550863][ T5631] bridge_slave_0: entered promiscuous mode [ 89.573038][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.573150][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.573294][ T5631] bridge_slave_1: entered allmulticast mode [ 89.575986][ T5631] bridge_slave_1: entered promiscuous mode [ 89.652772][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.658036][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.684752][ T5646] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.688812][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.690000][ T5646] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.704214][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.734355][ T5646] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.738650][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.739468][ T5646] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.744957][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.775366][ T5631] team0: Port device team_slave_0 added [ 89.778316][ T5631] team0: Port device team_slave_1 added [ 89.823000][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.823066][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.823093][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.825624][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.825636][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.825657][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.967309][ T5631] hsr_slave_0: entered promiscuous mode [ 89.968448][ T5631] hsr_slave_1: entered promiscuous mode [ 89.969036][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 89.969054][ T5631] Cannot create hsr debugfs directory [ 89.974418][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.020295][ T5639] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.030221][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.059678][ T5639] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.068937][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.069851][ T5639] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.084107][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.120608][ T5632] Bluetooth: hci0: command tx timeout [ 90.120723][ T5634] Bluetooth: hci1: command tx timeout [ 90.141933][ T5639] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.145476][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.201044][ T5632] Bluetooth: hci2: command tx timeout [ 90.201139][ T5634] Bluetooth: hci3: command tx timeout [ 90.206502][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.281103][ T5632] Bluetooth: hci4: command tx timeout [ 90.281278][ T5634] Bluetooth: hci5: command tx timeout [ 90.298241][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.298406][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.312233][ T5640] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.325850][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.328739][ T5640] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.338210][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.351436][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.351622][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.381377][ T5640] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.385259][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.386462][ T5640] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.390184][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.446767][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.475476][ T5646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.562859][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.587823][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.587927][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.592629][ T5646] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.596632][ T5631] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.604577][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.636666][ T5631] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.640166][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.642514][ T5631] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.654226][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.659623][ T5631] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.667790][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.678558][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.678666][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.684409][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.684512][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.729352][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.729435][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.854505][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.000010][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.055377][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.055516][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.103720][ T202] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.103834][ T202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.188316][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.263364][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.345233][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.417795][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.428567][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.428678][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.471924][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.472045][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.515802][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.515916][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.523378][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.523490][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.759763][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.086188][ T5638] veth0_vlan: entered promiscuous mode [ 92.129313][ T5638] veth1_vlan: entered promiscuous mode [ 92.202613][ T5632] Bluetooth: hci0: command tx timeout [ 92.202670][ T5634] Bluetooth: hci1: command tx timeout [ 92.283120][ T5632] Bluetooth: hci2: command tx timeout [ 92.283179][ T5634] Bluetooth: hci3: command tx timeout [ 92.285653][ T5638] veth0_macvtap: entered promiscuous mode [ 92.319497][ T5638] veth1_macvtap: entered promiscuous mode [ 92.360509][ T5632] Bluetooth: hci4: command tx timeout [ 92.360567][ T5634] Bluetooth: hci5: command tx timeout [ 92.494802][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.530246][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.639636][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.648791][ T5646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.870576][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.000226][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.014195][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.014222][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.044546][ T5646] veth0_vlan: entered promiscuous mode [ 93.074636][ T5630] veth0_vlan: entered promiscuous mode [ 93.127120][ T202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.127145][ T202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.130041][ T5646] veth1_vlan: entered promiscuous mode [ 93.180068][ T5630] veth1_vlan: entered promiscuous mode [ 93.312512][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.371418][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.371820][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.372133][ T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.380111][ T5639] veth0_vlan: entered promiscuous mode [ 93.447949][ T5646] veth0_macvtap: entered promiscuous mode [ 93.458053][ T5630] veth0_macvtap: entered promiscuous mode [ 93.491579][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.494641][ T5639] veth1_vlan: entered promiscuous mode [ 93.507593][ T5646] veth1_macvtap: entered promiscuous mode [ 93.516151][ T5630] veth1_macvtap: entered promiscuous mode [ 93.559174][ T5638] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.614421][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.622678][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.666598][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.672060][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.782120][ T5639] veth0_macvtap: entered promiscuous mode [ 93.816196][ T5639] veth1_macvtap: entered promiscuous mode [ 94.007742][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.083890][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.083917][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.084128][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.219570][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.219597][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.287487][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.287783][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.287802][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.311146][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.324987][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.326165][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.326325][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.327648][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.327695][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.327737][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.327780][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.327823][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.327866][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.327909][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.505459][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.505486][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.527572][ T5640] veth0_vlan: entered promiscuous mode [ 94.605590][ T202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.605615][ T202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.668875][ T5640] veth1_vlan: entered promiscuous mode [ 94.806465][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.806491][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.816873][ T5631] veth0_vlan: entered promiscuous mode [ 94.857030][ T5631] veth1_vlan: entered promiscuous mode [ 95.003440][ T5640] veth0_macvtap: entered promiscuous mode [ 95.029639][ T5640] veth1_macvtap: entered promiscuous mode [ 95.175906][ T5631] veth0_macvtap: entered promiscuous mode [ 95.206413][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.215915][ T5631] veth1_macvtap: entered promiscuous mode [ 95.284341][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.425387][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.440849][ T202] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.440902][ T202] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.440945][ T202] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.440988][ T202] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.509521][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.753185][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.753246][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.753291][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.753334][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.829123][ T202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.829147][ T202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.881813][ T5770] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.053713][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.053738][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.186763][ T3279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.186788][ T3279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.313072][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.313101][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.887315][ T5951] loop1: detected capacity change from 0 to 256 [ 99.196137][ T5951] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 99.196171][ T5951] FAT-fs (loop1): Filesystem has been set read-only [ 99.435073][ T5630] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 99.835787][ T5969] loop5: detected capacity change from 0 to 512 [ 99.849209][ T5969] msdos: Unknown parameter 'tots' [ 99.870620][ T5969] debugfs: Bad value for 'gid' [ 99.870650][ T5969] debugfs: Bad value for 'gid' [ 100.172089][ T5977] program syz.4.37 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.520524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 101.931301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.851695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.657588][ T6013] loop4: detected capacity change from 0 to 128 [ 105.493244][ T6087] loop1: detected capacity change from 0 to 16 [ 105.520980][ T6087] erofs (device loop1): invalid ishare xattr prefix id 0 [ 105.630817][ T6089] pimreg1: tun_chr_ioctl cmd 2147767521 [ 105.991712][ T6101] capability: warning: `syz.2.90' uses 32-bit capabilities (legacy support in use) [ 106.032361][ T6101] program syz.2.90 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.435096][ T6112] netlink: 'syz.4.95': attribute type 2 has an invalid length. [ 107.051419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 108.635361][ T6127] FAULT_INJECTION: forcing a failure. [ 108.635361][ T6127] name failslab, interval 1, probability 0, space 0, times 0 [ 108.635398][ T6127] CPU: 0 UID: 0 PID: 6127 Comm: syz.5.101 Not tainted syzkaller #0 PREEMPT(full) [ 108.635426][ T6127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 108.635442][ T6127] Call Trace: [ 108.635452][ T6127] [ 108.635462][ T6127] dump_stack_lvl+0xe8/0x150 [ 108.635511][ T6127] should_fail_ex+0x3eb/0x540 [ 108.635547][ T6127] should_failslab+0xa8/0x100 [ 108.635589][ T6127] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 108.635623][ T6127] ? __d_alloc+0x37/0x820 [ 108.635653][ T6127] ? __d_alloc+0x37/0x820 [ 108.635698][ T6127] __d_alloc+0x37/0x820 [ 108.635737][ T6127] d_alloc_pseudo+0x21/0xc0 [ 108.635772][ T6127] alloc_path_pseudo+0x107/0x220 [ 108.635804][ T6127] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 108.635833][ T6127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.635864][ T6127] ? do_raw_spin_lock+0x12b/0x2f0 [ 108.635898][ T6127] alloc_file_pseudo+0xa8/0x1e0 [ 108.635929][ T6127] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 108.635957][ T6127] ? _raw_spin_unlock+0x28/0x50 [ 108.635997][ T6127] ? srso_alias_return_thunk+0x5/0xfbef5 [ 108.636036][ T6127] sock_alloc_file+0xb8/0x2e0 [ 108.636067][ T6127] ? __sys_socket+0x12b/0x1b0 [ 108.636105][ T6127] __sys_socket+0x13f/0x1b0 [ 108.636145][ T6127] __x64_sys_socket+0x7a/0x90 [ 108.636182][ T6127] do_syscall_64+0x166/0x520 [ 108.636216][ T6127] ? trace_irq_disable+0x3b/0x140 [ 108.636253][ T6127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.636286][ T6127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.636312][ T6127] RIP: 0033:0x7f122d99f559 [ 108.636335][ T6127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.636356][ T6127] RSP: 002b:00007f122e801028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 108.636384][ T6127] RAX: ffffffffffffffda RBX: 00007f122dc25fa0 RCX: 00007f122d99f559 [ 108.636403][ T6127] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 108.636418][ T6127] RBP: 00007f122da36b50 R08: 0000000000000000 R09: 0000000000000000 [ 108.636435][ T6127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.636450][ T6127] R13: 00007f122dc26038 R14: 00007f122dc25fa0 R15: 00007ffdb548bfb8 [ 108.636491][ T6127] [ 109.611256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 110.251336][ T6137] loop2: detected capacity change from 0 to 8192 [ 110.293732][ T6137] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.760610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 113.911057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 114.320622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.087903][ T6191] loop3: detected capacity change from 0 to 256 [ 117.230594][ T6224] Zero length message leads to an empty skb [ 120.106425][ T6262] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 121.181574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 121.590918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 124.114195][ T6296] program syz.3.164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.369384][ T6301] loop4: detected capacity change from 0 to 128 [ 124.439174][ T29] audit: type=1800 audit(1793597411.204:2): pid=6301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.167" name="file1" dev="loop4" ino=6 res=0 errno=-22 [ 130.980121][ T6336] program syz.4.180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.001344][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.001435][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.069848][ T6382] program syz.3.196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.364835][ T6385] loop4: detected capacity change from 0 to 256 [ 136.630606][ T6396] ipt_REJECT: ECHOREPLY no longer supported. [ 136.779774][ T29] audit: type=1804 audit(1793597423.544:3): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.197" name="/newroot/38/file0/file1" dev="loop4" ino=7 res=1 errno=0 [ 136.802766][ T6385] FAT-fs (loop4): error, clusters badly computed (0 != 128) [ 136.802795][ T6385] FAT-fs (loop4): Filesystem has been set read-only [ 136.802841][ T6385] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 136.917053][ T6402] capability: warning: `syz.5.202' uses deprecated v2 capabilities in a way that may be insecure [ 138.478629][ T6419] ======================================================= [ 138.478629][ T6419] WARNING: The mand mount option has been deprecated and [ 138.478629][ T6419] and is ignored by this kernel. Remove the mand [ 138.478629][ T6419] option from the mount to silence this warning. [ 138.478629][ T6419] ======================================================= [ 138.516139][ T6420] program syz.2.210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.213714][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 141.617388][ T6439] netlink: 'syz.3.218': attribute type 8 has an invalid length. [ 141.733307][ T6457] xt_hashlimit: size too large, truncated to 1048576 [ 141.972779][ T6462] program syz.5.225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.320214][ T6502] tmpfs: Unknown parameter 'nr_ino' [ 149.601625][ T6529] loop2: detected capacity change from 0 to 7 [ 149.616132][ T6529] Dev loop2: unable to read RDB block 7 [ 149.616172][ T6529] loop2: unable to read partition table [ 149.616389][ T6529] loop2: partition table beyond EOD, truncated [ 149.616426][ T6529] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 151.639114][ T6540] device-mapper: table: 248:1: verity: Not enough arguments (-EINVAL) [ 151.639142][ T6540] device-mapper: ioctl: error adding target to table [ 152.981205][ T6574] loop2: detected capacity change from 0 to 7 [ 152.999461][ T6574] Dev loop2: unable to read RDB block 7 [ 152.999499][ T6574] loop2: unable to read partition table [ 152.999722][ T6574] loop2: partition table beyond EOD, truncated [ 152.999756][ T6574] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 153.026709][ T6576] loop5: detected capacity change from 0 to 512 [ 154.838720][ T6576] FAT-fs (loop5): error, invalid access to FAT (entry 0x00020000) [ 154.838751][ T6576] FAT-fs (loop5): Filesystem has been set read-only [ 154.839074][ T6576] FAT-fs (loop5): error, invalid access to FAT (entry 0x00020000) [ 157.114693][ T29] audit: type=1326 audit(1793597444.887:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz.3.279" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736e39f559 code=0x7fc00000 [ 157.148702][ T29] audit: type=1326 audit(1793597444.917:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz.3.279" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f736e39f559 code=0x7fc00000 [ 157.153908][ T29] audit: type=1326 audit(1793597444.927:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz.3.279" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736e39f559 code=0x7fc00000 [ 157.211221][ T6612] serio: Serial port ptm0 [ 158.739736][ T30] rpcbind: server 127.0.0.1 not responding, timed out [ 159.772854][ T6651] loop5: detected capacity change from 0 to 128 [ 159.802993][ T6651] FAT-fs (loop5): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 159.947145][ T6649] smpboot: CPU 1 is now offline [ 161.023554][ T6655] 9p: Bad value for 'wfdno' [ 163.978794][ T6680] program syz.3.312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.423213][ T6684] 9p: Bad value for 'wfdno' [ 166.372916][ T6700] program syz.1.318 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.867498][ T6707] loop1: detected capacity change from 0 to 128 [ 166.995239][ T6707] syz.1.322: attempt to access beyond end of device [ 166.995239][ T6707] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 167.064310][ T6713] overlayfs: failed to resolve './file2': -2 [ 167.085524][ T6714] syz.1.322: attempt to access beyond end of device [ 167.085524][ T6714] loop1: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 167.085645][ T6714] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 167.246959][ T6707] syz.1.322: attempt to access beyond end of device [ 167.246959][ T6707] loop1: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 167.246990][ T6707] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 167.247028][ T6707] syz.1.322: attempt to access beyond end of device [ 167.247028][ T6707] loop1: rw=8390657, sector=144, nr_sectors = 2 limit=128 [ 167.247048][ T6707] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 167.247548][ T6707] syz.1.322: attempt to access beyond end of device [ 167.247548][ T6707] loop1: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 167.375464][ T6706] syz.1.322: attempt to access beyond end of device [ 167.375464][ T6706] loop1: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 167.376968][ T6706] Buffer I/O error on dev loop1, logical block 69, lost async page write [ 167.476158][ T6715] device-mapper: table: 248:2: adding target device ram10 caused an alignment inconsistency: physical_block_size=4096, logical_block_size=512, alignment_offset=0, start=4193792 [ 167.476190][ T6715] device-mapper: table: 248:2: ram11 too small for target: start=1, len=11328, dev_size=8192 [ 167.476207][ T6715] device-mapper: core: Cannot calculate initial queue limits [ 167.476215][ T6715] device-mapper: ioctl: unable to set up device queue for new table. [ 169.022701][ T6730] 9p: Bad value for 'wfdno' [ 173.724446][ T6597] rpcbind: server 127.0.0.1 not responding, timed out [ 175.309485][ T6781] overlayfs: failed to resolve './file2': -2 [ 175.442178][ T6783] loop2: detected capacity change from 0 to 7 [ 175.443823][ T6783] Dev loop2: unable to read RDB block 7 [ 175.443850][ T6783] loop2: unable to read partition table [ 175.444010][ T6783] loop2: partition table beyond EOD, truncated [ 175.444024][ T6783] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 176.492162][ T6799] overlayfs: failed to verify upper root origin [ 179.047127][ T62] rpcbind: server 127.0.0.1 not responding, timed out [ 181.833681][ T6839] process 'syz.5.375' launched './file1' with NULL argv: empty string added [ 186.679240][ T6890] CUSE: unknown device info "n¸Þ|’zQC*¯" [ 186.679258][ T6890] CUSE: DEVNAME unspecified [ 187.073678][ T6900] loop2: detected capacity change from 0 to 128 [ 193.803938][ T6947] rxe_eth0 speed is unknown, defaulting to 1000 [ 193.967285][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.967334][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.376407][ T7004] overlayfs: workdir and upperdir must reside under the same mount [ 201.308694][ T7050] netlink: 'syz.5.456': attribute type 2 has an invalid length. [ 201.324102][ T7049] loop2: detected capacity change from 0 to 7 [ 201.336852][ T7049] Dev loop2: unable to read RDB block 7 [ 201.336883][ T7049] loop2: unable to read partition table [ 201.337050][ T7049] loop2: partition table beyond EOD, truncated [ 201.337066][ T7049] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 202.357944][ T7060] loop4: detected capacity change from 0 to 8192 [ 203.278964][ T7088] loop2: detected capacity change from 0 to 7 [ 203.289882][ T7088] Dev loop2: unable to read RDB block 7 [ 203.289913][ T7088] loop2: unable to read partition table [ 203.290110][ T7088] loop2: partition table beyond EOD, truncated [ 203.290127][ T7088] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 206.078844][ T7118] overlayfs: failed to resolve './file1': -2 [ 206.289081][ T7104] Bluetooth: hci5: command 0x0406 tx timeout [ 206.289142][ T7104] Bluetooth: hci1: command 0x0406 tx timeout [ 206.289168][ T7104] Bluetooth: hci0: command 0x0406 tx timeout [ 206.289192][ T7104] Bluetooth: hci2: command 0x0406 tx timeout [ 206.289214][ T7104] Bluetooth: hci3: command 0x0406 tx timeout [ 206.289236][ T7104] Bluetooth: hci4: command 0x0406 tx timeout [ 207.175133][ T7133] scsi_dev_info_list_add_str: bad dev info string '6û>1¶Íïl<è„' 'ƒ*ç×dʽq˜|¿p;Ö*iõçøäÉíU*nS;?â¥/îâê¬áU•ĹéÖ,ØmÔVø¦%G…ÐÈØ; Ìm“7¦úi1¶Íïl<è„' 'ƒ*ç×dʽq˜|¿p;Ö*iõçøäÉíU*nS;?â¥/îâê¬áU•ĹéÖ,ØmÔVø¦%G…ÐÈØ; Ìm“7¦úi1¶Íïl<è„' 'ƒ*ç×dʽq˜|¿p;Ö*iõçøäÉíU*nS;?â¥/îâê¬áU•ĹéÖ,ØmÔVø¦%G…ÐÈØ; Ìm“7¦úi [ 214.713239][ T7252] dump_stack_lvl+0xe8/0x150 [ 214.713278][ T7252] should_fail_ex+0x3eb/0x540 [ 214.713307][ T7252] should_failslab+0xa8/0x100 [ 214.713336][ T7252] ? security_inode_alloc+0x39/0x310 [ 214.713368][ T7252] kmem_cache_alloc_noprof+0x9c/0x600 [ 214.713392][ T7252] ? __pfx_make_kgid+0x10/0x10 [ 214.713416][ T7252] ? security_inode_alloc+0x39/0x310 [ 214.713452][ T7252] security_inode_alloc+0x39/0x310 [ 214.713484][ T7252] inode_init_always_gfp+0x97e/0xd30 [ 214.713513][ T7252] alloc_inode+0x82/0x1b0 [ 214.713535][ T7252] create_pipe_files+0x51/0x7a0 [ 214.713569][ T7252] __do_pipe_flags+0x46/0x1f0 [ 214.713599][ T7252] do_pipe2+0xaa/0x190 [ 214.713631][ T7252] ? __pfx_do_pipe2+0x10/0x10 [ 214.713662][ T7252] ? srso_alias_return_thunk+0x5/0xfbef5 [ 214.713685][ T7252] ? rcu_is_watching+0x16/0xb0 [ 214.713724][ T7252] __x64_sys_pipe2+0x5a/0x70 [ 214.713754][ T7252] do_syscall_64+0x166/0x520 [ 214.713775][ T7252] ? trace_irq_disable+0x3b/0x140 [ 214.713802][ T7252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.713827][ T7252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.713846][ T7252] RIP: 0033:0x7f46f019f559 [ 214.713863][ T7252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.713878][ T7252] RSP: 002b:00007f46f1080028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 214.713898][ T7252] RAX: ffffffffffffffda RBX: 00007f46f0425fa0 RCX: 00007f46f019f559 [ 214.713912][ T7252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.713922][ T7252] RBP: 00007f46f0236b50 R08: 0000000000000000 R09: 0000000000000000 [ 214.713934][ T7252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.713945][ T7252] R13: 00007f46f0426038 R14: 00007f46f0425fa0 R15: 00007fff3e4a6338 [ 214.713980][ T7252] [ 215.213106][ T7254] fuse: Bad value for 'fd' [ 215.375195][ T7256] scsi_dev_info_list_add_str: bad dev info string '6û>1¶Íïl<è„' 'ƒ*ç×dʽq˜|¿p;Ö*iõçøäÉíU*nS;?â¥/îâê¬áU•ĹéÖ,ØmÔVø¦%G…ÐÈØ; Ìm“7¦úi1¶Íïl<è„' 'ƒ*ç×dʽq˜|¿p;Ö*iõçøäÉíU*nS;?â¥/îâê¬áU•ĹéÖ,ØmÔVø¦%G…ÐÈØ; Ìm“7¦úi [ 242.512771][ T7515] dump_stack_lvl+0xe8/0x150 [ 242.512809][ T7515] should_fail_ex+0x3eb/0x540 [ 242.512838][ T7515] should_failslab+0xa8/0x100 [ 242.512870][ T7515] ? security_file_alloc+0x34/0x310 [ 242.512895][ T7515] kmem_cache_alloc_noprof+0x9c/0x600 [ 242.512918][ T7515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.512941][ T7515] ? rcu_is_watching+0x16/0xb0 [ 242.512974][ T7515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.512998][ T7515] ? security_file_alloc+0x34/0x310 [ 242.513029][ T7515] security_file_alloc+0x34/0x310 [ 242.513056][ T7515] init_file+0x90/0x2b0 [ 242.513078][ T7515] alloc_empty_file+0x74/0x1d0 [ 242.513107][ T7515] alloc_file_pseudo+0x110/0x1e0 [ 242.513131][ T7515] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 242.513151][ T7515] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 242.513192][ T7515] create_pipe_files+0x306/0x7a0 [ 242.513232][ T7515] __do_pipe_flags+0x46/0x1f0 [ 242.513265][ T7515] do_pipe2+0xaa/0x190 [ 242.513301][ T7515] ? __pfx_do_pipe2+0x10/0x10 [ 242.513335][ T7515] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.513359][ T7515] ? rcu_is_watching+0x16/0xb0 [ 242.513400][ T7515] __x64_sys_pipe2+0x5a/0x70 [ 242.513432][ T7515] do_syscall_64+0x166/0x520 [ 242.513455][ T7515] ? trace_irq_disable+0x3b/0x140 [ 242.513484][ T7515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.513510][ T7515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.513531][ T7515] RIP: 0033:0x7f6a3519f559 [ 242.513548][ T7515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.513564][ T7515] RSP: 002b:00007f6a35f85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 242.513585][ T7515] RAX: ffffffffffffffda RBX: 00007f6a35425fa0 RCX: 00007f6a3519f559 [ 242.513600][ T7515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.513612][ T7515] RBP: 00007f6a35236b50 R08: 0000000000000000 R09: 0000000000000000 [ 242.513624][ T7515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.513636][ T7515] R13: 00007f6a35426038 R14: 00007f6a35425fa0 R15: 00007ffeb1116a58 [ 242.513668][ T7515] [ 244.077215][ T7517] 9p: Bad value for 'rfdno' [ 244.669388][ T7529] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 17 (only 8 groups) [ 247.256067][ T7554] 9p: Bad value for 'rfdno' [ 248.273968][ T7571] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 17 (only 8 groups) [ 248.814525][ T7579] syzkaller0: entered promiscuous mode [ 248.814547][ T7579] syzkaller0: entered allmulticast mode [ 250.766493][ T7590] 9p: Bad value for 'rfdno' [ 252.113476][ T7609] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 17 (only 8 groups) [ 254.166961][ T7642] program syz.1.691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.312945][ T7644] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 17 (only 8 groups) [ 254.630053][ T7650] program syz.3.695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.890230][ T7657] team0 (unregistering): Port device team_slave_0 removed [ 254.932422][ T7657] team0 (unregistering): Port device team_slave_1 removed [ 254.933724][ T7659] loop3: detected capacity change from 0 to 256 [ 254.970957][ T7659] FAT-fs (loop3): data area starts beyond volume (274 > 64) [ 254.970981][ T7659] FAT-fs (loop3): Can't find a valid FAT filesystem [ 255.402902][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.402954][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.645462][ T7683] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 17 (only 8 groups) [ 257.849375][ T7687] loop2: detected capacity change from 0 to 7 [ 257.858956][ T7687] Dev loop2: unable to read RDB block 7 [ 257.858983][ T7687] loop2: unable to read partition table [ 257.859171][ T7687] loop2: partition table beyond EOD, truncated [ 257.859186][ T7687] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 258.115233][ T7689] af_packet: packet size is too long (65369 > 2016) [ 258.210850][ T7691] loop5: detected capacity change from 0 to 2048 [ 259.090245][ T7704] program syz.0.718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.474033][ T7720] tmpfs: Bad value for 'huge' [ 262.816010][ T7741] program syz.3.735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.406485][ T7758] tmpfs: Bad value for 'huge' [ 267.395591][ T7764] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.396830][ T7764] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.994080][ T7764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.061458][ T7764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.293361][ T139] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.293435][ T139] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.293466][ T139] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.293496][ T139] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.950034][ T7788] loop2: detected capacity change from 0 to 7 [ 269.961026][ T7788] Dev loop2: unable to read RDB block 7 [ 269.961057][ T7788] loop2: unable to read partition table [ 269.982039][ T7788] loop2: partition table beyond EOD, truncated [ 269.982062][ T7788] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 270.364490][ T7797] tmpfs: Unknown parameter 'n' [ 272.175710][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.761'. [ 272.289616][ T7811] overlayfs: missing 'lowerdir' [ 272.950800][ T7829] tmpfs: Unknown parameter 'n' [ 275.427291][ T7843] block nbd2: shutting down sockets [ 275.911090][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 276.006231][ T7856] overlayfs: missing 'lowerdir' [ 276.100756][ T9] usb 3-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 276.133530][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 276.133562][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 276.133597][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.275589][ T7834] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 276.496148][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 276.595582][ T7872] tmpfs: Unknown parameter 'n' [ 277.888877][ T9] usb 3-1: USB disconnect, device number 2 [ 277.965169][ T7891] overlayfs: missing 'lowerdir' [ 278.443423][ T7907] program syz.1.799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.629009][ T7910] tmpfs: Unknown parameter 'nr_blo' [ 278.954497][ T7920] loop0: detected capacity change from 0 to 512 [ 279.727551][ T7929] FAULT_INJECTION: forcing a failure. [ 279.727551][ T7929] name failslab, interval 1, probability 0, space 0, times 0 [ 279.727579][ T7929] CPU: 0 UID: 0 PID: 7929 Comm: syz.5.808 Not tainted syzkaller #0 PREEMPT(full) [ 279.727603][ T7929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 279.727614][ T7929] Call Trace: [ 279.727622][ T7929] [ 279.727630][ T7929] dump_stack_lvl+0xe8/0x150 [ 279.727669][ T7929] should_fail_ex+0x3eb/0x540 [ 279.727697][ T7929] should_failslab+0xa8/0x100 [ 279.727733][ T7929] ? security_inode_alloc+0x39/0x310 [ 279.727765][ T7929] kmem_cache_alloc_noprof+0x9c/0x600 [ 279.727791][ T7929] ? security_inode_alloc+0x39/0x310 [ 279.727827][ T7929] security_inode_alloc+0x39/0x310 [ 279.727859][ T7929] inode_init_always_gfp+0x97e/0xd30 [ 279.727886][ T7929] ? __pfx_proc_alloc_inode+0x10/0x10 [ 279.727905][ T7929] alloc_inode+0x82/0x1b0 [ 279.727927][ T7929] new_inode+0x1f/0x170 [ 279.727948][ T7929] ? proc_get_inode+0x1a/0x6a0 [ 279.727970][ T7929] proc_get_inode+0x22/0x6a0 [ 279.727994][ T7929] proc_lookup_de+0x251/0x390 [ 279.728023][ T7929] lookup_open+0xa54/0x1ae0 [ 279.728078][ T7929] path_openat+0x70c/0x20f0 [ 279.728131][ T7929] do_file_open+0x23e/0x4a0 [ 279.728163][ T7929] ? __pfx_do_file_open+0x10/0x10 [ 279.728200][ T7929] ? __pfx_kfree_link+0x10/0x10 [ 279.728233][ T7929] ? _raw_spin_unlock+0x28/0x50 [ 279.728262][ T7929] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.728284][ T7929] ? alloc_fd+0x6af/0x760 [ 279.728317][ T7929] do_sys_openat2+0x115/0x200 [ 279.728337][ T7929] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.728359][ T7929] ? __se_sys_futex+0x3a8/0x450 [ 279.728381][ T7929] ? __pfx_do_sys_openat2+0x10/0x10 [ 279.728407][ T7929] ? rcu_is_watching+0x16/0xb0 [ 279.728437][ T7929] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.728464][ T7929] __x64_sys_openat+0x138/0x170 [ 279.728490][ T7929] do_syscall_64+0x166/0x520 [ 279.728514][ T7929] ? trace_irq_disable+0x3b/0x140 [ 279.728541][ T7929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.728566][ T7929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.728586][ T7929] RIP: 0033:0x7f122d95fd8e [ 279.728603][ T7929] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 279.728618][ T7929] RSP: 002b:00007f122e800ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 279.728638][ T7929] RAX: ffffffffffffffda RBX: 00007f122e8016c0 RCX: 00007f122d95fd8e [ 279.728652][ T7929] RDX: 0000000000000002 RSI: 00007f122e800f90 RDI: ffffffffffffff9c [ 279.728666][ T7929] RBP: 00007f122da36b50 R08: 0000000000000000 R09: 0000000000000000 [ 279.728678][ T7929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.728689][ T7929] R13: 00007f122dc26038 R14: 00007f122dc25fa0 R15: 00007ffdb548bfb8 [ 279.728721][ T7929] [ 279.753696][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 280.101391][ T9] usb 2-1: New USB device found: idVendor=06cd, idProduct=010f, bcdDevice=1.00 [ 280.119583][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.135633][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.135663][ T9] usb 2-1: Product: syz [ 280.135676][ T9] usb 2-1: Manufacturer: syz [ 280.135689][ T9] usb 2-1: SerialNumber: syz [ 280.154528][ T7934] overlayfs: missing 'lowerdir' [ 280.220965][ T9] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 280.221199][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 87 [ 280.221256][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 7 [ 280.324182][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 280.324353][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 82 [ 280.324417][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 280.324479][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 280.324540][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 85 [ 280.324603][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 5 [ 280.425194][ T9] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 280.452917][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 83 [ 280.452996][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 280.453059][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 3 [ 280.453119][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 4 [ 280.453186][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 86 [ 280.453247][ T9] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 280.528732][ T9] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 280.561047][ T9] usb 2-1: USB disconnect, device number 2 [ 280.611208][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 280.668458][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 280.669088][ T9] keyspan 2-1:1.0: device disconnected [ 280.949972][ T7945] program syz.2.815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.994510][ T7947] tmpfs: Unknown parameter 'nr_blo' [ 281.782667][ T7964] syzkaller0: entered promiscuous mode [ 281.782688][ T7964] syzkaller0: entered allmulticast mode [ 281.946256][ T7969] overlayfs: failed to resolve './bus': -2 [ 282.191163][ T7976] program syz.1.828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.495109][ T7985] program syz.1.834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.534460][ T7988] tmpfs: Unknown parameter 'nr_blo' [ 283.143744][ T7994] loop1: detected capacity change from 0 to 256 [ 283.274292][ T7998] overlayfs: missing 'lowerdir' [ 283.410081][ T8003] syzkaller0: entered promiscuous mode [ 283.410109][ T8003] syzkaller0: entered allmulticast mode [ 283.452094][ T29] audit: type=1804 audit(1793597571.227:11): pid=8005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.838" name="/newroot/126/file0/file1" dev="loop1" ino=13 res=1 errno=0 [ 283.518552][ T7994] FAT-fs (loop1): error, clusters badly computed (0 != 128) [ 283.518577][ T7994] FAT-fs (loop1): Filesystem has been set read-only [ 283.518597][ T7994] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 284.268283][ T8019] program syz.0.850 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.660968][ T8029] tmpfs: Bad value for 'nr_blocks' [ 285.402015][ T8039] overlayfs: missing 'lowerdir' [ 285.441069][ T8041] FAULT_INJECTION: forcing a failure. [ 285.441069][ T8041] name failslab, interval 1, probability 0, space 0, times 0 [ 285.441101][ T8041] CPU: 0 UID: 0 PID: 8041 Comm: syz.5.859 Not tainted syzkaller #0 PREEMPT(full) [ 285.441131][ T8041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 285.441143][ T8041] Call Trace: [ 285.441151][ T8041] [ 285.441159][ T8041] dump_stack_lvl+0xe8/0x150 [ 285.441199][ T8041] should_fail_ex+0x3eb/0x540 [ 285.441228][ T8041] should_failslab+0xa8/0x100 [ 285.441262][ T8041] __kvmalloc_node_noprof+0x171/0x820 [ 285.441291][ T8041] ? __kmalloc_cache_noprof+0x31c/0x600 [ 285.441318][ T8041] ? alloc_fdtable+0x101/0x2c0 [ 285.441338][ T8041] ? alloc_fdtable+0x101/0x2c0 [ 285.441366][ T8041] alloc_fdtable+0x101/0x2c0 [ 285.441386][ T8041] ? dup_fd+0x99c/0xbf0 [ 285.441413][ T8041] dup_fd+0x9a5/0xbf0 [ 285.441437][ T8041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.441462][ T8041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.441486][ T8041] ? __asan_memcpy+0x40/0x70 [ 285.441518][ T8041] __se_sys_close_range+0x282/0xef0 [ 285.441549][ T8041] ? srso_alias_return_thunk+0x5/0xfbef5 [ 285.441585][ T8041] ? __pfx___se_sys_close_range+0x10/0x10 [ 285.441621][ T8041] do_syscall_64+0x166/0x520 [ 285.441644][ T8041] ? trace_irq_disable+0x3b/0x140 [ 285.441674][ T8041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.441700][ T8041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.441720][ T8041] RIP: 0033:0x7f122d99f559 [ 285.441738][ T8041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.441754][ T8041] RSP: 002b:00007f122e801028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 285.441775][ T8041] RAX: ffffffffffffffda RBX: 00007f122dc25fa0 RCX: 00007f122d99f559 [ 285.441790][ T8041] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 285.441804][ T8041] RBP: 00007f122da36b50 R08: 0000000000000000 R09: 0000000000000000 [ 285.441816][ T8041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.441828][ T8041] R13: 00007f122dc26038 R14: 00007f122dc25fa0 R15: 00007ffdb548bfb8 [ 285.441860][ T8041] [ 286.067013][ T8048] syzkaller0: entered promiscuous mode [ 286.067034][ T8048] syzkaller0: entered allmulticast mode [ 286.401040][ T8055] syzkaller0: entered promiscuous mode [ 286.401061][ T8055] syzkaller0: entered allmulticast mode [ 286.429523][ T8061] program syz.4.867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.289378][ T8070] tmpfs: Bad value for 'nr_blocks' [ 287.748325][ T8078] overlayfs: missing 'lowerdir' [ 288.035571][ T8088] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 288.258345][ T8092] loop1: detected capacity change from 0 to 256 [ 288.438072][ T8095] program syz.0.881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.577036][ T29] audit: type=1804 audit(1793597576.347:12): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.879" name="/newroot/130/file0/file1" dev="loop1" ino=14 res=1 errno=0 [ 288.653907][ T8092] FAT-fs (loop1): error, clusters badly computed (0 != 128) [ 288.653932][ T8092] FAT-fs (loop1): Filesystem has been set read-only [ 288.653950][ T8092] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 290.966619][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'. [ 291.059215][ T8115] overlayfs: missing 'lowerdir' [ 293.062107][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 293.086591][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'. [ 293.209500][ T8155] overlayfs: missing 'lowerdir' [ 294.827143][ T8190] lo: entered promiscuous mode [ 294.828278][ T8190] tunl0: entered promiscuous mode [ 294.859766][ T8190] gre0: entered promiscuous mode [ 294.873429][ T8191] overlayfs: missing 'lowerdir' [ 294.882008][ T8193] netlink: 'syz.1.921': attribute type 10 has an invalid length. [ 294.882382][ T8190] gretap0: entered promiscuous mode [ 294.910093][ T8190] erspan0: entered promiscuous mode [ 294.916832][ T8190] ip_vti0: entered promiscuous mode [ 294.930632][ T8190] ip6_vti0: entered promiscuous mode [ 294.931295][ T8190] sit0: entered promiscuous mode [ 294.979273][ T8190] ip6tnl0: entered promiscuous mode [ 295.005851][ T8190] ip6gre0: entered promiscuous mode [ 295.032646][ T8190] syz_tun: entered promiscuous mode [ 295.068001][ T8190] ip6gretap0: entered promiscuous mode [ 295.101997][ T8190] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.102636][ T8190] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.134092][ T8190] bridge0: entered promiscuous mode [ 295.163999][ T8190] vcan0: entered promiscuous mode [ 295.187462][ T8190] bond0: entered promiscuous mode [ 295.187486][ T8190] bond_slave_0: entered promiscuous mode [ 295.187679][ T8190] bond_slave_1: entered promiscuous mode [ 295.224840][ T8190] team0: entered promiscuous mode [ 295.224862][ T8190] team_slave_0: entered promiscuous mode [ 295.225095][ T8190] team_slave_1: entered promiscuous mode [ 295.255850][ T8190] dummy0: entered promiscuous mode [ 295.292102][ T8190] nlmon0: entered promiscuous mode [ 295.308908][ T8190] batadv0: entered promiscuous mode [ 295.338211][ T8190] vxcan0: entered promiscuous mode [ 295.346742][ T8190] vxcan1: entered promiscuous mode [ 295.359655][ T8190] veth0: entered promiscuous mode [ 295.384514][ T8190] veth1: entered promiscuous mode [ 295.415684][ T8190] wg0: entered promiscuous mode [ 295.432410][ T8190] wg1: entered promiscuous mode [ 295.448207][ T8190] wg2: entered promiscuous mode [ 295.469239][ T8190] veth0_to_bridge: entered promiscuous mode [ 295.506516][ T8190] bridge_slave_0: left allmulticast mode [ 295.508713][ T8190] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.558651][ T8190] veth1_to_bridge: entered promiscuous mode [ 295.597425][ T8190] bridge_slave_1: left allmulticast mode [ 295.597620][ T8190] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.644947][ T8190] veth0_to_bond: entered promiscuous mode [ 295.686387][ T8190] bond0: (slave bond_slave_0): Releasing backup interface [ 295.703633][ T8190] veth1_to_bond: entered promiscuous mode [ 295.748595][ T8190] bond0: (slave bond_slave_1): Releasing backup interface [ 295.774700][ T8190] veth0_to_team: entered promiscuous mode [ 295.833374][ T8190] team0: Port device team_slave_0 removed [ 295.833848][ T8190] veth1_to_team: entered promiscuous mode [ 295.890056][ T8190] team0: Port device team_slave_1 removed [ 295.901501][ T8190] veth0_to_batadv: entered promiscuous mode [ 295.919675][ T8190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.919730][ T8190] batadv_slave_0: entered promiscuous mode [ 295.956731][ T8190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.972222][ T8190] veth1_to_batadv: entered promiscuous mode [ 296.000135][ T8190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.000200][ T8190] batadv_slave_1: entered promiscuous mode [ 296.034289][ T8190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.037206][ T8190] xfrm0: entered promiscuous mode [ 296.070959][ T8190] veth0_to_hsr: entered promiscuous mode [ 296.106521][ T8190] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 296.109022][ T8193] dummy0: left promiscuous mode [ 296.148890][ T8193] dummy0: entered promiscuous mode [ 296.161604][ T8193] team0: Port device dummy0 added [ 296.758518][ T8229] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 296.771171][ T8229] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 296.837120][ T8231] loop2: detected capacity change from 0 to 7 [ 296.868099][ T8231] Dev loop2: unable to read RDB block 7 [ 296.868131][ T8231] loop2: unable to read partition table [ 296.868509][ T8231] loop2: partition table beyond EOD, truncated [ 296.868526][ T8231] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 297.575073][ T8247] bridge0: port 3(syz_tun) entered blocking state [ 297.575219][ T8247] bridge0: port 3(syz_tun) entered disabled state [ 297.575368][ T8247] syz_tun: entered allmulticast mode [ 297.606402][ T8247] syz_tun: entered promiscuous mode [ 297.708143][ T8247] bridge_slave_0 (unregistering): left allmulticast mode [ 297.708171][ T8247] bridge_slave_0 (unregistering): left promiscuous mode [ 297.708257][ T8247] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.705292][ T8267] loop2: detected capacity change from 0 to 7 [ 299.725969][ T8267] Dev loop2: unable to read RDB block 7 [ 299.726001][ T8267] loop2: unable to read partition table [ 299.726176][ T8267] loop2: partition table beyond EOD, truncated [ 299.726209][ T8267] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 301.622132][ T8311] syzkaller1: entered promiscuous mode [ 301.622154][ T8311] syzkaller1: entered allmulticast mode [ 301.718898][ T8313] loop5: detected capacity change from 0 to 512 [ 303.014862][ T8354] loop2: detected capacity change from 0 to 7 [ 303.032300][ T8354] Dev loop2: unable to read RDB block 7 [ 303.032330][ T8354] loop2: unable to read partition table [ 303.032536][ T8354] loop2: partition table beyond EOD, truncated [ 303.032562][ T8354] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 303.394514][ T8359] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 303.394536][ T8359] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 303.537722][ T8359] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 303.537745][ T8359] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 304.569053][ T8359] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 304.569079][ T8359] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 304.646288][ T8359] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 304.646309][ T8359] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 304.704469][ T8359] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 304.704491][ T8359] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 304.758113][ T8359] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 304.758136][ T8359] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 304.926919][ T29] audit: type=1326 audit(1793597592.687:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.0.997" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200579f559 code=0x7ffc0000 [ 304.926968][ T29] audit: type=1326 audit(1793597592.697:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.0.997" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200579f559 code=0x7ffc0000 [ 305.003084][ T29] audit: type=1326 audit(1793597592.767:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.0.997" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f200579f559 code=0x7ffc0000 [ 305.003140][ T29] audit: type=1326 audit(1793597592.767:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.0.997" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200579f559 code=0x7ffc0000 [ 305.003177][ T29] audit: type=1326 audit(1793597592.767:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.0.997" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200579f559 code=0x7ffc0000 [ 305.062400][ T29] audit: type=1326 audit(1793597592.837:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.0.997" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f200579f559 code=0x7ffc0000 [ 305.062457][ T29] audit: type=1326 audit(1793597592.837:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.0.997" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200579f559 code=0x7ffc0000 [ 305.062499][ T29] audit: type=1326 audit(1793597592.837:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.0.997" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200579f559 code=0x7ffc0000 [ 305.173954][ T29] audit: type=1326 audit(1793597592.947:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.0.997" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f200579f559 code=0x7ffc0000 [ 305.174027][ T29] audit: type=1326 audit(1793597592.947:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.0.997" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200579f559 code=0x7ffc0000 [ 308.699796][ T8391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.223293][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1017'. [ 310.124385][ T8453] tmpfs: Bad value for 'nr_blocks' [ 310.989065][ T8469] program syz.5.1030 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.379672][ T8473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1032'. [ 311.572935][ T8480] loop2: detected capacity change from 0 to 7 [ 311.584805][ T8480] Dev loop2: unable to read RDB block 7 [ 311.584838][ T8480] loop2: unable to read partition table [ 311.585020][ T8480] loop2: partition table beyond EOD, truncated [ 311.585035][ T8480] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 314.151037][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'. [ 314.183445][ T8525] loop2: detected capacity change from 0 to 7 [ 314.187907][ T8525] Dev loop2: unable to read RDB block 7 [ 314.187952][ T8525] loop2: AHDI p1 p2 p3 [ 314.187972][ T8525] loop2: partition table partially beyond EOD, truncated [ 314.188141][ T8525] loop2: p1 start 1601398130 is beyond EOD, truncated [ 314.188164][ T8525] loop2: p2 start 1702059890 is beyond EOD, truncated [ 314.699153][ T139] rpcbind: server 127.0.0.1 not responding, timed out [ 316.848950][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.849003][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.819052][ T8557] program syz.0.1061 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.249942][ T8564] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1064'. [ 319.310000][ T8566] loop2: detected capacity change from 0 to 7 [ 319.330712][ T8566] Dev loop2: unable to read RDB block 7 [ 319.330741][ T8566] loop2: AHDI p1 p2 p3 [ 319.330759][ T8566] loop2: partition table partially beyond EOD, truncated [ 319.330929][ T8566] loop2: p1 start 1601398130 is beyond EOD, truncated [ 319.330945][ T8566] loop2: p2 start 1702059890 is beyond EOD, truncated [ 320.192779][ T8577] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 320.817468][ T8585] loop4: detected capacity change from 0 to 256 [ 320.847001][ T139] rpcbind: server 127.0.0.1 not responding, timed out [ 321.199027][ T8588] overlayfs: missing 'workdir' [ 321.233238][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 321.233257][ T29] audit: type=1804 audit(1793597609.007:42): pid=8589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1073" name="/newroot/190/file0/file1" dev="loop4" ino=15 res=1 errno=0 [ 321.329455][ T8593] loop0: detected capacity change from 0 to 16 [ 321.380498][ T8593] erofs (device loop0): mounted with root inode @ nid 36. [ 321.422534][ T29] audit: type=1800 audit(1793597609.197:43): pid=8593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1076" name="file1" dev="loop0" ino=86 res=0 errno=-22 [ 321.832087][ T8596] program syz.5.1078 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.921287][ T8599] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1080'. [ 322.133756][ T8602] Bluetooth: MGMT ver 1.23 [ 323.421105][ T8626] ioremap: invalid physical address 8000000000000000 [ 323.421194][ T8626] ------------[ cut here ]------------ [ 323.421201][ T8626] 1 [ 323.421207][ T8626] WARNING: arch/x86/mm/ioremap.c:206 at __ioremap_caller+0x51e/0x620, CPU#0: syz.5.1088/8626 [ 323.447458][ T8626] Modules linked in: [ 323.451543][ T8626] CPU: 0 UID: 0 PID: 8626 Comm: syz.5.1088 Not tainted syzkaller #0 PREEMPT(full) [ 323.460919][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 323.471067][ T8626] RIP: 0010:__ioremap_caller+0x51e/0x620 [ 323.477714][ T8626] Code: 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 35 6e 96 ff cc e8 c4 3d 4f 00 48 8b 74 24 60 48 c7 c7 20 0c 2a 8c e8 33 ef ad ff 90 <0f> 0b 90 e9 49 fd ff ff 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 [ 323.497679][ T8626] RSP: 0018:ffffc900061e7880 EFLAGS: 00010246 [ 323.503840][ T8626] RAX: 0000000000000032 RBX: 1ffff92000c3cf00 RCX: 5d018268659a9000 [ 323.512149][ T8626] RDX: ffffc9000df72000 RSI: 0000000000000274 RDI: 0000000000000275 [ 323.520147][ T8626] RBP: ffffc900061e7990 R08: ffffc900061e7607 R09: 1ffff92000c3cec0 [ 323.529970][ T8626] R10: dffffc0000000000 R11: fffff52000c3cec1 R12: 0000000000008000 [ 323.539003][ T8626] R13: 0000000000000030 R14: 8000000000000fff R15: dffffc0000000000 [ 323.547118][ T8626] FS: 00007f122e8016c0(0000) GS:ffff888123411000(0000) knlGS:0000000000000000 [ 323.556170][ T8626] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.563056][ T8626] CR2: 00007ffc42325c80 CR3: 0000000027d08000 CR4: 0000000000350ef0 [ 323.571334][ T8626] Call Trace: [ 323.574869][ T8626] [ 323.577786][ T8626] ? register_device+0x12c/0x570 [ 323.582881][ T8626] ? __pfx___ioremap_caller+0x10/0x10 [ 323.588273][ T8626] ? __kasan_kmalloc+0x93/0xb0 [ 323.593182][ T8626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.598820][ T8626] ? __kmalloc_cache_noprof+0x31c/0x600 [ 323.604436][ T8626] ? __kmalloc_cache_noprof+0x148/0x600 [ 323.609986][ T8626] ? register_device+0xc6/0x570 [ 323.614933][ T8626] ? register_device+0xc6/0x570 [ 323.619993][ T8626] register_device+0x12c/0x570 [ 323.626772][ T8626] phram_setup+0x412/0x620 [ 323.632307][ T8626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.637966][ T8626] ? __pfx_phram_setup+0x10/0x10 [ 323.643032][ T8626] ? __pfx___mutex_lock+0x10/0x10 [ 323.648109][ T8626] ? sysfs_file_kobj+0x1a/0x230 [ 323.653169][ T8626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.658817][ T8626] param_attr_store+0x214/0x310 [ 323.663940][ T8626] ? __pfx_param_attr_store+0x10/0x10 [ 323.669325][ T8626] ? __pfx_sysfs_kf_write+0x10/0x10 [ 323.674596][ T8626] module_attr_store+0x65/0x90 [ 323.679494][ T8626] kernfs_fop_write_iter+0x3a4/0x540 [ 323.684863][ T8626] vfs_write+0x612/0xba0 [ 323.689121][ T8626] ? __pfx_vfs_write+0x10/0x10 [ 323.693973][ T8626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.699604][ T8626] ? __fget_files+0x3a2/0x420 [ 323.704335][ T8626] ? __fget_files+0x2a/0x420 [ 323.708930][ T8626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.714611][ T8626] ? fdget+0x1ac/0x250 [ 323.718681][ T8626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.724434][ T8626] ksys_write+0x150/0x270 [ 323.730384][ T8626] ? __pfx_ksys_write+0x10/0x10 [ 323.735260][ T8626] do_syscall_64+0x166/0x520 [ 323.739877][ T8626] ? trace_irq_disable+0x3b/0x140 [ 323.745902][ T8626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.752094][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.758000][ T8626] RIP: 0033:0x7f122d99f559 [ 323.762499][ T8626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.782212][ T8626] RSP: 002b:00007f122e801028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 323.790683][ T8626] RAX: ffffffffffffffda RBX: 00007f122dc25fa0 RCX: 00007f122d99f559 [ 323.798647][ T8626] RDX: 000000000000001e RSI: 0000200000000cc0 RDI: 0000000000000009 [ 323.806709][ T8626] RBP: 00007f122da36b50 R08: 0000000000000000 R09: 0000000000000000 [ 323.814747][ T8626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.822824][ T8626] R13: 00007f122dc26038 R14: 00007f122dc25fa0 R15: 00007ffdb548bfb8 [ 323.832406][ T8626] [ 323.835431][ T8626] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 323.842718][ T8626] CPU: 0 UID: 0 PID: 8626 Comm: syz.5.1088 Not tainted syzkaller #0 PREEMPT(full) [ 323.851991][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 323.862062][ T8626] Call Trace: [ 323.865329][ T8626] [ 323.868245][ T8626] vpanic+0x26f/0x710 [ 323.872247][ T8626] panic+0xc5/0xd0 [ 323.875957][ T8626] ? __pfx_panic+0x10/0x10 [ 323.880384][ T8626] __warn+0x315/0x4c0 [ 323.884355][ T8626] ? __ioremap_caller+0x51e/0x620 [ 323.889379][ T8626] ? __ioremap_caller+0x51e/0x620 [ 323.894396][ T8626] __report_bug+0x276/0x570 [ 323.898931][ T8626] ? __ioremap_caller+0x51e/0x620 [ 323.904043][ T8626] ? __pfx___report_bug+0x10/0x10 [ 323.909067][ T8626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.914699][ T8626] ? irq_work_queue+0xbf/0x150 [ 323.919484][ T8626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.925151][ T8626] ? vprintk_emit+0x55c/0x5f0 [ 323.929830][ T8626] ? __kmalloc_cache_noprof+0x31c/0x600 [ 323.935383][ T8626] ? register_device+0xc6/0x570 [ 323.940260][ T8626] ? __pfx_vprintk_emit+0x10/0x10 [ 323.945292][ T8626] ? ksys_write+0x150/0x270 [ 323.949829][ T8626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.955917][ T8626] ? __ioremap_caller+0x51e/0x620 [ 323.960972][ T8626] report_bug+0x16b/0x220 [ 323.965317][ T8626] ? __ioremap_caller+0x51e/0x620 [ 323.970343][ T8626] ? __ioremap_caller+0x520/0x620 [ 323.975366][ T8626] handle_bug+0x9c/0x200 [ 323.979607][ T8626] exc_invalid_op+0x1a/0x50 [ 323.984111][ T8626] asm_exc_invalid_op+0x1a/0x20 [ 323.988950][ T8626] RIP: 0010:__ioremap_caller+0x51e/0x620 [ 323.994582][ T8626] Code: 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 35 6e 96 ff cc e8 c4 3d 4f 00 48 8b 74 24 60 48 c7 c7 20 0c 2a 8c e8 33 ef ad ff 90 <0f> 0b 90 e9 49 fd ff ff 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 [ 324.014186][ T8626] RSP: 0018:ffffc900061e7880 EFLAGS: 00010246 [ 324.020259][ T8626] RAX: 0000000000000032 RBX: 1ffff92000c3cf00 RCX: 5d018268659a9000 [ 324.028228][ T8626] RDX: ffffc9000df72000 RSI: 0000000000000274 RDI: 0000000000000275 [ 324.036232][ T8626] RBP: ffffc900061e7990 R08: ffffc900061e7607 R09: 1ffff92000c3cec0 [ 324.044205][ T8626] R10: dffffc0000000000 R11: fffff52000c3cec1 R12: 0000000000008000 [ 324.052166][ T8626] R13: 0000000000000030 R14: 8000000000000fff R15: dffffc0000000000 [ 324.060181][ T8626] ? register_device+0x12c/0x570 [ 324.065162][ T8626] ? __pfx___ioremap_caller+0x10/0x10 [ 324.070557][ T8626] ? __kasan_kmalloc+0x93/0xb0 [ 324.075324][ T8626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.080952][ T8626] ? __kmalloc_cache_noprof+0x31c/0x600 [ 324.086500][ T8626] ? __kmalloc_cache_noprof+0x148/0x600 [ 324.092044][ T8626] ? register_device+0xc6/0x570 [ 324.096898][ T8626] ? register_device+0xc6/0x570 [ 324.101759][ T8626] register_device+0x12c/0x570 [ 324.106538][ T8626] phram_setup+0x412/0x620 [ 324.111133][ T8626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.116776][ T8626] ? __pfx_phram_setup+0x10/0x10 [ 324.121738][ T8626] ? __pfx___mutex_lock+0x10/0x10 [ 324.126780][ T8626] ? sysfs_file_kobj+0x1a/0x230 [ 324.131649][ T8626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.137298][ T8626] param_attr_store+0x214/0x310 [ 324.142198][ T8626] ? __pfx_param_attr_store+0x10/0x10 [ 324.147609][ T8626] ? __pfx_sysfs_kf_write+0x10/0x10 [ 324.152821][ T8626] module_attr_store+0x65/0x90 [ 324.157609][ T8626] kernfs_fop_write_iter+0x3a4/0x540 [ 324.162905][ T8626] vfs_write+0x612/0xba0 [ 324.167209][ T8626] ? __pfx_vfs_write+0x10/0x10 [ 324.172027][ T8626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.177662][ T8626] ? __fget_files+0x3a2/0x420 [ 324.182348][ T8626] ? __fget_files+0x2a/0x420 [ 324.186947][ T8626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.192581][ T8626] ? fdget+0x1ac/0x250 [ 324.196659][ T8626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.202382][ T8626] ksys_write+0x150/0x270 [ 324.206715][ T8626] ? __pfx_ksys_write+0x10/0x10 [ 324.211576][ T8626] do_syscall_64+0x166/0x520 [ 324.216165][ T8626] ? trace_irq_disable+0x3b/0x140 [ 324.221194][ T8626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.227266][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.233158][ T8626] RIP: 0033:0x7f122d99f559 [ 324.237630][ T8626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.257334][ T8626] RSP: 002b:00007f122e801028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 324.265769][ T8626] RAX: ffffffffffffffda RBX: 00007f122dc25fa0 RCX: 00007f122d99f559 [ 324.273928][ T8626] RDX: 000000000000001e RSI: 0000200000000cc0 RDI: 0000000000000009 [ 324.281890][ T8626] RBP: 00007f122da36b50 R08: 0000000000000000 R09: 0000000000000000 [ 324.289853][ T8626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.297809][ T8626] R13: 00007f122dc26038 R14: 00007f122dc25fa0 R15: 00007ffdb548bfb8 [ 324.305821][ T8626] [ 324.308874][ T8626] Kernel Offset: disabled [ 324.313187][ T8626] Rebooting in 86400 seconds..