last executing test programs: 11.521202532s ago: executing program 2 (id=29): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@newtfilter={0x70, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x3}, {0xfff1, 0xffff}, {0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x7caf, 0x9, 0x8001}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}]}]}]}}]}, 0x70}}, 0x40804) 9.393225793s ago: executing program 2 (id=36): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000b0ff001c00000000feffffff18160000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000017b9af8ff00000000d6090000ff0700007baaf0ff00000000bf2700000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000005000000b70000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f0000000400)) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x0, &(0x7f0000000280)}) r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x22000) ioctl$BLKTRACESETUP(r4, 0xc0481273, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r6 = memfd_create(&(0x7f0000000e00)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x5, 0x85, 0x1, 0x1, {0x3, 0x1, 0x5, 0x8, 0x1fc, 0xd615, 0x9, 0x535, 0xfffffffd, 0x1000, 0xff, 0x0, 0x0, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 5.521361927s ago: executing program 2 (id=49): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x808400, &(0x7f00000000c0)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@acl}]}, 0x1, 0x45f, &(0x7f0000000340)="$eJzs28tvG0UYAPBvN4++iSnl0QcQKIiIR9K0BXrgAAgkDkVCggMcoyStSt0GNUFqqwpahMoJISTuiCP/Aie4IMQJiSvcUaUK9dKWk9F6dxvHtd0kteOCfz9pk5nd2Z35vDv27I4dwMAaz/4kEdsj4o+IGMuzKwuM5/9uXLswe/PahdkkarV3/07q5a5fuzBbFi3321ZkJtKI9PMk9raod/Hc+ZMz1er8mSI/tXTqo6nFc+dfOHFq5vj88fnTB48cOXxo+uWXDr7YlTizNl3f88nCvt1vffD120e/zNaNlvE3xdEl4502Pl2rdbm6/trRkE6G+9gQ1mQoIrLTNVLv/2MxFMsnbyze/KyvjQN6qlar1ba133yxBvyPbW14J8jo8jAoyg/67P63XJoHAa/2ZuhxT7j6Wn4DlMV9o1jyLcORFmVGmu5vu2k8It6/+M+32RK9eQ4BALDCj9n45/lW4780Hmood18xN1SJiPsjYmdEPBARuyLiwYh62Ycj4pE11t88SXL7+Ce9sq7AVikb/71SzG2tHP+Vo7+oDBW5HfX4R5JjJ6rzB4rXZCJGNmX56Q51/PTG71+129Y4/suWrP5yLFi048rwppX7zM0szdxNzI2uXorYM9wq/uTWTEASEbsjYs866zjx7Pf72m27c/wddGGeqfZdxDP5+b8YTfGXks7zk1Obozp/YKq8Km7362+X32lX/13F3wXZ+d/a8vq/FX8laZyvXVx7HZf//KLtPc0qr/9K4z7Z9T+avFdPjxbrzs4sLZ2ZjhhNjuaNblx/cHnfMl+Wz+Kf2N+6/++M5Vdib0RkF/GjEfFYRDxetP2JiHgyIvZ3iP+X15/6cP3x91YW/9yazv9yYjSa17RODJ38+YcVlVZui/9m5/N/uJ6aKNas5v1vNe1a39UMAAAA/z1pRGyPJJ28lU7Tycn8+/K7ItLqwuLSc8cWPj49l/9GoBIjafmka6zheeh0cVuf5y9FRP7VgnL7oeK58TdDW+r5ydmF6ly/g4cBt61N/8/8NdTv1gE95/daMLj0fxhc+j8Mrtb9f8uGtwPYeC36v84PA6LV5/+nfWgHsPGa+r9pPxggnv/B4NL/YXDp/zCQFrfEnX8k3zFRHmmdu3dKDJ/ND939I29AIkbuiWbkic3dP3Kk90BcEj1L9PFNCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoIv+DQAA///U99eV") sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file1\x00', 0x14040, &(0x7f0000001e40)=ANY=[], 0x1, 0x5ed1, &(0x7f0000005d80)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a44000000090a01040000000000f7ff000a0000040900020073797a310000000008000a40fffffffc0900010073797a31"], 0x6c}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x101, 0x2000003, 0x1758}) 5.439765719s ago: executing program 0 (id=50): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)="08000000001f009e", 0x8}], 0x1}}], 0x2, 0x4000) 5.358618741s ago: executing program 0 (id=52): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) read$char_usb(r0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x20, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) syz_ublk_setup_io_uring(0x30, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2, 0x1e5}, 0x0, 0x0, 0x0) 5.259471353s ago: executing program 3 (id=53): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x1000000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x551040, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_vhci(0x0, 0x14) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='offline', 0x7) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x8, 0x7837, 0x5ad, 0xaac, {{0xd, 0x4, 0x2, 0x2, 0x34, 0x67, 0x0, 0x7f, 0x29, 0x0, @multicast1, @private=0xa010101, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x6c, 0x0, 0x7}, @end, @cipso={0x86, 0x13, 0x2, [{0x0, 0xd, "29560863f5723c2ba4d533"}]}, @noop]}}}}}) 3.822124428s ago: executing program 0 (id=54): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fspick(0xffffffffffffffff, 0x0, 0x0) 3.104174725s ago: executing program 0 (id=55): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl(r0, 0x5, 0x0) 2.975656278s ago: executing program 4 (id=56): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="a92e81d0991808e33c2330164cf023", 0xf}, {&(0x7f00000001c0)="e1", 0x1}, {&(0x7f0000000180)="04130cb5c68b99183cec6047e4652bd69b", 0x11}], 0x3, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000240)=""/65, 0x41}], 0x1}, 0x6}], 0x1, 0x40000141, 0x0) 2.859185131s ago: executing program 1 (id=57): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket(0x40000000015, 0x5, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r3, &(0x7f0000000300), 0x0) 2.849431182s ago: executing program 0 (id=58): openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) 2.523020329s ago: executing program 1 (id=59): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@newtfilter={0x70, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x3}, {0xfff1, 0xffff}, {0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x7caf, 0x9, 0x8001}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}]}]}]}}]}, 0x70}}, 0x40804) 2.307847685s ago: executing program 3 (id=60): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000000)={0x0, 0x3, 0x8000}) 2.203795907s ago: executing program 1 (id=61): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0xc004) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x33, 0x0, @val=@netfilter={0x5, 0x1, 0x2, 0x1}}, 0x20) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000200)=[{0x40, 0x2, 0xfd, 0x6}, {0x20, 0x7f, 0x1, 0xfffff00c}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) close(r0) 2.043859841s ago: executing program 1 (id=62): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x163440, 0x10) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, 0x0, 0x0, 0x0) 1.897806454s ago: executing program 3 (id=63): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000f40)={0x5, 0x9, {0xffffffffffffffff}, {0xee00}, 0x9, 0xfa8}) fstat(r0, &(0x7f0000000f80)) sendmsg$unix(r1, 0x0, 0x4010814) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x4, 0xe, 0x3, 0x2, 0x44, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7, 0x80000000, 0x7}}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000580)={@ipv4={""/10, ""/2, @dev}}, &(0x7f0000000740)=0x14) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, 0x0, 0x8001) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) syz_open_dev$dvb_dvr(0x0, 0x39c0, 0x45a102) write(r3, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400223a6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) 1.885579625s ago: executing program 1 (id=64): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x40800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 1.791266357s ago: executing program 3 (id=65): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @private=0xa010100}}) 1.627681741s ago: executing program 2 (id=66): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058ff0b, &(0x7f0000000200)=@mmap={0x7b186446, 0xb, 0x4, 0x70000, 0xfffffffd, {0x77359400}, {0x4, 0x1, 0xf6, 0x9, 0x3, 0x6, "95d63c46"}, 0x7, 0x1, {}, 0x80000001, 0x0, r1}) 1.627514181s ago: executing program 4 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0xb3) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) 1.627364391s ago: executing program 3 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x6ae69938, 0xa001) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000140)=""/19) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) io_setup(0x8, &(0x7f0000000600)=0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r1, 0x1, &(0x7f00000037c0)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x8, r2, 0x0, 0x54, 0x6508d016}]) 1.574015432s ago: executing program 2 (id=69): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000bc0)={[{@grpquota}, {@discard}, {@resuid}, {@debug}, {@dioread_nolock}, {@grpjquota_path={'grpjquota', 0x3d, './bus'}}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x84c42, 0x1fa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) 1.540784423s ago: executing program 4 (id=70): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x1000000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x551040, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_vhci(0x0, 0x14) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='offline', 0x7) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x8, 0x7837, 0x5ad, 0xaac, {{0xd, 0x4, 0x2, 0x2, 0x34, 0x67, 0x0, 0x7f, 0x29, 0x0, @multicast1, @private=0xa010101, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x6c, 0x0, 0x7}, @end, @cipso={0x86, 0x13, 0x2, [{0x0, 0xd, "29560863f5723c2ba4d533"}]}, @noop]}}}}}) 612.425895ms ago: executing program 1 (id=71): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket(0x40000000015, 0x5, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r3, &(0x7f0000000300), 0x0) 31.69948ms ago: executing program 3 (id=72): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0xc004) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x33, 0x0, @val=@netfilter={0x5, 0x1, 0x2, 0x1}}, 0x20) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000200)=[{0x40, 0x2, 0xfd, 0x6}, {0x20, 0x7f, 0x1, 0xfffff00c}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) close(r0) 0s ago: executing program 4 (id=73): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@newtfilter={0x70, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x3}, {0xfff1, 0xffff}, {0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x7caf, 0x9, 0x8001}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}]}]}]}}]}, 0x70}}, 0x40804) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts. [ 65.892578][ T4174] cgroup: Unknown subsys name 'net' [ 66.018115][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.721429][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.276150][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 69.358292][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 69.370431][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 69.436696][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 69.496571][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 69.547168][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.556418][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.564628][ T4188] device bridge_slave_0 entered promiscuous mode [ 69.601038][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.610490][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.620253][ T4190] device bridge_slave_0 entered promiscuous mode [ 69.627747][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.635737][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.644658][ T4188] device bridge_slave_1 entered promiscuous mode [ 69.672197][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.679687][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.688927][ T4187] device bridge_slave_0 entered promiscuous mode [ 69.699787][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.707311][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.716062][ T4190] device bridge_slave_1 entered promiscuous mode [ 69.743458][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.751215][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.759887][ T4187] device bridge_slave_1 entered promiscuous mode [ 69.777571][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.796618][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.804256][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.814104][ T4186] device bridge_slave_0 entered promiscuous mode [ 69.828170][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.836011][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.844863][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.868227][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.879668][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.911022][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.919043][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.927341][ T4199] device bridge_slave_0 entered promiscuous mode [ 69.941776][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.949202][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.958186][ T4199] device bridge_slave_1 entered promiscuous mode [ 69.968370][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.990322][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.004172][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.029345][ T4188] team0: Port device team_slave_0 added [ 70.037278][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.049813][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.080398][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.091915][ T4188] team0: Port device team_slave_1 added [ 70.123430][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.148891][ T4190] team0: Port device team_slave_0 added [ 70.174521][ T4187] team0: Port device team_slave_0 added [ 70.183131][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.190542][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.221238][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.242766][ T4190] team0: Port device team_slave_1 added [ 70.251366][ T4186] team0: Port device team_slave_0 added [ 70.260411][ T4187] team0: Port device team_slave_1 added [ 70.266915][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.274905][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.303460][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.319118][ T4199] team0: Port device team_slave_0 added [ 70.336438][ T4199] team0: Port device team_slave_1 added [ 70.354284][ T4186] team0: Port device team_slave_1 added [ 70.406840][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.414496][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.443149][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.464479][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.471824][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.498950][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.511881][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.527253][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.554767][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.566671][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.573932][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.601360][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.624463][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.631540][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.658662][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.671901][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.679223][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.705971][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.718300][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.725600][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.751866][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.777443][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.784758][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.813892][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.840556][ T4188] device hsr_slave_0 entered promiscuous mode [ 70.848565][ T4188] device hsr_slave_1 entered promiscuous mode [ 70.916011][ T4190] device hsr_slave_0 entered promiscuous mode [ 70.923048][ T4190] device hsr_slave_1 entered promiscuous mode [ 70.930642][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.939084][ T4190] Cannot create hsr debugfs directory [ 70.960213][ T4199] device hsr_slave_0 entered promiscuous mode [ 70.967186][ T4199] device hsr_slave_1 entered promiscuous mode [ 70.974717][ T1331] Bluetooth: hci4: command 0x0409 tx timeout [ 70.982700][ T2289] Bluetooth: hci3: command 0x0409 tx timeout [ 70.987530][ T1331] Bluetooth: hci0: command 0x0409 tx timeout [ 70.989533][ T2289] Bluetooth: hci2: command 0x0409 tx timeout [ 71.003068][ T2289] Bluetooth: hci1: command 0x0409 tx timeout [ 71.007852][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.017259][ T4199] Cannot create hsr debugfs directory [ 71.035671][ T4186] device hsr_slave_0 entered promiscuous mode [ 71.043682][ T4186] device hsr_slave_1 entered promiscuous mode [ 71.050939][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.059732][ T4186] Cannot create hsr debugfs directory [ 71.088891][ T4187] device hsr_slave_0 entered promiscuous mode [ 71.095748][ T4187] device hsr_slave_1 entered promiscuous mode [ 71.102767][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.110974][ T4187] Cannot create hsr debugfs directory [ 71.441291][ T4199] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.457485][ T4199] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.474550][ T4199] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.492417][ T4199] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.521592][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.553566][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.577192][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.589771][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.616121][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.622841][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.662074][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.671120][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.697938][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.707147][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.750637][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.772120][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.800538][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.812173][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.824902][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.838379][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.851101][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.864276][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.873374][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.884191][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.902198][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.913556][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.932084][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.945357][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.956110][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.964271][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.976695][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.986349][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.996140][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.008151][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.015520][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.052075][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.062104][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.074544][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.082005][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.094350][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.103772][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.113026][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.120131][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.128505][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.139479][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.149204][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.178405][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.189812][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.204953][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.215214][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.226589][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.241682][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.251927][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.266644][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.275288][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.285735][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.297718][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.324845][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.339325][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.360986][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.388011][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.400705][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.411035][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.421390][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.431202][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.440596][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.454068][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.464166][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.503906][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.525591][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.534521][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.548135][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.594675][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.604566][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.631339][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.682566][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.691691][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.704148][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.711945][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.723930][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.734126][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.744490][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.751710][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.760829][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.777485][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.812425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.841337][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.870873][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.880321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.896103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.911425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.921559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.930652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.941016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.950782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.960827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.975874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.996431][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.024781][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.043771][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.053210][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 73.055093][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 73.059580][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 73.066844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.093000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.100758][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 73.103203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.114912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.123365][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 73.137757][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.146773][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.155455][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.171801][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.181347][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.188597][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.199415][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.225098][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.243489][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.263319][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.278928][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.294605][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.303210][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.315873][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.329699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.357352][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.409980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.421622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.435511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.445948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.455778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.465607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.476130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.485307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.498775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.509016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.532009][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.545692][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.563911][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.571710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.582834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.592062][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.599709][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.609803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.620828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.630980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.640084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.649421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.658002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.690006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.699918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.714992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.729233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.739624][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.746911][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.755922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.767688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.776416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.790407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.799352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.826233][ T4188] device veth0_vlan entered promiscuous mode [ 73.859076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.872184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.882104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.898654][ T4199] device veth0_vlan entered promiscuous mode [ 73.925288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.936130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.947524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.957863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.968292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.994684][ T4188] device veth1_vlan entered promiscuous mode [ 74.026496][ T4199] device veth1_vlan entered promiscuous mode [ 74.042199][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.051606][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.061557][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.071687][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.081904][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.094073][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.104659][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.112979][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.122069][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.138489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.148530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.168837][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.192456][ T4190] device veth0_vlan entered promiscuous mode [ 74.199286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.208364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.223911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.233134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.244355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.256281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.265699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.294403][ T4199] device veth0_macvtap entered promiscuous mode [ 74.308035][ T4190] device veth1_vlan entered promiscuous mode [ 74.321756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.334437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.347030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.357705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.367794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.378070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.391611][ T4199] device veth1_macvtap entered promiscuous mode [ 74.404088][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.426439][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.436941][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.452025][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.465232][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.477214][ T4188] device veth0_macvtap entered promiscuous mode [ 74.492065][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.504573][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.513198][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.522050][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.535176][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.556279][ T4186] device veth0_vlan entered promiscuous mode [ 74.565579][ T4188] device veth1_macvtap entered promiscuous mode [ 74.600450][ T4186] device veth1_vlan entered promiscuous mode [ 74.626898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.637642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.654999][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.680048][ T4190] device veth0_macvtap entered promiscuous mode [ 74.705740][ T4190] device veth1_macvtap entered promiscuous mode [ 74.713392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.721619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.733831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.745910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.763318][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.774804][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.794690][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.812094][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.832828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.852650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.869443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.879485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.893259][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.906839][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.916831][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.929379][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.946917][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.959880][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.977232][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.989740][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.999341][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.008662][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.017950][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.043404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.054224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.067555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.076697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.095040][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.106388][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.117408][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.131352][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.145037][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.153634][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 75.161787][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 75.169902][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.180840][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 75.187832][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 75.194936][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.204061][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.215299][ T4227] Bluetooth: hci4: command 0x040f tx timeout [ 75.222769][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.234485][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.246703][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.264632][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.279539][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.290896][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.300978][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.311065][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.324027][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.353982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.366589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.380796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.390919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.428815][ T4186] device veth0_macvtap entered promiscuous mode [ 75.480380][ T4186] device veth1_macvtap entered promiscuous mode [ 75.518042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.536064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.570710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.573844][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.581249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.595311][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.626541][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.647501][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.657983][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.668592][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.679535][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.690234][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.709194][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.726276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.735384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.745333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.756213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.765344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.798558][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.817229][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.828201][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.839393][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.849495][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.862087][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.874629][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.885739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.896978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.909024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.918956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.929975][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.940938][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.954293][ T4187] device veth0_vlan entered promiscuous mode [ 75.965575][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.976818][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.986484][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.996143][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.006316][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.039547][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.041804][ T4187] device veth1_vlan entered promiscuous mode [ 76.054710][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.088189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.098927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.121108][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.145556][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.183412][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.199069][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.231180][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.240891][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.249208][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.260579][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.270193][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.285121][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.286448][ T4187] device veth0_macvtap entered promiscuous mode [ 76.293722][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.322908][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.331837][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.374438][ T4187] device veth1_macvtap entered promiscuous mode [ 76.391139][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.401935][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.417222][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.429805][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.430077][ T4269] loop4: detected capacity change from 0 to 16 [ 76.471173][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.487006][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.501761][ T4271] jffs2: notice: (4271) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 76.504893][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.536329][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.548027][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.565605][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.580640][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.595759][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.637913][ T4269] erofs: (device loop4): mounted with root inode @ nid 36. [ 76.641491][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.665982][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.675477][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.684328][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.715336][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.752308][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.762315][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.772864][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.784208][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.795045][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.806198][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.819583][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.830906][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.840323][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.851624][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 78.373109][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 78.379876][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 78.395757][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 78.404107][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 78.411425][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 78.435229][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.447156][ T4276] loop2: detected capacity change from 0 to 512 [ 78.499675][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.532628][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.554980][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.599864][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.632791][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.692621][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.722305][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.752331][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.774059][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.791415][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.814896][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.857188][ T4284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 79.016718][ T4276] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.131922][ T4276] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.904729][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.914941][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.924946][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.936934][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.674945][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.706212][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.749145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.845270][ T4307] loop3: detected capacity change from 0 to 764 [ 81.873944][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.881946][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.926955][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.591476][ T4317] loop0: detected capacity change from 0 to 64 [ 83.837782][ T4322] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.648618][ T4337] usb usb8: usbfs: process 4337 (syz.3.18) did not claim interface 0 before use [ 85.884524][ T4267] Bluetooth: hci0: command 0x0401 tx timeout [ 86.326114][ T4326] loop0: detected capacity change from 0 to 32768 [ 86.588370][ T4343] loop3: detected capacity change from 0 to 32768 [ 86.616572][ T4326] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.16 (4326) [ 86.664267][ T4343] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 86.674623][ T4343] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 86.705312][ T4343] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 1ms [ 86.742072][ T21] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 86.753592][ T21] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 86.828617][ T4326] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 86.842672][ T21] attempt to access beyond end of device [ 86.842672][ T21] loop3: rw=0, want=134217736, limit=32768 [ 86.892887][ T4326] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 86.919459][ T21] attempt to access beyond end of device [ 86.919459][ T21] loop3: rw=0, want=402653192, limit=32768 [ 86.955852][ T4326] BTRFS info (device loop0): use zstd compression, level 3 [ 86.977204][ T1108] cfg80211: failed to load regulatory.db [ 86.984529][ T4326] BTRFS info (device loop0): using free space tree [ 87.014409][ T21] gfs2: fsid=syz:syz.0: jid=0: Failed [ 87.023520][ T4343] gfs2: fsid=syz:syz.0: error recovering journal 0: -5 [ 87.081557][ T4326] BTRFS info (device loop0): has skinny extents [ 87.401188][ T4376] syz.4.14 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 87.923342][ T4375] netlink: 'syz.4.14': attribute type 3 has an invalid length. [ 87.935981][ T4375] netlink: 'syz.4.14': attribute type 3 has an invalid length. [ 88.525617][ T4377] loop3: detected capacity change from 0 to 128 [ 89.247459][ T4377] omfs: sysblock size (-58445445) is out of range [ 90.018149][ T4385] loop4: detected capacity change from 0 to 256 [ 90.258279][ T4385] ======================================================= [ 90.258279][ T4385] WARNING: The mand mount option has been deprecated and [ 90.258279][ T4385] and is ignored by this kernel. Remove the mand [ 90.258279][ T4385] option from the mount to silence this warning. [ 90.258279][ T4385] ======================================================= [ 90.370592][ T4385] FAT-fs (loop4): bogus logical sector size 0 [ 90.390078][ T4385] FAT-fs (loop4): Can't find a valid FAT filesystem [ 90.416076][ T4326] BTRFS error (device loop0): open_ctree failed: -12 [ 90.640809][ T4383] netlink: 32 bytes leftover after parsing attributes in process `syz.4.28'. [ 91.903778][ T4410] Cannot find set identified by id 0 to match [ 92.822747][ T2289] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.751485][ T4416] loop7: detected capacity change from 0 to 16384 [ 93.802633][ T2289] usb 5-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 93.853735][ T2289] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 93.912727][ T2289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.002415][ T4419] loop_set_status: loop7 () has still dirty pages (nrpages=608) [ 94.083920][ T4409] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 94.108051][ T2289] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 94.438917][ T4428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.41'. [ 94.652807][ T4431] netlink: 52 bytes leftover after parsing attributes in process `syz.1.42'. [ 94.791594][ T4418] loop0: detected capacity change from 0 to 32768 [ 94.864487][ T4418] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 95.597128][ T4418] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 95.634285][ T2289] usb 5-1: USB disconnect, device number 2 [ 95.970063][ T4418] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 96.031549][ T4442] netlink: 'syz.2.40': attribute type 1 has an invalid length. [ 96.043254][ T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 96.052518][ T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 96.070284][ T4442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 96.177601][ T4442] netlink: 'syz.2.40': attribute type 1 has an invalid length. [ 96.208471][ T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 155ms [ 96.229171][ T7] gfs2: fsid=syz:syz.0: jid=0: Done [ 96.238314][ T4418] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 96.266427][ T4418] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 96.551712][ T4450] loop4: detected capacity change from 0 to 32768 [ 96.602423][ T4450] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.47 (4450) [ 96.637027][ T4450] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 96.645877][ T4450] BTRFS info (device loop4): use zlib compression, level 3 [ 96.654271][ T4450] BTRFS info (device loop4): turning on sync discard [ 96.660981][ T4450] BTRFS info (device loop4): using free space tree [ 96.667801][ T4450] BTRFS info (device loop4): has skinny extents [ 96.676283][ T4454] loop2: detected capacity change from 0 to 512 [ 96.833031][ T4465] FAULT_INJECTION: forcing a failure. [ 96.833031][ T4465] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 96.848367][ T4465] CPU: 0 PID: 4465 Comm: syz.0.52 Not tainted syzkaller #0 [ 96.855989][ T4465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.866252][ T4465] Call Trace: [ 96.869570][ T4465] [ 96.872618][ T4465] dump_stack_lvl+0x188/0x250 [ 96.877341][ T4465] ? show_regs_print_info+0x20/0x20 [ 96.882581][ T4465] ? load_image+0x410/0x410 [ 96.887135][ T4465] ? mark_lock+0x94/0x320 [ 96.891638][ T4465] should_fail+0x383/0x4b0 [ 96.896185][ T4465] prepare_alloc_pages+0x1e3/0x5b0 [ 96.901343][ T4465] __alloc_pages+0x11b/0x480 [ 96.905970][ T4465] ? zone_statistics+0x170/0x170 [ 96.911116][ T4465] ? rcu_lock_acquire+0x30/0x30 [ 96.916177][ T4465] ? alloc_pages+0x452/0x560 [ 96.921148][ T4465] __get_free_pages+0x8/0x30 [ 96.925783][ T4465] __tlb_remove_page_size+0x1f2/0x3f0 [ 96.931574][ T4465] unmap_page_range+0xfcf/0x2410 [ 96.936644][ T4465] unmap_vmas+0x131/0x250 [ 96.941256][ T4465] ? unmap_page_range+0x2410/0x2410 [ 96.946684][ T4465] ? __mutex_lock_common+0x435/0x2400 [ 96.953419][ T4465] ? exit_mm_release+0x16/0x30 [ 96.959200][ T4465] exit_mmap+0x3b9/0x640 [ 96.963929][ T4465] ? vm_brk+0x20/0x20 [ 96.968038][ T4465] ? uprobe_clear_state+0x2f6/0x460 [ 96.973693][ T4465] __mmput+0x115/0x390 [ 96.977960][ T4465] exit_mm+0x632/0x7b0 [ 96.982278][ T4465] ? perf_pmu_migrate_context+0xb70/0xb70 [ 96.988283][ T4465] ? do_exit+0x2110/0x2110 [ 96.992936][ T4465] ? __ia32_sys_timer_delete+0x40/0x40 [ 96.998811][ T4465] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 97.004828][ T4465] ? tty_audit_exit+0x149/0x1f0 [ 97.009695][ T4465] do_exit+0x5b8/0x2110 [ 97.013861][ T4465] ? put_task_struct+0x80/0x80 [ 97.018638][ T4465] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 97.024715][ T4465] ? _raw_spin_lock_irq+0xb7/0xf0 [ 97.029743][ T4465] do_group_exit+0x12c/0x2f0 [ 97.034514][ T4465] ? lockdep_hardirqs_on+0x94/0x140 [ 97.039708][ T4465] get_signal+0x7eb/0x12e0 [ 97.044329][ T4465] arch_do_signal_or_restart+0xe6/0x12a0 [ 97.050137][ T4465] ? arch_do_signal_or_restart+0xec5/0x12a0 [ 97.056191][ T4465] ? futex_exit_release+0x1c0/0x1c0 [ 97.061478][ T4465] ? get_sigframe_size+0x10/0x10 [ 97.066612][ T4465] ? __context_tracking_exit+0x4c/0x80 [ 97.072190][ T4465] ? exit_to_user_mode_loop+0x3b/0x130 [ 97.077655][ T4465] exit_to_user_mode_loop+0x9e/0x130 [ 97.082943][ T4465] exit_to_user_mode_prepare+0xee/0x180 [ 97.088730][ T4465] syscall_exit_to_user_mode+0x16/0x40 [ 97.094472][ T4465] do_syscall_64+0x58/0xa0 [ 97.099437][ T4465] ? clear_bhb_loop+0x30/0x80 [ 97.104685][ T4465] ? clear_bhb_loop+0x30/0x80 [ 97.109465][ T4465] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.115367][ T4465] RIP: 0033:0x7f6e72256159 [ 97.119867][ T4465] Code: Unable to access opcode bytes at RIP 0x7f6e7225612f. [ 97.127624][ T4465] RSP: 002b:00007f6e704ae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 97.136693][ T4465] RAX: 0000000000000001 RBX: 00007f6e724ddfa8 RCX: 00007f6e72256159 [ 97.145296][ T4465] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6e724ddfac [ 97.153893][ T4465] RBP: 00007f6e724ddfa0 R08: 002e5c1b7453926a R09: 0000000000000000 [ 97.162816][ T4465] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 97.171596][ T4465] R13: 00007f6e724de038 R14: 00007ffc0277f6f0 R15: 00007ffc0277f7d8 [ 97.179855][ T4465] [ 97.395877][ T4450] BTRFS info (device loop4): enabling ssd optimizations [ 98.106089][ T4454] EXT4-fs (loop2): Test dummy encryption mode enabled [ 98.141487][ T4454] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.266858][ T4476] page:ffffea0001300800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c020 [ 98.308301][ T4454] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.318568][ T4454] EXT4-fs (loop2): SIPHASH is not a valid default hash value [ 98.328465][ T4476] head:ffffea0001300800 order:3 compound_mapcount:0 compound_pincount:0 [ 98.481001][ T4476] memcg:ffff88802b105a01 [ 98.489818][ T4476] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 98.674983][ T26] audit: type=1800 audit(1791117363.243:2): pid=4495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.47" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 98.975648][ T4476] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801794e3c0 [ 99.078303][ T4476] raw: 0000000000000000 0000000080170017 00000001ffffffff ffff88802b105a01 [ 99.133785][ T4476] page dumped because: unmovable page [ 99.139812][ T4476] page_owner tracks the page as allocated [ 99.182749][ T4476] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4436, ts 95663012309, free_ts 23881092916 [ 99.287640][ T4476] get_page_from_freelist+0x24f6/0x2670 [ 99.304622][ T4476] __alloc_pages+0x1ee/0x480 [ 99.309926][ T4476] new_slab+0xc0/0x4b0 [ 99.489192][ T4476] ___slab_alloc+0x807/0xdd0 [ 99.503170][ T4476] kmem_cache_alloc+0xf0/0x280 [ 99.523372][ T4476] proc_alloc_inode+0x19/0xa0 [ 99.538701][ T4476] new_inode_pseudo+0x5f/0x210 [ 99.544474][ T4476] new_inode+0x25/0x1d0 [ 99.548694][ T4476] proc_pid_make_inode+0x20/0x1a0 [ 99.554633][ T4476] proc_pident_instantiate+0x69/0x2a0 [ 99.583440][ T4476] proc_pident_lookup+0x1cb/0x270 [ 99.589137][ T4476] path_openat+0x1046/0x2fb0 [ 99.597327][ T4476] do_filp_open+0x1df/0x400 [ 99.602649][ T4476] do_sys_openat2+0x14b/0x500 [ 99.608837][ T4476] __x64_sys_openat+0x135/0x160 [ 99.621812][ T4476] do_syscall_64+0x4c/0xa0 [ 99.633587][ T4476] page last free stack trace: [ 99.645802][ T4476] free_unref_page_prepare+0x637/0x6c0 [ 99.651892][ T4476] free_unref_page+0x8f/0x2a0 [ 99.674059][ T4476] free_contig_range+0x96/0xf0 [ 99.679165][ T4476] destroy_args+0xef/0xa00 [ 99.698386][ T4476] debug_vm_pgtable+0x321/0x380 [ 99.715130][ T4476] do_one_initcall+0x272/0x730 [ 99.725838][ T4476] do_initcall_level+0x13d/0x1f0 [ 99.739109][ T4476] do_initcalls+0x4b/0x90 [ 99.750969][ T4476] kernel_init_freeable+0x3d5/0x560 [ 99.764016][ T4476] kernel_init+0x19/0x1b0 [ 99.780099][ T4476] ret_from_fork+0x1f/0x30 [ 100.788476][ T4546] loop2: detected capacity change from 0 to 1024 [ 101.009910][ T4546] EXT4-fs (loop2): Mount option "dioread_nolock" incompatible with ext3 [ 101.515564][ T4549] page:ffffea0001300800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c020 [ 101.525963][ T4549] head:ffffea0001300800 order:3 compound_mapcount:0 compound_pincount:0 [ 101.535358][ T4549] memcg:ffff88802b105a01 [ 101.539648][ T4549] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 101.548230][ T4549] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801794e3c0 [ 101.556902][ T4549] raw: 0000000000000000 0000000000170017 00000001ffffffff ffff88802b105a01 [ 101.566412][ T4549] page dumped because: unmovable page [ 101.572063][ T4549] page_owner tracks the page as allocated [ 101.578205][ T4549] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4436, ts 95663012309, free_ts 23881092916 [ 101.601799][ T4549] get_page_from_freelist+0x24f6/0x2670 [ 101.607684][ T4549] __alloc_pages+0x1ee/0x480 [ 101.612707][ T4549] new_slab+0xc0/0x4b0 [ 101.617140][ T4549] ___slab_alloc+0x807/0xdd0 [ 101.621980][ T4549] kmem_cache_alloc+0xf0/0x280 [ 101.626961][ T4549] proc_alloc_inode+0x19/0xa0 [ 101.632580][ T4549] new_inode_pseudo+0x5f/0x210 [ 101.637441][ T4549] new_inode+0x25/0x1d0 [ 101.641680][ T4549] proc_pid_make_inode+0x20/0x1a0 [ 101.647257][ T4549] proc_pident_instantiate+0x69/0x2a0 [ 101.652846][ T4549] proc_pident_lookup+0x1cb/0x270 [ 101.657997][ T4549] path_openat+0x1046/0x2fb0 [ 101.662695][ T4549] do_filp_open+0x1df/0x400 [ 101.667485][ T4549] do_sys_openat2+0x14b/0x500 [ 101.672453][ T4549] __x64_sys_openat+0x135/0x160 [ 101.677586][ T4549] do_syscall_64+0x4c/0xa0 [ 101.682107][ T4549] page last free stack trace: [ 101.686855][ T4549] free_unref_page_prepare+0x637/0x6c0 [ 101.692523][ T4549] free_unref_page+0x8f/0x2a0 [ 101.697415][ T4549] free_contig_range+0x96/0xf0 [ 101.702292][ T4549] destroy_args+0xef/0xa00 [ 101.706783][ T4549] debug_vm_pgtable+0x321/0x380 [ 101.711899][ T4549] do_one_initcall+0x272/0x730 [ 101.716848][ T4549] do_initcall_level+0x13d/0x1f0 [ 101.722143][ T4549] do_initcalls+0x4b/0x90 [ 101.726940][ T4549] kernel_init_freeable+0x3d5/0x560 [ 101.732634][ T4549] kernel_init+0x19/0x1b0 [ 101.737319][ T4549] ret_from_fork+0x1f/0x30 [ 133.054211][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.060715][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 191.452363][ T4389] Bluetooth: hci2: command 0x0406 tx timeout [ 191.452774][ T2289] Bluetooth: hci3: command 0x0406 tx timeout [ 191.467339][ T4389] Bluetooth: hci1: command 0x0406 tx timeout [ 191.475049][ T2289] Bluetooth: hci4: command 0x0406 tx timeout [ 194.505395][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.512264][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.172456][ T27] INFO: task syz-executor:4174 blocked for more than 143 seconds. [ 250.180324][ T27] Not tainted syzkaller #0 [ 250.187878][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 250.197083][ T27] task:syz-executor state:D stack:23440 pid: 4174 ppid: 4173 flags:0x00004002 [ 250.213105][ T27] Call Trace: [ 250.216662][ T27] [ 250.219615][ T27] __schedule+0x11c3/0x4350 [ 250.226751][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 250.236119][ T27] ? lock_chain_count+0x20/0x20 [ 250.241303][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 250.248295][ T27] ? release_firmware_map_entry+0x190/0x190 [ 250.254792][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 250.261043][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 250.266425][ T27] schedule+0x11b/0x1e0 [ 250.270633][ T27] io_schedule+0x7c/0xd0 [ 250.275410][ T27] bit_wait_io+0xd/0xc0 [ 250.279775][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 250.286779][ T27] ? bit_wait+0xc0/0xc0 [ 250.291350][ T27] ? __wait_on_bit+0x170/0x170 [ 250.297597][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 250.303092][ T27] ? bit_waitqueue+0x30/0x30 [ 250.307943][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 250.314567][ T27] do_get_write_access+0x134/0xe40 [ 250.320206][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 250.326705][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 250.333217][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 250.339832][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 250.347929][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 250.353771][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 250.360515][ T27] ext4_dirty_inode+0xbf/0x100 [ 250.369119][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 250.375110][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 250.380582][ T27] generic_update_time+0x1cd/0x1f0 [ 250.386381][ T27] file_update_time+0x3c0/0x440 [ 250.391733][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 250.399205][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 250.406087][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 250.412365][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 250.419205][ T27] ? count_memcg_event_mm+0x324/0x370 [ 250.424855][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 250.431401][ T27] ? end_current_label_crit_section+0x14b/0x170 [ 250.438646][ T27] ? verify_lock_unused+0x140/0x140 [ 250.444181][ T27] do_page_mkwrite+0x168/0x3c0 [ 250.449078][ T27] handle_mm_fault+0x1e47/0x4440 [ 250.455667][ T27] ? get_page+0xe0/0xe0 [ 250.460223][ T27] ? vmacache_find+0x4e3/0x590 [ 250.465327][ T27] ? vmacache_update+0xa0/0x100 [ 250.470542][ T27] ? find_vma+0x1df/0x230 [ 250.475335][ T27] do_user_addr_fault+0x494/0xc90 [ 250.480413][ T27] exc_page_fault+0x60/0x100 [ 250.485385][ T27] ? clear_bhb_loop+0x30/0x80 [ 250.490495][ T27] asm_exc_page_fault+0x22/0x30 [ 250.495903][ T27] RIP: 0033:0x7fe6db29a1e3 [ 250.501269][ T27] RSP: 002b:00007ffd0bfe00c0 EFLAGS: 00010212 [ 250.508001][ T27] RAX: 00007fe6d841f154 RBX: 00007ffd0bfe01f0 RCX: 0000000000000000 [ 250.517169][ T27] RDX: 00007fe6d841f150 RSI: 0000000000000008 RDI: 00007ffd0bfe01f0 [ 250.527810][ T27] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 250.536213][ T27] R10: 00007ffd0bfe01d0 R11: 0000000000000000 R12: 0000000000000000 [ 250.545033][ T27] R13: 000000000000aeac R14: ffffffffffff5154 R15: 0000000000000000 [ 250.553567][ T27] [ 250.557021][ T27] INFO: task syz.2.69:4545 blocked for more than 143 seconds. [ 250.566464][ T27] Not tainted syzkaller #0 [ 250.571842][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 250.581055][ T27] task:syz.2.69 state:D stack:26768 pid: 4545 ppid: 4190 flags:0x00004004 [ 250.590509][ T27] Call Trace: [ 250.593970][ T27] [ 250.596944][ T27] __schedule+0x11c3/0x4350 [ 250.601645][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 250.607891][ T27] ? lock_chain_count+0x20/0x20 [ 250.613098][ T27] ? release_firmware_map_entry+0x190/0x190 [ 250.619287][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 250.626425][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 250.631759][ T27] schedule+0x11b/0x1e0 [ 250.636003][ T27] io_schedule+0x7c/0xd0 [ 250.641019][ T27] bit_wait_io+0xd/0xc0 [ 250.645286][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 250.650804][ T27] ? bit_wait+0xc0/0xc0 [ 250.655037][ T27] ? __wait_on_bit+0x170/0x170 [ 250.660048][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 250.665282][ T27] ? bit_waitqueue+0x30/0x30 [ 250.670633][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 250.677435][ T27] do_get_write_access+0x134/0xe40 [ 250.682761][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 250.688926][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 250.696069][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 250.702627][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 250.707959][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 250.713700][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 250.719289][ T27] ext4_dirty_inode+0xbf/0x100 [ 250.724916][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 250.730852][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 250.736053][ T27] generic_update_time+0x1cd/0x1f0 [ 250.741297][ T27] file_update_time+0x3c0/0x440 [ 250.746494][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 250.752093][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 250.757519][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 250.763567][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 250.769860][ T27] ? count_memcg_event_mm+0x324/0x370 [ 250.775689][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 250.781978][ T27] ? verify_lock_unused+0x140/0x140 [ 250.789554][ T27] do_page_mkwrite+0x168/0x3c0 [ 250.794695][ T27] handle_mm_fault+0x1e47/0x4440 [ 250.799816][ T27] ? get_page+0xe0/0xe0 [ 250.804149][ T27] ? vmacache_find+0x4e3/0x590 [ 250.808959][ T27] ? vmacache_update+0xa0/0x100 [ 250.815466][ T27] ? find_vma+0x1df/0x230 [ 250.819941][ T27] do_user_addr_fault+0x494/0xc90 [ 250.825271][ T27] exc_page_fault+0x60/0x100 [ 250.830707][ T27] ? clear_bhb_loop+0x30/0x80 [ 250.835705][ T27] asm_exc_page_fault+0x22/0x30 [ 250.840589][ T27] RIP: 0033:0x7f278839b7a9 [ 250.845267][ T27] RSP: 002b:00007ffdc984e190 EFLAGS: 00010202 [ 250.851454][ T27] RAX: 0000001b32723000 RBX: ffffffff81a7cc29 RCX: 0000001b32722ff8 [ 250.860072][ T27] RDX: 0000001b32324220 RSI: 0000000000000008 RDI: 00007f278927e720 [ 250.868191][ T27] RBP: 00000000000001dc R08: 00007f2788739000 R09: 00007f278873b000 [ 250.876529][ T27] R10: 0000000081a7cc2d R11: 000000000000000f R12: 00007f278874f038 [ 250.886212][ T27] R13: 00000000000006e5 R14: ffffffff81a7cfb5 R15: 00007f278927e720 [ 250.895064][ T27] ? kmemdup_nul+0x35/0xa0 [ 250.899575][ T27] ? shmem_put_link+0x109/0x200 [ 250.904877][ T27] [ 250.908088][ T27] INFO: task syz.1.71:4552 blocked for more than 144 seconds. [ 250.917798][ T27] Not tainted syzkaller #0 [ 250.923179][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 250.933166][ T27] task:syz.1.71 state:D stack:27696 pid: 4552 ppid: 4188 flags:0x00004004 [ 250.943145][ T27] Call Trace: [ 250.946543][ T27] [ 250.949912][ T27] __schedule+0x11c3/0x4350 [ 250.955818][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 250.962693][ T27] ? lock_chain_count+0x20/0x20 [ 250.968070][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 250.973470][ T27] ? release_firmware_map_entry+0x190/0x190 [ 250.979933][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 250.986003][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 250.992068][ T27] schedule+0x11b/0x1e0 [ 250.996694][ T27] io_schedule+0x7c/0xd0 [ 251.001275][ T27] bit_wait_io+0xd/0xc0 [ 251.006967][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 251.012526][ T27] ? bit_wait+0xc0/0xc0 [ 251.016959][ T27] ? __wait_on_bit+0x170/0x170 [ 251.021886][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 251.027194][ T27] ? bit_waitqueue+0x30/0x30 [ 251.032482][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 251.037735][ T27] do_get_write_access+0x134/0xe40 [ 251.042996][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 251.049363][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 251.055774][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 251.062064][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 251.067682][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 251.073440][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 251.079161][ T27] ext4_dirty_inode+0xbf/0x100 [ 251.084904][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 251.091363][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 251.097798][ T27] generic_update_time+0x1cd/0x1f0 [ 251.103023][ T27] file_update_time+0x3c0/0x440 [ 251.108069][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 251.114796][ T27] ? mark_lock+0x94/0x320 [ 251.119345][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 251.124556][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 251.132031][ T27] ? pte_alloc_one+0x287/0x310 [ 251.137994][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 251.144682][ T27] ? __rwlock_init+0x140/0x140 [ 251.149834][ T27] ? count_memcg_event_mm+0x324/0x370 [ 251.155489][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 251.160761][ T27] do_page_mkwrite+0x168/0x3c0 [ 251.165964][ T27] handle_mm_fault+0x1e47/0x4440 [ 251.171561][ T27] ? get_page+0xe0/0xe0 [ 251.176171][ T27] ? vmacache_find+0x4e3/0x590 [ 251.181892][ T27] ? vmacache_update+0xa0/0x100 [ 251.187421][ T27] ? find_vma+0x1df/0x230 [ 251.192375][ T27] do_user_addr_fault+0x494/0xc90 [ 251.197560][ T27] exc_page_fault+0x60/0x100 [ 251.202568][ T27] ? clear_bhb_loop+0x30/0x80 [ 251.207488][ T27] asm_exc_page_fault+0x22/0x30 [ 251.212736][ T27] RIP: 0033:0x7fab09bdeaa3 [ 251.217358][ T27] RSP: 002b:00007ffe3003bc70 EFLAGS: 00010246 [ 251.226019][ T27] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b32264000 [ 251.234127][ T27] RDX: 0000001b32224000 RSI: 0000000000400000 RDI: 00007fab09f53708 [ 251.242972][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.251087][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 251.259527][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe3003bf00 [ 251.267770][ T27] [ 251.271044][ T27] INFO: task syz.3.72:4553 blocked for more than 144 seconds. [ 251.278688][ T27] Not tainted syzkaller #0 [ 251.283959][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 251.293050][ T27] task:syz.3.72 state:D stack:26672 pid: 4553 ppid: 4186 flags:0x00004004 [ 251.302339][ T27] Call Trace: [ 251.305668][ T27] [ 251.308986][ T27] __schedule+0x11c3/0x4350 [ 251.313866][ T27] ? release_firmware_map_entry+0x190/0x190 [ 251.320357][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 251.326924][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 251.334303][ T27] schedule+0x11b/0x1e0 [ 251.339053][ T27] io_schedule+0x7c/0xd0 [ 251.344050][ T27] bit_wait_io+0xd/0xc0 [ 251.348356][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 251.353958][ T27] ? bit_wait+0xc0/0xc0 [ 251.358247][ T27] ? __wait_on_bit+0x170/0x170 [ 251.363532][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 251.368967][ T27] ? bit_waitqueue+0x30/0x30 [ 251.374118][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 251.379874][ T27] do_get_write_access+0x134/0xe40 [ 251.385839][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 251.394477][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 251.401544][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 251.408137][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 251.413739][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 251.419424][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 251.425257][ T27] ext4_dirty_inode+0xbf/0x100 [ 251.430146][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 251.436445][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 251.442328][ T27] generic_update_time+0x1cd/0x1f0 [ 251.447586][ T27] file_update_time+0x3c0/0x440 [ 251.453190][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 251.458844][ T27] ? mark_lock+0x94/0x320 [ 251.463703][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 251.469125][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 251.475363][ T27] ? pte_alloc_one+0x287/0x310 [ 251.480159][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 251.486486][ T27] ? __rwlock_init+0x140/0x140 [ 251.491279][ T27] ? count_memcg_event_mm+0x324/0x370 [ 251.497193][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 251.502576][ T27] do_page_mkwrite+0x168/0x3c0 [ 251.507482][ T27] handle_mm_fault+0x1e47/0x4440 [ 251.512684][ T27] ? get_page+0xe0/0xe0 [ 251.517098][ T27] ? vmacache_find+0x4f0/0x590 [ 251.522225][ T27] ? vmacache_update+0xa0/0x100 [ 251.527129][ T27] ? find_vma+0x1df/0x230 [ 251.531663][ T27] do_user_addr_fault+0x494/0xc90 [ 251.536982][ T27] exc_page_fault+0x60/0x100 [ 251.541910][ T27] ? clear_bhb_loop+0x30/0x80 [ 251.547369][ T27] asm_exc_page_fault+0x22/0x30 [ 251.552687][ T27] RIP: 0033:0x7fc094585aa3 [ 251.557214][ T27] RSP: 002b:00007ffead9538c0 EFLAGS: 00010246 [ 251.564750][ T27] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b32464000 [ 251.573190][ T27] RDX: 0000001b32424000 RSI: 0000000000400000 RDI: 00007fc0948fa708 [ 251.581528][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.590139][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 251.601151][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffead953b50 [ 251.609585][ T27] [ 251.613297][ T27] INFO: task syz.4.73:4554 blocked for more than 144 seconds. [ 251.620790][ T27] Not tainted syzkaller #0 [ 251.626131][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 251.636154][ T27] task:syz.4.73 state:D stack:27664 pid: 4554 ppid: 4199 flags:0x00004004 [ 251.646422][ T27] Call Trace: [ 251.649828][ T27] [ 251.653119][ T27] __schedule+0x11c3/0x4350 [ 251.657865][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 251.664265][ T27] ? lock_chain_count+0x20/0x20 [ 251.669274][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 251.675003][ T27] ? release_firmware_map_entry+0x190/0x190 [ 251.681262][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 251.687701][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 251.693321][ T27] schedule+0x11b/0x1e0 [ 251.697948][ T27] io_schedule+0x7c/0xd0 [ 251.702803][ T27] bit_wait_io+0xd/0xc0 [ 251.707394][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 251.713499][ T27] ? bit_wait+0xc0/0xc0 [ 251.717940][ T27] ? __wait_on_bit+0x170/0x170 [ 251.723087][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 251.729454][ T27] ? bit_waitqueue+0x30/0x30 [ 251.734237][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 251.739998][ T27] do_get_write_access+0x134/0xe40 [ 251.745251][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 251.752110][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 251.758483][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 251.764926][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 251.770474][ T27] ? jbd2__journal_start+0x13c/0x5a0 [ 251.775989][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 251.782036][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 251.789321][ T27] ext4_dirty_inode+0xbf/0x100 [ 251.794276][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 251.800466][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 251.805596][ T27] generic_update_time+0x1cd/0x1f0 [ 251.810853][ T27] file_update_time+0x3c0/0x440 [ 251.816259][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 251.821665][ T27] ? mark_lock+0x94/0x320 [ 251.826142][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 251.831204][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 251.837533][ T27] ? pte_alloc_one+0x287/0x310 [ 251.842824][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 251.849256][ T27] ? __rwlock_init+0x140/0x140 [ 251.854861][ T27] ? count_memcg_event_mm+0x324/0x370 [ 251.860484][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 251.866092][ T27] do_page_mkwrite+0x168/0x3c0 [ 251.871536][ T27] handle_mm_fault+0x1e47/0x4440 [ 251.877248][ T27] ? get_page+0xe0/0xe0 [ 251.881657][ T27] ? vmacache_find+0x4e3/0x590 [ 251.886816][ T27] ? vmacache_update+0xa0/0x100 [ 251.892089][ T27] ? find_vma+0x1df/0x230 [ 251.897058][ T27] do_user_addr_fault+0x494/0xc90 [ 251.902834][ T27] exc_page_fault+0x60/0x100 [ 251.907564][ T27] ? clear_bhb_loop+0x30/0x80 [ 251.914020][ T27] asm_exc_page_fault+0x22/0x30 [ 251.919024][ T27] RIP: 0033:0x7fd457a80aa3 [ 251.923512][ T27] RSP: 002b:00007fffe16a1660 EFLAGS: 00010246 [ 251.931816][ T27] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b32564000 [ 251.940826][ T27] RDX: 0000001b32524000 RSI: 0000000000400000 RDI: 00007fd457df5708 [ 251.949520][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.959430][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 251.969284][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffe16a18f0 [ 251.977801][ T27] [ 251.980858][ T27] [ 251.980858][ T27] Showing all locks held in the system: [ 251.988642][ T27] 1 lock held by khungtaskd/27: [ 251.993575][ T27] #0: ffffffff8c31efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 252.004689][ T27] 1 lock held by klogd/3548: [ 252.009308][ T27] #0: ffff8880b913a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 [ 252.020547][ T27] 2 locks held by getty/3944: [ 252.025608][ T27] #0: ffff88814cf3d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 252.035893][ T27] #1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 252.046925][ T27] 3 locks held by syz-executor/4174: [ 252.052572][ T27] #0: ffff8880798f8128 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 252.063671][ T27] #1: ffff88814d524558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 252.075410][ T27] #2: ffff88814d620990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 252.086610][ T27] 6 locks held by kworker/u4:6/4274: [ 252.092941][ T27] #0: ffff888141f90138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 252.103878][ T27] #1: ffffc90002dffd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 252.117596][ T27] #2: ffff88814d5240e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0 [ 252.127992][ T27] #3: ffff88814d526c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2d40 [ 252.139771][ T27] #4: ffff88814d620990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 252.150899][ T27] #5: ffff888074698278 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 252.162950][ T27] 3 locks held by kworker/u4:10/4293: [ 252.168695][ T27] #0: ffff8880b913a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 [ 252.179541][ T27] #1: ffff8880b9127888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x4c3/0x810 [ 252.191425][ T27] #2: ffff8880b91280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 252.202020][ T27] 3 locks held by syz.2.69/4545: [ 252.207125][ T27] #0: ffff888079891d28 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 252.217985][ T27] #1: ffff88814d524558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 252.233636][ T27] #2: ffff88814d620990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 252.244334][ T27] 3 locks held by syz.1.71/4552: [ 252.249805][ T27] #0: ffff888079894e28 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 252.264258][ T27] #1: ffff88814d524558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 252.275205][ T27] #2: ffff88814d620990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 252.285417][ T27] 3 locks held by syz.3.72/4553: [ 252.291102][ T27] #0: ffff888016c6c728 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 252.303562][ T27] #1: ffff88814d524558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 252.314319][ T27] #2: ffff88814d620990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 252.324710][ T27] 3 locks held by syz.4.73/4554: [ 252.329997][ T27] #0: ffff888079893928 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 252.340870][ T27] #1: ffff88814d524558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 252.353605][ T27] #2: ffff88814d620990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 252.364401][ T27] [ 252.368215][ T27] ============================================= [ 252.368215][ T27] [ 252.377373][ T27] NMI backtrace for cpu 1 [ 252.382092][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 252.389870][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 252.400894][ T27] Call Trace: [ 252.404184][ T27] [ 252.407114][ T27] dump_stack_lvl+0x188/0x250 [ 252.412410][ T27] ? show_regs_print_info+0x20/0x20 [ 252.417859][ T27] ? load_image+0x410/0x410 [ 252.422460][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 252.428236][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 252.433573][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 252.438544][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 252.444893][ T27] ? _printk+0xda/0x130 [ 252.449059][ T27] ? load_image+0x410/0x410 [ 252.454048][ T27] ? load_image+0x410/0x410 [ 252.458700][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 252.464800][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 252.471002][ T27] watchdog+0xe1b/0xe60 [ 252.475258][ T27] kthread+0x42e/0x520 [ 252.479440][ T27] ? hungtask_pm_notify+0x40/0x40 [ 252.484652][ T27] ? kthread_blkcg+0xd0/0xd0 [ 252.489427][ T27] ret_from_fork+0x1f/0x30 [ 252.494311][ T27] [ 252.498153][ T27] Sending NMI from CPU 1 to CPUs 0: [ 252.503548][ C0] NMI backtrace for cpu 0 [ 252.503560][ C0] CPU: 0 PID: 437 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 252.503576][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 252.503584][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 252.503606][ C0] RIP: 0010:ieee80211_sta_get_rates+0x36b/0x6c0 [ 252.503626][ C0] Code: 63 c3 48 8d 2c 40 48 c1 e5 02 49 03 2f 48 89 e8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 f9 00 00 00 44 8b 75 00 44 0b 74 24 3c ff ff ff ff 44 89 f6 e8 f8 8b 22 f8 41 83 fe ff 74 22 e8 8d 88 [ 252.503637][ C0] RSP: 0018:ffffc9000301f8b8 EFLAGS: 00000286 [ 252.503649][ C0] RAX: 0000000000000000 RBX: 0000000000000004 RCX: ffff88801e7c5940 [ 252.503659][ C0] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000040 [ 252.503667][ C0] RBP: ffff88807e4a5ee0 R08: ffffffff8d8b2bef R09: 1ffffffff1b1657d [ 252.503676][ C0] R10: dffffc0000000000 R11: fffffbfff1b1657e R12: 000000000000000b [ 252.503686][ C0] R13: 000000000000006e R14: 00000000ffffffff R15: ffff88807e4a33b0 [ 252.503695][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 252.503707][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.503716][ C0] CR2: 000055e538250660 CR3: 000000007ea1e000 CR4: 00000000003506f0 [ 252.503731][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 252.503739][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 252.503747][ C0] Call Trace: [ 252.503752][ C0] [ 252.503764][ C0] ieee80211_ibss_rx_queued_mgmt+0xf79/0x2b50 [ 252.503788][ C0] ? mark_lock+0x94/0x320 [ 252.503802][ C0] ? ieee80211_ibss_rx_no_sta+0x750/0x750 [ 252.503816][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 252.503833][ C0] ? lock_chain_count+0x20/0x20 [ 252.503847][ C0] ? __rwlock_init+0x140/0x140 [ 252.503861][ C0] ? kcov_remote_start+0x135/0x5e0 [ 252.503875][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 252.503894][ C0] ieee80211_iface_work+0x714/0xc50 [ 252.503909][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 252.503926][ C0] cfg80211_wiphy_work+0x224/0x260 [ 252.503942][ C0] process_one_work+0x867/0xff0 [ 252.503963][ C0] ? worker_detach_from_pool+0x240/0x240 [ 252.503976][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 252.503992][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 252.504005][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 252.504020][ C0] ? wq_worker_running+0x97/0x170 [ 252.504033][ C0] worker_thread+0xad7/0x12a0 [ 252.504058][ C0] kthread+0x42e/0x520 [ 252.504069][ C0] ? rcu_lock_release+0x20/0x20 [ 252.504082][ C0] ? kthread_blkcg+0xd0/0xd0 [ 252.504095][ C0] ret_from_fork+0x1f/0x30 [ 252.504115][ C0] [ 252.505985][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 252.792953][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 252.800432][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 252.810952][ T27] Call Trace: [ 252.814339][ T27] [ 252.817388][ T27] dump_stack_lvl+0x188/0x250 [ 252.822219][ T27] ? show_regs_print_info+0x20/0x20 [ 252.827437][ T27] ? load_image+0x410/0x410 [ 252.831973][ T27] panic+0x2f8/0x850 [ 252.835873][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 252.841774][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 252.846745][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 252.853499][ T27] watchdog+0xe5a/0xe60 [ 252.858031][ T27] kthread+0x42e/0x520 [ 252.862430][ T27] ? hungtask_pm_notify+0x40/0x40 [ 252.867925][ T27] ? kthread_blkcg+0xd0/0xd0 [ 252.872835][ T27] ret_from_fork+0x1f/0x30 [ 252.877641][ T27] [ 252.881196][ T27] Kernel Offset: disabled [ 252.886492][ T27] Rebooting in 86400 seconds..