last executing test programs: 20.977351449s ago: executing program 1 (id=254): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x1000}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) mknodat$null(r0, &(0x7f0000000300)='./file0\x00', 0x4, 0x103) sendto$inet6(r4, 0x0, 0x0, 0x9c8c4, &(0x7f0000000240)={0xa, 0x4e1f, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, &(0x7f0000000e00), 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xb) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x60, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0xbab0, 0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x95}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8e}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x40001) close(r6) ptrace(0x10, r5) ptrace$cont(0x9, r5, 0x10000, 0x0) 16.694107631s ago: executing program 1 (id=261): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x84, 0x30, 0x1, 0x5000000, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x0, 0x2, 0x7, 0x8}, {}, 0x0, 0xffffffff}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4048081}, 0x0) 16.382550768s ago: executing program 2 (id=262): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ae4c41096050100f5050102030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="402b10"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@mcast1, 0x0, 0x1}, 0x20) syz_usb_ep_read(r0, 0x1, 0x0, &(0x7f00000001c0)) r2 = getpgrp(0x0) sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x10001) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000240)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r5 = openat$cgroup_pressure(r3, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r5, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r4) close(r5) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 11.583530086s ago: executing program 2 (id=269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 11.07960782s ago: executing program 0 (id=271): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x1000}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) mknodat$null(r0, &(0x7f0000000300)='./file0\x00', 0x4, 0x103) sendto$inet6(r4, 0x0, 0x0, 0x9c8c4, &(0x7f0000000240)={0xa, 0x4e1f, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, &(0x7f0000000e00), 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xb) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x60, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0xbab0, 0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x95}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8e}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x40001) close(r6) ptrace(0x10, r5) ptrace$cont(0x9, r5, 0x10000, 0x0) 10.529977694s ago: executing program 4 (id=273): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280), &(0x7f0000000380)=@sha1={0x1, "e4a3186656e05fab9468f405313ac4c83f286a14"}, 0x15, 0x1) 8.831227746s ago: executing program 1 (id=274): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x646, &(0x7f0000000740)="$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") socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) 8.538327306s ago: executing program 3 (id=275): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$tipc(0x1e, 0x2, 0x0) read(r0, &(0x7f0000000180)=""/41, 0x29) 7.292983514s ago: executing program 0 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x68, @loopback, 0xc2}]}, &(0x7f0000000180)=0x10) 7.241135248s ago: executing program 4 (id=277): creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='cpuacct.usage_all\x00', 0x275a, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001840)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 7.152449641s ago: executing program 2 (id=278): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x3, @multicast2}}, 0x24) bind$rxrpc(r0, &(0x7f0000000300)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010102}}, 0x24) 6.76195474s ago: executing program 3 (id=279): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="1e", 0x1}], 0x1}}], 0x1, 0x4000001) 6.358875813s ago: executing program 1 (id=280): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 6.179074474s ago: executing program 0 (id=281): socket(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000e80)=[{0x0}, {&(0x7f0000000c80)=""/114, 0x72}], 0x2}, 0x9a}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 5.991997998s ago: executing program 4 (id=282): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newtfilter={0x4c, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1c, 0x2, [@TCA_CGROUP_POLICE={0x18, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xff}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 5.892709378s ago: executing program 3 (id=283): setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(0xffffffffffffffff, &(0x7f0000009880)=[{{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000006b80)="de95", 0x2}], 0x1}}], 0x1, 0x20044840) 5.691727502s ago: executing program 2 (id=284): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f00000000fffff5a72d866b0000e73d17a9ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x1) 5.171004942s ago: executing program 3 (id=285): r0 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x5710, 0x80, 0x0, 0x15d}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) socket$kcm(0x21, 0x2, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xc94b}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r4}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'gre0\x00'}}, 0x1e) r5 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000100)='./file2\x00', 0x6000, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8884}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x10000, 0x6, 0x7, 0x7}, 0x1}}, @TCA_MPLS_TC={0x5, 0x6, 0x4}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x40000) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="0281", @ANYRES16=0x0, @ANYBLOB="00082d070000f3dbde2514000000ba5159dca8f1064794cc7ef365f99140cb185f99e1af388a7206f37d045989c33a1b0300000000000000"], 0x14}}, 0x4040004) close_range(r0, 0xffffffffffffffff, 0x0) 5.132459355s ago: executing program 4 (id=286): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x1000}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) mknodat$null(r0, &(0x7f0000000300)='./file0\x00', 0x4, 0x103) sendto$inet6(r4, 0x0, 0x0, 0x9c8c4, &(0x7f0000000240)={0xa, 0x4e1f, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, &(0x7f0000000e00), 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xb) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x60, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0xbab0, 0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x95}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8e}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x40001) close(r5) ptrace(0x10, 0x0) ptrace$cont(0x9, 0x0, 0x10000, 0x0) 4.228152157s ago: executing program 0 (id=287): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280), &(0x7f0000000380)=@sha1={0x1, "e4a3186656e05fab9468f405313ac4c83f286a14"}, 0x15, 0x1) 3.185393069s ago: executing program 3 (id=288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1.976024203s ago: executing program 2 (id=289): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$tipc(0x1e, 0x2, 0x0) read(r0, &(0x7f0000000180)=""/41, 0x29) 1.516027206s ago: executing program 4 (id=290): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x646, &(0x7f0000000740)="$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") socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) 1.481515497s ago: executing program 0 (id=291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) 1.327363806s ago: executing program 1 (id=292): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") creat(0x0, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='cpuacct.usage_all\x00', 0x275a, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001840)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 1.067665297s ago: executing program 3 (id=293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x12, &(0x7f0000000340)=ANY=[@ANYBLOB="2a90eb41345651dc013aff98b523bcd7da06cb28f51ec06e684d1cec51ebbd08715fc61854e59b6ca70a0c44286c63d3efc3df53b7d032e451e27997625c73667b9f7a216be1b434a3cfb66d5d508ed35109f779e0daf83eeb76754b49ee000d47e267da29ddab00b87dc290da29031b5d9cc5ea3417a99d5a4df1b0ea4fd3dde6cc3706e6fd6621b8a4cba9d1b2aedf821dba923b767167524e5e2e6a3a7cc24783c1cc6053df9bbaae613460289292373e66686cb0"], 0xff, 0x59f2, &(0x7f00000061c0)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfffffe8c, 0x8000c61) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) open(&(0x7f0000000000)='./file1\x00', 0x80, 0x100) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 772.583662ms ago: executing program 4 (id=294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000000)="340f300ffb360e000f20d86635080000000f22d8e30fc73600002e0f23920f01c8f0808560c017660f018ef8e60f71d7060f09", 0x33}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 423.783051ms ago: executing program 0 (id=295): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r0, &(0x7f0000009880)=[{{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000006b80)="de95", 0x2}], 0x1}}], 0x1, 0x20044840) 136.100767ms ago: executing program 2 (id=296): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newtfilter={0x4c, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1c, 0x2, [@TCA_CGROUP_POLICE={0x18, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xff}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 0s ago: executing program 1 (id=297): socket(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000e80)=[{0x0}, {&(0x7f0000000c80)=""/114, 0x72}], 0x2}, 0x9a}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. [ 172.708107][ T5765] cgroup: Unknown subsys name 'net' [ 172.849184][ T5765] cgroup: Unknown subsys name 'cpuset' [ 172.863011][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 217.661916][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 219.228396][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.235241][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.558270][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.573464][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.581372][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.590818][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.627343][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.655436][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.702660][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.715663][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.723789][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 221.733235][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.759623][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.768795][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.770102][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.779612][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 221.791125][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.792414][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.806453][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 221.827325][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.833968][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.848415][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.860400][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.875131][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.894033][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 221.903143][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 222.066820][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 222.152975][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 222.191774][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 222.218987][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 222.253250][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 222.265989][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.127891][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 223.285589][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 223.380601][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 223.852184][ T51] Bluetooth: hci1: command tx timeout [ 223.857839][ T51] Bluetooth: hci0: command tx timeout [ 223.922877][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 223.941062][ T51] Bluetooth: hci3: command tx timeout [ 223.946698][ T51] Bluetooth: hci2: command tx timeout [ 223.997075][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 224.205880][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.213774][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.221744][ T5793] bridge_slave_0: entered allmulticast mode [ 224.230795][ T5793] bridge_slave_0: entered promiscuous mode [ 224.331218][ T5783] Bluetooth: hci4: command tx timeout [ 224.337594][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.345539][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.354758][ T5793] bridge_slave_1: entered allmulticast mode [ 224.363759][ T5793] bridge_slave_1: entered promiscuous mode [ 224.627056][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.638812][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.646815][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.656758][ T5781] bridge_slave_0: entered allmulticast mode [ 224.666580][ T5781] bridge_slave_0: entered promiscuous mode [ 224.678398][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.686224][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.694037][ T5789] bridge_slave_0: entered allmulticast mode [ 224.702955][ T5789] bridge_slave_0: entered promiscuous mode [ 224.723017][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.734157][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.742074][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.749689][ T5781] bridge_slave_1: entered allmulticast mode [ 224.758645][ T5781] bridge_slave_1: entered promiscuous mode [ 224.815643][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.823439][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.831179][ T5789] bridge_slave_1: entered allmulticast mode [ 224.840005][ T5789] bridge_slave_1: entered promiscuous mode [ 224.982289][ T5793] team0: Port device team_slave_0 added [ 225.080959][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.098212][ T5793] team0: Port device team_slave_1 added [ 225.118314][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.196137][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.205972][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.215171][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.222885][ T5784] bridge_slave_0: entered allmulticast mode [ 225.231790][ T5784] bridge_slave_0: entered promiscuous mode [ 225.287127][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.356361][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.364016][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.371791][ T5784] bridge_slave_1: entered allmulticast mode [ 225.380801][ T5784] bridge_slave_1: entered promiscuous mode [ 225.542097][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.549258][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.575673][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.594245][ T5781] team0: Port device team_slave_0 added [ 225.611792][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.618929][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.645322][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.744104][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.753070][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.760695][ T5796] bridge_slave_0: entered allmulticast mode [ 225.769239][ T5796] bridge_slave_0: entered promiscuous mode [ 225.785476][ T5781] team0: Port device team_slave_1 added [ 225.793127][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.803674][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.811362][ T5796] bridge_slave_1: entered allmulticast mode [ 225.820112][ T5796] bridge_slave_1: entered promiscuous mode [ 225.883084][ T5789] team0: Port device team_slave_0 added [ 225.903793][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.945132][ T5783] Bluetooth: hci0: command tx timeout [ 225.945325][ T51] Bluetooth: hci1: command tx timeout [ 226.014589][ T51] Bluetooth: hci2: command tx timeout [ 226.014793][ T5783] Bluetooth: hci3: command tx timeout [ 226.069990][ T5789] team0: Port device team_slave_1 added [ 226.117612][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.168729][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.176344][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.202642][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.223590][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.268086][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.275312][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.301798][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.356254][ T5793] hsr_slave_0: entered promiscuous mode [ 226.364734][ T5793] hsr_slave_1: entered promiscuous mode [ 226.377034][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.384450][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.410697][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.418460][ T5783] Bluetooth: hci4: command tx timeout [ 226.431612][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.475216][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.482536][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.508902][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.569484][ T5784] team0: Port device team_slave_0 added [ 226.585655][ T5784] team0: Port device team_slave_1 added [ 226.676733][ T5796] team0: Port device team_slave_0 added [ 226.727846][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.735207][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.761768][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.782415][ T5796] team0: Port device team_slave_1 added [ 226.925597][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.933527][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.959759][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.104670][ T5789] hsr_slave_0: entered promiscuous mode [ 227.114181][ T5789] hsr_slave_1: entered promiscuous mode [ 227.122354][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.130064][ T5789] Cannot create hsr debugfs directory [ 227.201001][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.208172][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.234653][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.256124][ T5781] hsr_slave_0: entered promiscuous mode [ 227.265477][ T5781] hsr_slave_1: entered promiscuous mode [ 227.274018][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.281915][ T5781] Cannot create hsr debugfs directory [ 227.342570][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.349722][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.377302][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.570308][ T5784] hsr_slave_0: entered promiscuous mode [ 227.578977][ T5784] hsr_slave_1: entered promiscuous mode [ 227.587102][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.594922][ T5784] Cannot create hsr debugfs directory [ 227.802427][ T5796] hsr_slave_0: entered promiscuous mode [ 227.811931][ T5796] hsr_slave_1: entered promiscuous mode [ 227.820108][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.827918][ T5796] Cannot create hsr debugfs directory [ 228.015687][ T5783] Bluetooth: hci0: command tx timeout [ 228.021485][ T5783] Bluetooth: hci1: command tx timeout [ 228.090778][ T51] Bluetooth: hci3: command tx timeout [ 228.108916][ T51] Bluetooth: hci2: command tx timeout [ 228.505278][ T51] Bluetooth: hci4: command tx timeout [ 228.530384][ T5793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 228.645651][ T5793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 228.683123][ T5793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 228.755786][ T5793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 228.946707][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.996395][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 229.057354][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 229.076585][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 229.177846][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 229.280201][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 229.347817][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 229.405682][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 229.565527][ T5784] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 229.639213][ T5784] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 229.706760][ T5784] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 229.739884][ T5784] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 229.835227][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 229.908183][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.954954][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 229.985668][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 230.067815][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 230.101414][ T51] Bluetooth: hci1: command tx timeout [ 230.101504][ T5783] Bluetooth: hci0: command tx timeout [ 230.186547][ T5783] Bluetooth: hci3: command tx timeout [ 230.191026][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.192247][ T5783] Bluetooth: hci2: command tx timeout [ 230.252339][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.259971][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.395431][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.403173][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.578444][ T51] Bluetooth: hci4: command tx timeout [ 230.714856][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.791061][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.882200][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.908862][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.946795][ T3658] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.954503][ T3658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.081365][ T3658] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.089000][ T3658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.143140][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.186366][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.230636][ T3658] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.238285][ T3658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.380590][ T3658] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.388239][ T3658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.403481][ T3658] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.411178][ T3658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.549142][ T5789] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.561328][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.635430][ T3658] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.643159][ T3658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.917774][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.125124][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.179425][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.187204][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.296928][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.304790][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.211473][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.379612][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.643929][ T5793] veth0_vlan: entered promiscuous mode [ 233.735298][ T5793] veth1_vlan: entered promiscuous mode [ 233.864683][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.994193][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.010173][ T5793] veth0_macvtap: entered promiscuous mode [ 234.097964][ T5789] veth0_vlan: entered promiscuous mode [ 234.147655][ T5793] veth1_macvtap: entered promiscuous mode [ 234.229735][ T5789] veth1_vlan: entered promiscuous mode [ 234.341429][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.400369][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.507329][ T5793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.516570][ T5793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.525753][ T5793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.537004][ T5793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.649626][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.738919][ T5781] veth0_vlan: entered promiscuous mode [ 234.801629][ T5789] veth0_macvtap: entered promiscuous mode [ 234.844233][ T5781] veth1_vlan: entered promiscuous mode [ 234.935869][ T5789] veth1_macvtap: entered promiscuous mode [ 235.047261][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.059199][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.075933][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.159775][ T5796] veth0_vlan: entered promiscuous mode [ 235.227225][ T5796] veth1_vlan: entered promiscuous mode [ 235.245938][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.257142][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.271556][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.289737][ T5781] veth0_macvtap: entered promiscuous mode [ 235.383830][ T5781] veth1_macvtap: entered promiscuous mode [ 235.454924][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.465122][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.474318][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.483397][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.579789][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.591267][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.601505][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.613179][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.627584][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.731766][ T5796] veth0_macvtap: entered promiscuous mode [ 235.817547][ T5796] veth1_macvtap: entered promiscuous mode [ 235.834733][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.845476][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.857005][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.868332][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.882963][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.056606][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.068685][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.078921][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.089617][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.099756][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.110608][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.125530][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.160744][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.169780][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.182970][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.193742][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.325539][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.337416][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.347653][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.358507][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.370699][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.381496][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.395889][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.473674][ T5796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.482839][ T5796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.493562][ T5796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.502655][ T5796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.827501][ T5784] veth0_vlan: entered promiscuous mode [ 236.957717][ T5784] veth1_vlan: entered promiscuous mode [ 237.242745][ T5784] veth0_macvtap: entered promiscuous mode [ 237.299514][ T5784] veth1_macvtap: entered promiscuous mode [ 237.488081][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.499073][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.509443][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.520347][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.532763][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.544536][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.554673][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.565660][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.580188][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.714676][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.725558][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.737194][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.747986][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.758175][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.768935][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.779981][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.793049][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.807653][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.098587][ T5784] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.107876][ T5784] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.117136][ T5784] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.126300][ T5784] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.311713][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.319796][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.545531][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.553921][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.099960][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.108136][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.223791][ T5793] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 242.472643][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.480804][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.963227][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.972441][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.215619][ T3658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.224343][ T3658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.566171][ T4715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.574431][ T4715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.831893][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.839965][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.347834][ T5975] process 'syz.1.7' launched '/dev/fd/4' with NULL argv: empty string added [ 244.924521][ T5983] loop2: detected capacity change from 0 to 512 [ 244.961245][ T5983] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 244.975047][ T5983] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 245.115954][ T5983] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.3: iget: bad extended attribute block 512 [ 245.172071][ T3812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.180385][ T3812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.281715][ T5983] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.3: couldn't read orphan inode 15 (err -117) [ 245.330298][ T5985] loop1: detected capacity change from 0 to 2048 [ 245.358008][ T5983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.396336][ T3812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.404677][ T3812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.792497][ T5992] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 245.958734][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.359990][ T5994] loop0: detected capacity change from 0 to 2048 [ 246.562753][ T5997] loop2: detected capacity change from 0 to 1024 [ 246.619293][ T5997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.715540][ T5997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.271811][ T5998] loop1: detected capacity change from 0 to 8192 [ 247.280790][ T5998] ======================================================= [ 247.280790][ T5998] WARNING: The mand mount option has been deprecated and [ 247.280790][ T5998] and is ignored by this kernel. Remove the mand [ 247.280790][ T5998] option from the mount to silence this warning. [ 247.280790][ T5998] ======================================================= [ 247.319736][ T6009] loop4: detected capacity change from 0 to 128 [ 247.368358][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.431283][ T6009] FAT-fs (loop4): Invalid FSINFO signature: 0x41045252, 0x00067272 (sector = 1) [ 247.599274][ T6012] syz.1.13: attempt to access beyond end of device [ 247.599274][ T6012] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 247.682510][ T6012] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 247.690751][ T6012] FAT-fs (loop1): Filesystem has been set read-only [ 247.763038][ T6012] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 247.802831][ T6012] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 247.954438][ T6016] No control pipe specified [ 248.672317][ T6024] 9pnet_fd: Insufficient options for proto=fd [ 248.969464][ T6020] 9pnet: Could not find request transport: f [ 249.640649][ T6038] loop1: detected capacity change from 0 to 128 [ 249.652306][ T6036] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 249.921441][ T6038] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 250.054527][ T6038] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 250.232550][ T6036] kvm: kvm [6033]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 250.912286][ T5789] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 251.587400][ T6061] capability: warning: `syz.3.36' uses deprecated v2 capabilities in a way that may be insecure [ 254.759547][ T6086] Zero length message leads to an empty skb [ 255.526929][ T6088] kvm: kvm [6087]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 255.699361][ T6095] loop2: detected capacity change from 0 to 1764 [ 256.574906][ T6106] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 257.122312][ T6111] Cannot find map_set index 0 as target [ 257.172136][ T6111] veth0_vlan: entered allmulticast mode [ 257.303162][ T6114] ÿÿÿÿÿÿ: renamed from vlan1 [ 258.258616][ T29] audit: type=1326 audit(1741175867.136:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a478d169 code=0x7ffc0000 [ 258.286195][ T29] audit: type=1326 audit(1741175867.136:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a478d169 code=0x7ffc0000 [ 258.538157][ T6129] loop2: detected capacity change from 0 to 2048 [ 258.540772][ T29] audit: type=1326 audit(1741175867.336:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f77a478d169 code=0x7ffc0000 [ 258.567203][ T29] audit: type=1326 audit(1741175867.336:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a478d169 code=0x7ffc0000 [ 258.594679][ T29] audit: type=1326 audit(1741175867.346:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a478d169 code=0x7ffc0000 [ 258.618843][ T29] audit: type=1326 audit(1741175867.446:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f77a478d169 code=0x7ffc0000 [ 258.932257][ T6129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.056345][ T29] audit: type=1326 audit(1741175867.616:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.4.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f77a47bfa25 code=0x7ffc0000 [ 259.081377][ T29] audit: type=1326 audit(1741175867.646:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a478d169 code=0x7ffc0000 [ 259.108889][ T29] audit: type=1326 audit(1741175867.646:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a478d169 code=0x7ffc0000 [ 259.133133][ T29] audit: type=1326 audit(1741175867.766:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f77a478d169 code=0x7ffc0000 [ 259.139283][ T6129] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 259.372712][ T6129] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 259.385670][ T6129] EXT4-fs (loop2): This should not happen!! Data will be lost [ 259.385670][ T6129] [ 259.402246][ T6129] EXT4-fs (loop2): Total free blocks count 0 [ 259.408473][ T6129] EXT4-fs (loop2): Free/Dirty block details [ 259.416793][ T6129] EXT4-fs (loop2): free_blocks=2415919104 [ 259.422882][ T6129] EXT4-fs (loop2): dirty_blocks=16 [ 259.428213][ T6129] EXT4-fs (loop2): Block reservation details [ 259.434637][ T6129] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 259.867465][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.067831][ T6145] loop1: detected capacity change from 0 to 512 [ 260.121541][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 260.217022][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.66'. [ 260.273535][ T6145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 260.286797][ T6145] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.389635][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 261.702850][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72'. [ 261.712178][ T6167] netlink: 'syz.4.72': attribute type 30 has an invalid length. [ 261.801223][ T6167] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.810374][ T6167] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.819794][ T6167] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.828996][ T6167] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.629860][ T6194] syz.4.82 uses obsolete (PF_INET,SOCK_PACKET) [ 269.088763][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'. [ 269.170214][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'. [ 270.219462][ T44] IPVS: starting estimator thread 0... [ 270.310999][ T6229] IPVS: using max 240 ests per chain, 12000 per kthread [ 271.636824][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'. [ 271.650800][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 271.657549][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 271.665403][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.673641][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.682958][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.691193][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.700560][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.708676][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.718065][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.726257][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.735577][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.743751][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.753139][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.761310][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.770659][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.778781][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.788128][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.796303][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.805664][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.813829][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.823178][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.831350][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.840719][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.848829][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.858235][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.866405][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.875750][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.883925][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.893258][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.901425][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.910717][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.918839][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.928182][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.936356][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 271.945721][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 271.953886][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 272.166746][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.107'. [ 273.385376][ T6278] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 273.393010][ T6278] IPv6: NLM_F_CREATE should be set when creating new route [ 274.031356][ T6284] netlink: 156 bytes leftover after parsing attributes in process `syz.1.117'. [ 274.474073][ T6290] netlink: 'syz.0.119': attribute type 29 has an invalid length. [ 274.528498][ T6291] netlink: 'syz.0.119': attribute type 29 has an invalid length. [ 275.639273][ T6305] loop1: detected capacity change from 0 to 512 [ 275.761782][ T6305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 275.775025][ T6305] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.357722][ T6319] netlink: 156 bytes leftover after parsing attributes in process `syz.2.131'. [ 276.420903][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 278.898527][ T6357] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 279.027822][ T6357] netlink: 32 bytes leftover after parsing attributes in process `syz.4.142'. [ 280.394695][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.405481][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.416046][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.426772][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.436866][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.447691][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.457796][ T6372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.468499][ T6372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.480995][ T6372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.492759][ T6372] batadv_slave_0: entered promiscuous mode [ 280.498790][ T6372] batadv_slave_0: entered allmulticast mode [ 280.675652][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.682541][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.486416][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 282.372312][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 284.612933][ T6392] netlink: 'syz.4.159': attribute type 1 has an invalid length. [ 284.883706][ T6394] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 284.897027][ T6394] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 284.918990][ T6394] bond1: (slave vti0): making interface the new active one [ 284.929408][ T6394] bond1: (slave vti0): Enslaving as an active interface with an up link [ 285.235300][ T6402] Driver unsupported XDP return value 0 on prog (id 41) dev N/A, expect packet loss! [ 286.173719][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 291.361002][ T44] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 291.412382][ T6439] loop4: detected capacity change from 0 to 64 [ 291.632564][ T44] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 291.641232][ T44] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 291.651946][ T44] usb 1-1: config 0 has no interface number 0 [ 291.658274][ T44] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 291.669869][ T44] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 291.680172][ T44] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 291.691116][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.995749][ T44] usb 1-1: config 0 descriptor?? [ 292.665752][ T44] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input5 [ 292.725481][ T44] input: failed to attach handler kbd to device input5, error: -5 [ 292.889441][ T44] usb 1-1: USB disconnect, device number 2 [ 295.501195][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.512167][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.523007][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.534131][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.556368][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.567423][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.581778][ T6460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.589735][ T6460] batadv_slave_0: entered promiscuous mode [ 295.596140][ T6460] batadv_slave_0: entered allmulticast mode [ 297.575772][ T6469] loop4: detected capacity change from 0 to 512 [ 297.683152][ T6469] EXT4-fs: Ignoring removed oldalloc option [ 298.052931][ T6469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.066510][ T6469] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.532716][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.865856][ T6486] loop0: detected capacity change from 0 to 4096 [ 303.905854][ T6496] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 304.371966][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'. [ 304.432525][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.443458][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.456562][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.468226][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.478352][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.489265][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.941456][ T6518] netlink: 36 bytes leftover after parsing attributes in process `syz.0.207'. [ 308.951606][ T6518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.207'. [ 308.968980][ T6518] netlink: 36 bytes leftover after parsing attributes in process `syz.0.207'. [ 308.981213][ T6518] netlink: 36 bytes leftover after parsing attributes in process `syz.0.207'. [ 310.214804][ T51] Bluetooth: hci4: link tx timeout [ 310.220180][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 310.981760][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.992699][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.009850][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.022536][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.032825][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.043608][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.116918][ T6534] loop4: detected capacity change from 0 to 256 [ 311.676217][ T6536] overlayfs: failed to clone lowerpath [ 312.160331][ T6540] netlink: 40 bytes leftover after parsing attributes in process `syz.4.217'. [ 312.257146][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 312.986098][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.222'. [ 313.025416][ T6549] loop3: detected capacity change from 0 to 256 [ 313.123676][ T6549] exfat: Deprecated parameter 'namecase' [ 313.307606][ T6549] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 316.272143][ T6563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.283028][ T6563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.293418][ T6563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.304137][ T6563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.314246][ T6563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.325345][ T6563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.580722][ T6574] loop2: detected capacity change from 0 to 256 [ 319.458936][ T6579] loop1: detected capacity change from 0 to 256 [ 319.950000][ T6579] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 320.611930][ T6574] FAT-fs (loop2): Directory bread(block 64) failed [ 320.618962][ T6574] FAT-fs (loop2): Directory bread(block 65) failed [ 320.632663][ T6574] FAT-fs (loop2): Directory bread(block 66) failed [ 320.639438][ T6574] FAT-fs (loop2): Directory bread(block 67) failed [ 320.648425][ T6574] FAT-fs (loop2): Directory bread(block 68) failed [ 320.655409][ T6574] FAT-fs (loop2): Directory bread(block 69) failed [ 320.662422][ T6574] FAT-fs (loop2): Directory bread(block 70) failed [ 320.669157][ T6574] FAT-fs (loop2): Directory bread(block 71) failed [ 320.676131][ T6574] FAT-fs (loop2): Directory bread(block 72) failed [ 320.683014][ T6574] FAT-fs (loop2): Directory bread(block 73) failed [ 321.493421][ T5834] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 321.802606][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 321.912915][ T5834] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 321.921822][ T5834] usb 5-1: config 0 has no interface number 0 [ 321.928624][ T5834] usb 5-1: config 0 interface 89 has no altsetting 0 [ 322.221654][ T5834] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 322.231647][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.240047][ T5834] usb 5-1: Product: syz [ 322.244717][ T5834] usb 5-1: Manufacturer: syz [ 322.249607][ T5834] usb 5-1: SerialNumber: syz [ 322.671798][ T5834] usb 5-1: config 0 descriptor?? [ 322.822966][ T5834] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 322.833187][ T5834] em28xx 5-1:0.89: Video interface 89 found: bulk [ 323.622891][ T5834] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 325.241200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 325.341726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 325.444353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 325.650676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 325.751374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 325.854007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 326.520607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 326.571041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 326.650452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 326.710637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 326.885252][ T6604] loop3: detected capacity change from 0 to 764 [ 327.448539][ T5834] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 327.457293][ T5834] em28xx 5-1:0.89: board has no eeprom [ 327.851555][ T5834] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 327.859469][ T5834] em28xx 5-1:0.89: analog set to bulk mode. [ 327.869202][ T10] em28xx 5-1:0.89: Registering V4L2 extension [ 328.182257][ T5834] usb 5-1: USB disconnect, device number 2 [ 328.190049][ T5834] em28xx 5-1:0.89: Disconnecting em28xx [ 330.819265][ T10] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 330.826686][ T10] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 330.834260][ T10] em28xx 5-1:0.89: No AC97 audio processor [ 331.114809][ T10] usb 5-1: Decoder not found [ 331.119730][ T10] em28xx 5-1:0.89: failed to create media graph [ 331.126713][ T10] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 331.333104][ T10] em28xx 5-1:0.89: Registering snapshot button... [ 331.342453][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input6 [ 331.626289][ T10] em28xx 5-1:0.89: Remote control support is not available for this card. [ 331.814069][ T5834] em28xx 5-1:0.89: Closing input extension [ 331.820207][ T5834] em28xx 5-1:0.89: Deregistering snapshot button [ 332.066760][ T5834] em28xx 5-1:0.89: Freeing device [ 333.980009][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 338.300605][ T6652] loop3: detected capacity change from 0 to 764 [ 338.493967][ T6656] evm: overlay not supported [ 339.151258][ T44] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 339.183175][ T6665] lo speed is unknown, defaulting to 1000 [ 339.189833][ T6665] lo speed is unknown, defaulting to 1000 [ 339.197438][ T6665] lo speed is unknown, defaulting to 1000 [ 339.221195][ T6665] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 339.308304][ T6665] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 339.547701][ T6665] lo speed is unknown, defaulting to 1000 [ 339.555314][ T6665] lo speed is unknown, defaulting to 1000 [ 339.562806][ T6665] lo speed is unknown, defaulting to 1000 [ 339.572749][ T6665] lo speed is unknown, defaulting to 1000 [ 339.581038][ T6665] lo speed is unknown, defaulting to 1000 [ 339.771596][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 342.246317][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.254881][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 343.071695][ T44] usb 3-1: device descriptor read/all, error -71 [ 343.346003][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'. [ 344.323399][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 344.341600][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 344.353468][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 344.361818][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 347.546230][ T6698] loop1: detected capacity change from 0 to 764 [ 349.240762][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.282'. [ 349.983715][ T6729] syz_tun: entered allmulticast mode [ 350.621788][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 350.621872][ T29] audit: type=1326 audit(1741175959.496:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.3.285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7d9f8d169 code=0x0 [ 350.822053][ T6731] syz_tun: left allmulticast mode [ 353.514627][ T6740] loop4: detected capacity change from 0 to 764 [ 353.687723][ T6744] loop1: detected capacity change from 0 to 256 [ 353.834134][ T6744] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 354.642795][ T6748] loop3: detected capacity change from 0 to 32768 [ 354.894840][ T6748] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 354.911826][ T6748] bcachefs (loop3): initializing new filesystem [ 354.937901][ T6748] bcachefs (loop3): going read-write [ 354.946551][ T6748] bcachefs (loop3): marking superblocks [ 355.007710][ T6748] bcachefs (loop3): initializing freespace [ 355.014087][ T6748] ===================================================== [ 355.021448][ T6748] BUG: KMSAN: uninit-value in bch2_dev_freespace_init+0x1044/0x1eb0 [ 355.029724][ T6748] bch2_dev_freespace_init+0x1044/0x1eb0 [ 355.042192][ T6748] bch2_fs_freespace_init+0x599/0xb30 [ 355.047780][ T6748] bch2_fs_initialize+0x1a74/0x2f90 [ 355.055295][ T6748] bch2_fs_start+0x792/0xc20 [ 355.060112][ T6748] bch2_fs_get_tree+0x1564/0x24e0 [ 355.065460][ T6748] vfs_get_tree+0xb1/0x5a0 [ 355.070153][ T6748] do_new_mount+0x71f/0x15e0 [ 355.075172][ T6748] path_mount+0x742/0x1f10 [ 355.080013][ T6748] __se_sys_mount+0x71f/0x800 [ 355.085020][ T6748] __x64_sys_mount+0xe4/0x150 [ 355.089900][ T6748] x64_sys_call+0x39bf/0x3c30 [ 355.094914][ T6748] do_syscall_64+0xcd/0x1e0 [ 355.099601][ T6748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.105879][ T6748] [ 355.108296][ T6748] Uninit was created at: [ 355.112990][ T6748] ___kmalloc_large_node+0x22c/0x370 [ 355.118539][ T6748] __kmalloc_large_node_noprof+0x3f/0x1e0 [ 355.124591][ T6748] __kmalloc_node_noprof+0xc96/0x1250 [ 355.130155][ T6748] __kvmalloc_node_noprof+0xc0/0x2d0 [ 355.142367][ T6748] __bch2_btree_node_mem_alloc+0x2be/0xa80 [ 355.148413][ T6748] bch2_fs_btree_cache_init+0x4f0/0xb60 [ 355.156139][ T6748] bch2_fs_open+0x4d84/0x5ba0 [ 355.161166][ T6748] bch2_fs_get_tree+0x98a/0x24e0 [ 355.166314][ T6748] vfs_get_tree+0xb1/0x5a0 [ 355.171532][ T6748] do_new_mount+0x71f/0x15e0 [ 355.176465][ T6748] path_mount+0x742/0x1f10 [ 355.181156][ T6748] __se_sys_mount+0x71f/0x800 [ 355.186037][ T6748] __x64_sys_mount+0xe4/0x150 [ 355.190997][ T6748] x64_sys_call+0x39bf/0x3c30 [ 355.195939][ T6748] do_syscall_64+0xcd/0x1e0 [ 355.200739][ T6748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.206838][ T6748] [ 355.209278][ T6748] CPU: 0 UID: 0 PID: 6748 Comm: syz.3.293 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 355.220212][ T6748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 355.230594][ T6748] ===================================================== [ 355.243809][ T6748] Disabling lock debugging due to kernel taint [ 355.250093][ T6748] Kernel panic - not syncing: kmsan.panic set ... [ 355.256655][ T6748] CPU: 0 UID: 0 PID: 6748 Comm: syz.3.293 Tainted: G B 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 355.268936][ T6748] Tainted: [B]=BAD_PAGE [ 355.273203][ T6748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 355.283411][ T6748] Call Trace: [ 355.286793][ T6748] [ 355.289819][ T6748] dump_stack_lvl+0x216/0x2d0 [ 355.294664][ T6748] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 355.300678][ T6748] dump_stack+0x1e/0x24 [ 355.304972][ T6748] panic+0x4e2/0xcf0 [ 355.309061][ T6748] ? kmsan_get_metadata+0x61/0x1c0 [ 355.314381][ T6748] kmsan_report+0x2c7/0x2d0 [ 355.319069][ T6748] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 355.325096][ T6748] ? __msan_warning+0x95/0x120 [ 355.330045][ T6748] ? bch2_dev_freespace_init+0x1044/0x1eb0 [ 355.336044][ T6748] ? bch2_fs_freespace_init+0x599/0xb30 [ 355.341785][ T6748] ? bch2_fs_initialize+0x1a74/0x2f90 [ 355.347318][ T6748] ? bch2_fs_start+0x792/0xc20 [ 355.352282][ T6748] ? bch2_fs_get_tree+0x1564/0x24e0 [ 355.357684][ T6748] ? vfs_get_tree+0xb1/0x5a0 [ 355.362451][ T6748] ? do_new_mount+0x71f/0x15e0 [ 355.367397][ T6748] ? path_mount+0x742/0x1f10 [ 355.372161][ T6748] ? __se_sys_mount+0x71f/0x800 [ 355.377198][ T6748] ? __x64_sys_mount+0xe4/0x150 [ 355.382228][ T6748] ? x64_sys_call+0x39bf/0x3c30 [ 355.387243][ T6748] ? do_syscall_64+0xcd/0x1e0 [ 355.392093][ T6748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.398357][ T6748] ? kmsan_get_metadata+0x13e/0x1c0 [ 355.403747][ T6748] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 355.410260][ T6748] ? kmsan_get_metadata+0x13e/0x1c0 [ 355.415653][ T6748] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 355.421667][ T6748] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 355.427691][ T6748] ? stack_depot_save_flags+0x6db/0x750 [ 355.433431][ T6748] ? kmsan_get_metadata+0x13e/0x1c0 [ 355.438821][ T6748] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 355.445334][ T6748] ? kmsan_get_metadata+0x13e/0x1c0 [ 355.450729][ T6748] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 355.456736][ T6748] __msan_warning+0x95/0x120 [ 355.461500][ T6748] bch2_dev_freespace_init+0x1044/0x1eb0 [ 355.467361][ T6748] ? bch2_dev_freespace_init+0x3d2/0x1eb0 [ 355.473275][ T6748] bch2_fs_freespace_init+0x599/0xb30 [ 355.478837][ T6748] bch2_fs_initialize+0x1a74/0x2f90 [ 355.484199][ T6748] ? kmsan_internal_poison_memory+0x7d/0x90 [ 355.490269][ T6748] ? kmsan_internal_poison_memory+0x49/0x90 [ 355.496342][ T6748] ? kmsan_slab_free+0xd0/0x140 [ 355.501366][ T6748] ? kfree+0x240/0xdb0 [ 355.505587][ T6748] ? bch2_printbuf_exit+0x9b/0xd0 [ 355.510784][ T6748] ? print_mount_opts+0x4ca/0x4f0 [ 355.516014][ T6748] ? bch2_fs_start+0x55/0xc20 [ 355.520894][ T6748] ? bch2_fs_get_tree+0x1564/0x24e0 [ 355.526287][ T6748] ? vfs_get_tree+0xb1/0x5a0 [ 355.531073][ T6748] ? do_new_mount+0x71f/0x15e0 [ 355.536022][ T6748] ? path_mount+0x742/0x1f10 [ 355.540805][ T6748] ? __se_sys_mount+0x71f/0x800 [ 355.545870][ T6748] ? __x64_sys_mount+0xe4/0x150 [ 355.550912][ T6748] ? x64_sys_call+0x39bf/0x3c30 [ 355.555933][ T6748] ? do_syscall_64+0xcd/0x1e0 [ 355.560787][ T6748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.567057][ T6748] ? kmsan_get_metadata+0x13e/0x1c0 [ 355.572447][ T6748] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 355.578455][ T6748] ? kfree+0x1a7/0xdb0 [ 355.582809][ T6748] ? filter_irq_stacks+0x60/0x1a0 [ 355.588043][ T6748] ? kmsan_get_metadata+0x13e/0x1c0 [ 355.593445][ T6748] ? kmsan_get_metadata+0x13e/0x1c0 [ 355.598846][ T6748] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 355.605360][ T6748] ? kmsan_get_metadata+0x13e/0x1c0 [ 355.610748][ T6748] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 355.616750][ T6748] ? kmsan_get_metadata+0x13e/0x1c0 [ 355.622140][ T6748] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 355.628136][ T6748] ? kmsan_get_metadata+0x13e/0x1c0 [ 355.633522][ T6748] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 355.640033][ T6748] ? llist_reverse_order+0x102/0x130 [ 355.645488][ T6748] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 355.651777][ T6748] bch2_fs_start+0x792/0xc20 [ 355.656581][ T6748] bch2_fs_get_tree+0x1564/0x24e0 [ 355.661872][ T6748] vfs_get_tree+0xb1/0x5a0 [ 355.666482][ T6748] ? mount_capable+0x97/0x120 [ 355.671318][ T6748] do_new_mount+0x71f/0x15e0 [ 355.676091][ T6748] ? kmsan_get_metadata+0x13e/0x1c0 [ 355.681493][ T6748] path_mount+0x742/0x1f10 [ 355.686089][ T6748] ? user_path_at+0x374/0x3e0 [ 355.690941][ T6748] __se_sys_mount+0x71f/0x800 [ 355.695827][ T6748] __x64_sys_mount+0xe4/0x150 [ 355.700699][ T6748] x64_sys_call+0x39bf/0x3c30 [ 355.705548][ T6748] do_syscall_64+0xcd/0x1e0 [ 355.710226][ T6748] ? clear_bhb_loop+0x25/0x80 [ 355.715089][ T6748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.721187][ T6748] RIP: 0033:0x7fa7d9f8e90a [ 355.725731][ T6748] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.745525][ T6748] RSP: 002b:00007fa7dadd1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 355.754116][ T6748] RAX: ffffffffffffffda RBX: 00007fa7dadd1ef0 RCX: 00007fa7d9f8e90a [ 355.762230][ T6748] RDX: 00004000000000c0 RSI: 0000400000000300 RDI: 00007fa7dadd1eb0 [ 355.770341][ T6748] RBP: 00004000000000c0 R08: 00007fa7dadd1ef0 R09: 0000000000000012 [ 355.778453][ T6748] R10: 0000000000000012 R11: 0000000000000246 R12: 0000400000000300 [ 355.786557][ T6748] R13: 00007fa7dadd1eb0 R14: 00000000000059f2 R15: 0000400000000340 [ 355.794686][ T6748] [ 355.798107][ T6748] Kernel Offset: disabled [ 355.802498][ T6748] Rebooting in 86400 seconds..