last executing test programs: 1m40.245401725s ago: executing program 2 (id=146): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x20000000) write$tcp_mem(0xffffffffffffffff, &(0x7f00000003c0)={0xff, 0x2d, 0x0, 0x3a, 0x1, 0x2c}, 0x48) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) socket$netlink(0x10, 0x3, 0x12) 1m40.019569975s ago: executing program 2 (id=148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a0004000100080017"], 0x3c}}, 0x0) 1m39.829870792s ago: executing program 2 (id=150): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) 1m39.659480417s ago: executing program 2 (id=152): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES16=0x0], 0x1, 0x1528, &(0x7f0000000a00)="$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") mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x24000408) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}]}, 0x34}}, 0x20000000) 1m39.274641991s ago: executing program 2 (id=156): unshare(0xc040480) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file1\x00', 0x3004000, &(0x7f0000000000)=ANY=[], 0x1, 0x3b3, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) fsync(r0) 1m38.673917505s ago: executing program 2 (id=162): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2be, &(0x7f0000000340)="$eJzs3b9ra1UcAPDvTdIk6JAITiJ4QQenx3tvdclD3oOHb1IyqIM+bAvSBKGFglVMO7m6OLq6CIKb/4GTi/+B4Cq4WWjhyr25Nz/aGJPaVHz9fIb25NzzPed7bk4bOtxvP3x5uLedxu7J579Gu51ErRe9OE2iG7WoHMec3lcBAPyfnWZZ/JGNrROXRER7c2kBABtUfP6frfH5/8PGUwIANuydd99766eIeDtN2/Fo+OVhP//LPv8+vv5gNz6OQezE3ejEeUQ2MW4/yrJs1Ehz3XhtODrs55HDD34u53/we0Q0yhfd4ut8/OMnD++lYzPxozyP58r1e/n696MTLy5Y//GTh/cXxEe/Ga+/OpP/nejELx/FJzGI7SKJcXzUIr64l6ZvZl//+dn7eXp5fDI67LeKcVNZ/QbfFgAAAAAAAAAAAAAAAAAAAAAAnnF3yto5rSjq9+RdZf2d+nn+YivSSne+Ps84PqkmulAfaJTFN1V9nrtpmmblwGl8I15qTCoDAQAAAAAAAAAAAAAAAAAAwK128OnR3tPBYGf/WhpVNYDqsf6rztOb6Xkllg9uTdeqlc0lM0e9GpNELE0j38TKOZ+VZQ+udute+Lucv/t+5Xm+/ee9l42tFcb8y0Z1uvaeJovvYSuqnnZ1SH6cHdOMFddqzve0J+9pttbxay681Fl9y8lxRHQjni96RksGR7IgseoQH73xW9moR34pubiLZnFX58PLnq2ypwhftHp79fOc/6RckkyqdSTX9wsIAAAAAAAAAAAAAAAAAACYmH2K+JKTpaG1rLWxtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRk3///8ajVEZvMLgZuwf/MdbBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bb4KwAA//+rbVlL") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b5a419, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666dddc69f3673e1e01a9b9416f39ab324320c93c98c4", @ANYRES16=r0], 0xb, 0x0, &(0x7f0000000000)) renameat2(r0, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1m38.241031443s ago: executing program 32 (id=162): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2be, &(0x7f0000000340)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b5a419, &(0x7f0000001780)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666dddc69f3673e1e01a9b9416f39ab324320c93c98c4", @ANYRES16=r0], 0xb, 0x0, &(0x7f0000000000)) renameat2(r0, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 14.413522544s ago: executing program 1 (id=387): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff001, 0x0, 0x0, 0x0, 0x7d}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000440)="010100ef86145a634227da4b4cbf", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 13.979010923s ago: executing program 1 (id=388): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000340), 0x0, 0x40000140, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0xfffffe0000000001, 0x10000000, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x749981, 0x0) close(r3) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80184132, &(0x7f0000000180)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 11.242652895s ago: executing program 0 (id=396): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, 0x0, 0x4044084) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000009f00)={0x28, r2, 0x101, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040004}, 0x800c014) 11.235340216s ago: executing program 1 (id=397): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) socket$inet6(0xa, 0x6, 0x0) r2 = io_uring_setup(0x407d, &(0x7f0000000500)={0x0, 0x2b11, 0x800, 0x20000001, 0x24b}) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f0000000740)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)}}], 0x2, 0xc040) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000019800)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="afaaaaaaaaaa00000000000086dd604dd30800140601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5042000090780000"], 0x0) sendmmsg(r4, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f00000024c0)}}], 0x1, 0x20000880) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x3, 0x88, 0x0, 0x0, @remote}, 0x10) listen(r3, 0xffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bfa, 0x4, 0x8, 0xffffff9a, 0x10000004}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xe6, 0xa000, 0x8, 0x5, 0xa17}, {0x200007, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x6}, {0x6, 0xd, 0x22e, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x7, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x2000527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xad52, 0x80, 0xef35}, {0x9, 0x9, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x7, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x0, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0x800ec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0xc}, {0x4, 0x4, 0x8, 0x69, 0x6}, {0xffff, 0xffffffff, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x80000001, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x6, 0x7, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x4, 0x10001, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0xfffffffd, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xbffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0x2000000a}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x5, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x289, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x6, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0xc0000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x7769}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x0, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x0, 0x9, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc459, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0xa, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xf, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x40008, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0x10, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x4}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0xaacd, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x8000007}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x881, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x5, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) 10.533505058s ago: executing program 0 (id=400): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) 9.471529822s ago: executing program 0 (id=401): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8b541) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0505405, &(0x7f00000000c0)={0x1, 0xfffffffd}) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet(r1, &(0x7f0000000140)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000002074640000000000003552", 0x10}, {&(0x7f0000001140)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}, 0xf5ffffff}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x1, 0x900, 0x0, 0xfffffffe}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32, @ANYBLOB="0800c300741300000800c4"], 0x2c}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="9da9e9fb67000326bd7000fbdbdf2553588a", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000002c0)={'team_slave_1\x00'}) 9.411477497s ago: executing program 4 (id=404): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r0], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) epoll_create1(0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz1\x00', 0x1}, 0x3, 0x20000000, 0xffff, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0xfffff7fd, [{0x5, 0x2, 0x80000000}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61]}}, 0x0, 0x47}, 0x28) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) tkill(r2, 0xb) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000005bc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000005c00)={0x30, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x2, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4848}, 0x20000000) 9.410891727s ago: executing program 1 (id=405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x20000800) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000640)={@val={0x8, 0x800}, @val={0x5, 0x0, 0xa, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x24, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0xe4}}}}}, 0x32) 8.121097321s ago: executing program 3 (id=407): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000200)={0x0, 0x635c, 0x80, 0x3, 0x1397}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) stat(0x0, 0x0) getgroups(0x0, &(0x7f0000000200)) socket$alg(0x26, 0x5, 0x0) r1 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000034000)={0x40ffc, {{0xa, 0x2, 0x3, @mcast2, 0x10000000}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 7.959410746s ago: executing program 0 (id=408): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x3, 0x38, 0x0, 0xa, 0x0, 0x65}}) 7.359600829s ago: executing program 5 (id=409): syz_emit_ethernet(0x56, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000001040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) 7.238366089s ago: executing program 0 (id=410): r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'veth1_to_batadv\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000780)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044005}, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000140)="41000200010001", 0x7) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000040)) bind$unix(r0, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12011f018bbe6740021200010000050009042e8958fc5b9ed1ca7b6f4adcc2d7e29c000000fff2b32aa81acf62fe43f78a31348855e99cdca21e7fea8cf83c335b1e75cdaef8bb6167d139c064da1c96143ee18ea35f61968ae87dfae3d736f5fad5e0ce"], 0x0) syz_usb_connect(0x5, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540"], 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x80, 0x180201) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.180847845s ago: executing program 1 (id=411): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8f0, &(0x7f0000002400)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ieee802154={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80) syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) msgsnd(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000440)=""/76) close(r4) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f00000003c0)={@id={0x2, 0x0, @a}, 0x10, 0x0, '\x00', @d}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x5, 0xd1, &(0x7f00000002c0)=""/209}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003980)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) io_submit(r0, 0x0, 0x0) 7.051502126s ago: executing program 5 (id=412): r0 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000ac0)=ANY=[@ANYBLOB="0003a8ff7b287a6b040000000403040c"], &(0x7f00000001c0)=ANY=[@ANYBLOB="000f1f20753e1e33cd61000000050302030300"/28], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x71, 0x2, 0x8, "cf9b2114", "048859f6"}}, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0xa, 0x5, 0x8, 0x7, 0x3}}}, &(0x7f0000000800)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffff"], &(0x7f0000000440)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xc9}, &(0x7f00000004c0)={0x20, 0x0, 0x4}, &(0x7f0000000180)=ANY=[@ANYBLOB="20000400000000000800312a117cf6d5a26404d716897fa7ebd9322b7c859901b79b8f25c88ee4a62e1a2ef8"], &(0x7f0000000540)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "c11f"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000900)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "d121"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x6}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) io_setup(0x7, &(0x7f0000004200)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000a80)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="27050200340f3c000688a82fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc083", 0x4d}, {&(0x7f00000002c0)="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", 0x79b}, {&(0x7f0000001200)="d0", 0x1}], 0x3}, 0x9cdc2384056b48b8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000020000000000000002000000850000009d0000009500000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9}, 0x94) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ppoll(&(0x7f00000000c0)=[{r7, 0xc}], 0x1, 0x0, 0x0, 0x0) 6.920819378s ago: executing program 4 (id=413): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003400010000000009ffdbdf"], 0x14}], 0x1}, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r2, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x107c80, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x240080c1) 5.028679985s ago: executing program 5 (id=414): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = accept(r3, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r5, 0x1}, 0x20) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x6) recvmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r7 = dup(r0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) syz_usb_connect(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r7, 0x0, 0xffffffdb) 4.249499494s ago: executing program 3 (id=415): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x34}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000004a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="deb841a0bba0760612176194a6c15e86c897de472c4b5add6ddd0125f1eeb9087390534ae801ba5ea07114ef4be0358ff593a864aa1345bf00b2053480", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r3, @ANYRES16=r2, @ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRESHEX=r3, @ANYRESOCT=r3, @ANYRESHEX=r0, @ANYRESOCT=r2, @ANYRESDEC=r1], 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000000), 0x1200000, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./bus/file1\x00', 0x0, 0x0) r5 = fsopen(&(0x7f00000010c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r7, 0x0, 0xbb) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x47) chdir(&(0x7f0000000140)='./bus\x00') clock_gettime(0x6, 0x0) symlink(&(0x7f00000012c0)='.\x00', &(0x7f0000001300)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r8, &(0x7f00000004c0)='./file0\x00', 0x2) 3.995601917s ago: executing program 3 (id=416): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x61f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x10001, 0x32314142, 0x3, @stepwise={0x1, 0x10000, 0x5, 0x8001, 0x3, 0x40}}) 3.924584473s ago: executing program 4 (id=417): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x42800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 3.856347399s ago: executing program 3 (id=418): syz_open_procfs(0x0, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x82}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) sendmsg$NFC_CMD_GET_SE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0xd0b2e175b015db11, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 3.651563567s ago: executing program 4 (id=419): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000380)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x0, 0x800, 0x0, 0x271}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f000084dff0)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 3.565326465s ago: executing program 0 (id=420): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="2011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0x6, 0x6808, 0x0, 0x0}], 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x29, 0x7, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000100), 0x4) lsetxattr$security_ima(0x0, 0x0, &(0x7f0000000080)=@sha1={0x1, "df0ed20f9239fa7d648cf014ad4f16d302f796d1"}, 0x15, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) 2.798518413s ago: executing program 3 (id=421): r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x496, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000000000014003500776c616e3000"/28, @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r9, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) 1.535437315s ago: executing program 5 (id=422): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="09000000010000", 0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x3, 0x4000, 0x0, 0x810, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x10000}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000280)={0x0, 0x80, "1adad9", 0x9, 0xb2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1}) waitid(0x1, r1, &(0x7f0000000480), 0x1, &(0x7f0000000500)) process_vm_writev(0x0, &(0x7f00000005c0)=[{&(0x7f00000006c0)=""/220, 0xdc}, {&(0x7f0000000080)=""/33, 0x21}, {&(0x7f00000007c0)=""/241, 0xf1}, {&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f00000008c0)=""/231, 0xe7}], 0x5, &(0x7f0000000ec0)=[{&(0x7f00000009c0)=""/205, 0xcd}, {&(0x7f0000000ac0)=""/212, 0xd4}, {&(0x7f0000000bc0)=""/78, 0x4e}, {&(0x7f00000014c0)=""/4095, 0xfff}, {&(0x7f0000000c40)=""/183, 0xb7}, {&(0x7f0000000d00)=""/243, 0xf3}, {&(0x7f0000000e00)=""/131, 0x83}, {&(0x7f0000000380)}], 0x8, 0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x5d, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0xffffffff, 0x2, {}, 0x1c000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001b"], 0x34}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) 1.514142316s ago: executing program 4 (id=423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) 893.297231ms ago: executing program 1 (id=424): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000001100)={0x1, @sdr={0x50323234, 0x1000}}) r9 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7020000000000118500000086000000b708000000000000dbaaf8fff1000000b5080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32, @ANYRES8=r8], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r1, 0xfffff000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 199.623733ms ago: executing program 5 (id=425): writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d484ea0000000f747082f52", 0xd}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 199.404633ms ago: executing program 4 (id=426): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000200)={0x0, 0x635c, 0x80, 0x3, 0x1397}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) stat(0x0, 0x0) getgroups(0x0, &(0x7f0000000200)) socket$alg(0x26, 0x5, 0x0) r1 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000034000)={0x40ffc, {{0xa, 0x2, 0x3, @mcast2, 0x10000000}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 188.803604ms ago: executing program 5 (id=427): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x10000000, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 0s ago: executing program 3 (id=428): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fallocate(r2, 0x1, 0x100000000, 0x10004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.13' (ED25519) to the list of known hosts. [ 61.264835][ T4253] cgroup: Unknown subsys name 'net' [ 61.411104][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.720050][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.386273][ T4276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.386273][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.389620][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.394320][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.404437][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.409323][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.423556][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.430156][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.437924][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.444477][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.451674][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.458041][ T4277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.465027][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.472427][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.479422][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.487142][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.494192][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.500327][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.507875][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.514132][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.522056][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.528285][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.536192][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.542826][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.557140][ T4277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.564873][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.572222][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.580218][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.585468][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.649826][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.040869][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 65.056966][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 65.168882][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 65.199696][ T4263] chnl_net:caif_netlink_parms(): no params data found [ 65.254515][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.261802][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.270557][ T4265] device bridge_slave_0 entered promiscuous mode [ 65.288735][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.296014][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.304101][ T4266] device bridge_slave_0 entered promiscuous mode [ 65.325558][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.332911][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.341115][ T4265] device bridge_slave_1 entered promiscuous mode [ 65.348847][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.356776][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.364552][ T4266] device bridge_slave_1 entered promiscuous mode [ 65.371569][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 65.443484][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.460120][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.471376][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.483713][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.491199][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.499212][ T4264] device bridge_slave_0 entered promiscuous mode [ 65.522742][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.543216][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.551027][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.559847][ T4264] device bridge_slave_1 entered promiscuous mode [ 65.613863][ T4265] team0: Port device team_slave_0 added [ 65.622034][ T4266] team0: Port device team_slave_0 added [ 65.628397][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.635680][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.643935][ T4263] device bridge_slave_0 entered promiscuous mode [ 65.664089][ T4265] team0: Port device team_slave_1 added [ 65.671712][ T4266] team0: Port device team_slave_1 added [ 65.678181][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.685422][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.693291][ T4263] device bridge_slave_1 entered promiscuous mode [ 65.701700][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.745796][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.790425][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.797629][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.805638][ T4273] device bridge_slave_0 entered promiscuous mode [ 65.814003][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.821271][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.847371][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.860168][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.867476][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.894527][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.907765][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.925285][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.932528][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.941191][ T4273] device bridge_slave_1 entered promiscuous mode [ 65.949265][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.956409][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.983258][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.995009][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.002243][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.028740][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.042481][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.054460][ T4264] team0: Port device team_slave_0 added [ 66.084436][ T4264] team0: Port device team_slave_1 added [ 66.129997][ T4263] team0: Port device team_slave_0 added [ 66.145458][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.169864][ T4263] team0: Port device team_slave_1 added [ 66.176744][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.183726][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.210147][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.233503][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.245255][ T4265] device hsr_slave_0 entered promiscuous mode [ 66.252524][ T4265] device hsr_slave_1 entered promiscuous mode [ 66.265601][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.273104][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.299583][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.314845][ T4266] device hsr_slave_0 entered promiscuous mode [ 66.321653][ T4266] device hsr_slave_1 entered promiscuous mode [ 66.328689][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.336896][ T4266] Cannot create hsr debugfs directory [ 66.380029][ T4273] team0: Port device team_slave_0 added [ 66.386451][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.393419][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.420043][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.432872][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.440005][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.466104][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.490277][ T4273] team0: Port device team_slave_1 added [ 66.551252][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.558624][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.585155][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.627045][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.634029][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.660583][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.667047][ T4277] Bluetooth: hci1: command 0x0409 tx timeout [ 66.674018][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 66.678808][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 66.684071][ T4268] Bluetooth: hci4: command 0x0409 tx timeout [ 66.699031][ T4264] device hsr_slave_0 entered promiscuous mode [ 66.706139][ T4264] device hsr_slave_1 entered promiscuous mode [ 66.712673][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.720359][ T4264] Cannot create hsr debugfs directory [ 66.737692][ T4263] device hsr_slave_0 entered promiscuous mode [ 66.744651][ T4263] device hsr_slave_1 entered promiscuous mode [ 66.751825][ T4263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.756648][ T4268] Bluetooth: hci2: command 0x0409 tx timeout [ 66.759733][ T4263] Cannot create hsr debugfs directory [ 66.882266][ T4273] device hsr_slave_0 entered promiscuous mode [ 66.889121][ T4273] device hsr_slave_1 entered promiscuous mode [ 66.895631][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.906081][ T4273] Cannot create hsr debugfs directory [ 67.103568][ T4266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.117549][ T4266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.137656][ T4266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.152195][ T4266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.198338][ T4265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.215349][ T4265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.231582][ T4265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.244342][ T4265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.303571][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.332704][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.342232][ T4263] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.355310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.367531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.404506][ T4263] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.414986][ T4263] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.430226][ T4263] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.445807][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.455478][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.465517][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.472966][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.482090][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.492437][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.501309][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.508594][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.516736][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.525698][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.539866][ T4264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.553880][ T4264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.571715][ T4264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.583628][ T4264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.635750][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.684078][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.693680][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.711991][ T4273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.729523][ T4273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.739955][ T4273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.753655][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.762546][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.772141][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.796098][ T4273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.812250][ T4266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.823657][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.849574][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.859157][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.871120][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.881295][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.902833][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.921829][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.954155][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.984209][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.992706][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.004324][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.040103][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.049453][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.060547][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.072458][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.082360][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.092599][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.101729][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.108986][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.139700][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.150582][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.162808][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.175920][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.183063][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.198756][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.214604][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.223067][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.249489][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.260296][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.269729][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.280423][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.289124][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.300729][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.309631][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.318362][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.327901][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.335070][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.343035][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.351659][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.374754][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.395581][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.413747][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.421825][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.430116][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.439715][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.448300][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.457406][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.465613][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.474601][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.483290][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.490429][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.498523][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.507864][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.522874][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.565041][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.575253][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.583937][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.591275][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.607013][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.617465][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.627078][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.638315][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.647858][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.657510][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.667648][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.681638][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.690900][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.699877][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.708363][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.718174][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.737506][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.746042][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 68.752244][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 68.759101][ T4268] Bluetooth: hci3: command 0x041b tx timeout [ 68.759118][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 68.784955][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.794198][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.802479][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.816996][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.825670][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.832920][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.840522][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 68.848317][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.863549][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.872793][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.879982][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.892522][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.901852][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.911691][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.918827][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.927709][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.936516][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.945072][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.953938][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.963305][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.971932][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.987944][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.028322][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.038648][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.048220][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.057087][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.065486][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.075344][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.084418][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.103704][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.112099][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.122290][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.132119][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.149557][ T4266] device veth0_vlan entered promiscuous mode [ 69.159208][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.177541][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.185100][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.193419][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.204427][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.215135][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.227760][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.250577][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.291248][ T4266] device veth1_vlan entered promiscuous mode [ 69.315434][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.347100][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.431721][ T4264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.453224][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.478906][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.489043][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.498409][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.507878][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.525519][ T4266] device veth0_macvtap entered promiscuous mode [ 69.546967][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.567659][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.587358][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.613688][ T4266] device veth1_macvtap entered promiscuous mode [ 69.641137][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.678157][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.733776][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.762226][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.781965][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.819240][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.836205][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.856578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.882644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.894048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.919308][ T4266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.931100][ T4266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.940029][ T4266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.949764][ T4266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.967505][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.032999][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.044003][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.062580][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.100703][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.113070][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.197858][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.218054][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.236886][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.251972][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.299889][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.308460][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.317090][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.324857][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.333511][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.342307][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.353325][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.361570][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.370323][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.379260][ T4273] device veth0_vlan entered promiscuous mode [ 70.397506][ T4265] device veth0_vlan entered promiscuous mode [ 70.423226][ T4273] device veth1_vlan entered promiscuous mode [ 70.424883][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.442088][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.454674][ T4265] device veth1_vlan entered promiscuous mode [ 70.475081][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.487031][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.495081][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.504313][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.545377][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.554226][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.563627][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.585678][ T4263] device veth0_vlan entered promiscuous mode [ 70.607307][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.615691][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.624478][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.633755][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.649518][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.654038][ T4263] device veth1_vlan entered promiscuous mode [ 70.657706][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.674723][ T4264] device veth0_vlan entered promiscuous mode [ 70.685424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.695012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.705005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.714575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.722615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.731729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.740665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.753480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.769734][ T4265] device veth0_macvtap entered promiscuous mode [ 70.785024][ T4264] device veth1_vlan entered promiscuous mode [ 70.824904][ T4265] device veth1_macvtap entered promiscuous mode [ 70.826843][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 70.835507][ T4273] device veth0_macvtap entered promiscuous mode [ 70.837432][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 70.846455][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 70.855521][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 70.861907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.862549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.883528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.892883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.901720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.909705][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 70.918773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.928038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.937127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.945800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.954801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.970220][ T4264] device veth0_macvtap entered promiscuous mode [ 70.984059][ T4264] device veth1_macvtap entered promiscuous mode [ 71.005096][ T4273] device veth1_macvtap entered promiscuous mode [ 71.021861][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.035193][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.048671][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.071843][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.094215][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.104260][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.116226][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.127707][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.148122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.161991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.171625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.180313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.190491][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.199809][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.209705][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.220728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.230650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.241786][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.252993][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.265403][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.277497][ T4263] device veth0_macvtap entered promiscuous mode [ 71.287680][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.321642][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.332482][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.354852][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.372868][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.396701][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.403558][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.412386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.425131][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.434275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.443704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.453115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.464619][ T4264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.485173][ T4264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.495760][ T4264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.510709][ T4264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.537663][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.547979][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.557170][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.566186][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.580103][ T4263] device veth1_macvtap entered promiscuous mode [ 71.591160][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.605406][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.621642][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.648120][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.658925][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.669557][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.681689][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.717045][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.732221][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.769102][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.780921][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.803678][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.815393][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.825444][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.836709][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.844480][ T4391] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.848087][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.874262][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.886569][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.913863][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.924593][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.934314][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.945118][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.992575][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.017298][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.027920][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.039087][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.049565][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.060501][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.070777][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.081593][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.093330][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.114459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.123525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.154310][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.166599][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.182570][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.194358][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.211004][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.222334][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.235831][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.247057][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.259387][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.290386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.299988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.312923][ T4263] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.321939][ T4263] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.331390][ T4263] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.341085][ T4263] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.355304][ T4347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.365053][ T4347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.420986][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.440391][ T4347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.452124][ T4347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.491003][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.538982][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.547982][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.581871][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.582219][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.610278][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.627554][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.637890][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.655411][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.656134][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.686449][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.726766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.734901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.772668][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.779971][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.795858][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.805413][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.876134][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.905107][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.916785][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 72.918705][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 72.922954][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 72.932154][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 72.987666][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 73.153908][ T4411] loop4: detected capacity change from 0 to 512 [ 73.181824][ T4414] loop0: detected capacity change from 0 to 16 [ 73.196145][ T4411] EXT4-fs (loop4): Unsupported blocksize for fs-verity [ 73.218098][ T4414] erofs: (device loop0): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 73.234031][ T4414] erofs: (device loop0): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 73.501843][ T4421] loop1: detected capacity change from 0 to 512 [ 73.529616][ T4421] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 73.543719][ T4421] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 73.564972][ T4421] EXT4-fs (loop1): orphan cleanup on readonly fs [ 73.581454][ T4421] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #13: comm syz.1.17: iget: bad i_size value: 12154761577498 [ 73.604179][ T4421] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.17: couldn't read orphan inode 13 (err -117) [ 73.612619][ T4425] loop4: detected capacity change from 0 to 512 [ 73.621561][ T4421] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 73.635253][ T4425] EXT4-fs: Ignoring removed i_version option [ 73.651146][ T4425] EXT4-fs: Ignoring removed bh option [ 73.664281][ T4421] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.17: dx entry: limit 65535 != root limit 120 [ 73.680711][ T4421] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.17: Corrupt directory, running e2fsck is recommended [ 73.723698][ T4425] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 73.737888][ T4425] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.738634][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 73.784680][ T4325] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.793680][ T27] audit: type=1800 audit(1767618039.243:2): pid=4425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.18" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 73.966165][ T4325] usb 1-1: Using ep0 maxpacket: 16 [ 73.983475][ T4325] usb 1-1: config 0 has no interfaces? [ 74.021889][ T4325] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 74.061905][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.072679][ T4325] usb 1-1: Product: syz [ 74.085176][ T4325] usb 1-1: Manufacturer: syz [ 74.095259][ T4325] usb 1-1: SerialNumber: syz [ 74.110806][ T4325] r8152-cfgselector 1-1: config 0 descriptor?? [ 74.130784][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 74.328761][ T4325] r8152-cfgselector 1-1: Unknown version 0x0000 [ 74.353793][ T4325] r8152-cfgselector 1-1: USB disconnect, device number 2 [ 74.355999][ T4348] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.544408][ T4448] loop4: detected capacity change from 0 to 4096 [ 74.563482][ T4348] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 74.591779][ T4348] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 74.628842][ T4348] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.649396][ T4348] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 74.663208][ T4348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.704298][ T4348] usb 4-1: invalid MIDI out EP 0 [ 74.942244][ T4348] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 74.962612][ T4454] loop1: detected capacity change from 0 to 256 [ 74.987267][ T4255] udevd[4255]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.029398][ T4348] usb 4-1: USB disconnect, device number 2 [ 75.389255][ T4469] loop0: detected capacity change from 0 to 512 [ 75.404001][ T4469] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.411385][ T4469] EXT4-fs: Ignoring removed bh option [ 75.436071][ T4469] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.509081][ T4476] loop1: detected capacity change from 0 to 16 [ 75.517004][ T4469] EXT4-fs error (device loop0): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 75.533932][ T4476] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 75.554960][ T4469] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #11: comm syz.0.35: corrupted inode contents [ 75.576913][ T4476] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 75.588954][ T4469] EXT4-fs error (device loop0): ext4_dirty_inode:6133: inode #11: comm syz.0.35: mark_inode_dirty error [ 75.612827][ T4469] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.35: invalid indirect mapped block 1 (level 1) [ 75.637382][ T4469] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #11: comm syz.0.35: corrupted inode contents [ 75.698374][ T4469] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 75.707879][ T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.741062][ T4469] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #11: comm syz.0.35: corrupted inode contents [ 75.762106][ T4469] EXT4-fs error (device loop0): ext4_truncate:4318: inode #11: comm syz.0.35: mark_inode_dirty error [ 75.774208][ T4469] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 75.794376][ T4469] EXT4-fs (loop0): 1 truncate cleaned up [ 75.804286][ T4469] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 75.804669][ T4484] loop1: detected capacity change from 0 to 64 [ 75.916995][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 75.939077][ T26] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 75.959016][ T26] usb 5-1: config 179 has no interface number 0 [ 75.974913][ T26] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 76.019400][ T26] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 76.039541][ T26] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 76.059402][ T26] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 76.074867][ T4488] overlayfs: failed to clone upperpath [ 76.080449][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 76.083895][ T26] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 76.124629][ T26] usb 5-1: config 179 interface 65 has no altsetting 0 [ 76.133439][ T26] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 76.143442][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.411425][ T4490] loop2: detected capacity change from 0 to 32768 [ 76.423396][ T4473] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 76.441603][ T26] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5 [ 76.518794][ T7] cfg80211: failed to load regulatory.db [ 76.628798][ T4490] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 76.682203][ T4490] XFS (loop2): Mounting V5 Filesystem [ 76.757070][ T4506] loop1: detected capacity change from 0 to 256 [ 76.794402][ T4490] XFS (loop2): Ending clean mount [ 76.872343][ T4510] loop0: detected capacity change from 0 to 128 [ 76.888218][ T4348] usb 5-1: USB disconnect, device number 2 [ 76.888323][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 76.952401][ T4348] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 76.953889][ T4510] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 77.101827][ T4266] XFS (loop2): Unmounting Filesystem [ 77.160557][ T4510] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.358406][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 77.389918][ T4519] loop1: detected capacity change from 0 to 512 [ 77.434079][ T4519] ======================================================= [ 77.434079][ T4519] WARNING: The mand mount option has been deprecated and [ 77.434079][ T4519] and is ignored by this kernel. Remove the mand [ 77.434079][ T4519] option from the mount to silence this warning. [ 77.434079][ T4519] ======================================================= [ 77.737612][ T4519] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 77.766360][ T4519] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.816813][ T4522] loop0: detected capacity change from 0 to 32768 [ 77.828353][ T4522] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.53 (4522) [ 77.859922][ T4522] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 77.871072][ T4522] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 77.880947][ T4522] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 77.890830][ T4522] BTRFS info (device loop0): use zstd compression, level 3 [ 77.898256][ T4522] BTRFS info (device loop0): using free space tree [ 78.033831][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 78.262736][ T4522] BTRFS info (device loop0): enabling ssd optimizations [ 78.323671][ T4552] loop1: detected capacity change from 0 to 2364 [ 78.395076][ T4552] ISOFS: unable to read i-node block [ 78.501430][ T4552] isofs_fill_super: get root inode failed [ 78.646587][ T4398] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 78.667930][ T4264] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 78.846650][ T4398] usb 4-1: Using ep0 maxpacket: 16 [ 78.862047][ T4398] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.911964][ T4398] usb 4-1: config 0 has no interfaces? [ 78.937405][ T4398] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 78.959009][ T4569] loop2: detected capacity change from 0 to 16 [ 78.968762][ T4398] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.990957][ T4398] usb 4-1: config 0 descriptor?? [ 79.155998][ T4569] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 79.237009][ T4569] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 79.248329][ T4564] usb 4-1: USB disconnect, device number 3 [ 79.606907][ T4581] Zero length message leads to an empty skb [ 79.643147][ T4581] loop4: detected capacity change from 0 to 1024 [ 79.757543][ T4586] device bond0 entered promiscuous mode [ 79.763204][ T4586] device bond_slave_0 entered promiscuous mode [ 79.766862][ T4581] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 79.769672][ T4586] device bond_slave_1 entered promiscuous mode [ 79.805493][ T4586] device bond0 left promiscuous mode [ 79.811158][ T4586] device bond_slave_0 left promiscuous mode [ 79.817279][ T4586] device bond_slave_1 left promiscuous mode [ 79.893745][ T4593] netlink: 32 bytes leftover after parsing attributes in process `syz.4.61'. [ 80.071207][ T4601] loop1: detected capacity change from 0 to 256 [ 80.216735][ T4595] loop3: detected capacity change from 0 to 32768 [ 80.252332][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 80.275266][ T4595] XFS (loop3): Mounting V5 Filesystem [ 80.286113][ T129] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.341159][ T27] audit: type=1326 audit(1767618045.783:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99598f749 code=0x7ffc0000 [ 80.389442][ T27] audit: type=1326 audit(1767618045.803:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb99598f749 code=0x7ffc0000 [ 80.414862][ T27] audit: type=1326 audit(1767618045.803:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99598f749 code=0x7ffc0000 [ 80.445497][ T4595] XFS (loop3): Ending clean mount [ 80.463884][ T4595] XFS (loop3): Quotacheck needed: Please wait. [ 80.486212][ T129] usb 1-1: Using ep0 maxpacket: 16 [ 80.495342][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.545387][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.586083][ T129] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 80.610992][ T4595] XFS (loop3): Quotacheck: Done. [ 80.621152][ T4595] XFS (loop3): User initiated shutdown received. [ 80.628355][ T4595] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 80.641814][ T4595] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 80.657570][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.686406][ T129] usb 1-1: config 0 descriptor?? [ 80.801484][ T4273] XFS (loop3): Unmounting Filesystem [ 80.958772][ T4629] loop4: detected capacity change from 0 to 128 [ 81.015116][ T4629] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 81.058923][ T4629] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.120438][ T129] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 81.336392][ T129] usb 1-1: USB disconnect, device number 3 [ 81.376346][ T4637] loop3: detected capacity change from 0 to 16 [ 81.402677][ T4637] erofs: (device loop3): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 81.442487][ T4637] erofs: (device loop3): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 81.644669][ T4649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.82'. [ 81.653810][ T4649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.82'. [ 81.703535][ T4649] device bridge0 entered promiscuous mode [ 81.718835][ T4649] device ip6gretap0 entered promiscuous mode [ 81.757225][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 82.069207][ T4664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 82.191348][ T4669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.92'. [ 82.348142][ T4676] process 'syz.1.91' launched './file0' with NULL argv: empty string added [ 82.415624][ T4678] loop3: detected capacity change from 0 to 16 [ 82.456919][ T4678] erofs: (device loop3): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 82.466415][ T4674] loop0: detected capacity change from 0 to 32768 [ 82.482197][ T4678] erofs: (device loop3): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 82.545362][ T4674] JBD2: Ignoring recovery information on journal [ 82.616007][ T4674] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 82.650758][ T27] audit: type=1800 audit(1767618048.103:6): pid=4674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.94" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 82.677051][ T4674] (syz.0.94,4674,1):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -14 [ 82.854492][ T4264] ocfs2: Unmounting device (7,0) on (node local) [ 83.079594][ T4694] loop0: detected capacity change from 0 to 1024 [ 83.194152][ T4694] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 83.362162][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 83.477154][ T4709] loop4: detected capacity change from 0 to 1024 [ 83.596091][ T4267] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.696955][ T27] audit: type=1326 audit(1767618049.153:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fd18f749 code=0x7ffc0000 [ 83.739152][ T4369] hfsplus: b-tree write err: -5, ino 4 [ 83.751194][ T27] audit: type=1326 audit(1767618049.153:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41fd18f749 code=0x7ffc0000 [ 83.776074][ T27] audit: type=1326 audit(1767618049.153:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fd18f749 code=0x7ffc0000 [ 83.796054][ T4267] usb 3-1: Using ep0 maxpacket: 16 [ 83.811383][ T4267] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.858719][ T4720] loop1: detected capacity change from 0 to 16 [ 83.875510][ T4267] usb 3-1: config 0 interface 0 has no altsetting 0 [ 83.881613][ T27] audit: type=1326 audit(1767618049.153:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fd18f749 code=0x7ffc0000 [ 83.909526][ T4267] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 83.922916][ T4720] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 83.950810][ T4720] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 83.971449][ T4267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.982145][ T27] audit: type=1326 audit(1767618049.153:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f41fd18f749 code=0x7ffc0000 [ 83.996962][ T4722] netlink: 16 bytes leftover after parsing attributes in process `syz.4.108'. [ 84.026488][ T4267] usb 3-1: config 0 descriptor?? [ 84.052682][ T27] audit: type=1326 audit(1767618049.153:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fd18f749 code=0x7ffc0000 [ 84.057247][ T4722] netlink: set zone limit has 8 unknown bytes [ 84.161425][ T4724] loop0: detected capacity change from 0 to 4096 [ 84.377635][ T4722] loop4: detected capacity change from 0 to 64 [ 84.403748][ T4722] hfs: unable to parse mount options [ 84.496019][ T22] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.497235][ T4267] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 84.626052][ T4743] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 6, id = 0 [ 84.709955][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 84.753043][ T4747] loop3: detected capacity change from 0 to 1024 [ 84.761504][ T4747] EXT4-fs: inline encryption not supported [ 84.816171][ T4747] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.908131][ T4267] usb 3-1: USB disconnect, device number 2 [ 84.956840][ T4747] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 85.018135][ T4745] loop4: detected capacity change from 0 to 40427 [ 85.029140][ T4745] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 85.037252][ T4745] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 85.046947][ T22] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 85.069367][ T4745] F2FS-fs (loop4): invalid crc value [ 85.077533][ T22] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 85.091183][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.100253][ T22] usb 1-1: Product: syz [ 85.104466][ T22] usb 1-1: Manufacturer: syz [ 85.109139][ T22] usb 1-1: SerialNumber: syz [ 85.126900][ T22] usb 1-1: config 0 descriptor?? [ 85.137778][ T22] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 85.147668][ T4745] F2FS-fs (loop4): Found nat_bits in checkpoint [ 85.187702][ T22] usb 1-1: Detected FT232R [ 85.229727][ T4750] fido_id[4750]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 85.244492][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 85.253543][ T4745] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 85.259746][ T4745] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 85.428520][ T4762] loop1: detected capacity change from 0 to 16 [ 85.462718][ T4762] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 85.505972][ T4762] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 85.541589][ T22] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 85.586147][ T22] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 85.638855][ T22] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 85.698519][ T22] usb 1-1: USB disconnect, device number 4 [ 85.743747][ T22] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 85.756546][ T4768] tmpfs: Unknown parameter 'usrquota' [ 85.792861][ T22] ftdi_sio 1-1:0.0: device disconnected [ 85.824820][ T4771] capability: warning: `syz.1.126' uses 32-bit capabilities (legacy support in use) [ 86.072756][ T4768] loop3: detected capacity change from 0 to 40427 [ 86.082947][ T4768] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 86.186117][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 86.517492][ T4785] loop0: detected capacity change from 0 to 256 [ 86.607646][ T4785] FAT-fs (loop0): Directory bread(block 64) failed [ 86.663208][ T4785] FAT-fs (loop0): Directory bread(block 65) failed [ 86.693278][ T4785] FAT-fs (loop0): Directory bread(block 66) failed [ 86.743199][ T4785] FAT-fs (loop0): Directory bread(block 67) failed [ 86.778267][ T4785] FAT-fs (loop0): Directory bread(block 68) failed [ 86.812175][ T4785] FAT-fs (loop0): Directory bread(block 69) failed [ 86.853901][ T4794] loop3: detected capacity change from 0 to 16 [ 86.873287][ T4785] FAT-fs (loop0): Directory bread(block 70) failed [ 86.896342][ T4794] erofs: (device loop3): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 86.909763][ T4785] FAT-fs (loop0): Directory bread(block 71) failed [ 86.919943][ T4785] FAT-fs (loop0): Directory bread(block 72) failed [ 86.926827][ T4794] erofs: (device loop3): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 86.953765][ T4785] FAT-fs (loop0): Directory bread(block 73) failed [ 87.832079][ T4823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.149'. [ 87.844570][ T4819] loop3: detected capacity change from 0 to 32768 [ 87.873170][ T4819] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.147 (4819) [ 87.892211][ T4819] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 87.902649][ T4819] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 87.911421][ T4819] BTRFS info (device loop3): turning on sync discard [ 87.918321][ T4819] BTRFS info (device loop3): use zlib compression, level 3 [ 87.925566][ T4819] BTRFS info (device loop3): turning off barriers [ 87.932268][ T4819] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 87.942925][ T4819] BTRFS info (device loop3): trying to use backup root at mount time [ 87.951059][ T4819] BTRFS info (device loop3): enabling auto defrag [ 87.957682][ T4819] BTRFS info (device loop3): setting nodatasum [ 87.963868][ T4819] BTRFS info (device loop3): using free space tree [ 88.077515][ T4836] loop2: detected capacity change from 0 to 256 [ 88.125998][ T4836] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe4da1f51, utbl_chksum : 0xe619d30d) [ 88.158579][ T4352] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 88.247707][ T4819] BTRFS error (device loop3): failed to load root extent [ 88.254835][ T4819] BTRFS warning (device loop3): try to load backup roots slot 1 [ 88.256008][ T129] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 88.293808][ T4362] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 88.353369][ T4819] BTRFS warning (device loop3): couldn't read tree root [ 88.361120][ T4819] BTRFS warning (device loop3): try to load backup roots slot 2 [ 88.369988][ T4819] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 88.382671][ T4819] BTRFS warning (device loop3): couldn't read tree root [ 88.390177][ T4819] BTRFS warning (device loop3): try to load backup roots slot 3 [ 88.426107][ T4819] BTRFS info (device loop3): enabling ssd optimizations [ 88.437779][ T4819] BTRFS info (device loop3): rebuilding free space tree [ 88.470902][ T129] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 88.490808][ T4819] BTRFS info (device loop3): checking UUID tree [ 88.513765][ T129] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 88.544715][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 88.544729][ T27] audit: type=1804 audit(1767618053.993:18): pid=4819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.147" name="/newroot/27/bus/bus" dev="loop3" ino=257 res=1 errno=0 [ 88.570478][ T129] usb 1-1: Product: syz [ 88.597916][ T129] usb 1-1: Manufacturer: syz [ 88.602579][ T129] usb 1-1: SerialNumber: syz [ 88.671718][ T129] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 88.753868][ T4273] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.945819][ T4459] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4459) [ 89.097801][ T129] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 89.113937][ T129] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 89.182789][ T4864] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 89.285581][ T4347] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.441582][ T4870] usb 1-1: USB disconnect, device number 5 [ 89.464740][ T4347] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.576264][ T4871] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 89.594328][ T4347] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.735742][ T4347] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.768669][ T4871] usb 4-1: unable to get BOS descriptor or descriptor too short [ 89.788727][ T4871] usb 4-1: config 1 has an invalid interface number: 181 but max is 0 [ 89.818237][ T4871] usb 4-1: config 1 has no interface number 0 [ 89.824567][ T4871] usb 4-1: config 1 interface 181 altsetting 1 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 89.861140][ T4871] usb 4-1: config 1 interface 181 has no altsetting 0 [ 89.900095][ T4871] usb 4-1: string descriptor 0 read error: -22 [ 89.921327][ T4871] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=1d.74 [ 89.946079][ T4871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.985950][ T4882] loop4: detected capacity change from 0 to 32768 [ 90.099757][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.114040][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.125014][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.134761][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.146405][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.155080][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.201928][ T4882] XFS (loop4): Mounting V5 Filesystem [ 90.252524][ T4886] loop0: detected capacity change from 0 to 32768 [ 90.256392][ T4882] XFS (loop4): Ending clean mount [ 90.279605][ T4899] loop1: detected capacity change from 0 to 128 [ 90.295606][ T4871] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 90.311432][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 90.326111][ T4899] FAT-fs (loop1): Filesystem has been set read-only [ 90.334880][ T4882] XFS (loop4): Quotacheck needed: Please wait. [ 90.368084][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 90.381605][ T4352] usb 4-1: Failed to submit usb control message: -71 [ 90.384243][ T4871] usb 4-1: USB disconnect, device number 4 [ 90.420173][ T4352] usb 4-1: unable to send the bmi data to the device: -71 [ 90.430982][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 90.446330][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 90.477440][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 90.489495][ T4886] XFS (loop0): Mounting V5 Filesystem [ 90.516284][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 90.526560][ T4352] usb 4-1: unable to get target info from device [ 90.532953][ T4352] usb 4-1: could not get target info (-71) [ 90.536234][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 90.538994][ T4352] usb 4-1: could not probe fw (-71) [ 90.577036][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 90.585824][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 90.611166][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 90.619980][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 90.643689][ T4882] XFS (loop4): Quotacheck: Done. [ 90.686983][ T4886] XFS (loop0): Ending clean mount [ 90.695612][ T4886] XFS (loop0): Quotacheck needed: Please wait. [ 90.706017][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 90.756212][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 90.768422][ T4886] XFS (loop0): Quotacheck: Done. [ 90.781816][ T4882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.902999][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 90.912093][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 90.928395][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 90.943112][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 90.953015][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 90.968552][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 90.977233][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 90.985706][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 90.994715][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 91.004951][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 91.014148][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 91.023263][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 91.033400][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 91.043625][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 91.045822][ T4264] XFS (loop0): Unmounting Filesystem [ 91.066279][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 91.074829][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 91.096364][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 91.104942][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 91.126846][ T4263] XFS (loop4): Unmounting Filesystem [ 91.186855][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 91.204538][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 91.241967][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 91.291002][ T4899] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 91.329654][ T27] audit: type=1800 audit(1767618056.783:19): pid=4899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.168" name="file1" dev="loop1" ino=1048612 res=0 errno=0 [ 91.452498][ T4899] syz.1.168 (4899) used greatest stack depth: 19816 bytes left [ 91.555432][ T4347] device ip6gretap0 left promiscuous mode [ 91.628236][ T4917] loop3: detected capacity change from 0 to 2048 [ 91.935573][ T4917] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 91.969846][ T4917] UDF-fs: Scanning with blocksize 512 failed [ 92.030453][ T4889] chnl_net:caif_netlink_parms(): no params data found [ 92.048401][ T4917] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.186090][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 92.740262][ T4948] loop1: detected capacity change from 0 to 32768 [ 92.752173][ T4889] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.771481][ T4948] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 92.796855][ T4889] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.853848][ T4889] device bridge_slave_0 entered promiscuous mode [ 92.953031][ T4889] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.978913][ T4889] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.007132][ T4889] device bridge_slave_1 entered promiscuous mode [ 93.174395][ T4458] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 93.219611][ T4889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.344606][ T4889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.428562][ T4964] loop1: detected capacity change from 0 to 16 [ 93.479302][ T4964] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 93.523336][ T4964] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 93.568338][ T4949] loop3: detected capacity change from 0 to 32768 [ 93.617889][ T4949] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.178 (4949) [ 93.715954][ T4949] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 93.774293][ T4949] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 93.791789][ T4889] team0: Port device team_slave_0 added [ 93.846042][ T4949] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 93.855514][ T4949] BTRFS info (device loop3): use zstd compression, level 3 [ 93.894177][ T4949] BTRFS info (device loop3): using free space tree [ 93.945455][ T4889] team0: Port device team_slave_1 added [ 94.133819][ T4988] loop4: detected capacity change from 0 to 512 [ 94.141457][ T4987] loop1: detected capacity change from 0 to 128 [ 94.161228][ T4988] FAT-fs (loop4): Invalid FSINFO signature: 0x00000001, 0x61417272 (sector = 1) [ 94.183582][ T4987] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 94.205559][ T4987] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.269201][ T4889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.277427][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 94.287109][ T4398] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 94.295276][ T4889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.325161][ T4889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.337679][ T4889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.345209][ T4889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.372350][ T4889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.440602][ T4949] BTRFS info (device loop3): enabling ssd optimizations [ 94.489375][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 94.516033][ T4398] usb 1-1: Using ep0 maxpacket: 32 [ 94.527503][ T4398] usb 1-1: config 0 has an invalid interface number: 240 but max is 0 [ 94.550460][ T4347] device bridge0 left promiscuous mode [ 94.551857][ T4398] usb 1-1: config 0 has no interface number 0 [ 94.585525][ T4398] usb 1-1: config 0 interface 240 altsetting 7 endpoint 0x4 has an invalid bInterval 160, changing to 7 [ 94.611904][ T4347] device hsr_slave_0 left promiscuous mode [ 94.639813][ T4398] usb 1-1: config 0 interface 240 has no altsetting 0 [ 94.647169][ T4347] device hsr_slave_1 left promiscuous mode [ 94.668792][ T4398] usb 1-1: New USB device found, idVendor=78c9, idProduct=823d, bcdDevice=be.d4 [ 94.678826][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.699168][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.712564][ T4398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.727223][ T4398] usb 1-1: Product: syz [ 94.731448][ T4398] usb 1-1: Manufacturer: syz [ 94.736365][ T4398] usb 1-1: SerialNumber: syz [ 94.743936][ T4398] usb 1-1: config 0 descriptor?? [ 94.758847][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.766447][ T4398] usb 1-1: bad CDC descriptors [ 94.801265][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.809947][ T4273] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 94.842854][ T4347] device bridge_slave_1 left promiscuous mode [ 94.867099][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.931810][ T5011] kvm: vcpu 0: requested 96 ns lapic timer period limited to 200000 ns [ 94.975659][ T14] usb 1-1: USB disconnect, device number 6 [ 95.072944][ T5020] delete_channel: no stack [ 95.134463][ T4347] device bridge_slave_0 left promiscuous mode [ 95.151692][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.856516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.859828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.864767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.872956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.881033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 95.889264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.898075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 95.906278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 95.914679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 95.922848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 95.930935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 96.857775][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 96.923851][ T4347] device veth1_macvtap left promiscuous mode [ 96.944402][ T4347] device veth0_macvtap left promiscuous mode [ 96.976114][ T4347] device veth1_vlan left promiscuous mode [ 96.982259][ T4347] device veth0_vlan left promiscuous mode [ 97.229712][ T5040] loop1: detected capacity change from 0 to 16 [ 97.319871][ T5040] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 97.355357][ T5040] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 97.949910][ T5051] netlink: 36 bytes leftover after parsing attributes in process `syz.1.202'. [ 98.965922][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 99.911082][ T4347] team0 (unregistering): Port device team_slave_1 removed [ 100.920574][ T4347] team0 (unregistering): Port device team_slave_0 removed [ 101.053247][ T4347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.184775][ T4347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.469974][ T14] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 101.487800][ T14] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.662900][ T5083] fido_id[5083]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 102.301460][ T4347] bond0 (unregistering): Released all slaves [ 102.372489][ T4889] device hsr_slave_0 entered promiscuous mode [ 102.379698][ T4889] device hsr_slave_1 entered promiscuous mode [ 102.386534][ T4889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.394232][ T4889] Cannot create hsr debugfs directory [ 102.654157][ T5095] loop1: detected capacity change from 0 to 16 [ 102.686601][ T5095] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 102.771650][ T5095] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 103.087620][ T4889] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.172528][ T4889] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.249049][ T4889] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.295353][ T4889] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.462762][ T5114] delete_channel: no stack [ 103.944983][ T4889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.136009][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.158196][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.887191][ T4889] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.938576][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.059485][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.126184][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.133316][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.182083][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.348116][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.386724][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.434788][ T5151] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 105.466478][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.474766][ T5071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.523846][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.440304][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.254703][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.384431][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.434791][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.466644][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.513269][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.602044][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.653528][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.714550][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.767896][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.993642][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.711865][ T5186] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 109.719174][ T5186] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 109.787780][ T5193] futex_wake_op: syz.3.232 tries to shift op by -1; fix this program [ 109.791760][ T5186] vhci_hcd vhci_hcd.0: Device attached [ 111.208279][ T129] vhci_hcd: vhci_device speed not set [ 111.221990][ T5019] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 111.286188][ T129] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 111.360392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.379855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.418097][ T5019] usb 1-1: config 0 has no interfaces? [ 111.418630][ T4889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.423608][ T5019] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.423634][ T5019] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.507745][ T5019] usb 1-1: config 0 descriptor?? [ 111.646713][ T5210] loop4: detected capacity change from 0 to 16 [ 111.673652][ T5210] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 111.726337][ T5210] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 111.762781][ T5187] usbip_core: unknown command [ 111.768208][ T5187] vhci_hcd: unknown pdu 2147483648 [ 111.776068][ T4870] usb 1-1: USB disconnect, device number 7 [ 111.802184][ T5187] usbip_core: unknown command [ 111.827619][ T4369] vhci_hcd: stop threads [ 111.844943][ T4369] vhci_hcd: release socket [ 111.846883][ T129] vhci_hcd: vhci_device speed not set [ 111.909757][ T4369] vhci_hcd: disconnect device [ 111.936230][ T129] usb 33-1: device descriptor read/64, error -71 [ 112.146169][ T129] vhci_hcd: vhci_device speed not set [ 112.826748][ T4870] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 112.965265][ T4564] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.139032][ T4870] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 113.281209][ T4564] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.311194][ T4870] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.643813][ T4870] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 113.887643][ T4564] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 113.896821][ T4564] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.956180][ T4564] usb 5-1: config 0 descriptor?? [ 113.989599][ T4564] pwc: Askey VC010 type 2 USB webcam detected. [ 114.311345][ T4870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.480063][ T4870] usb 2-1: Product: syz [ 114.568640][ T4870] usb 2-1: Manufacturer: syz [ 114.589327][ T4870] usb 2-1: SerialNumber: syz [ 114.609381][ T4870] usb 2-1: config 0 descriptor?? [ 114.631913][ T4564] pwc: recv_control_msg error -32 req 02 val 2b00 [ 114.655982][ T4564] pwc: recv_control_msg error -32 req 02 val 2700 [ 114.682371][ T4564] pwc: recv_control_msg error -32 req 02 val 2c00 [ 114.710923][ T4564] pwc: recv_control_msg error -32 req 04 val 1000 [ 114.725067][ T4564] pwc: recv_control_msg error -32 req 04 val 1300 [ 114.733788][ T4564] pwc: recv_control_msg error -32 req 04 val 1400 [ 114.754748][ T4564] pwc: recv_control_msg error -32 req 02 val 2000 [ 114.771368][ T4564] pwc: recv_control_msg error -32 req 02 val 2100 [ 114.785440][ T4564] pwc: recv_control_msg error -32 req 04 val 1500 [ 115.005072][ T4564] pwc: recv_control_msg error -71 req 02 val 2400 [ 115.018007][ T4564] pwc: recv_control_msg error -71 req 02 val 2600 [ 115.033102][ T4564] pwc: recv_control_msg error -71 req 02 val 2900 [ 115.046330][ T4564] pwc: recv_control_msg error -71 req 02 val 2800 [ 115.061132][ T4564] pwc: recv_control_msg error -71 req 04 val 1100 [ 115.081156][ T4564] pwc: recv_control_msg error -71 req 04 val 1200 [ 115.096471][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.106192][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.118983][ T4564] pwc: Registered as video103. [ 115.133395][ T4564] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 115.173794][ T4564] usb 5-1: USB disconnect, device number 3 [ 116.054235][ T4870] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 116.173341][ T4870] imon 2-1:0.0: unable to initialize intf0, err -19 [ 116.194884][ T5250] binder: BINDER_SET_CONTEXT_MGR already set [ 116.208341][ T4870] imon:imon_probe: failed to initialize context! [ 116.232132][ T5250] binder: 5249:5250 ioctl 4018620d 200000000040 returned -16 [ 116.240591][ T4870] imon 2-1:0.0: unable to register, err -19 [ 116.286151][ T4870] usb 2-1: USB disconnect, device number 2 [ 116.402050][ T5257] loop1: detected capacity change from 0 to 16 [ 116.493416][ T5257] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 116.541590][ T5257] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 116.679989][ T5261] netlink: 'syz.0.243': attribute type 1 has an invalid length. [ 116.687904][ T5261] netlink: 'syz.0.243': attribute type 2 has an invalid length. [ 116.852257][ T5242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.046767][ T4860] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.228484][ T5242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.342752][ T4860] usb 5-1: config 0 has no interfaces? [ 117.348639][ T4860] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 117.374673][ T4860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.398309][ T4860] usb 5-1: config 0 descriptor?? [ 117.733232][ T5242] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.746741][ T5242] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.760064][ T5242] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.771158][ T5242] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.036054][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.073420][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.129642][ T4564] usb 5-1: USB disconnect, device number 4 [ 118.166452][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.197446][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.336766][ T4889] device veth0_vlan entered promiscuous mode [ 118.355778][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.390832][ T5276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 118.897811][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.040867][ T4889] device veth1_vlan entered promiscuous mode [ 119.202636][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.339704][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.369196][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.394213][ T4889] device veth0_macvtap entered promiscuous mode [ 119.439452][ T4889] device veth1_macvtap entered promiscuous mode [ 119.523233][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.537914][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.551379][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.632637][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.644468][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.782480][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.796692][ T4889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.808321][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.819220][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.829597][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.843963][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.854194][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.864905][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.974997][ T4889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.432921][ T5304] loop0: detected capacity change from 0 to 16 [ 121.446103][ T5304] erofs: (device loop0): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 121.460915][ T5304] erofs: (device loop0): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 121.478498][ T5289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.252'. [ 122.065146][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.091270][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.114718][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.137919][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.158070][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.696851][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.767156][ T4889] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.797720][ T4889] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.839958][ T4889] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.867230][ T4889] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.153698][ T5071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.187382][ T5071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.240856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.367849][ T5071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.498533][ T5071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.520078][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.025995][ T4564] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 125.215928][ T4564] usb 5-1: Using ep0 maxpacket: 32 [ 125.866280][ T27] audit: type=1326 audit(1767618091.323:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.5.268" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b1c78f749 code=0x0 [ 125.867799][ T5363] netlink: 40 bytes leftover after parsing attributes in process `syz.0.269'. [ 127.400666][ T5376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.411020][ T5376] bond0: (slave rose0): Enslaving as an active interface with an up link [ 127.420680][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 127.770688][ T4564] usb 5-1: unable to get BOS descriptor or descriptor too short [ 127.801259][ T4564] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 127.817720][ T4564] usb 5-1: can't read configurations, error -71 [ 127.906011][ T4570] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.976109][ T4565] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 128.039339][ T5390] PKCS8: Unsupported PKCS#8 version [ 128.096174][ T4570] usb 4-1: Using ep0 maxpacket: 16 [ 128.103718][ T4570] usb 4-1: config 2 has an invalid interface number: 221 but max is 0 [ 128.138021][ T4570] usb 4-1: config 2 has an invalid interface association descriptor of length 2, skipping [ 128.152044][ T4570] usb 4-1: config 2 has no interface number 0 [ 128.245576][ T4565] usb 2-1: Using ep0 maxpacket: 32 [ 128.272463][ T4570] usb 4-1: config 2 interface 221 altsetting 8 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 128.287755][ T4565] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.428092][ T4570] usb 4-1: config 2 interface 221 has no altsetting 0 [ 128.436700][ T4565] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 128.450372][ T4570] usb 4-1: New USB device found, idVendor=094b, idProduct=0001, bcdDevice=15.35 [ 128.460609][ T4570] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.469655][ T4570] usb 4-1: Product: syz [ 128.519373][ T4565] usb 2-1: New USB device found, idVendor=0733, idProduct=0402, bcdDevice=ef.67 [ 128.529162][ T4570] usb 4-1: Manufacturer: syz [ 128.533958][ T4565] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.542174][ T4570] usb 4-1: SerialNumber: syz [ 128.556267][ T4565] usb 2-1: Product: syz [ 128.560762][ T4565] usb 2-1: Manufacturer: syz [ 128.565502][ T4565] usb 2-1: SerialNumber: syz [ 128.932325][ T4565] usb 2-1: config 0 descriptor?? [ 128.960335][ T4565] gspca_main: spca501-2.14.0 probing 0733:0402 [ 129.117792][ T5019] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 129.174940][ T4570] usb 4-1: USB disconnect, device number 5 [ 129.214249][ T5408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.377757][ T5019] usb 6-1: Using ep0 maxpacket: 32 [ 129.388609][ T5019] usb 6-1: unable to get BOS descriptor or descriptor too short [ 129.397215][ T5408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.461304][ T5413] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 130.014592][ T4565] gspca_spca501: reg write: error -110 [ 130.022231][ T4565] spca501 2-1:0.0: Reg write failed for 0x00,0xaa,0x00 [ 130.193016][ T4565] spca501: probe of 2-1:0.0 failed with error -22 [ 130.234951][ T5019] usb 6-1: config 14 has an invalid interface number: 115 but max is 0 [ 130.679340][ T5019] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 130.740563][ T5019] usb 6-1: config 14 has no interface number 0 [ 130.770853][ T5019] usb 6-1: config 14 interface 115 has no altsetting 0 [ 131.346026][ T4871] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 131.536147][ T4871] usb 1-1: Using ep0 maxpacket: 8 [ 131.560020][ T4871] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 131.602645][ T4871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.838617][ T4871] usb 1-1: Product: syz [ 131.854243][ T4871] usb 1-1: Manufacturer: syz [ 131.872408][ T4871] usb 1-1: SerialNumber: syz [ 131.904832][ T4871] usb 1-1: config 0 descriptor?? [ 131.924505][ T4871] gspca_main: se401-2.14.0 probing 047d:5003 [ 132.043676][ T129] usb 2-1: USB disconnect, device number 3 [ 132.766576][ T5445] input: syz1 as /devices/virtual/input/input8 [ 133.421344][ T4871] gspca_se401: ExtraFeatures: 255 [ 133.423001][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.426884][ T4871] gspca_se401: Too many frame sizes [ 133.432807][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.626018][ T4870] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 133.676221][ T4860] usb 1-1: USB disconnect, device number 8 [ 133.856019][ T4870] usb 5-1: Using ep0 maxpacket: 32 [ 133.864245][ T4870] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 133.925954][ T4870] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 133.935061][ T4870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.026795][ T4870] usb 5-1: config 0 descriptor?? [ 134.671897][ T5019] usb 6-1: string descriptor 0 read error: -71 [ 134.683496][ T5019] usb 6-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 134.693173][ T5019] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.730674][ T5019] usb 6-1: can't set config #14, error -71 [ 134.747945][ T5019] usb 6-1: USB disconnect, device number 2 [ 135.200465][ T5469] block device autoloading is deprecated and will be removed. [ 135.235625][ T5467] md: superblock version 12389 not known [ 135.254023][ T5467] md: couldn't set array info. -22 [ 135.326262][ T4860] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 135.565944][ T4860] usb 4-1: Using ep0 maxpacket: 32 [ 135.674901][ T5019] usb 5-1: USB disconnect, device number 7 [ 137.942643][ T4860] usb 4-1: unable to get BOS descriptor or descriptor too short [ 138.140941][ T4860] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 138.186859][ T4860] usb 4-1: can't read configurations, error -71 [ 138.576115][ T4860] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 138.787057][ T4860] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 138.827695][ T4860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.877400][ T4860] usb 4-1: config 0 descriptor?? [ 138.924626][ T4860] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 139.108402][ T4860] gp8psk: usb in 128 operation failed. [ 139.118652][ T4860] gp8psk: usb in 137 operation failed. [ 139.150438][ T4860] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.206757][ T4860] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 139.255314][ T4860] usb 4-1: media controller created [ 139.378837][ T4860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.009420][ T4860] gp8psk_fe: Frontend attached [ 140.014917][ T4860] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 140.110463][ T4860] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 140.288577][ T5018] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 141.021665][ T4860] gp8psk: usb in 138 operation failed. [ 141.030651][ T4860] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 141.040859][ T4860] gp8psk: found Genpix USB device pID = 203 (hex) [ 141.053882][ T4860] usb 4-1: USB disconnect, device number 7 [ 141.077604][ T5018] usb 6-1: Using ep0 maxpacket: 16 [ 141.098946][ T5018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.142284][ T4860] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 141.335965][ T5018] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.400367][ T5018] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 141.471909][ T5018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.531311][ T5018] usb 6-1: config 0 descriptor?? [ 141.827237][ T4860] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 143.526018][ T4860] usb 4-1: Using ep0 maxpacket: 8 [ 143.551380][ T4860] usb 4-1: device descriptor read/all, error -71 [ 144.126055][ T4860] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 144.326233][ T4860] usb 4-1: Using ep0 maxpacket: 8 [ 144.335302][ T4860] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.483819][ T5018] usbhid 6-1:0.0: can't add hid device: -71 [ 144.494600][ T5018] usbhid: probe of 6-1:0.0 failed with error -71 [ 144.509348][ T5018] usb 6-1: USB disconnect, device number 3 [ 144.550552][ T4860] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.580568][ T4860] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.621550][ T4860] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.654096][ T4860] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 144.684046][ T4860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.752358][ T5566] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 144.856068][ T129] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 144.920676][ T4860] usb 4-1: usb_control_msg returned -32 [ 144.934729][ T4860] usbtmc 4-1:16.0: can't read capabilities [ 145.022407][ T4860] usb 4-1: USB disconnect, device number 9 [ 145.051597][ T129] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 145.094874][ T129] usb 2-1: config 0 has no interface number 0 [ 145.178516][ T129] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 145.215306][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.224906][ T129] usb 2-1: Product: syz [ 145.231476][ T129] usb 2-1: Manufacturer: syz [ 145.237084][ T129] usb 2-1: SerialNumber: syz [ 145.258166][ T129] usb 2-1: config 0 descriptor?? [ 145.471932][ T129] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 145.568791][ T129] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 145.599782][ T129] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 145.631882][ T129] usb 2-1: media controller created [ 145.813951][ T129] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.150676][ T129] usb 2-1: USB disconnect, device number 4 [ 149.185066][ T5616] overlayfs: failed to resolve './file1': -2 [ 149.279332][ T5596] syz.0.321 (5596): drop_caches: 2 [ 149.402246][ T5620] tmpfs: Unknown parameter 'quota' [ 153.205981][ T4870] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 153.876062][ T4870] usb 4-1: Using ep0 maxpacket: 16 [ 153.887979][ T4870] usb 4-1: config 0 has an invalid interface number: 65 but max is 0 [ 153.968866][ T4870] usb 4-1: config 0 has no interface number 0 [ 154.009555][ T4870] usb 4-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=2c.30 [ 154.076352][ T4870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.127000][ T4870] usb 4-1: Product: syz [ 154.167427][ T4870] usb 4-1: Manufacturer: syz [ 154.229798][ T4870] usb 4-1: SerialNumber: syz [ 154.285042][ T4870] usb 4-1: config 0 descriptor?? [ 154.324637][ T4870] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 154.766008][ T4564] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 156.068005][ T129] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 156.088059][ T4564] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.137086][ T4564] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 156.175948][ T4870] gspca_stv06xx: I2C: Read error writing address: -71 [ 156.182297][ T4564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.206102][ T4870] usb 4-1: USB disconnect, device number 10 [ 156.237595][ T4564] usb 6-1: config 0 descriptor?? [ 156.249565][ T4564] pwc: Askey VC010 type 2 USB webcam detected. [ 156.277096][ T129] usb 1-1: Using ep0 maxpacket: 32 [ 156.294914][ T129] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 156.333741][ T129] usb 1-1: config 0 has no interface number 0 [ 157.449046][ T129] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 157.460745][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.471186][ T129] usb 1-1: Product: syz [ 157.477627][ T129] usb 1-1: Manufacturer: syz [ 157.483493][ T129] usb 1-1: SerialNumber: syz [ 157.496420][ T129] usb 1-1: config 0 descriptor?? [ 157.506828][ T129] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 157.614841][ T4564] pwc: send_video_command error -71 [ 157.621788][ T4564] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 157.689870][ T129] usb 1-1: qt2_attach - failed to power on unit: -71 [ 157.700118][ T129] quatech2: probe of 1-1:0.51 failed with error -71 [ 157.708790][ T4564] Philips webcam: probe of 6-1:0.0 failed with error -71 [ 157.718667][ T129] usb 1-1: USB disconnect, device number 9 [ 157.800711][ T4564] usb 6-1: USB disconnect, device number 4 [ 159.372445][ T5722] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 161.619795][ T4565] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 162.408176][ T4565] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 162.457077][ T4565] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.510279][ T4565] usb 2-1: config 0 descriptor?? [ 162.529024][ T4565] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 162.809061][ T5770] netlink: 16 bytes leftover after parsing attributes in process `syz.5.359'. [ 162.819740][ T5770] netlink: 12 bytes leftover after parsing attributes in process `syz.5.359'. [ 163.379116][ T4565] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 164.425076][ T4565] gspca_cpia1: usb_control_msg 02, error -71 [ 164.521287][ T4565] gspca_cpia1: usb_control_msg 05, error -71 [ 164.530472][ T4565] cpia1 2-1:0.0: unexpected systemstate: 00 [ 164.582064][ T4565] usb 2-1: USB disconnect, device number 5 [ 166.016170][ T4565] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 166.437444][ T4565] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.499762][ T4565] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 166.585293][ T4565] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.060610][ T4565] usb 6-1: config 0 descriptor?? [ 167.088239][ T4565] pwc: Askey VC010 type 2 USB webcam detected. [ 168.057803][ T4565] pwc: recv_control_msg error -32 req 02 val 2b00 [ 168.081669][ T4565] pwc: recv_control_msg error -32 req 02 val 2c00 [ 168.268807][ T4565] pwc: recv_control_msg error -71 req 04 val 1000 [ 168.297367][ T4565] pwc: recv_control_msg error -71 req 04 val 1300 [ 168.318878][ T4565] pwc: recv_control_msg error -71 req 04 val 1400 [ 168.328266][ T4565] pwc: recv_control_msg error -71 req 02 val 2000 [ 168.338394][ T4565] pwc: recv_control_msg error -71 req 02 val 2100 [ 168.380102][ T4565] pwc: recv_control_msg error -71 req 04 val 1500 [ 168.410593][ T4565] pwc: recv_control_msg error -71 req 02 val 2500 [ 168.430792][ T4565] pwc: recv_control_msg error -71 req 02 val 2400 [ 168.454472][ T4565] pwc: recv_control_msg error -71 req 02 val 2600 [ 168.491514][ T4565] pwc: recv_control_msg error -71 req 02 val 2900 [ 168.520075][ T4565] pwc: recv_control_msg error -71 req 02 val 2800 [ 168.545232][ T4565] pwc: recv_control_msg error -71 req 04 val 1100 [ 168.581826][ T4565] pwc: recv_control_msg error -71 req 04 val 1200 [ 168.623549][ T4565] pwc: Registered as video103. [ 168.648266][ T4565] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 168.865927][ T4565] usb 6-1: USB disconnect, device number 5 [ 169.168933][ T4281] Bluetooth: Wrong link type (-22) [ 170.336359][ T4870] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 171.052883][ T4870] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 171.079061][ T4870] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.219993][ T4870] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 171.355221][ T4870] usb 2-1: config 1 has no interface number 1 [ 171.372676][ T4870] usb 2-1: string descriptor 0 read error: -22 [ 171.389366][ T4870] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.400895][ T4870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.492018][ T4870] usb 2-1: MIDIStreaming interface descriptor not found [ 171.586264][ T4870] snd-usb-audio: probe of 2-1:1.2 failed with error -16 [ 171.651438][ T129] usb 2-1: USB disconnect, device number 6 [ 172.360585][ T5893] syz.5.383 uses obsolete (PF_INET,SOCK_PACKET) [ 172.476874][ T5892] all (unregistering): Released all slaves [ 174.676106][ T5019] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 175.998964][ T5933] tty tty28: ldisc open failed (-12), clearing slot 27 [ 176.075016][ T5019] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.111181][ T5019] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 176.121584][ T5019] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.131493][ T5019] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 176.142706][ T5019] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 176.181522][ T5019] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 176.463865][ T5019] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 176.527720][ T5019] usb 6-1: Product: syz [ 176.542556][ T5019] usb 6-1: Manufacturer: syz [ 176.648338][ T5019] cdc_wdm 6-1:1.0: skipping garbage [ 176.673358][ T5019] cdc_wdm 6-1:1.0: skipping garbage [ 176.754805][ T5019] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 176.761038][ T5019] cdc_wdm 6-1:1.0: Unknown control protocol [ 176.821148][ T5019] usb 6-1: USB disconnect, device number 6 [ 179.368019][ T5977] sctp: failed to load transform for md5: -2 [ 179.541521][ T5974] netlink: 64 bytes leftover after parsing attributes in process `syz.1.405'. [ 179.746235][ T5986] device syzkaller1 entered promiscuous mode [ 180.247636][ T4871] libceph: connect (1)[c::]:6789 error -101 [ 180.254116][ T4871] libceph: mon0 (1)[c::]:6789 connect error [ 180.359560][ T5970] ceph: No mds server is up or the cluster is laggy [ 180.613644][ T6004] Bluetooth: MGMT ver 1.22 [ 180.629016][ T4871] libceph: connect (1)[c::]:6789 error -101 [ 180.635070][ T4871] libceph: mon0 (1)[c::]:6789 connect error [ 182.035912][ T5018] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 182.227478][ T5018] usb 1-1: Using ep0 maxpacket: 16 [ 182.241248][ T5018] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 182.267070][ T5018] usb 1-1: config 0 has no interface number 0 [ 182.285646][ T5018] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 182.305335][ T5018] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.329213][ T5018] usb 1-1: Product: syz [ 182.333446][ T5018] usb 1-1: Manufacturer: syz [ 182.359048][ T5018] usb 1-1: SerialNumber: syz [ 182.379816][ T5018] usb 1-1: config 0 descriptor?? [ 182.398036][ T5018] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 182.757441][ T4281] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 182.757559][ T4277] Bluetooth: hci2: command 0x0401 tx timeout [ 182.916869][ T5018] gspca_spca1528: reg_w err -110 [ 182.956380][ T5018] spca1528: probe of 1-1:0.1 failed with error -110 [ 183.139293][ T6004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.220520][ T6004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.301304][ T6000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.358571][ T6000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.498385][ T4871] usb 1-1: USB disconnect, device number 10 [ 183.539295][ T6041] overlayfs: missing 'lowerdir' [ 185.020279][ T6055] netlink: 'syz.3.421': attribute type 1 has an invalid length. [ 185.389790][ T6055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.399089][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 185.407998][ T6058] device wlan0 entered promiscuous mode [ 186.326143][ T4565] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 186.865964][ T4565] usb 1-1: Using ep0 maxpacket: 32 [ 186.879492][ T4565] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 186.900925][ T4565] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.923450][ T4565] usb 1-1: config 0 descriptor?? [ 187.473233][ T4565] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 187.561138][ T4565] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 187.580125][ T4565] dib0700: firmware download failed at 7 with -22 [ 187.762164][ T6095] netlink: 'syz.1.424': attribute type 2 has an invalid length. [ 187.770496][ T6095] netlink: 'syz.1.424': attribute type 1 has an invalid length. [ 187.778535][ T6095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.791334][ T6095] netlink: 'syz.1.424': attribute type 8 has an invalid length. [ 189.154075][ T4281] ------------[ cut here ]------------ [ 189.160342][ T4281] WARNING: CPU: 1 PID: 4281 at net/bluetooth/hci_conn.c:668 hci_conn_timeout+0x24f/0x450 [ 189.170399][ T4281] Modules linked in: [ 189.174352][ T4281] CPU: 1 PID: 4281 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 189.182043][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.192248][ T4281] Workqueue: hci4 hci_conn_timeout [ 189.197551][ T4281] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 189.203309][ T4281] Code: ff 8d e8 a4 90 b5 f8 48 8b 35 d5 8d e3 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a6 ad 37 f8 e8 31 5f 65 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 189.223762][ T4281] RSP: 0018:ffffc90004187c08 EFLAGS: 00010293 [ 189.230052][ T4281] RAX: ffffffff891b809f RBX: ffff888079e5c330 RCX: ffff88803022bb80 [ 189.238587][ T4281] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 189.246813][ T4281] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed100f3cb803 [ 189.255068][ T4281] R10: ffffed100f3cb803 R11: 1ffff1100f3cb802 R12: dffffc0000000000 [ 189.263724][ T4281] R13: dffffc0000000000 R14: ffff888079e5c000 R15: ffff888079e5c010 [ 189.271862][ T4281] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 189.280974][ T4281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.287679][ T4281] CR2: 00002000000015e5 CR3: 0000000077489000 CR4: 00000000003506e0 [ 189.295733][ T4281] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 189.303849][ T4281] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.311959][ T4281] Call Trace: [ 189.315295][ T4281] [ 189.318313][ T4281] ? process_one_work+0x7a1/0x1160 [ 189.323536][ T4281] process_one_work+0x898/0x1160 [ 189.328619][ T4281] ? worker_detach_from_pool+0x240/0x240 [ 189.334331][ T4281] ? _raw_spin_lock_irq+0xab/0xe0 [ 189.339457][ T4281] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 189.345000][ T4281] ? kthread_data+0x4b/0xc0 [ 189.349608][ T4281] worker_thread+0xaa2/0x1250 [ 189.354439][ T4281] ? __kthread_parkme+0x162/0x1c0 [ 189.359644][ T4281] kthread+0x29d/0x330 [ 189.363793][ T4281] ? worker_clr_flags+0x1a0/0x1a0 [ 189.368966][ T4281] ? kthread_blkcg+0xd0/0xd0 [ 189.373652][ T4281] ret_from_fork+0x1f/0x30 [ 189.378315][ T4281] [ 189.381386][ T4281] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 189.388692][ T4281] CPU: 1 PID: 4281 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 189.396333][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.406379][ T4281] Workqueue: hci4 hci_conn_timeout [ 189.411575][ T4281] Call Trace: [ 189.414934][ T4281] [ 189.417904][ T4281] dump_stack_lvl+0x168/0x22e [ 189.422665][ T4281] ? memcpy+0x3c/0x60 [ 189.426634][ T4281] ? show_regs_print_info+0x12/0x12 [ 189.431822][ T4281] ? load_image+0x3b0/0x3b0 [ 189.436319][ T4281] panic+0x2c9/0x710 [ 189.440206][ T4281] ? bpf_jit_dump+0xd0/0xd0 [ 189.444802][ T4281] ? ret_from_fork+0x1f/0x30 [ 189.449404][ T4281] __warn+0x2f8/0x4f0 [ 189.453389][ T4281] ? hci_conn_timeout+0x24f/0x450 [ 189.458405][ T4281] ? hci_conn_timeout+0x24f/0x450 [ 189.463446][ T4281] report_bug+0x2ba/0x4f0 [ 189.467859][ T4281] ? hci_conn_timeout+0x24f/0x450 [ 189.472876][ T4281] handle_bug+0x3a/0x70 [ 189.477118][ T4281] exc_invalid_op+0x16/0x40 [ 189.481612][ T4281] asm_exc_invalid_op+0x16/0x20 [ 189.486485][ T4281] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 189.493064][ T4281] Code: ff 8d e8 a4 90 b5 f8 48 8b 35 d5 8d e3 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a6 ad 37 f8 e8 31 5f 65 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 189.513710][ T4281] RSP: 0018:ffffc90004187c08 EFLAGS: 00010293 [ 189.519862][ T4281] RAX: ffffffff891b809f RBX: ffff888079e5c330 RCX: ffff88803022bb80 [ 189.527828][ T4281] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 189.535984][ T4281] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed100f3cb803 [ 189.544051][ T4281] R10: ffffed100f3cb803 R11: 1ffff1100f3cb802 R12: dffffc0000000000 [ 189.552034][ T4281] R13: dffffc0000000000 R14: ffff888079e5c000 R15: ffff888079e5c010 [ 189.560209][ T4281] ? hci_conn_timeout+0x24f/0x450 [ 189.565242][ T4281] ? hci_conn_timeout+0x24f/0x450 [ 189.570366][ T4281] ? process_one_work+0x7a1/0x1160 [ 189.575658][ T4281] process_one_work+0x898/0x1160 [ 189.580687][ T4281] ? worker_detach_from_pool+0x240/0x240 [ 189.586373][ T4281] ? _raw_spin_lock_irq+0xab/0xe0 [ 189.591511][ T4281] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 189.596949][ T4281] ? kthread_data+0x4b/0xc0 [ 189.601637][ T4281] worker_thread+0xaa2/0x1250 [ 189.606357][ T4281] ? __kthread_parkme+0x162/0x1c0 [ 189.611431][ T4281] kthread+0x29d/0x330 [ 189.615529][ T4281] ? worker_clr_flags+0x1a0/0x1a0 [ 189.620552][ T4281] ? kthread_blkcg+0xd0/0xd0 [ 189.625135][ T4281] ret_from_fork+0x1f/0x30 [ 189.629551][ T4281] [ 189.633032][ T4281] Kernel Offset: disabled [ 189.637781][ T4281] Rebooting in 86400 seconds..